{
  "fix": "SUSE-SU-2025:4516-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2025-4516-1",
  "summary": "SUSE-SU-2025:4516-1, released December 23, 2025, fixes 69 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_7 (version 1-150700.1.3.1). None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "kernel-livepatch-SLE15-SP7-RT_Update_7 security update",
  "released": "2025-12-23T16:27:39Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-40172, rated Critical",
  "supported": true,
  "cveCount": 69,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00644,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2025:4516-1",
  "appliesTo": [
    {
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_7",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-rt-update-7",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.3.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-40172",
      "url": "https://patchblox.com/security/cve/CVE-2025-40172",
      "title": "accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40048",
      "url": "https://patchblox.com/security/cve/CVE-2025-40048",
      "title": "uio_hv_generic: Let userspace take care of interrupt mask",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00644,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40183",
      "url": "https://patchblox.com/security/cve/CVE-2025-40183",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix metadata_dst leak __bpf_redirect_neigh_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00629,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40186",
      "url": "https://patchblox.com/security/cve/CVE-2025-40186",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: Don\u0027t call reqsk_fastopen_remove() in tcp_c...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40129",
      "url": "https://patchblox.com/security/cve/CVE-2025-40129",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sunrpc: fix null pointer dereference on zero-len...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00566,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40075",
      "url": "https://patchblox.com/security/cve/CVE-2025-40075",
      "title": "tcp_metrics: use dst_dev_net_rcu()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00492,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40176",
      "url": "https://patchblox.com/security/cve/CVE-2025-40176",
      "title": "tls: wait for pending async decryptions if tls_strp_msg_hold fails",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00487,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40171",
      "url": "https://patchblox.com/security/cve/CVE-2025-40171",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet-fc: move lsop put work to nvmet_fc_ls_req_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00477,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40204",
      "url": "https://patchblox.com/security/cve/CVE-2025-40204",
      "title": "sctp: Fix MAC comparison to be constant-time",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40074",
      "url": "https://patchblox.com/security/cve/CVE-2025-40074",
      "title": "ipv4: start using dst_dev_rcu()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00461,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40168",
      "url": "https://patchblox.com/security/cve/CVE-2025-40168",
      "title": "smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.0042,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-53676",
      "url": "https://patchblox.com/security/cve/CVE-2023-53676",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00325,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40141",
      "url": "https://patchblox.com/security/cve/CVE-2025-40141",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: ISO: Fix possible UAF on iso_conn_fre...",
      "priority": "High",
      "severity": "high",
      "cvss": 8,
      "epss": 0.00324,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40140",
      "url": "https://patchblox.com/security/cve/CVE-2025-40140",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: Remove disruptive netif_wake_queue in...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00322,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40001",
      "url": "https://patchblox.com/security/cve/CVE-2025-40001",
      "title": "scsi: mvsas: Fix use-after-free bugs in mvs_work_queue",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39980",
      "url": "https://patchblox.com/security/cve/CVE-2025-39980",
      "title": "nexthop: Forbid FDB status change while nexthop is in a group",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37916",
      "url": "https://patchblox.com/security/cve/CVE-2025-37916",
      "title": "pds_core: remove write-after-free of client_id",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40121",
      "url": "https://patchblox.com/security/cve/CVE-2025-40121",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: Intel: bytcr_rt5651: Fix invalid quirk inp...",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40055",
      "url": "https://patchblox.com/security/cve/CVE-2025-40055",
      "title": "ocfs2: fix double free in user_cluster_connect()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40185",
      "url": "https://patchblox.com/security/cve/CVE-2025-40185",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40154",
      "url": "https://patchblox.com/security/cve/CVE-2025-40154",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39859",
      "url": "https://patchblox.com/security/cve/CVE-2025-39859",
      "title": "ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40038",
      "url": "https://patchblox.com/security/cve/CVE-2025-40038",
      "title": "KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn\u0027t valid",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40149",
      "url": "https://patchblox.com/security/cve/CVE-2025-40149",
      "title": "tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39788",
      "url": "https://patchblox.com/security/cve/CVE-2025-39788",
      "title": "scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40105",
      "url": "https://patchblox.com/security/cve/CVE-2025-40105",
      "title": "vfs: Don\u0027t leak disconnected dentries on umount",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40118",
      "url": "https://patchblox.com/security/cve/CVE-2025-40118",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: pm80xx: Fix array-index-out-of-of-bounds o...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40139",
      "url": "https://patchblox.com/security/cve/CVE-2025-40139",
      "title": "smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40198",
      "url": "https://patchblox.com/security/cve/CVE-2025-40198",
      "title": "ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40047",
      "url": "https://patchblox.com/security/cve/CVE-2025-40047",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/waitid: always prune wait queue entry i...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40027",
      "url": "https://patchblox.com/security/cve/CVE-2025-40027",
      "title": "net/9p: fix double req put in p9_fd_cancelled",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40169",
      "url": "https://patchblox.com/security/cve/CVE-2025-40169",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Reject negative offsets for ALU ops  When v...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40173",
      "url": "https://patchblox.com/security/cve/CVE-2025-40173",
      "title": "net/ip6_tunnel: Prevent perpetual tunnel growth",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40205",
      "url": "https://patchblox.com/security/cve/CVE-2025-40205",
      "title": "btrfs: avoid potential out-of-bounds in btrfs_encode_fh()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40206",
      "url": "https://patchblox.com/security/cve/CVE-2025-40206",
      "title": "netfilter: nft_objref: validate objref and objrefmap expressions",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39944",
      "url": "https://patchblox.com/security/cve/CVE-2025-39944",
      "title": "octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40159",
      "url": "https://patchblox.com/security/cve/CVE-2025-40159",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: Harden userspace-supplied xdp_desc validati...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40064",
      "url": "https://patchblox.com/security/cve/CVE-2025-40064",
      "title": "smc: Fix use-after-free in __pnet_find_base_ndev().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40111",
      "url": "https://patchblox.com/security/cve/CVE-2025-40111",
      "title": "drm/vmwgfx: Fix Use-after-free in validation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39819",
      "url": "https://patchblox.com/security/cve/CVE-2025-39819",
      "title": "fs/smb: Fix inconsistent refcnt update",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.6,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40040",
      "url": "https://patchblox.com/security/cve/CVE-2025-40040",
      "title": "mm/ksm: fix flag-dropping behavior in ksm_madvise",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.8,
      "epss": 0.00376,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-21710",
      "url": "https://patchblox.com/security/cve/CVE-2025-21710",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40180",
      "url": "https://patchblox.com/security/cve/CVE-2025-40180",
      "title": "mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00249,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40157",
      "url": "https://patchblox.com/security/cve/CVE-2025-40157",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  EDAC/i10nm: Skip DIMM enumeration on a disabled...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.4,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40070",
      "url": "https://patchblox.com/security/cve/CVE-2025-40070",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  pps: fix warning in pps_register_cdev when regis...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40115",
      "url": "https://patchblox.com/security/cve/CVE-2025-40115",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: mpt3sas: Fix crash in transport port remov...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40030",
      "url": "https://patchblox.com/security/cve/CVE-2025-40030",
      "title": "pinctrl: check the return value of pinmux_ops::get_function_name()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40188",
      "url": "https://patchblox.com/security/cve/CVE-2025-40188",
      "title": "pwm: berlin: Fix wrong register in suspend/resume",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40086",
      "url": "https://patchblox.com/security/cve/CVE-2025-40086",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe: Don\u0027t allow evicting of BOs in same VM i...",
      "priority": "Routine",
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40116",
      "url": "https://patchblox.com/security/cve/CVE-2025-40116",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  usb: host: max3421-hcd: Fix error pointer derefe...",
      "priority": "Routine",
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40109",
      "url": "https://patchblox.com/security/cve/CVE-2025-40109",
      "title": "crypto: rng - Ensure set_ent is always present",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40120",
      "url": "https://patchblox.com/security/cve/CVE-2025-40120",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: asix: hold PM usage ref to avoid PM/MD...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.7,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40127",
      "url": "https://patchblox.com/security/cve/CVE-2025-40127",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  hwrng: ks-sa - fix division by zero in ks_sa_rng...",
      "priority": "Routine",
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40059",
      "url": "https://patchblox.com/security/cve/CVE-2025-40059",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  coresight: Fix incorrect handling for return val...",
      "priority": "Routine",
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40194",
      "url": "https://patchblox.com/security/cve/CVE-2025-40194",
      "title": "cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.8,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40200",
      "url": "https://patchblox.com/security/cve/CVE-2025-40200",
      "title": "Squashfs: reject negative file sizes in squashfs_read_inode()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40080",
      "url": "https://patchblox.com/security/cve/CVE-2025-40080",
      "title": "nbd: restrict sockets to TCP and UDP",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40083",
      "url": "https://patchblox.com/security/cve/CVE-2025-40083",
      "title": "net/sched: sch_qfq: Fix null-deref in agg_dequeue",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.9,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40021",
      "url": "https://patchblox.com/security/cve/CVE-2025-40021",
      "title": "tracing: dynevent: Add a missing lockdown check on dynevent",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40110",
      "url": "https://patchblox.com/security/cve/CVE-2025-40110",
      "title": "drm/vmwgfx: Fix a null-ptr access in the cursor snooper",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40107",
      "url": "https://patchblox.com/security/cve/CVE-2025-40107",
      "title": "can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40207",
      "url": "https://patchblox.com/security/cve/CVE-2025-40207",
      "title": "media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40156",
      "url": "https://patchblox.com/security/cve/CVE-2025-40156",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  PM / devfreq: mtk-cci: Fix potential error point...",
      "priority": "Routine",
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40098",
      "url": "https://patchblox.com/security/cve/CVE-2025-40098",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: hda: cs35l41: Fix NULL pointer dereference...",
      "priority": "Routine",
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40164",
      "url": "https://patchblox.com/security/cve/CVE-2025-40164",
      "title": "usbnet: Fix using smp_processor_id() in preemptible code warnings",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38359",
      "url": "https://patchblox.com/security/cve/CVE-2025-38359",
      "title": "s390/mm: Fix in_atomic() handling in do_secure_storage_access()",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-50253",
      "url": "https://patchblox.com/security/cve/CVE-2022-50253",
      "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39805",
      "url": "https://patchblox.com/security/cve/CVE-2025-39805",
      "title": "net: macb: fix unregister_netdev call order in macb_remove()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39822",
      "url": "https://patchblox.com/security/cve/CVE-2025-39822",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/kbuf: fix signedness in this_len calcul...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}