# SUSE-SU-2026:0472-1: Security update for 3 packages

SUSE-SU-2026:0472-1, released February 12, 2026, fixes 172 CVEs across 3 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-0472-1
- Platform: Linux
- Released: Feb 12, 2026
- Priority: Urgent (Closes CVE-2025-40350, rated Critical)
- CVEs: 172, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:0472-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.7 | 6.4.0-150700.20.27.1 |
| [kernel-source-azure](https://patchblox.com/security/data/product/linux/kernel-source-azure.md) | sles 15.7 | 6.4.0-150700.20.27.1 |
| [kernel-syms-azure](https://patchblox.com/security/data/product/linux/kernel-syms-azure.md) | sles 15.7 | 6.4.0-150700.20.27.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-40350](https://patchblox.com/security/data/cve/CVE-2025-40350.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: RX, Fix generating skb from non-linea... | 9.8 | 0.0055 |  |
| [CVE-2025-71064](https://patchblox.com/security/data/cve/CVE-2025-71064.md) | Urgent | net: hns3: using the num_tqps in the vf driver to apply for resources | 9.8 | 0.0023 |  |
| [CVE-2025-68814](https://patchblox.com/security/data/cve/CVE-2025-68814.md) | Urgent | io_uring: fix filename leak in __io_openat_prep() | 9.8 | 0.0022 |  |
| [CVE-2025-68819](https://patchblox.com/security/data/cve/CVE-2025-68819.md) | Urgent | media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() | 9.8 | 0.0016 |  |
| [CVE-2025-71098](https://patchblox.com/security/data/cve/CVE-2025-71098.md) | Urgent | ip6_gre: make ip6gre_header() robust | 9.8 | 0.0014 |  |
| [CVE-2025-68789](https://patchblox.com/security/data/cve/CVE-2025-68789.md) | Urgent | hwmon: (ibmpex) fix use-after-free in high/low store | 9.8 | n/a |  |
| [CVE-2025-68349](https://patchblox.com/security/data/cve/CVE-2025-68349.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m... | 7.5 | 0.0071 |  |
| [CVE-2025-40261](https://patchblox.com/security/data/cve/CVE-2025-40261.md) | High | nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() | 9.8 | 0.0060 |  |
| [CVE-2025-68284](https://patchblox.com/security/data/cve/CVE-2025-68284.md) | High | libceph: prevent potential out-of-bounds writes in handle_auth_session_key() | 9.8 | 0.0059 |  |
| [CVE-2025-68285](https://patchblox.com/security/data/cve/CVE-2025-68285.md) | High | libceph: fix potential use-after-free in have_mon_and_osd_map() | 9.8 | 0.0059 |  |
| [CVE-2025-68261](https://patchblox.com/security/data/cve/CVE-2025-68261.md) | High | ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() | 7.5 | 0.0055 |  |
| [CVE-2025-68337](https://patchblox.com/security/data/cve/CVE-2025-68337.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  jbd2: avoid bug_on in jbd2_journal_get_create_ac... | 7.5 | 0.0055 |  |
| [CVE-2025-68775](https://patchblox.com/security/data/cve/CVE-2025-68775.md) | High | net/handshake: duplicate handshake cancellations leak socket | 9.8 | 0.0055 |  |
| [CVE-2025-71120](https://patchblox.com/security/data/cve/CVE-2025-71120.md) | High | SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf | 7.5 | 0.0053 |  |
| [CVE-2025-40257](https://patchblox.com/security/data/cve/CVE-2025-40257.md) | High | mptcp: fix a race in mptcp_pm_del_add_timer() | 9.8 | 0.0050 |  |
| [CVE-2025-40328](https://patchblox.com/security/data/cve/CVE-2025-40328.md) | High | smb: client: fix potential UAF in smb2_close_cached_fid() | 8.8 | 0.0049 |  |
| [CVE-2025-68301](https://patchblox.com/security/data/cve/CVE-2025-68301.md) | High | net: atlantic: fix fragment overflow handling in RX path | 9.8 | 0.0047 |  |
| [CVE-2025-68241](https://patchblox.com/security/data/cve/CVE-2025-68241.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ipv4: route: Prevent rt_bind_exception() from re... | 7.5 | 0.0047 |  |
| [CVE-2025-71116](https://patchblox.com/security/data/cve/CVE-2025-71116.md) | High | libceph: make decode_pool() more resilient against corrupted osdmaps | 8.1 | 0.0046 |  |
| [CVE-2025-68803](https://patchblox.com/security/data/cve/CVE-2025-68803.md) | High | NFSD: NFSv4 file creation neglects setting ACL | 8.0 | 0.0045 |  |
| [CVE-2025-68320](https://patchblox.com/security/data/cve/CVE-2025-68320.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  lan966x: Fix sleeping in atomic context  The fol... | 7.5 | 0.0041 |  |
| [CVE-2025-38379](https://patchblox.com/security/data/cve/CVE-2025-38379.md) | High | smb: client: fix warning when reconnecting channel | 7.1 | 0.0041 |  |
| [CVE-2026-22984](https://patchblox.com/security/data/cve/CVE-2026-22984.md) | High | kernel-64kb: libceph: prevent potential out-of-bounds reads in handle_auth_done() (bsc#1257217). | 8.8 | 0.0041 |  |
| [CVE-2026-22990](https://patchblox.com/security/data/cve/CVE-2026-22990.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_app... | 8.8 | 0.0040 |  |
| [CVE-2025-68770](https://patchblox.com/security/data/cve/CVE-2025-68770.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bnxt_en: Fix XDP_TX path  For XDP_TX action in b... | 7.5 | 0.0039 |  |
| [CVE-2025-39880](https://patchblox.com/security/data/cve/CVE-2025-39880.md) | High | libceph: fix invalid accesses to ceph_connection_v1_info | 7.8 | 0.0033 |  |
| [CVE-2025-71085](https://patchblox.com/security/data/cve/CVE-2025-71085.md) | High | kernel-64kb: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623). | 7.8 | 0.0031 |  |
| [CVE-2025-71093](https://patchblox.com/security/data/cve/CVE-2025-71093.md) | High | e1000: fix OOB in e1000_tbi_should_accept() | 7.1 | 0.0029 |  |
| [CVE-2025-68254](https://patchblox.com/security/data/cve/CVE-2025-68254.md) | High | staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing | 7.1 | 0.0028 |  |
| [CVE-2025-68256](https://patchblox.com/security/data/cve/CVE-2025-68256.md) | High | staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser | 8.8 | 0.0027 |  |
| [CVE-2024-56721](https://patchblox.com/security/data/cve/CVE-2024-56721.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.3 | 0.0023 |  |
| [CVE-2025-68188](https://patchblox.com/security/data/cve/CVE-2025-68188.md) | High | tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() | 7.8 | 0.0022 |  |
| [CVE-2025-71132](https://patchblox.com/security/data/cve/CVE-2025-71132.md) | High | smc91x: fix broken irq-context in PREEMPT_RT | 8.8 | 0.0022 |  |
| [CVE-2025-68227](https://patchblox.com/security/data/cve/CVE-2025-68227.md) | High | mptcp: Fix proto fallback detection with BPF | 7.8 | 0.0022 |  |
| [CVE-2025-40259](https://patchblox.com/security/data/cve/CVE-2025-40259.md) | High | scsi: sg: Do not sleep in atomic context | 7.0 | 0.0022 |  |
| [CVE-2025-40181](https://patchblox.com/security/data/cve/CVE-2025-40181.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-68297](https://patchblox.com/security/data/cve/CVE-2025-68297.md) | High | ceph: fix crash in process_v2_sparse_read() for encrypted directories | 7.0 | 0.0021 |  |
| [CVE-2025-71162](https://patchblox.com/security/data/cve/CVE-2025-71162.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-68771](https://patchblox.com/security/data/cve/CVE-2025-68771.md) | High | ocfs2: fix kernel BUG in ocfs2_find_victim_chain | 7.1 | 0.0021 |  |
| [CVE-2026-23001](https://patchblox.com/security/data/cve/CVE-2026-23001.md) | High | kernel-64kb: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232). | 7.8 | 0.0021 |  |
| [CVE-2026-23010](https://patchblox.com/security/data/cve/CVE-2026-23010.md) | High | kernel-64kb: ipv6: Fix use-after-free in inet6_addr_del() (bsc#1257332). | 7.8 | 0.0020 |  |
| [CVE-2025-68366](https://patchblox.com/security/data/cve/CVE-2025-68366.md) | High | kernel-64kb: nbd: defer config unlock in nbd_genl_connect (bsc#1255622). | 8.8 | 0.0020 |  |
| [CVE-2025-68325](https://patchblox.com/security/data/cve/CVE-2025-68325.md) | High | kernel-64kb: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417). | n/a | 0.0020 |  |
| [CVE-2025-38322](https://patchblox.com/security/data/cve/CVE-2025-38322.md) | High | kernel-default: Security update for the Linux Kernel | 7.0 | 0.0020 |  |
| [CVE-2026-22977](https://patchblox.com/security/data/cve/CVE-2026-22977.md) | High | kernel-64kb: net: sock: fix hardened usercopy panic in sock_recv_errqueue (bsc#1257053). | 9.8 | 0.0019 |  |
| [CVE-2025-71100](https://patchblox.com/security/data/cve/CVE-2025-71100.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 |  |
| [CVE-2025-68727](https://patchblox.com/security/data/cve/CVE-2025-68727.md) | High | kernel-64kb: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568). | n/a | 0.0019 |  |
| [CVE-2025-68728](https://patchblox.com/security/data/cve/CVE-2025-68728.md) | High | kernel-64kb: ntfs3: fix uninit memory after failed mi_read in mi_format_new (bsc#1255539). | n/a | 0.0019 |  |
| [CVE-2025-39689](https://patchblox.com/security/data/cve/CVE-2025-39689.md) | High | ftrace: Also allocate and copy hash for reading of filter files | 7.8 | 0.0019 |  |
| [CVE-2025-68327](https://patchblox.com/security/data/cve/CVE-2025-68327.md) | High | kernel-64kb: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488). | n/a | 0.0019 |  |
| [CVE-2024-27005](https://patchblox.com/security/data/cve/CVE-2024-27005.md) | High | interconnect: Don't access req_list while it's being manipulated | 7.8 | 0.0019 |  |
| [CVE-2025-71137](https://patchblox.com/security/data/cve/CVE-2025-71137.md) | High | octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" | 7.8 | 0.0019 |  |
| [CVE-2025-39913](https://patchblox.com/security/data/cve/CVE-2025-39913.md) | High | tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. | 7.8 | 0.0019 |  |
| [CVE-2025-71133](https://patchblox.com/security/data/cve/CVE-2025-71133.md) | High | RDMA/irdma: avoid invalid read in irdma_net_event | 7.1 | 0.0018 |  |
| [CVE-2025-68174](https://patchblox.com/security/data/cve/CVE-2025-68174.md) | High | amd/amdkfd: enhance kfd process check in switch partition | 7.8 | 0.0018 |  |
| [CVE-2025-71114](https://patchblox.com/security/data/cve/CVE-2025-71114.md) | High | via_wdt: fix critical boot hang due to unnamed resource allocation | 7.1 | 0.0018 |  |
| [CVE-2025-71066](https://patchblox.com/security/data/cve/CVE-2025-71066.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: ets: Always remove class from active... | 7.8 | 0.0017 |  |
| [CVE-2025-68795](https://patchblox.com/security/data/cve/CVE-2025-68795.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ethtool: Avoid overflowing userspace buffer on s... | 7.8 | 0.0017 |  |
| [CVE-2025-71123](https://patchblox.com/security/data/cve/CVE-2025-71123.md) | High | kernel-64kb: ext4: fix string copying in parse_apply_sb_mount_options() (bsc#1256757). | 7.8 | 0.0017 |  |
| [CVE-2025-68764](https://patchblox.com/security/data/cve/CVE-2025-68764.md) | High | NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags | 7.8 | 0.0017 |  |
| [CVE-2025-71089](https://patchblox.com/security/data/cve/CVE-2025-71089.md) | High | iommu: disable SVA when CONFIG_X86 is set | 7.8 | 0.0016 |  |
| [CVE-2025-71112](https://patchblox.com/security/data/cve/CVE-2025-71112.md) | High | net: hns3: add VLAN id validation before using | 7.1 | 0.0016 |  |
| [CVE-2025-68815](https://patchblox.com/security/data/cve/CVE-2025-68815.md) | High | net/sched: ets: Remove drr class from the active list if it changes to strict | 7.8 | 0.0016 |  |
| [CVE-2025-39836](https://patchblox.com/security/data/cve/CVE-2025-39836.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-68171](https://patchblox.com/security/data/cve/CVE-2025-68171.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  x86/fpu: Ensure XFD state on signal delivery  Se... | 7.8 | 0.0015 |  |
| [CVE-2025-71130](https://patchblox.com/security/data/cve/CVE-2025-71130.md) | High | drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer | 7.1 | 0.0015 |  |
| [CVE-2025-40166](https://patchblox.com/security/data/cve/CVE-2025-40166.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe/guc: Check GuC running state before dereg... | 7.8 | 0.0015 |  |
| [CVE-2025-68800](https://patchblox.com/security/data/cve/CVE-2025-68800.md) | High | mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats | 7.8 | 0.0015 |  |
| [CVE-2025-68801](https://patchblox.com/security/data/cve/CVE-2025-68801.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mlxsw: spectrum_router: Fix neighbour use-after-... | 7.8 | 0.0015 |  |
| [CVE-2025-68808](https://patchblox.com/security/data/cve/CVE-2025-68808.md) | High | media: vidtv: initialize local pointers upon transfer of memory ownership | 7.8 | 0.0015 |  |
| [CVE-2025-40202](https://patchblox.com/security/data/cve/CVE-2025-40202.md) | High | ipmi: Rework user message limit handling | 7.8 | 0.0015 |  |
| [CVE-2025-71086](https://patchblox.com/security/data/cve/CVE-2025-71086.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2025-68379](https://patchblox.com/security/data/cve/CVE-2025-68379.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/rxe: Fix null deref on srq->rq.queue after... | 7.8 | 0.0015 |  |
| [CVE-2025-71082](https://patchblox.com/security/data/cve/CVE-2025-71082.md) | High | Bluetooth: btusb: revert use of devm_kzalloc in btusb | 7.8 | 0.0015 |  |
| [CVE-2025-71091](https://patchblox.com/security/data/cve/CVE-2025-71091.md) | High | team: fix check for port enabled in team_queue_override_port_prio_changed() | 7.8 | 0.0015 |  |
| [CVE-2025-71143](https://patchblox.com/security/data/cve/CVE-2025-71143.md) | High | clk: samsung: exynos-clkout: Assign .num before accessing .hws | 7.8 | 0.0014 |  |
| [CVE-2025-68215](https://patchblox.com/security/data/cve/CVE-2025-68215.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ice: fix PTP cleanup on driver removal in error... | 7.0 | 0.0014 |  |
| [CVE-2025-71147](https://patchblox.com/security/data/cve/CVE-2025-71147.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd... | 8.8 | 0.0014 |  |
| [CVE-2025-71156](https://patchblox.com/security/data/cve/CVE-2025-71156.md) | High | kernel-64kb: gve: defer interrupt enabling until NAPI registration (bsc#1257167). | 7.8 | 0.0014 |  |
| [CVE-2025-71157](https://patchblox.com/security/data/cve/CVE-2025-71157.md) | High | bpftool6.12: In the Linux kernel, the following vulnerability has been resolved | 7.8 | 0.0014 |  |
| [CVE-2025-71101](https://patchblox.com/security/data/cve/CVE-2025-71101.md) | High | platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing | 7.8 | 0.0014 |  |
| [CVE-2025-71136](https://patchblox.com/security/data/cve/CVE-2025-71136.md) | High | media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() | 7.1 | 0.0014 |  |
| [CVE-2025-71099](https://patchblox.com/security/data/cve/CVE-2025-71099.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2025-71087](https://patchblox.com/security/data/cve/CVE-2025-71087.md) | High | iavf: fix off-by-one issues in iavf_config_rss_reg() | 7.1 | 0.0014 |  |
| [CVE-2025-71096](https://patchblox.com/security/data/cve/CVE-2025-71096.md) | High | RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly | 7.1 | 0.0014 |  |
| [CVE-2025-71081](https://patchblox.com/security/data/cve/CVE-2025-71081.md) | High | ASoC: stm32: sai: fix OF node leak on probe | 7.1 | 0.0013 |  |
| [CVE-2025-71078](https://patchblox.com/security/data/cve/CVE-2025-71078.md) | High | powerpc/64s/slb: Fix SLB multihit issue during SLB preload | 7.8 | 0.0011 |  |
| [CVE-2026-22991](https://patchblox.com/security/data/cve/CVE-2026-22991.md) | Routine | kernel-64kb: libceph: make free_choose_arg_map() resilient to partial allocation (bsc#1257220). | 5.5 | 0.0047 |  |
| [CVE-2026-22997](https://patchblox.com/security/data/cve/CVE-2026-22997.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0047 |  |
| [CVE-2026-22992](https://patchblox.com/security/data/cve/CVE-2026-22992.md) | Routine | kernel-64kb: libceph: return the handler error from mon_handle_auth_done() (bsc#1257218). | 6.5 | 0.0045 |  |
| [CVE-2025-68365](https://patchblox.com/security/data/cve/CVE-2025-68365.md) | Routine | kernel-64kb: fs/ntfs3: Initialize allocated memory before use (bsc#1255548). | 5.5 | 0.0041 |  |
| [CVE-2025-38209](https://patchblox.com/security/data/cve/CVE-2025-38209.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0037 |  |
| [CVE-2024-53149](https://patchblox.com/security/data/cve/CVE-2024-53149.md) | Routine | kernel-syms: Security update for the Linux Kernel | 4.6 | 0.0032 |  |
| [CVE-2025-71131](https://patchblox.com/security/data/cve/CVE-2025-71131.md) | Routine | kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_a... | 5.5 | 0.0031 |  |
| [CVE-2025-71080](https://patchblox.com/security/data/cve/CVE-2025-71080.md) | Routine | kernel-64kb: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (bsc#1256608). | 5.5 | 0.0030 |  |
| [CVE-2025-71095](https://patchblox.com/security/data/cve/CVE-2025-71095.md) | Routine | net: stmmac: fix the crash issue for zero copy XDP_TX action | 5.5 | 0.0029 |  |
| [CVE-2025-68788](https://patchblox.com/security/data/cve/CVE-2025-68788.md) | Routine | fsnotify: do not generate ACCESS/MODIFY events on child for special files | 5.5 | 0.0028 |  |
| [CVE-2025-40254](https://patchblox.com/security/data/cve/CVE-2025-40254.md) | Routine | net: openvswitch: remove never-working support for setting nsh fields | 5.5 | 0.0026 |  |
| [CVE-2024-42103](https://patchblox.com/security/data/cve/CVE-2024-42103.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2025-40136](https://patchblox.com/security/data/cve/CVE-2025-40136.md) | Routine | crypto: hisilicon/qm - request reserved interrupt for virtual function | 5.5 | 0.0025 |  |
| [CVE-2024-53070](https://patchblox.com/security/data/cve/CVE-2024-53070.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0024 |  |
| [CVE-2025-68816](https://patchblox.com/security/data/cve/CVE-2025-68816.md) | Routine | net/mlx5: fw_tracer, Validate format string parameters | 6.6 | 0.0024 |  |
| [CVE-2025-68820](https://patchblox.com/security/data/cve/CVE-2025-68820.md) | Routine | kernel-64kb: ext4: xattr: fix null pointer deref in ext4_raw_inode() (bsc#1256754). | 5.5 | 0.0024 |  |
| [CVE-2026-22999](https://patchblox.com/security/data/cve/CVE-2026-22999.md) | Routine | kernel-64kb: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236). | 5.5 | 0.0024 |  |
| [CVE-2025-68776](https://patchblox.com/security/data/cve/CVE-2025-68776.md) | Routine | net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() | 5.5 | 0.0023 |  |
| [CVE-2025-68773](https://patchblox.com/security/data/cve/CVE-2025-68773.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0023 |  |
| [CVE-2025-40264](https://patchblox.com/security/data/cve/CVE-2025-40264.md) | Routine | be2net: pass wrb_params in case of OS2BMC | 5.5 | 0.0023 |  |
| [CVE-2025-40355](https://patchblox.com/security/data/cve/CVE-2025-40355.md) | Routine | sysfs: check visibility before changing group attribute ownership | 5.5 | 0.0022 |  |
| [CVE-2026-23005](https://patchblox.com/security/data/cve/CVE-2026-23005.md) | Routine | kernel-64kb: x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1 (bsc#1257245). | 5.5 | 0.0022 |  |
| [CVE-2025-22047](https://patchblox.com/security/data/cve/CVE-2025-22047.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-40238](https://patchblox.com/security/data/cve/CVE-2025-40238.md) | Routine | kernel-64kb: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871). | 4.7 | 0.0021 |  |
| [CVE-2025-40363](https://patchblox.com/security/data/cve/CVE-2025-40363.md) | Routine | kernel-64kb: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102). | 5.5 | 0.0021 |  |
| [CVE-2025-68363](https://patchblox.com/security/data/cve/CVE-2025-68363.md) | Routine | kernel-64kb: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (bsc#1255552). | 5.5 | 0.0021 |  |
| [CVE-2025-71163](https://patchblox.com/security/data/cve/CVE-2025-71163.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2026-22996](https://patchblox.com/security/data/cve/CVE-2026-22996.md) | Routine | kernel-64kb: net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv. | 5.5 | 0.0021 |  |
| [CVE-2025-40132](https://patchblox.com/security/data/cve/CVE-2025-40132.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-40142](https://patchblox.com/security/data/cve/CVE-2025-40142.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2026-23011](https://patchblox.com/security/data/cve/CVE-2026-23011.md) | Routine | kernel-64kb: ipv4: ip_gre: make ipgre_header() robust (bsc#1257207). | 6.6 | 0.0021 |  |
| [CVE-2025-40106](https://patchblox.com/security/data/cve/CVE-2025-40106.md) | Routine | comedi: fix divide-by-zero in comedi_buf_munge() | 5.5 | 0.0021 |  |
| [CVE-2025-68798](https://patchblox.com/security/data/cve/CVE-2025-68798.md) | Routine | perf/x86/amd: Check event before enable to avoid GPF | 5.8 | 0.0021 |  |
| [CVE-2025-68200](https://patchblox.com/security/data/cve/CVE-2025-68200.md) | Routine | kernel-64kb: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241). | 5.5 | 0.0021 |  |
| [CVE-2025-68777](https://patchblox.com/security/data/cve/CVE-2025-68777.md) | Routine | Input: ti_am335x_tsc - fix off-by-one error in wire_order validation | 5.5 | 0.0021 |  |
| [CVE-2025-68783](https://patchblox.com/security/data/cve/CVE-2025-68783.md) | Routine | ALSA: usb-mixer: us16x08: validate meter packet indices | 5.5 | 0.0021 |  |
| [CVE-2025-68797](https://patchblox.com/security/data/cve/CVE-2025-68797.md) | Routine | char: applicom: fix NULL pointer dereference in ac_ioctl | 5.5 | 0.0021 |  |
| [CVE-2025-68813](https://patchblox.com/security/data/cve/CVE-2025-68813.md) | Routine | kernel-livepatch-SLE15-SP6_Update_10: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644). | 5.5 | 0.0021 |  |
| [CVE-2023-54013](https://patchblox.com/security/data/cve/CVE-2023-54013.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  interconnect: Fix locking for runpm vs reclaim... | n/a | 0.0021 |  |
| [CVE-2025-68804](https://patchblox.com/security/data/cve/CVE-2025-68804.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2023-53714](https://patchblox.com/security/data/cve/CVE-2023-53714.md) | Routine | kernel-default: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-68296](https://patchblox.com/security/data/cve/CVE-2025-68296.md) | Routine | drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup | 5.5 | 0.0021 |  |
| [CVE-2026-23006](https://patchblox.com/security/data/cve/CVE-2026-23006.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-68245](https://patchblox.com/security/data/cve/CVE-2025-68245.md) | Routine | kernel-64kb: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268). | 6.1 | 0.0020 |  |
| [CVE-2025-68178](https://patchblox.com/security/data/cve/CVE-2025-68178.md) | Routine | kernel-64kb: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266). | 5.5 | 0.0020 |  |
| [CVE-2025-68768](https://patchblox.com/security/data/cve/CVE-2025-68768.md) | Routine | inet: frags: flush pending skbs in fqdir_pre_exit() | 5.5 | 0.0020 |  |
| [CVE-2025-37813](https://patchblox.com/security/data/cve/CVE-2025-37813.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.7 | 0.0020 |  |
| [CVE-2025-40097](https://patchblox.com/security/data/cve/CVE-2025-40097.md) | Routine | ALSA: hda: Fix missing pointer check in hda_component_manager_init function | 5.5 | 0.0020 |  |
| [CVE-2025-68802](https://patchblox.com/security/data/cve/CVE-2025-68802.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-68372](https://patchblox.com/security/data/cve/CVE-2025-68372.md) | Routine | kernel-64kb: nbd: defer config put in recv_work (bsc#1255537). | 5.5 | 0.0020 |  |
| [CVE-2025-68367](https://patchblox.com/security/data/cve/CVE-2025-68367.md) | Routine | kernel-64kb: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547). | 5.3 | 0.0020 |  |
| [CVE-2025-68733](https://patchblox.com/security/data/cve/CVE-2025-68733.md) | Routine | kernel-64kb: smack: fix bug: unprivileged task can create labels (bsc#1255615). | n/a | 0.0020 |  |
| [CVE-2025-40177](https://patchblox.com/security/data/cve/CVE-2025-40177.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-38539](https://patchblox.com/security/data/cve/CVE-2025-38539.md) | Routine | tracing: Add down_write(trace_event_sem) when adding trace event | 6.1 | 0.0019 |  |
| [CVE-2025-39829](https://patchblox.com/security/data/cve/CVE-2025-39829.md) | Routine | trace/fgraph: Fix the warning caused by missing unregister notifier | 5.5 | 0.0019 |  |
| [CVE-2025-68725](https://patchblox.com/security/data/cve/CVE-2025-68725.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2026-22976](https://patchblox.com/security/data/cve/CVE-2026-22976.md) | Routine | kernel-64kb: net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset (bsc#1257035). | 5.5 | 0.0018 |  |
| [CVE-2025-71141](https://patchblox.com/security/data/cve/CVE-2025-71141.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2025-71135](https://patchblox.com/security/data/cve/CVE-2025-71135.md) | Routine | python3-perf6.12-debuginfo: In the Linux kernel, the following vulnerability has been resolved | 5.5 | 0.0018 |  |
| [CVE-2026-23000](https://patchblox.com/security/data/cve/CVE-2026-23000.md) | Routine | kernel-64kb: net/mlx5e: Fix crash on profile change rollback failure (bsc#1257234). | 5.5 | 0.0018 |  |
| [CVE-2025-71118](https://patchblox.com/security/data/cve/CVE-2025-71118.md) | Routine | ACPICA: Avoid walking the Namespace if start_node is NULL | 5.5 | 0.0017 |  |
| [CVE-2025-71145](https://patchblox.com/security/data/cve/CVE-2025-71145.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0017 |  |
| [CVE-2025-38243](https://patchblox.com/security/data/cve/CVE-2025-38243.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2025-37751](https://patchblox.com/security/data/cve/CVE-2025-37751.md) | Routine | kernel-default-base: Security update for the Linux Kernel | n/a | 0.0016 |  |
| [CVE-2025-37744](https://patchblox.com/security/data/cve/CVE-2025-37744.md) | Routine | wifi: ath12k: fix memory leak in ath12k_pci_remove() | 5.5 | 0.0016 |  |
| [CVE-2025-71077](https://patchblox.com/security/data/cve/CVE-2025-71077.md) | Routine | tpm: Cap the number of PCR banks | 6.1 | 0.0015 |  |
| [CVE-2025-71108](https://patchblox.com/security/data/cve/CVE-2025-71108.md) | Routine | usb: typec: ucsi: Handle incorrect num_connectors capability | 5.5 | 0.0015 |  |
| [CVE-2025-71119](https://patchblox.com/security/data/cve/CVE-2025-71119.md) | Routine | powerpc/kexec: Enable SMT before waking offline CPUs | 5.5 | 0.0015 |  |
| [CVE-2025-71076](https://patchblox.com/security/data/cve/CVE-2025-71076.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2025-71088](https://patchblox.com/security/data/cve/CVE-2025-71088.md) | Routine | mptcp: fallback earlier on simult connection | 5.5 | 0.0015 |  |
| [CVE-2026-22988](https://patchblox.com/security/data/cve/CVE-2026-22988.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2025-71154](https://patchblox.com/security/data/cve/CVE-2025-71154.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2025-71097](https://patchblox.com/security/data/cve/CVE-2025-71097.md) | Routine | ipv4: Fix reference count leak when using error routes with nexthop objects | 6.5 | 0.0014 |  |
| [CVE-2026-22978](https://patchblox.com/security/data/cve/CVE-2026-22978.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2025-71083](https://patchblox.com/security/data/cve/CVE-2025-71083.md) | Routine | drm/ttm: Avoid NULL pointer deref for evicted BOs | 5.5 | 0.0014 |  |
| [CVE-2025-71084](https://patchblox.com/security/data/cve/CVE-2025-71084.md) | Routine | RDMA/cm: Fix leaking the multicast GID table reference | 5.5 | 0.0014 |  |
| [CVE-2025-71094](https://patchblox.com/security/data/cve/CVE-2025-71094.md) | Routine | net: usb: asix: validate PHY address before use | 5.5 | 0.0014 |  |
| [CVE-2025-71138](https://patchblox.com/security/data/cve/CVE-2025-71138.md) | Routine | drm/msm/dpu: Add missing NULL pointer check for pingpong interface | 5.5 | 0.0014 |  |
| [CVE-2026-22985](https://patchblox.com/security/data/cve/CVE-2026-22985.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.2 | 0.0014 |  |
| [CVE-2025-71142](https://patchblox.com/security/data/cve/CVE-2025-71142.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-22993](https://patchblox.com/security/data/cve/CVE-2026-22993.md) | Routine | kernel-64kb: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations (bsc#1257180). | 5.5 | 0.0014 |  |
| [CVE-2025-39813](https://patchblox.com/security/data/cve/CVE-2025-39813.md) | Routine | ftrace: Fix potential warning in trace_printk_seq during ftrace_dump | 5.5 | 0.0012 |  |
| [CVE-2025-71079](https://patchblox.com/security/data/cve/CVE-2025-71079.md) | Routine | net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write | 5.5 | 0.0011 |  |
| [CVE-2025-71111](https://patchblox.com/security/data/cve/CVE-2025-71111.md) | Routine | hwmon: (w83791d) Convert macros to functions to avoid TOCTOU | 6.3 | 0.0011 |  |
| [CVE-2025-71149](https://patchblox.com/security/data/cve/CVE-2025-71149.md) | Routine | bpftool: In the Linux kernel, the following vulnerability has been resolved | 5.5 | n/a |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.