# SUSE-SU-2026:0315-1: Security update for 9 packages SUSE-SU-2026:0315-1, released January 28, 2026, fixes 395 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/suse-su-2026-0315-1 - Platform: Linux - Released: Jan 28, 2026 - Priority: Urgent (Closes CVE-2025-68206, rated Critical) - CVEs: 395, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:0315-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.7 | 6.4.0-150700.53.28.1 | | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.7 | 6.4.0-150700.53.28.1 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.7 | 6.4.0-150700.53.28.1.150700.17.19.1 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.7 | 6.4.0-150700.53.28.1 | | [kernel-livepatch-SLE15-SP7_Update_8](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-update-8.md) | sles 15.7 | 1-150700.15.3.1 | | [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.7 | 6.4.0-150700.53.28.1 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.7 | 6.4.0-150700.53.28.1 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.7 | 6.4.0-150700.53.28.1 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.7 | 6.4.0-150700.53.28.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-68206](https://patchblox.com/security/data/cve/CVE-2025-68206.md) | Urgent | netfilter: nft_ct: add seqadj extension for natted connections | 9.1 | 0.0071 | | | [CVE-2025-68192](https://patchblox.com/security/data/cve/CVE-2025-68192.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset... | 9.8 | 0.0061 | | | [CVE-2023-54258](https://patchblox.com/security/data/cve/CVE-2023-54258.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential oops in cifs_oplock_break W... | 9.8 | 0.0056 | | | [CVE-2023-53794](https://patchblox.com/security/data/cve/CVE-2023-53794.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: fix session state check in reconnect to av... | 9.8 | 0.0055 | | | [CVE-2023-54094](https://patchblox.com/security/data/cve/CVE-2023-54094.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: prevent skb corruption on frag list segment... | 9.8 | 0.0055 | | | [CVE-2023-54292](https://patchblox.com/security/data/cve/CVE-2023-54292.md) | Urgent | kernel-livepatch-SLE15-SP7_Update_8: Security update for the Linux Kernel | 9.8 | 0.0055 | | | [CVE-2023-54076](https://patchblox.com/security/data/cve/CVE-2023-54076.md) | Urgent | dtb-aarch64: Security update for the Linux Kernel | 9.8 | 0.0046 | | | [CVE-2025-40320](https://patchblox.com/security/data/cve/CVE-2025-40320.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_quer... | 9.8 | 0.0045 | | | [CVE-2025-40244](https://patchblox.com/security/data/cve/CVE-2025-40244.md) | Urgent | hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() | 9.8 | 0.0017 | | | [CVE-2025-40251](https://patchblox.com/security/data/cve/CVE-2025-40251.md) | Urgent | devlink: rate: Unset parent pointer in devl_rate_nodes_destroy | 9.8 | 0.0017 | | | [CVE-2025-40242](https://patchblox.com/security/data/cve/CVE-2025-40242.md) | Urgent | gfs2: Fix unlikely race in gdlm_put_lock | 9.8 | 0.0016 | | | [CVE-2025-40262](https://patchblox.com/security/data/cve/CVE-2025-40262.md) | Urgent | Input: imx_sc_key - fix memory corruption on unload | 9.8 | 0.0015 | | | [CVE-2023-53996](https://patchblox.com/security/data/cve/CVE-2023-53996.md) | Urgent | kernel-obs-build: Security update for the Linux Kernel | 9.3 | 0.0011 | | | [CVE-2025-40135](https://patchblox.com/security/data/cve/CVE-2025-40135.md) | High | ipv6: use RCU in ip6_xmit() | 8.4 | 0.0071 | | | [CVE-2025-40343](https://patchblox.com/security/data/cve/CVE-2025-40343.md) | High | nvmet-fc: avoid scheduling association deletion twice | 9.8 | 0.0070 | | | [CVE-2023-54219](https://patchblox.com/security/data/cve/CVE-2023-54219.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0069 | | | [CVE-2025-40252](https://patchblox.com/security/data/cve/CVE-2025-40252.md) | High | net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() | 9.8 | 0.0065 | | | [CVE-2025-40240](https://patchblox.com/security/data/cve/CVE-2025-40240.md) | High | sctp: avoid NULL dereference when chunk data buffer is missing | 8.6 | 0.0064 | | | [CVE-2025-40187](https://patchblox.com/security/data/cve/CVE-2025-40187.md) | High | net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() | 7.5 | 0.0064 | | | [CVE-2025-40053](https://patchblox.com/security/data/cve/CVE-2025-40053.md) | High | net: dlink: handle copy_thresh allocation failure | 7.5 | 0.0063 | | | [CVE-2025-40158](https://patchblox.com/security/data/cve/CVE-2025-40158.md) | High | ipv6: use RCU in ip6_output() | 8.1 | 0.0056 | | | [CVE-2025-40347](https://patchblox.com/security/data/cve/CVE-2025-40347.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix the deadlock of enetc_mdio_lock... | 7.5 | 0.0053 | | | [CVE-2025-68218](https://patchblox.com/security/data/cve/CVE-2025-68218.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix lockdep WARN due to partitio... | 7.5 | 0.0053 | | | [CVE-2025-40337](https://patchblox.com/security/data/cve/CVE-2025-40337.md) | High | net: stmmac: Correctly handle Rx checksum offload errors | 8.2 | 0.0052 | | | [CVE-2023-54227](https://patchblox.com/security/data/cve/CVE-2023-54227.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0051 | | | [CVE-2025-40258](https://patchblox.com/security/data/cve/CVE-2025-40258.md) | High | mptcp: fix race condition in mptcp_schedule_work() | 9.8 | 0.0050 | | | [CVE-2025-40271](https://patchblox.com/security/data/cve/CVE-2025-40271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is er... | 7.8 | 0.0049 | | | [CVE-2025-40324](https://patchblox.com/security/data/cve/CVE-2025-40324.md) | High | NFSD: Fix crash in nfsd4_read_release() | 7.5 | 0.0049 | | | [CVE-2025-40273](https://patchblox.com/security/data/cve/CVE-2025-40273.md) | High | NFSD: free copynotify stateid in nfs4_free_ol_stateid() | 8.8 | 0.0046 | | | [CVE-2025-68302](https://patchblox.com/security/data/cve/CVE-2025-68302.md) | High | net: sxgbe: fix potential NULL dereference in sxgbe_rx() | 7.5 | 0.0046 | | | [CVE-2025-40342](https://patchblox.com/security/data/cve/CVE-2025-40342.md) | High | nvme-fc: use lock accessing port_state and rport state | 8.8 | 0.0039 | | | [CVE-2025-68255](https://patchblox.com/security/data/cve/CVE-2025-68255.md) | High | staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing | 8.8 | 0.0037 | | | [CVE-2025-38728](https://patchblox.com/security/data/cve/CVE-2025-38728.md) | High | smb3: fix for slab out of bounds on mount to ksmbd | 7.1 | 0.0036 | | | [CVE-2023-53797](https://patchblox.com/security/data/cve/CVE-2023-53797.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.1 | 0.0032 | | | [CVE-2025-40282](https://patchblox.com/security/data/cve/CVE-2025-40282.md) | High | Bluetooth: 6lowpan: reset link-local header on ipv6 recv path | 8.8 | 0.0030 | | | [CVE-2023-53785](https://patchblox.com/security/data/cve/CVE-2023-53785.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: don't assume adequate headroom for... | 8.8 | 0.0029 | | | [CVE-2025-40318](https://patchblox.com/security/data/cve/CVE-2025-40318.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_de... | 8.8 | 0.0029 | | | [CVE-2025-40301](https://patchblox.com/security/data/cve/CVE-2025-40301.md) | High | Bluetooth: hci_event: validate skb length for unknown CC opcode | 7.8 | 0.0029 | | | [CVE-2023-54164](https://patchblox.com/security/data/cve/CVE-2023-54164.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix iso_conn related locking and... | 8.0 | 0.0028 | | | [CVE-2023-54045](https://patchblox.com/security/data/cve/CVE-2023-54045.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0028 | | | [CVE-2023-54318](https://patchblox.com/security/data/cve/CVE-2023-54318.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: use smc_lgr_list.lock to protect smc_lg... | 8.8 | 0.0028 | | | [CVE-2023-53821](https://patchblox.com/security/data/cve/CVE-2023-53821.md) | High | bpftool: RHSA-2024:3138: kernel security, bug fix, and enhancement update (Moderate) | 8.0 | 0.0028 | | | [CVE-2023-53825](https://patchblox.com/security/data/cve/CVE-2023-53825.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0028 | | | [CVE-2023-53831](https://patchblox.com/security/data/cve/CVE-2023-53831.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0028 | | | [CVE-2023-53839](https://patchblox.com/security/data/cve/CVE-2023-53839.md) | High | kernel-default: Security update for the Linux Kernel | n/a | 0.0028 | | | [CVE-2023-53841](https://patchblox.com/security/data/cve/CVE-2023-53841.md) | High | kernel-default: Security update for the Linux Kernel | n/a | 0.0028 | | | [CVE-2023-53762](https://patchblox.com/security/data/cve/CVE-2023-53762.md) | High | kernel-default: Security update for the Linux Kernel | 8.8 | 0.0027 | | | [CVE-2025-40309](https://patchblox.com/security/data/cve/CVE-2025-40309.md) | High | Bluetooth: SCO: Fix UAF on sco_conn_free | 8.0 | 0.0026 | | | [CVE-2023-53843](https://patchblox.com/security/data/cve/CVE-2023-53843.md) | High | kernel-default: Security update for the Linux Kernel | 8.0 | 0.0026 | | | [CVE-2025-40338](https://patchblox.com/security/data/cve/CVE-2025-40338.md) | High | ASoC: Intel: avs: Do not share the name pointer between components | 7.0 | 0.0026 | | | [CVE-2025-40277](https://patchblox.com/security/data/cve/CVE-2025-40277.md) | High | drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE | 7.8 | 0.0025 | | | [CVE-2023-54149](https://patchblox.com/security/data/cve/CVE-2023-54149.md) | High | kernel-default: Security update for the Linux Kernel | 7.5 | 0.0025 | | | [CVE-2023-53848](https://patchblox.com/security/data/cve/CVE-2023-53848.md) | High | kernel-default: Security update for the Linux Kernel | 8.0 | 0.0024 | | | [CVE-2023-53856](https://patchblox.com/security/data/cve/CVE-2023-53856.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0024 | | | [CVE-2023-53865](https://patchblox.com/security/data/cve/CVE-2023-53865.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0024 | | | [CVE-2024-26944](https://patchblox.com/security/data/cve/CVE-2024-26944.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 | | | [CVE-2025-40329](https://patchblox.com/security/data/cve/CVE-2025-40329.md) | High | drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb | 7.0 | 0.0024 | | | [CVE-2023-54134](https://patchblox.com/security/data/cve/CVE-2023-54134.md) | High | kernel-default: Security update for the Linux Kernel | n/a | 0.0024 | | | [CVE-2025-40340](https://patchblox.com/security/data/cve/CVE-2025-40340.md) | High | drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test. | 7.0 | 0.0024 | | | [CVE-2023-53855](https://patchblox.com/security/data/cve/CVE-2023-53855.md) | High | kernel-default: Security update for the Linux Kernel | n/a | 0.0024 | | | [CVE-2025-68287](https://patchblox.com/security/data/cve/CVE-2025-68287.md) | High | usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths | 7.8 | 0.0023 | | | [CVE-2023-54178](https://patchblox.com/security/data/cve/CVE-2023-54178.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0023 | | | [CVE-2023-54177](https://patchblox.com/security/data/cve/CVE-2023-54177.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0023 | | | [CVE-2025-68209](https://patchblox.com/security/data/cve/CVE-2025-68209.md) | High | mlx5: Fix default values in create CQ | 7.5 | 0.0022 | | | [CVE-2025-40102](https://patchblox.com/security/data/cve/CVE-2025-40102.md) | High | KVM: arm64: Prevent access to vCPU events before init | 7.1 | 0.0022 | | | [CVE-2023-54156](https://patchblox.com/security/data/cve/CVE-2023-54156.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0022 | | | [CVE-2025-40223](https://patchblox.com/security/data/cve/CVE-2025-40223.md) | High | most: usb: Fix use-after-free in hdm_disconnect | 7.8 | 0.0022 | | | [CVE-2025-40256](https://patchblox.com/security/data/cve/CVE-2025-40256.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0022 | | | [CVE-2023-53799](https://patchblox.com/security/data/cve/CVE-2023-53799.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0022 | | | [CVE-2023-54092](https://patchblox.com/security/data/cve/CVE-2023-54092.md) | High | kernel-livepatch-SLE15-SP6_Update_19: Security update for the Linux Kernel | 8.8 | 0.0022 | | | [CVE-2025-40294](https://patchblox.com/security/data/cve/CVE-2025-40294.md) | High | Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() | 7.8 | 0.0022 | | | [CVE-2025-40293](https://patchblox.com/security/data/cve/CVE-2025-40293.md) | High | iommufd: Don't overflow during division for dirty tracking | 7.0 | 0.0022 | | | [CVE-2023-53851](https://patchblox.com/security/data/cve/CVE-2023-53851.md) | High | kernel-default: Security update for the Linux Kernel | 8.4 | 0.0022 | | | [CVE-2023-54099](https://patchblox.com/security/data/cve/CVE-2023-54099.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54211](https://patchblox.com/security/data/cve/CVE-2023-54211.md) | High | kernel-default-base: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54014](https://patchblox.com/security/data/cve/CVE-2023-54014.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 | | | [CVE-2025-40312](https://patchblox.com/security/data/cve/CVE-2025-40312.md) | High | jfs: Verify inode mode when loading from disk | 7.1 | 0.0021 | | | [CVE-2023-53998](https://patchblox.com/security/data/cve/CVE-2023-53998.md) | High | kernel-docs: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2025-40211](https://patchblox.com/security/data/cve/CVE-2025-40211.md) | High | ACPI: video: Fix use-after-free in acpi_video_switch_brightness() | 7.8 | 0.0021 | | | [CVE-2023-54051](https://patchblox.com/security/data/cve/CVE-2023-54051.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54112](https://patchblox.com/security/data/cve/CVE-2023-54112.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-53828](https://patchblox.com/security/data/cve/CVE-2023-53828.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Avoid use-after-free in dbg... | 7.8 | 0.0021 | | | [CVE-2023-53844](https://patchblox.com/security/data/cve/CVE-2023-53844.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2023-53995](https://patchblox.com/security/data/cve/CVE-2023-53995.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 | | | [CVE-2023-54106](https://patchblox.com/security/data/cve/CVE-2023-54106.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 | | | [CVE-2023-53823](https://patchblox.com/security/data/cve/CVE-2023-53823.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0021 | | | [CVE-2025-40006](https://patchblox.com/security/data/cve/CVE-2025-40006.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when delet... | 7.8 | 0.0021 | | | [CVE-2023-54081](https://patchblox.com/security/data/cve/CVE-2023-54081.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54253](https://patchblox.com/security/data/cve/CVE-2023-54253.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54064](https://patchblox.com/security/data/cve/CVE-2023-54064.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 | | | [CVE-2023-54072](https://patchblox.com/security/data/cve/CVE-2023-54072.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 | | | [CVE-2023-54179](https://patchblox.com/security/data/cve/CVE-2023-54179.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0021 | | | [CVE-2023-54289](https://patchblox.com/security/data/cve/CVE-2023-54289.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.0 | 0.0021 | | | [CVE-2025-40314](https://patchblox.com/security/data/cve/CVE-2025-40314.md) | High | usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget | 7.8 | 0.0021 | | | [CVE-2025-68190](https://patchblox.com/security/data/cve/CVE-2025-68190.md) | High | drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() | 7.8 | 0.0021 | | | [CVE-2025-68290](https://patchblox.com/security/data/cve/CVE-2025-68290.md) | High | most: usb: fix double free on late probe failure | 7.8 | 0.0021 | | | [CVE-2023-53815](https://patchblox.com/security/data/cve/CVE-2023-53815.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54032](https://patchblox.com/security/data/cve/CVE-2023-54032.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54189](https://patchblox.com/security/data/cve/CVE-2023-54189.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-53999](https://patchblox.com/security/data/cve/CVE-2023-53999.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0020 | | | [CVE-2023-53836](https://patchblox.com/security/data/cve/CVE-2023-53836.md) | High | kernel-source: Security update for the Linux Kernel | 7.8 | 0.0020 | | | [CVE-2025-40331](https://patchblox.com/security/data/cve/CVE-2025-40331.md) | High | sctp: Prevent TOCTOU out-of-bounds write | 7.8 | 0.0020 | | | [CVE-2023-54048](https://patchblox.com/security/data/cve/CVE-2023-54048.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Prevent handling any completions a... | 8.8 | 0.0020 | | | [CVE-2023-54293](https://patchblox.com/security/data/cve/CVE-2023-54293.md) | High | kernel-default: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2023-54297](https://patchblox.com/security/data/cve/CVE-2023-54297.md) | High | kernel-default: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-40160](https://patchblox.com/security/data/cve/CVE-2025-40160.md) | High | kernel-64kb: xen/events: Cleanup find_virq() return codes (bsc#1253400). | n/a | 0.0020 | | | [CVE-2023-54224](https://patchblox.com/security/data/cve/CVE-2023-54224.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2023-54169](https://patchblox.com/security/data/cve/CVE-2023-54169.md) | High | kernel-obs-build: Security update for the Linux Kernel | 8.0 | 0.0020 | | | [CVE-2023-53860](https://patchblox.com/security/data/cve/CVE-2023-53860.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm: don't attempt to queue IO under RCU protecti... | 7.8 | 0.0020 | | | [CVE-2023-54171](https://patchblox.com/security/data/cve/CVE-2023-54171.md) | High | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2023-54181](https://patchblox.com/security/data/cve/CVE-2023-54181.md) | High | kernel-obs-build: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2023-54209](https://patchblox.com/security/data/cve/CVE-2023-54209.md) | High | kernel-default-base: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2023-54281](https://patchblox.com/security/data/cve/CVE-2023-54281.md) | High | kernel-syms: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-40357](https://patchblox.com/security/data/cve/CVE-2025-40357.md) | High | kernel-64kb: net/smc: fix general protection fault in __smc_diag_dump (bsc#1255097). | n/a | 0.0020 | | | [CVE-2025-68180](https://patchblox.com/security/data/cve/CVE-2025-68180.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-68759](https://patchblox.com/security/data/cve/CVE-2025-68759.md) | High | wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() | 7.1 | 0.0020 | | | [CVE-2023-54247](https://patchblox.com/security/data/cve/CVE-2023-54247.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2023-54148](https://patchblox.com/security/data/cve/CVE-2023-54148.md) | High | kernel-syms: Security update for the Linux Kernel | 8.0 | 0.0020 | | | [CVE-2025-40345](https://patchblox.com/security/data/cve/CVE-2025-40345.md) | High | usb: storage: sddr55: Reject out-of-bound new_pba | 7.3 | 0.0020 | | | [CVE-2023-54185](https://patchblox.com/security/data/cve/CVE-2023-54185.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_8: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-40170](https://patchblox.com/security/data/cve/CVE-2025-40170.md) | High | net: use dst_dev_rcu() in sk_setup_caps() | 8.1 | 0.0019 | | | [CVE-2025-40213](https://patchblox.com/security/data/cve/CVE-2025-40213.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in set_mesh_sync and... | 7.8 | 0.0019 | | | [CVE-2025-68766](https://patchblox.com/security/data/cve/CVE-2025-68766.md) | High | irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() | 7.1 | 0.0019 | | | [CVE-2025-68307](https://patchblox.com/security/data/cve/CVE-2025-68307.md) | High | can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs | 7.0 | 0.0019 | | | [CVE-2025-68330](https://patchblox.com/security/data/cve/CVE-2025-68330.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-40269](https://patchblox.com/security/data/cve/CVE-2025-40269.md) | High | ALSA: usb-audio: Fix potential overflow of PCM transfer buffer | 7.8 | 0.0019 | | | [CVE-2025-68305](https://patchblox.com/security/data/cve/CVE-2025-68305.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 | | | [CVE-2023-53846](https://patchblox.com/security/data/cve/CVE-2023-53846.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0019 | | | [CVE-2025-68237](https://patchblox.com/security/data/cve/CVE-2025-68237.md) | High | mtdchar: fix integer overflow in read/write ioctls | 7.8 | 0.0019 | | | [CVE-2025-68235](https://patchblox.com/security/data/cve/CVE-2025-68235.md) | High | nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot | 7.1 | 0.0019 | | | [CVE-2023-54070](https://patchblox.com/security/data/cve/CVE-2023-54070.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0019 | | | [CVE-2023-54060](https://patchblox.com/security/data/cve/CVE-2023-54060.md) | High | kernel-default: Security update for the Linux Kernel | 8.8 | 0.0018 | | | [CVE-2023-54324](https://patchblox.com/security/data/cve/CVE-2023-54324.md) | High | kernel-default: Security update for the Linux Kernel | 8.0 | 0.0018 | | | [CVE-2023-54023](https://patchblox.com/security/data/cve/CVE-2023-54023.md) | High | kernel-default: Security update for the Linux Kernel | n/a | 0.0018 | | | [CVE-2025-40292](https://patchblox.com/security/data/cve/CVE-2025-40292.md) | High | virtio-net: fix received length check in big packets | 8.4 | 0.0018 | | | [CVE-2023-54285](https://patchblox.com/security/data/cve/CVE-2023-54285.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_8: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2025-40190](https://patchblox.com/security/data/cve/CVE-2025-40190.md) | High | ext4: guard against EA inode refcount underflow in xattr update | 7.8 | 0.0018 | | | [CVE-2025-68347](https://patchblox.com/security/data/cve/CVE-2025-68347.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwde... | 7.8 | 0.0018 | | | [CVE-2025-40306](https://patchblox.com/security/data/cve/CVE-2025-40306.md) | High | orangefs: fix xattr related buffer overflow... | 7.8 | 0.0017 | | | [CVE-2025-68753](https://patchblox.com/security/data/cve/CVE-2025-68753.md) | High | ALSA: firewire-motu: add bounds check in put_user loop for DSP events | 7.8 | 0.0017 | | | [CVE-2025-40250](https://patchblox.com/security/data/cve/CVE-2025-40250.md) | High | net/mlx5: Clean up only new IRQ glue on request_irq() failure | 7.8 | 0.0017 | | | [CVE-2025-40297](https://patchblox.com/security/data/cve/CVE-2025-40297.md) | High | net: bridge: fix use-after-free due to MST port state bypass | 7.8 | 0.0017 | | | [CVE-2025-40248](https://patchblox.com/security/data/cve/CVE-2025-40248.md) | High | vsock: Ignore signal/timeout on connect() if already established | 7.8 | 0.0017 | | | [CVE-2023-54153](https://patchblox.com/security/data/cve/CVE-2023-54153.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0017 | | | [CVE-2025-40123](https://patchblox.com/security/data/cve/CVE-2025-40123.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expected_attach_type for tailcall c... | 7.8 | 0.0017 | | | [CVE-2025-40233](https://patchblox.com/security/data/cve/CVE-2025-40233.md) | High | ocfs2: clear extent cache after moving/defragmenting extents | 7.8 | 0.0017 | | | [CVE-2023-54096](https://patchblox.com/security/data/cve/CVE-2023-54096.md) | High | kernel-obs-build: Security update for the Linux Kernel | 8.0 | 0.0017 | | | [CVE-2023-54088](https://patchblox.com/security/data/cve/CVE-2023-54088.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0017 | | | [CVE-2023-54104](https://patchblox.com/security/data/cve/CVE-2023-54104.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fsl_upm: Fix an off-by one test in... | 7.8 | 0.0017 | | | [CVE-2023-54135](https://patchblox.com/security/data/cve/CVE-2023-54135.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0017 | | | [CVE-2025-40167](https://patchblox.com/security/data/cve/CVE-2025-40167.md) | High | ext4: detect invalid INLINE_DATA + EXTENTS flag combination | 7.8 | 0.0017 | | | [CVE-2023-54067](https://patchblox.com/security/data/cve/CVE-2023-54067.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2023-54121](https://patchblox.com/security/data/cve/CVE-2023-54121.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2023-54127](https://patchblox.com/security/data/cve/CVE-2023-54127.md) | High | kernel-livepatch-SLE15-SP6_Update_19: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2023-54095](https://patchblox.com/security/data/cve/CVE-2023-54095.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix notifiers being shared by PCI... | 7.0 | 0.0016 | | | [CVE-2023-54140](https://patchblox.com/security/data/cve/CVE-2023-54140.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2023-54083](https://patchblox.com/security/data/cve/CVE-2023-54083.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: phy: tegra: xusb: Clear the driver reference in... | 7.8 | 0.0016 | | | [CVE-2023-54125](https://patchblox.com/security/data/cve/CVE-2023-54125.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Return error for inconsistent extended... | 7.8 | 0.0016 | | | [CVE-2023-54142](https://patchblox.com/security/data/cve/CVE-2023-54142.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: gtp: Fix use-after-free in __gtp_encap_destroy() | 7.8 | 0.0016 | | | [CVE-2025-40280](https://patchblox.com/security/data/cve/CVE-2025-40280.md) | High | tipc: Fix use-after-free in tipc_mon_reinit_self(). | 7.8 | 0.0016 | | | [CVE-2025-40307](https://patchblox.com/security/data/cve/CVE-2025-40307.md) | High | exfat: validate cluster allocation bits of the allocation bitmap | 7.8 | 0.0016 | | | [CVE-2023-54207](https://patchblox.com/security/data/cve/CVE-2023-54207.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2023-54220](https://patchblox.com/security/data/cve/CVE-2023-54220.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2025-40349](https://patchblox.com/security/data/cve/CVE-2025-40349.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hfs: validate record offset in hfsplus_bmap_allo... | 7.8 | 0.0016 | | | [CVE-2025-68168](https://patchblox.com/security/data/cve/CVE-2025-68168.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jfs: fix uninitialized waitqueue in transaction... | 7.8 | 0.0016 | | | [CVE-2025-68286](https://patchblox.com/security/data/cve/CVE-2025-68286.md) | High | drm/amd/display: Check NULL before accessing | 7.8 | 0.0016 | | | [CVE-2023-54166](https://patchblox.com/security/data/cve/CVE-2023-54166.md) | High | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0015 | | | [CVE-2023-54201](https://patchblox.com/security/data/cve/CVE-2023-54201.md) | High | kernel-livepatch-SLE15-SP6_Update_19: Security update for the Linux Kernel | 8.0 | 0.0015 | | | [CVE-2023-53768](https://patchblox.com/security/data/cve/CVE-2023-53768.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0015 | | | [CVE-2023-54173](https://patchblox.com/security/data/cve/CVE-2023-54173.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.8 | 0.0015 | | | [CVE-2023-54254](https://patchblox.com/security/data/cve/CVE-2023-54254.md) | High | kernel-syms: Security update for the Linux Kernel | 7.8 | 0.0015 | | | [CVE-2025-39977](https://patchblox.com/security/data/cve/CVE-2025-39977.md) | High | futex: Prevent use-after-free during requeue-PI | 7.8 | 0.0015 | | | [CVE-2025-40024](https://patchblox.com/security/data/cve/CVE-2025-40024.md) | High | vhost: Take a reference on the task in struct vhost_task. | 7.8 | 0.0015 | | | [CVE-2025-40081](https://patchblox.com/security/data/cve/CVE-2025-40081.md) | High | perf: arm_spe: Prevent overflow in PERF_IDX2OFF() | 7.8 | 0.0015 | | | [CVE-2025-40215](https://patchblox.com/security/data/cve/CVE-2025-40215.md) | High | xfrm: delete x->tunnel as we delete x | 7.8 | 0.0015 | | | [CVE-2025-40304](https://patchblox.com/security/data/cve/CVE-2025-40304.md) | High | fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds | 7.8 | 0.0015 | | | [CVE-2025-40317](https://patchblox.com/security/data/cve/CVE-2025-40317.md) | High | regmap: slimbus: fix bus_context pointer in regmap init calls | 7.8 | 0.0015 | | | [CVE-2025-40319](https://patchblox.com/security/data/cve/CVE-2025-40319.md) | High | bpf: Sync pending IRQ work before freeing ring buffer | 7.8 | 0.0015 | | | [CVE-2025-68183](https://patchblox.com/security/data/cve/CVE-2025-68183.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or... | 7.8 | 0.0015 | | | [CVE-2025-68208](https://patchblox.com/security/data/cve/CVE-2025-68208.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: account for current allocated stack depth i... | 7.8 | 0.0015 | | | [CVE-2023-53752](https://patchblox.com/security/data/cve/CVE-2023-53752.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0015 | | | [CVE-2023-53759](https://patchblox.com/security/data/cve/CVE-2023-53759.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0015 | | | [CVE-2023-53778](https://patchblox.com/security/data/cve/CVE-2023-53778.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 | | | [CVE-2023-53795](https://patchblox.com/security/data/cve/CVE-2023-53795.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommufd: IOMMUFD_DESTROY should not increase the... | 7.8 | 0.0015 | | | [CVE-2023-53819](https://patchblox.com/security/data/cve/CVE-2023-53819.md) | High | kernel-source: Security update for the Linux Kernel | 7.8 | 0.0015 | | | [CVE-2025-40322](https://patchblox.com/security/data/cve/CVE-2025-40322.md) | High | fbdev: bitblit: bound-check glyph index in bit_putcs* | 7.8 | 0.0015 | | | [CVE-2023-54303](https://patchblox.com/security/data/cve/CVE-2023-54303.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0015 | | | [CVE-2025-40272](https://patchblox.com/security/data/cve/CVE-2025-40272.md) | High | mm/secretmem: fix use-after-free race in fault handler | 7.8 | 0.0015 | | | [CVE-2025-40283](https://patchblox.com/security/data/cve/CVE-2025-40283.md) | High | Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF | 7.8 | 0.0015 | | | [CVE-2025-40354](https://patchblox.com/security/data/cve/CVE-2025-40354.md) | High | drm/amd/display: increase max link count and fix link->enc NULL pointer access | 7.8 | 0.0015 | | | [CVE-2025-68170](https://patchblox.com/security/data/cve/CVE-2025-68170.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Do not kfree() devres managed rdev... | 7.8 | 0.0015 | | | [CVE-2025-68207](https://patchblox.com/security/data/cve/CVE-2025-68207.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Synchronize Dead CT worker with unbi... | 7.8 | 0.0015 | | | [CVE-2025-40302](https://patchblox.com/security/data/cve/CVE-2025-40302.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: forbid remove_bufs when legacy... | 7.8 | 0.0015 | | | [CVE-2025-40323](https://patchblox.com/security/data/cve/CVE-2025-40323.md) | High | fbcon: Set fb_display[i]->mode to NULL when the mode is released | 8.8 | 0.0015 | | | [CVE-2025-68184](https://patchblox.com/security/data/cve/CVE-2025-68184.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Disable AFBC support on Mediatek D... | 7.1 | 0.0015 | | | [CVE-2025-68340](https://patchblox.com/security/data/cve/CVE-2025-68340.md) | High | kernel-64kb: team: Move team device type change at the end of team_port_add (bsc#1255507). | 7.0 | 0.0015 | | | [CVE-2025-40276](https://patchblox.com/security/data/cve/CVE-2025-40276.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Flush shmem writes before mapping b... | 7.3 | 0.0015 | | | [CVE-2023-54210](https://patchblox.com/security/data/cve/CVE-2023-54210.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 | | | [CVE-2025-40274](https://patchblox.com/security/data/cve/CVE-2025-40274.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Remove bindings on memslot del... | 7.8 | 0.0015 | | | [CVE-2025-40284](https://patchblox.com/security/data/cve/CVE-2025-40284.md) | High | Bluetooth: MGMT: cancel mesh send timer when hdev removed | 7.8 | 0.0015 | | | [CVE-2025-68181](https://patchblox.com/security/data/cve/CVE-2025-68181.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drm_put_dev() Since... | 7.8 | 0.0015 | | | [CVE-2023-53997](https://patchblox.com/security/data/cve/CVE-2023-53997.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0015 | | | [CVE-2023-54326](https://patchblox.com/security/data/cve/CVE-2023-54326.md) | High | kernel-syms: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2025-68303](https://patchblox.com/security/data/cve/CVE-2025-68303.md) | High | platform/x86: intel: punit_ipc: fix memory corruption | 7.8 | 0.0014 | | | [CVE-2025-68746](https://patchblox.com/security/data/cve/CVE-2025-68746.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When t... | 7.8 | 0.0014 | | | [CVE-2025-68747](https://patchblox.com/security/data/cve/CVE-2025-68747.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF on kernel BO VA nodes If t... | 7.8 | 0.0014 | | | [CVE-2025-68724](https://patchblox.com/security/data/cve/CVE-2025-68724.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in as... | 8.1 | 0.0014 | | | [CVE-2023-54035](https://patchblox.com/security/data/cve/CVE-2023-54035.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2023-54019](https://patchblox.com/security/data/cve/CVE-2023-54019.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: sched/psi: use kernfs polling functions for PSI... | 7.8 | 0.0014 | | | [CVE-2023-54026](https://patchblox.com/security/data/cve/CVE-2023-54026.md) | High | dtb-aarch64: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2023-54042](https://patchblox.com/security/data/cve/CVE-2023-54042.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2025-68313](https://patchblox.com/security/data/cve/CVE-2025-68313.md) | High | x86/CPU/AMD: Add RDSEED fix for Zen5 | 7.1 | 0.0014 | | | [CVE-2023-54223](https://patchblox.com/security/data/cve/CVE-2023-54223.md) | Routine | kernel-default: Security update for the Linux Kernel | n/a | 0.0045 | | | [CVE-2023-53863](https://patchblox.com/security/data/cve/CVE-2023-53863.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0028 | | | [CVE-2023-54049](https://patchblox.com/security/data/cve/CVE-2023-54049.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0028 | | | [CVE-2023-42752](https://patchblox.com/security/data/cve/CVE-2023-42752.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2023-53842](https://patchblox.com/security/data/cve/CVE-2023-53842.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2023-53834](https://patchblox.com/security/data/cve/CVE-2023-53834.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0026 | | | [CVE-2025-40225](https://patchblox.com/security/data/cve/CVE-2025-40225.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0026 | | | [CVE-2023-53847](https://patchblox.com/security/data/cve/CVE-2023-53847.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2023-53858](https://patchblox.com/security/data/cve/CVE-2023-53858.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2023-54091](https://patchblox.com/security/data/cve/CVE-2023-54091.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0026 | | | [CVE-2023-53782](https://patchblox.com/security/data/cve/CVE-2023-53782.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0025 | | | [CVE-2023-53852](https://patchblox.com/security/data/cve/CVE-2023-53852.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2023-53861](https://patchblox.com/security/data/cve/CVE-2023-53861.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0024 | | | [CVE-2023-54230](https://patchblox.com/security/data/cve/CVE-2023-54230.md) | Routine | kernel-docs: Security update for the Linux Kernel | 3.3 | 0.0024 | | | [CVE-2023-53857](https://patchblox.com/security/data/cve/CVE-2023-53857.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2025-40339](https://patchblox.com/security/data/cve/CVE-2025-40339.md) | Routine | drm/amdgpu: fix nullptr err of vm_handle_moved | 5.5 | 0.0024 | | | [CVE-2023-53850](https://patchblox.com/security/data/cve/CVE-2023-53850.md) | Routine | kernel-default: Security update for the Linux Kernel | n/a | 0.0024 | | | [CVE-2025-40219](https://patchblox.com/security/data/cve/CVE-2025-40219.md) | Routine | PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV | 6.7 | 0.0024 | | | [CVE-2023-54052](https://patchblox.com/security/data/cve/CVE-2023-54052.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0024 | | | [CVE-2025-40289](https://patchblox.com/security/data/cve/CVE-2025-40289.md) | Routine | drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM | 5.5 | 0.0024 | | | [CVE-2025-40332](https://patchblox.com/security/data/cve/CVE-2025-40332.md) | Routine | drm/amdkfd: Fix mmap write lock not release | 5.5 | 0.0024 | | | [CVE-2023-53864](https://patchblox.com/security/data/cve/CVE-2023-53864.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0024 | | | [CVE-2025-68346](https://patchblox.com/security/data/cve/CVE-2025-68346.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.8 | 0.0023 | | | [CVE-2023-54300](https://patchblox.com/security/data/cve/CVE-2023-54300.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.6 | 0.0023 | | | [CVE-2025-40278](https://patchblox.com/security/data/cve/CVE-2025-40278.md) | Routine | net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak | 5.5 | 0.0023 | | | [CVE-2025-40330](https://patchblox.com/security/data/cve/CVE-2025-40330.md) | Routine | kernel-64kb: bnxt_en: Shutdown FW DMA in bnxt_shutdown() (bsc#1254616). | 5.2 | 0.0023 | | | [CVE-2023-54266](https://patchblox.com/security/data/cve/CVE-2023-54266.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0023 | | | [CVE-2023-54282](https://patchblox.com/security/data/cve/CVE-2023-54282.md) | Routine | kernel-docs: Security update for the Linux Kernel | n/a | 0.0023 | | | [CVE-2023-53808](https://patchblox.com/security/data/cve/CVE-2023-53808.md) | Routine | kernel-default: Security update for the Linux Kernel | n/a | 0.0023 | | | [CVE-2025-68345](https://patchblox.com/security/data/cve/CVE-2025-68345.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0023 | | | [CVE-2025-40042](https://patchblox.com/security/data/cve/CVE-2025-40042.md) | Routine | tracing: Fix race condition in kprobe initialization causing NULL pointer dereference | 5.5 | 0.0023 | | | [CVE-2025-40134](https://patchblox.com/security/data/cve/CVE-2025-40134.md) | Routine | kernel-64k-debug-modules-core: kernel: dm: fix NULL pointer dereference in __dm_suspend() | 4.7 | 0.0023 | | | [CVE-2025-40178](https://patchblox.com/security/data/cve/CVE-2025-40178.md) | Routine | pid: Add a judgment for ns null in pid_nr_ns | 5.5 | 0.0023 | | | [CVE-2025-68264](https://patchblox.com/security/data/cve/CVE-2025-68264.md) | Routine | ext4: refresh inline data size before write operations | 5.5 | 0.0022 | | | [CVE-2025-68201](https://patchblox.com/security/data/cve/CVE-2025-68201.md) | Routine | drm/amdgpu: remove two invalid BUG_ON()s | 4.0 | 0.0022 | | | [CVE-2025-40179](https://patchblox.com/security/data/cve/CVE-2025-40179.md) | Routine | ext4: verify orphan file size is not too big | 5.5 | 0.0022 | | | [CVE-2025-40231](https://patchblox.com/security/data/cve/CVE-2025-40231.md) | Routine | kernel-64kb: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815). | 5.5 | 0.0022 | | | [CVE-2023-54006](https://patchblox.com/security/data/cve/CVE-2023-54006.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2025-68378](https://patchblox.com/security/data/cve/CVE-2025-68378.md) | Routine | kernel-64kb: bpf: Refactor stack map trace depth calculation into helper function (bsc#1255614). | 5.5 | 0.0022 | | | [CVE-2023-54017](https://patchblox.com/security/data/cve/CVE-2023-54017.md) | Routine | kernel-default: Security update for the Linux Kernel | n/a | 0.0022 | | | [CVE-2025-68217](https://patchblox.com/security/data/cve/CVE-2025-68217.md) | Routine | Input: pegasus-notetaker - fix potential out-of-bounds access | 6.2 | 0.0022 | | | [CVE-2023-54093](https://patchblox.com/security/data/cve/CVE-2023-54093.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0022 | | | [CVE-2023-54115](https://patchblox.com/security/data/cve/CVE-2023-54115.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0022 | | | [CVE-2023-54183](https://patchblox.com/security/data/cve/CVE-2023-54183.md) | Routine | kernel-default-base: Security update for the Linux Kernel | n/a | 0.0022 | | | [CVE-2025-40321](https://patchblox.com/security/data/cve/CVE-2025-40321.md) | Routine | wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode | 6.5 | 0.0022 | | | [CVE-2025-40315](https://patchblox.com/security/data/cve/CVE-2025-40315.md) | Routine | usb: gadget: f_fs: Fix epfile null pointer access after ep enable. | 5.5 | 0.0022 | | | [CVE-2023-54312](https://patchblox.com/security/data/cve/CVE-2023-54312.md) | Routine | kernel-default: Security update for the Linux Kernel | 2.5 | 0.0022 | | | [CVE-2023-54319](https://patchblox.com/security/data/cve/CVE-2023-54319.md) | Routine | kernel-source: Security update for the Linux Kernel | n/a | 0.0022 | | | [CVE-2023-54267](https://patchblox.com/security/data/cve/CVE-2023-54267.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 2.5 | 0.0022 | | | [CVE-2023-53994](https://patchblox.com/security/data/cve/CVE-2023-53994.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0022 | | | [CVE-2023-53743](https://patchblox.com/security/data/cve/CVE-2023-53743.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2023-53792](https://patchblox.com/security/data/cve/CVE-2023-53792.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2023-53793](https://patchblox.com/security/data/cve/CVE-2023-53793.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2023-54137](https://patchblox.com/security/data/cve/CVE-2023-54137.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2023-54271](https://patchblox.com/security/data/cve/CVE-2023-54271.md) | Routine | kernel-livepatch-SLE15-SP6_Update_19: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-40033](https://patchblox.com/security/data/cve/CVE-2025-40033.md) | Routine | remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() | 5.5 | 0.0021 | | | [CVE-2023-53777](https://patchblox.com/security/data/cve/CVE-2023-53777.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54080](https://patchblox.com/security/data/cve/CVE-2023-54080.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2025-68230](https://patchblox.com/security/data/cve/CVE-2025-68230.md) | Routine | drm/amdgpu: fix gpu page fault after hibernation on PF passthrough | 5.9 | 0.0021 | | | [CVE-2025-68362](https://patchblox.com/security/data/cve/CVE-2025-68362.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.5 | 0.0021 | | | [CVE-2025-68742](https://patchblox.com/security/data/cve/CVE-2025-68742.md) | Routine | kernel-64kb: bpf: Improve program stats run-time calculation (bsc#1255707). | 5.8 | 0.0021 | | | [CVE-2025-68354](https://patchblox.com/security/data/cve/CVE-2025-68354.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2023-54283](https://patchblox.com/security/data/cve/CVE-2023-54283.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 2.5 | 0.0021 | | | [CVE-2023-54240](https://patchblox.com/security/data/cve/CVE-2023-54240.md) | Routine | kernel-default: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2025-40351](https://patchblox.com/security/data/cve/CVE-2025-40351.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2025-40279](https://patchblox.com/security/data/cve/CVE-2025-40279.md) | Routine | net: sched: act_connmark: initialize struct tc_ife to fix kernel leak | 6.1 | 0.0021 | | | [CVE-2025-40153](https://patchblox.com/security/data/cve/CVE-2025-40153.md) | Routine | kernel-64kb: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408). | 5.5 | 0.0021 | | | [CVE-2023-54005](https://patchblox.com/security/data/cve/CVE-2023-54005.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54264](https://patchblox.com/security/data/cve/CVE-2023-54264.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2025-68204](https://patchblox.com/security/data/cve/CVE-2025-68204.md) | Routine | pmdomain: arm: scmi: Fix genpd leak on provider registration failure | 6.2 | 0.0021 | | | [CVE-2023-54141](https://patchblox.com/security/data/cve/CVE-2023-54141.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Add missing hw_ops->get_ring_selec... | 5.8 | 0.0021 | | | [CVE-2025-40275](https://patchblox.com/security/data/cve/CVE-2025-40275.md) | Routine | ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd | 5.5 | 0.0021 | | | [CVE-2025-40308](https://patchblox.com/security/data/cve/CVE-2025-40308.md) | Routine | Bluetooth: bcsp: receive data only if registered | 5.5 | 0.0021 | | | [CVE-2025-68185](https://patchblox.com/security/data/cve/CVE-2025-68185.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-68194](https://patchblox.com/security/data/cve/CVE-2025-68194.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-68331](https://patchblox.com/security/data/cve/CVE-2025-68331.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2023-54309](https://patchblox.com/security/data/cve/CVE-2023-54309.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 4.7 | 0.0021 | | | [CVE-2023-53766](https://patchblox.com/security/data/cve/CVE-2023-53766.md) | Routine | kernel-default: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54255](https://patchblox.com/security/data/cve/CVE-2023-54255.md) | Routine | kernel-default: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54069](https://patchblox.com/security/data/cve/CVE-2023-54069.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2023-54000](https://patchblox.com/security/data/cve/CVE-2023-54000.md) | Routine | kernel-source: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54001](https://patchblox.com/security/data/cve/CVE-2023-54001.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2025-68222](https://patchblox.com/security/data/cve/CVE-2025-68222.md) | Routine | pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc | 6.2 | 0.0021 | | | [CVE-2023-54117](https://patchblox.com/security/data/cve/CVE-2023-54117.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2023-54194](https://patchblox.com/security/data/cve/CVE-2023-54194.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 3.3 | 0.0021 | | | [CVE-2023-54101](https://patchblox.com/security/data/cve/CVE-2023-54101.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-53989](https://patchblox.com/security/data/cve/CVE-2023-53989.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2023-54299](https://patchblox.com/security/data/cve/CVE-2023-54299.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-40346](https://patchblox.com/security/data/cve/CVE-2025-40346.md) | Routine | kernel-64kb: arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (bsc#1255318). | 5.5 | 0.0021 | | | [CVE-2025-40360](https://patchblox.com/security/data/cve/CVE-2025-40360.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-68740](https://patchblox.com/security/data/cve/CVE-2025-68740.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-68176](https://patchblox.com/security/data/cve/CVE-2025-68176.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2023-54089](https://patchblox.com/security/data/cve/CVE-2023-54089.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 6.2 | 0.0021 | | | [CVE-2025-40220](https://patchblox.com/security/data/cve/CVE-2025-40220.md) | Routine | fuse: fix livelock in synchronous file put from fuseblk workers | 5.5 | 0.0021 | | | [CVE-2025-40263](https://patchblox.com/security/data/cve/CVE-2025-40263.md) | Routine | Input: cros_ec_keyb - fix an invalid memory access | 5.5 | 0.0021 | | | [CVE-2023-53813](https://patchblox.com/security/data/cve/CVE-2023-53813.md) | Routine | kernel-docs: Security update for the Linux Kernel | 6.4 | 0.0021 | | | [CVE-2023-54136](https://patchblox.com/security/data/cve/CVE-2023-54136.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.8 | 0.0021 | | | [CVE-2023-54170](https://patchblox.com/security/data/cve/CVE-2023-54170.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-68289](https://patchblox.com/security/data/cve/CVE-2025-68289.md) | Routine | usb: gadget: f_eem: Fix memory leak in eem_unwrap | 5.5 | 0.0021 | | | [CVE-2023-54304](https://patchblox.com/security/data/cve/CVE-2023-54304.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2025-40316](https://patchblox.com/security/data/cve/CVE-2025-40316.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-68380](https://patchblox.com/security/data/cve/CVE-2025-68380.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.5 | 0.0020 | | | [CVE-2025-40268](https://patchblox.com/security/data/cve/CVE-2025-40268.md) | Routine | cifs: client: fix memory leak in smb3_fs_context_parse_param | 5.5 | 0.0020 | | | [CVE-2025-68172](https://patchblox.com/security/data/cve/CVE-2025-68172.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-38321](https://patchblox.com/security/data/cve/CVE-2025-38321.md) | Routine | smb: Log an error when close_all_cached_dirs fails | 5.5 | 0.0020 | | | [CVE-2023-54263](https://patchblox.com/security/data/cve/CVE-2023-54263.md) | Routine | kernel-livepatch-SLE15-SP7-RT_Update_8: Security update for the Linux Kernel | 4.4 | 0.0020 | | | [CVE-2023-54229](https://patchblox.com/security/data/cve/CVE-2023-54229.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.0 | 0.0020 | | | [CVE-2023-54246](https://patchblox.com/security/data/cve/CVE-2023-54246.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 2.5 | 0.0020 | | | [CVE-2023-54025](https://patchblox.com/security/data/cve/CVE-2023-54025.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2023-54302](https://patchblox.com/security/data/cve/CVE-2023-54302.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.9 | 0.0020 | | | [CVE-2023-54276](https://patchblox.com/security/data/cve/CVE-2023-54276.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.8 | 0.0020 | | | [CVE-2023-54251](https://patchblox.com/security/data/cve/CVE-2023-54251.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.6 | 0.0020 | | | [CVE-2023-54066](https://patchblox.com/security/data/cve/CVE-2023-54066.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2023-54296](https://patchblox.com/security/data/cve/CVE-2023-54296.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2025-40287](https://patchblox.com/security/data/cve/CVE-2025-40287.md) | Routine | exfat: fix improper check of dentry.stream.valid_size | 5.5 | 0.0020 | | | [CVE-2025-40310](https://patchblox.com/security/data/cve/CVE-2025-40310.md) | Routine | amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw | 5.5 | 0.0020 | | | [CVE-2025-40311](https://patchblox.com/security/data/cve/CVE-2025-40311.md) | Routine | accel/habanalabs: support mapping cb with vmalloc-backed coherent memory | 5.5 | 0.0020 | | | [CVE-2025-40359](https://patchblox.com/security/data/cve/CVE-2025-40359.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2025-40288](https://patchblox.com/security/data/cve/CVE-2025-40288.md) | Routine | drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices | 4.7 | 0.0020 | | | [CVE-2023-54113](https://patchblox.com/security/data/cve/CVE-2023-54113.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.5 | 0.0020 | | | [CVE-2023-54155](https://patchblox.com/security/data/cve/CVE-2023-54155.md) | Routine | kernel-docs: Security update for the Linux Kernel | 4.4 | 0.0020 | | | [CVE-2023-54221](https://patchblox.com/security/data/cve/CVE-2023-54221.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 3.3 | 0.0020 | | | [CVE-2023-54235](https://patchblox.com/security/data/cve/CVE-2023-54235.md) | Routine | kernel-source: Security update for the Linux Kernel | 3.3 | 0.0020 | | | [CVE-2023-53750](https://patchblox.com/security/data/cve/CVE-2023-53750.md) | Routine | kernel-default: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2023-53807](https://patchblox.com/security/data/cve/CVE-2023-53807.md) | Routine | kernel-docs: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2023-54143](https://patchblox.com/security/data/cve/CVE-2023-54143.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2023-54241](https://patchblox.com/security/data/cve/CVE-2023-54241.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-68757](https://patchblox.com/security/data/cve/CVE-2025-68757.md) | Routine | drm/vgem-fence: Fix potential deadlock on release | 6.2 | 0.0020 | | | [CVE-2025-68758](https://patchblox.com/security/data/cve/CVE-2025-68758.md) | Routine | backlight: led-bl: Add devlink to supplier LEDs | 5.5 | 0.0020 | | | [CVE-2023-53784](https://patchblox.com/security/data/cve/CVE-2023-53784.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 4.7 | 0.0020 | | | [CVE-2023-53791](https://patchblox.com/security/data/cve/CVE-2023-53791.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 3.7 | 0.0020 | | | [CVE-2023-53992](https://patchblox.com/security/data/cve/CVE-2023-53992.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 3.3 | 0.0020 | | | [CVE-2023-54008](https://patchblox.com/security/data/cve/CVE-2023-54008.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 3.3 | 0.0020 | | | [CVE-2023-53787](https://patchblox.com/security/data/cve/CVE-2023-53787.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2023-54314](https://patchblox.com/security/data/cve/CVE-2023-54314.md) | Routine | kernel-default: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-68239](https://patchblox.com/security/data/cve/CVE-2025-68239.md) | Routine | binfmt_misc: restore write access before closing files opened by open_exec() | 6.2 | 0.0020 | | | [CVE-2023-54154](https://patchblox.com/security/data/cve/CVE-2023-54154.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2025-68257](https://patchblox.com/security/data/cve/CVE-2025-68257.md) | Routine | comedi: check device's attached status in compat ioctls | 5.5 | 0.0020 | | | [CVE-2025-68258](https://patchblox.com/security/data/cve/CVE-2025-68258.md) | Routine | comedi: multiq3: sanitize config options in multiq3_attach() | 5.5 | 0.0020 | | | [CVE-2023-54145](https://patchblox.com/security/data/cve/CVE-2023-54145.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 3.3 | 0.0020 | | | [CVE-2023-54172](https://patchblox.com/security/data/cve/CVE-2023-54172.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 3.3 | 0.0020 | | | [CVE-2023-54225](https://patchblox.com/security/data/cve/CVE-2023-54225.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-68332](https://patchblox.com/security/data/cve/CVE-2025-68332.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-68734](https://patchblox.com/security/data/cve/CVE-2025-68734.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2025-68750](https://patchblox.com/security/data/cve/CVE-2025-68750.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-68312](https://patchblox.com/security/data/cve/CVE-2025-68312.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0020 | | | [CVE-2023-54313](https://patchblox.com/security/data/cve/CVE-2023-54313.md) | Routine | kernel-docs: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-68259](https://patchblox.com/security/data/cve/CVE-2025-68259.md) | Routine | KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced | 6.2 | 0.0019 | | | [CVE-2025-68732](https://patchblox.com/security/data/cve/CVE-2025-68732.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-68765](https://patchblox.com/security/data/cve/CVE-2025-68765.md) | Routine | mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() | 5.5 | 0.0019 | | | [CVE-2023-54261](https://patchblox.com/security/data/cve/CVE-2023-54261.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 3.3 | 0.0019 | | | [CVE-2023-54133](https://patchblox.com/security/data/cve/CVE-2023-54133.md) | Routine | kernel-default: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68335](https://patchblox.com/security/data/cve/CVE-2025-68335.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68306](https://patchblox.com/security/data/cve/CVE-2025-68306.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-68308](https://patchblox.com/security/data/cve/CVE-2025-68308.md) | Routine | can: kvaser_usb: leaf: Fix potential infinite loop in command parsers | 5.5 | 0.0019 | | | [CVE-2025-68244](https://patchblox.com/security/data/cve/CVE-2025-68244.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0019 | | | [CVE-2023-54316](https://patchblox.com/security/data/cve/CVE-2023-54316.md) | Routine | kernel-default-base: Security update for the Linux Kernel | 2.5 | 0.0019 | | | [CVE-2023-54315](https://patchblox.com/security/data/cve/CVE-2023-54315.md) | Routine | kernel-source: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68238](https://patchblox.com/security/data/cve/CVE-2025-68238.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68249](https://patchblox.com/security/data/cve/CVE-2025-68249.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68328](https://patchblox.com/security/data/cve/CVE-2025-68328.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68339](https://patchblox.com/security/data/cve/CVE-2025-68339.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2023-54322](https://patchblox.com/security/data/cve/CVE-2023-54322.md) | Routine | kernel-default: Security update for the Linux Kernel | 3.3 | 0.0019 | | | [CVE-2025-68744](https://patchblox.com/security/data/cve/CVE-2025-68744.md) | Routine | kernel-64kb: bpf: Free special fields when update [lru_,]percpu_hash maps (bsc#1255709). | 5.5 | 0.0019 | | | [CVE-2025-68233](https://patchblox.com/security/data/cve/CVE-2025-68233.md) | Routine | drm/tegra: Add call to put_pid() | 6.2 | 0.0019 | | | [CVE-2023-54031](https://patchblox.com/security/data/cve/CVE-2023-54031.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-68252](https://patchblox.com/security/data/cve/CVE-2025-68252.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2023-54278](https://patchblox.com/security/data/cve/CVE-2023-54278.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.8 | 0.0019 | | | [CVE-2023-54016](https://patchblox.com/security/data/cve/CVE-2023-54016.md) | Routine | kernel-syms: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2023-54291](https://patchblox.com/security/data/cve/CVE-2023-54291.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-68197](https://patchblox.com/security/data/cve/CVE-2025-68197.md) | Routine | kernel-64kb: bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (bsc#1255242). | 5.0 | 0.0019 | | | [CVE-2023-54215](https://patchblox.com/security/data/cve/CVE-2023-54215.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 3.3 | 0.0019 | | | [CVE-2023-54204](https://patchblox.com/security/data/cve/CVE-2023-54204.md) | Routine | kernel-default-base: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68298](https://patchblox.com/security/data/cve/CVE-2025-68298.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 | | | [CVE-2023-54027](https://patchblox.com/security/data/cve/CVE-2023-54027.md) | Routine | kernel-syms: Security update for the Linux Kernel | n/a | 0.0018 | | | [CVE-2023-54038](https://patchblox.com/security/data/cve/CVE-2023-54038.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0018 | | | [CVE-2023-54037](https://patchblox.com/security/data/cve/CVE-2023-54037.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0017 | | | [CVE-2023-54022](https://patchblox.com/security/data/cve/CVE-2023-54022.md) | Routine | kernel-source: Security update for the Linux Kernel | 5.5 | 0.0017 | | | [CVE-2023-54030](https://patchblox.com/security/data/cve/CVE-2023-54030.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0017 | | | [CVE-2025-68351](https://patchblox.com/security/data/cve/CVE-2025-68351.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 | | | [CVE-2025-68223](https://patchblox.com/security/data/cve/CVE-2025-68223.md) | Routine | drm/radeon: delete radeon_fence_process in is_signaled, no deadlock | 6.2 | 0.0012 | | | [CVE-2025-68749](https://patchblox.com/security/data/cve/CVE-2025-68749.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0011 | | | [CVE-2025-68195](https://patchblox.com/security/data/cve/CVE-2025-68195.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | n/a | | --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.