{
  "fix": "SUSE-SU-2026:0587-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-0587-1",
  "summary": "SUSE-SU-2026:0587-1, released February 20, 2026, fixes 171 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_9 (version 1-150700.1.3.2). None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "kernel-livepatch-SLE15-SP7-RT_Update_9 security update",
  "released": "2026-02-20T10:04:28Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-40350, rated Critical",
  "supported": true,
  "cveCount": 171,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00712,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:0587-1",
  "appliesTo": [
    {
      "product": "kernel-livepatch-SLE15-SP7-RT_Update_9",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-rt-update-9",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.1.3.2",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-40350",
      "url": "https://patchblox.com/security/cve/CVE-2025-40350",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: RX, Fix generating skb from non-linea...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00548,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71064",
      "url": "https://patchblox.com/security/cve/CVE-2025-71064",
      "title": "net: hns3: using the num_tqps in the vf driver to apply for resources",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68814",
      "url": "https://patchblox.com/security/cve/CVE-2025-68814",
      "title": "io_uring: fix filename leak in __io_openat_prep()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68819",
      "url": "https://patchblox.com/security/cve/CVE-2025-68819",
      "title": "media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71098",
      "url": "https://patchblox.com/security/cve/CVE-2025-71098",
      "title": "ip6_gre: make ip6gre_header() robust",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68789",
      "url": "https://patchblox.com/security/cve/CVE-2025-68789",
      "title": "hwmon: (ibmpex) fix use-after-free in high/low store",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68349",
      "url": "https://patchblox.com/security/cve/CVE-2025-68349",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00712,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40261",
      "url": "https://patchblox.com/security/cve/CVE-2025-40261",
      "title": "nvme: nvme-fc: Ensure -\u003Eioerr_work is cancelled in nvme_fc_delete_ctrl()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00604,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68284",
      "url": "https://patchblox.com/security/cve/CVE-2025-68284",
      "title": "libceph: prevent potential out-of-bounds writes in handle_auth_session_key()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00588,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68285",
      "url": "https://patchblox.com/security/cve/CVE-2025-68285",
      "title": "libceph: fix potential use-after-free in have_mon_and_osd_map()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68261",
      "url": "https://patchblox.com/security/cve/CVE-2025-68261",
      "title": "ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00552,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68337",
      "url": "https://patchblox.com/security/cve/CVE-2025-68337",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  jbd2: avoid bug_on in jbd2_journal_get_create_ac...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00552,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68775",
      "url": "https://patchblox.com/security/cve/CVE-2025-68775",
      "title": "net/handshake: duplicate handshake cancellations leak socket",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00548,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71120",
      "url": "https://patchblox.com/security/cve/CVE-2025-71120",
      "title": "SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00529,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40257",
      "url": "https://patchblox.com/security/cve/CVE-2025-40257",
      "title": "mptcp: fix a race in mptcp_pm_del_add_timer()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00498,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40328",
      "url": "https://patchblox.com/security/cve/CVE-2025-40328",
      "title": "smb: client: fix potential UAF in smb2_close_cached_fid()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00494,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68301",
      "url": "https://patchblox.com/security/cve/CVE-2025-68301",
      "title": "net: atlantic: fix fragment overflow handling in RX path",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68241",
      "url": "https://patchblox.com/security/cve/CVE-2025-68241",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipv4: route: Prevent rt_bind_exception() from re...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00466,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71116",
      "url": "https://patchblox.com/security/cve/CVE-2025-71116",
      "title": "libceph: make decode_pool() more resilient against corrupted osdmaps",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00458,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68803",
      "url": "https://patchblox.com/security/cve/CVE-2025-68803",
      "title": "NFSD: NFSv4 file creation neglects setting ACL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8,
      "epss": 0.00448,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68320",
      "url": "https://patchblox.com/security/cve/CVE-2025-68320",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  lan966x: Fix sleeping in atomic context  The fol...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00414,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38379",
      "url": "https://patchblox.com/security/cve/CVE-2025-38379",
      "title": "smb: client: fix warning when reconnecting channel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22984",
      "url": "https://patchblox.com/security/cve/CVE-2026-22984",
      "title": "kernel-64kb: libceph: prevent potential out-of-bounds reads in handle_auth_done() (bsc#1257217).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00407,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22990",
      "url": "https://patchblox.com/security/cve/CVE-2026-22990",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nlibceph: replace overzealous BUG_ON in osdmap_app...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68770",
      "url": "https://patchblox.com/security/cve/CVE-2025-68770",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bnxt_en: Fix XDP_TX path  For XDP_TX action in b...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00387,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39880",
      "url": "https://patchblox.com/security/cve/CVE-2025-39880",
      "title": "libceph: fix invalid accesses to ceph_connection_v1_info",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00331,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71085",
      "url": "https://patchblox.com/security/cve/CVE-2025-71085",
      "title": "kernel-64kb: ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (bsc#1256623).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00305,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71093",
      "url": "https://patchblox.com/security/cve/CVE-2025-71093",
      "title": "e1000: fix OOB in e1000_tbi_should_accept()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00293,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68254",
      "url": "https://patchblox.com/security/cve/CVE-2025-68254",
      "title": "staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00276,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68256",
      "url": "https://patchblox.com/security/cve/CVE-2025-68256",
      "title": "staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-56721",
      "url": "https://patchblox.com/security/cve/CVE-2024-56721",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.3,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68188",
      "url": "https://patchblox.com/security/cve/CVE-2025-68188",
      "title": "tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00224,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71132",
      "url": "https://patchblox.com/security/cve/CVE-2025-71132",
      "title": "smc91x: fix broken irq-context in PREEMPT_RT",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68227",
      "url": "https://patchblox.com/security/cve/CVE-2025-68227",
      "title": "mptcp: Fix proto fallback detection with BPF",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40259",
      "url": "https://patchblox.com/security/cve/CVE-2025-40259",
      "title": "scsi: sg: Do not sleep in atomic context",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40181",
      "url": "https://patchblox.com/security/cve/CVE-2025-40181",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "important",
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68297",
      "url": "https://patchblox.com/security/cve/CVE-2025-68297",
      "title": "ceph: fix crash in process_v2_sparse_read() for encrypted directories",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71162",
      "url": "https://patchblox.com/security/cve/CVE-2025-71162",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68771",
      "url": "https://patchblox.com/security/cve/CVE-2025-68771",
      "title": "ocfs2: fix kernel BUG in ocfs2_find_victim_chain",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23001",
      "url": "https://patchblox.com/security/cve/CVE-2026-23001",
      "title": "kernel-64kb: macvlan: fix possible UAF in macvlan_forward_source() (bsc#1257232).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68366",
      "url": "https://patchblox.com/security/cve/CVE-2025-68366",
      "title": "kernel-64kb: nbd: defer config unlock in nbd_genl_connect (bsc#1255622).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68325",
      "url": "https://patchblox.com/security/cve/CVE-2025-68325",
      "title": "kernel-64kb: net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (bsc#1255417).",
      "priority": "High",
      "severity": "IMPORTANT",
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38322",
      "url": "https://patchblox.com/security/cve/CVE-2025-38322",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22977",
      "url": "https://patchblox.com/security/cve/CVE-2026-22977",
      "title": "kernel-64kb: net: sock: fix hardened usercopy panic in sock_recv_errqueue (bsc#1257053).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71100",
      "url": "https://patchblox.com/security/cve/CVE-2025-71100",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68727",
      "url": "https://patchblox.com/security/cve/CVE-2025-68727",
      "title": "kernel-64kb: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568).",
      "priority": "High",
      "severity": "important",
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68728",
      "url": "https://patchblox.com/security/cve/CVE-2025-68728",
      "title": "kernel-64kb: ntfs3: fix uninit memory after failed mi_read in mi_format_new (bsc#1255539).",
      "priority": "High",
      "severity": "important",
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39689",
      "url": "https://patchblox.com/security/cve/CVE-2025-39689",
      "title": "ftrace: Also allocate and copy hash for reading of filter files",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00192,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68327",
      "url": "https://patchblox.com/security/cve/CVE-2025-68327",
      "title": "kernel-64kb: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488).",
      "priority": "High",
      "severity": "IMPORTANT",
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-27005",
      "url": "https://patchblox.com/security/cve/CVE-2024-27005",
      "title": "interconnect: Don\u0027t access req_list while it\u0027s being manipulated",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71137",
      "url": "https://patchblox.com/security/cve/CVE-2025-71137",
      "title": "octeontx2-pf: fix \u0022UBSAN: shift-out-of-bounds error\u0022",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39913",
      "url": "https://patchblox.com/security/cve/CVE-2025-39913",
      "title": "tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock-\u003Ecork.",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71133",
      "url": "https://patchblox.com/security/cve/CVE-2025-71133",
      "title": "RDMA/irdma: avoid invalid read in irdma_net_event",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68174",
      "url": "https://patchblox.com/security/cve/CVE-2025-68174",
      "title": "amd/amdkfd: enhance kfd process check in switch partition",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71114",
      "url": "https://patchblox.com/security/cve/CVE-2025-71114",
      "title": "via_wdt: fix critical boot hang due to unnamed resource allocation",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71066",
      "url": "https://patchblox.com/security/cve/CVE-2025-71066",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: ets: Always remove class from active...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68795",
      "url": "https://patchblox.com/security/cve/CVE-2025-68795",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ethtool: Avoid overflowing userspace buffer on s...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71123",
      "url": "https://patchblox.com/security/cve/CVE-2025-71123",
      "title": "kernel-64kb: ext4: fix string copying in parse_apply_sb_mount_options() (bsc#1256757).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68764",
      "url": "https://patchblox.com/security/cve/CVE-2025-68764",
      "title": "NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71089",
      "url": "https://patchblox.com/security/cve/CVE-2025-71089",
      "title": "iommu: disable SVA when CONFIG_X86 is set",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71112",
      "url": "https://patchblox.com/security/cve/CVE-2025-71112",
      "title": "net: hns3: add VLAN id validation before using",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68815",
      "url": "https://patchblox.com/security/cve/CVE-2025-68815",
      "title": "net/sched: ets: Remove drr class from the active list if it changes to strict",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39836",
      "url": "https://patchblox.com/security/cve/CVE-2025-39836",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68171",
      "url": "https://patchblox.com/security/cve/CVE-2025-68171",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  x86/fpu: Ensure XFD state on signal delivery  Se...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71130",
      "url": "https://patchblox.com/security/cve/CVE-2025-71130",
      "title": "drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40166",
      "url": "https://patchblox.com/security/cve/CVE-2025-40166",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe/guc: Check GuC running state before dereg...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68800",
      "url": "https://patchblox.com/security/cve/CVE-2025-68800",
      "title": "mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68801",
      "url": "https://patchblox.com/security/cve/CVE-2025-68801",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mlxsw: spectrum_router: Fix neighbour use-after-...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68808",
      "url": "https://patchblox.com/security/cve/CVE-2025-68808",
      "title": "media: vidtv: initialize local pointers upon transfer of memory ownership",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40202",
      "url": "https://patchblox.com/security/cve/CVE-2025-40202",
      "title": "ipmi: Rework user message limit handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71086",
      "url": "https://patchblox.com/security/cve/CVE-2025-71086",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68379",
      "url": "https://patchblox.com/security/cve/CVE-2025-68379",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/rxe: Fix null deref on srq-\u003Erq.queue after...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71082",
      "url": "https://patchblox.com/security/cve/CVE-2025-71082",
      "title": "Bluetooth: btusb: revert use of devm_kzalloc in btusb",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71091",
      "url": "https://patchblox.com/security/cve/CVE-2025-71091",
      "title": "team: fix check for port enabled in team_queue_override_port_prio_changed()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71143",
      "url": "https://patchblox.com/security/cve/CVE-2025-71143",
      "title": "clk: samsung: exynos-clkout: Assign .num before accessing .hws",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68215",
      "url": "https://patchblox.com/security/cve/CVE-2025-68215",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ice: fix PTP cleanup on driver removal in error...",
      "priority": "High",
      "severity": "high",
      "cvss": 7,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71147",
      "url": "https://patchblox.com/security/cve/CVE-2025-71147",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nKEYS: trusted: Fix a memory leak in tpm2_load_cmd...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71156",
      "url": "https://patchblox.com/security/cve/CVE-2025-71156",
      "title": "kernel-64kb: gve: defer interrupt enabling until NAPI registration (bsc#1257167).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71157",
      "url": "https://patchblox.com/security/cve/CVE-2025-71157",
      "title": "bpftool6.12: In the Linux kernel, the following vulnerability has been resolved",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71101",
      "url": "https://patchblox.com/security/cve/CVE-2025-71101",
      "title": "platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71136",
      "url": "https://patchblox.com/security/cve/CVE-2025-71136",
      "title": "media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71099",
      "url": "https://patchblox.com/security/cve/CVE-2025-71099",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71087",
      "url": "https://patchblox.com/security/cve/CVE-2025-71087",
      "title": "iavf: fix off-by-one issues in iavf_config_rss_reg()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71096",
      "url": "https://patchblox.com/security/cve/CVE-2025-71096",
      "title": "RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71081",
      "url": "https://patchblox.com/security/cve/CVE-2025-71081",
      "title": "ASoC: stm32: sai: fix OF node leak on probe",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71078",
      "url": "https://patchblox.com/security/cve/CVE-2025-71078",
      "title": "powerpc/64s/slb: Fix SLB multihit issue during SLB preload",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00113,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22991",
      "url": "https://patchblox.com/security/cve/CVE-2026-22991",
      "title": "kernel-64kb: libceph: make free_choose_arg_map() resilient to partial allocation (bsc#1257220).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22997",
      "url": "https://patchblox.com/security/cve/CVE-2026-22997",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00465,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22992",
      "url": "https://patchblox.com/security/cve/CVE-2026-22992",
      "title": "kernel-64kb: libceph: return the handler error from mon_handle_auth_done() (bsc#1257218).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.5,
      "epss": 0.00449,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68365",
      "url": "https://patchblox.com/security/cve/CVE-2025-68365",
      "title": "kernel-64kb: fs/ntfs3: Initialize allocated memory before use (bsc#1255548).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00412,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38209",
      "url": "https://patchblox.com/security/cve/CVE-2025-38209",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00366,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-53149",
      "url": "https://patchblox.com/security/cve/CVE-2024-53149",
      "title": "kernel-syms: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.6,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71131",
      "url": "https://patchblox.com/security/cve/CVE-2025-71131",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ncrypto: seqiv - Do not use req-\u003Eiv after crypto_a...",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 5.5,
      "epss": 0.00305,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71080",
      "url": "https://patchblox.com/security/cve/CVE-2025-71080",
      "title": "kernel-64kb: ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (bsc#1256608).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00304,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71095",
      "url": "https://patchblox.com/security/cve/CVE-2025-71095",
      "title": "net: stmmac: fix the crash issue for zero copy XDP_TX action",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00293,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68788",
      "url": "https://patchblox.com/security/cve/CVE-2025-68788",
      "title": "fsnotify: do not generate ACCESS/MODIFY events on child for special files",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00275,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40254",
      "url": "https://patchblox.com/security/cve/CVE-2025-40254",
      "title": "net: openvswitch: remove never-working support for setting nsh fields",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00256,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-42103",
      "url": "https://patchblox.com/security/cve/CVE-2024-42103",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00249,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40136",
      "url": "https://patchblox.com/security/cve/CVE-2025-40136",
      "title": "crypto: hisilicon/qm - request reserved interrupt for virtual function",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00247,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-53070",
      "url": "https://patchblox.com/security/cve/CVE-2024-53070",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68816",
      "url": "https://patchblox.com/security/cve/CVE-2025-68816",
      "title": "net/mlx5: fw_tracer, Validate format string parameters",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.6,
      "epss": 0.00235,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68820",
      "url": "https://patchblox.com/security/cve/CVE-2025-68820",
      "title": "kernel-64kb: ext4: xattr: fix null pointer deref in ext4_raw_inode() (bsc#1256754).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00235,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22999",
      "url": "https://patchblox.com/security/cve/CVE-2026-22999",
      "title": "kernel-64kb: net/sched: sch_qfq: do not free existing class in qfq_change_class() (bsc#1257236).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00235,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68776",
      "url": "https://patchblox.com/security/cve/CVE-2025-68776",
      "title": "net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68773",
      "url": "https://patchblox.com/security/cve/CVE-2025-68773",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40264",
      "url": "https://patchblox.com/security/cve/CVE-2025-40264",
      "title": "be2net: pass wrb_params in case of OS2BMC",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40355",
      "url": "https://patchblox.com/security/cve/CVE-2025-40355",
      "title": "sysfs: check visibility before changing group attribute ownership",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23005",
      "url": "https://patchblox.com/security/cve/CVE-2026-23005",
      "title": "kernel-64kb: x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1 (bsc#1257245).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-22047",
      "url": "https://patchblox.com/security/cve/CVE-2025-22047",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40238",
      "url": "https://patchblox.com/security/cve/CVE-2025-40238",
      "title": "kernel-64kb: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.7,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40363",
      "url": "https://patchblox.com/security/cve/CVE-2025-40363",
      "title": "kernel-64kb: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68363",
      "url": "https://patchblox.com/security/cve/CVE-2025-68363",
      "title": "kernel-64kb: bpf: Check skb-\u003Etransport_header is set in bpf_skb_check_mtu (bsc#1255552).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71163",
      "url": "https://patchblox.com/security/cve/CVE-2025-71163",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22996",
      "url": "https://patchblox.com/security/cve/CVE-2026-22996",
      "title": "kernel-64kb: net/mlx5e: Don\u0027t store mlx5e_priv in mlx5e_dev devlink priv.",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40132",
      "url": "https://patchblox.com/security/cve/CVE-2025-40132",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40142",
      "url": "https://patchblox.com/security/cve/CVE-2025-40142",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23011",
      "url": "https://patchblox.com/security/cve/CVE-2026-23011",
      "title": "kernel-64kb: ipv4: ip_gre: make ipgre_header() robust (bsc#1257207).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.6,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40106",
      "url": "https://patchblox.com/security/cve/CVE-2025-40106",
      "title": "comedi: fix divide-by-zero in comedi_buf_munge()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68798",
      "url": "https://patchblox.com/security/cve/CVE-2025-68798",
      "title": "perf/x86/amd: Check event before enable to avoid GPF",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.8,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68200",
      "url": "https://patchblox.com/security/cve/CVE-2025-68200",
      "title": "kernel-64kb: bpf: Add bpf_prog_run_data_pointers() (bsc#1255241).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68777",
      "url": "https://patchblox.com/security/cve/CVE-2025-68777",
      "title": "Input: ti_am335x_tsc - fix off-by-one error in wire_order validation",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68783",
      "url": "https://patchblox.com/security/cve/CVE-2025-68783",
      "title": "ALSA: usb-mixer: us16x08: validate meter packet indices",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68797",
      "url": "https://patchblox.com/security/cve/CVE-2025-68797",
      "title": "char: applicom: fix NULL pointer dereference in ac_ioctl",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68813",
      "url": "https://patchblox.com/security/cve/CVE-2025-68813",
      "title": "kernel-livepatch-SLE15-SP6_Update_10: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256644).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-54013",
      "url": "https://patchblox.com/security/cve/CVE-2023-54013",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  interconnect: Fix locking for runpm vs reclaim...",
      "priority": "Routine",
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68804",
      "url": "https://patchblox.com/security/cve/CVE-2025-68804",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-53714",
      "url": "https://patchblox.com/security/cve/CVE-2023-53714",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68296",
      "url": "https://patchblox.com/security/cve/CVE-2025-68296",
      "title": "drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00205,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23006",
      "url": "https://patchblox.com/security/cve/CVE-2026-23006",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68245",
      "url": "https://patchblox.com/security/cve/CVE-2025-68245",
      "title": "kernel-64kb: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68178",
      "url": "https://patchblox.com/security/cve/CVE-2025-68178",
      "title": "kernel-64kb: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68768",
      "url": "https://patchblox.com/security/cve/CVE-2025-68768",
      "title": "inet: frags: flush pending skbs in fqdir_pre_exit()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37813",
      "url": "https://patchblox.com/security/cve/CVE-2025-37813",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.7,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40097",
      "url": "https://patchblox.com/security/cve/CVE-2025-40097",
      "title": "ALSA: hda: Fix missing pointer check in hda_component_manager_init function",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68802",
      "url": "https://patchblox.com/security/cve/CVE-2025-68802",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68372",
      "url": "https://patchblox.com/security/cve/CVE-2025-68372",
      "title": "kernel-64kb: nbd: defer config put in recv_work (bsc#1255537).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68367",
      "url": "https://patchblox.com/security/cve/CVE-2025-68367",
      "title": "kernel-64kb: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (bsc#1255547).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.3,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68733",
      "url": "https://patchblox.com/security/cve/CVE-2025-68733",
      "title": "kernel-64kb: smack: fix bug: unprivileged task can create labels (bsc#1255615).",
      "priority": "Routine",
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40177",
      "url": "https://patchblox.com/security/cve/CVE-2025-40177",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38539",
      "url": "https://patchblox.com/security/cve/CVE-2025-38539",
      "title": "tracing: Add down_write(trace_event_sem) when adding trace event",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39829",
      "url": "https://patchblox.com/security/cve/CVE-2025-39829",
      "title": "trace/fgraph: Fix the warning caused by missing unregister notifier",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68725",
      "url": "https://patchblox.com/security/cve/CVE-2025-68725",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22976",
      "url": "https://patchblox.com/security/cve/CVE-2026-22976",
      "title": "kernel-64kb: net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset (bsc#1257035).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71141",
      "url": "https://patchblox.com/security/cve/CVE-2025-71141",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71135",
      "url": "https://patchblox.com/security/cve/CVE-2025-71135",
      "title": "python3-perf6.12-debuginfo: In the Linux kernel, the following vulnerability has been resolved",
      "priority": "Routine",
      "severity": "important",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23000",
      "url": "https://patchblox.com/security/cve/CVE-2026-23000",
      "title": "kernel-64kb: net/mlx5e: Fix crash on profile change rollback failure (bsc#1257234).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71118",
      "url": "https://patchblox.com/security/cve/CVE-2025-71118",
      "title": "ACPICA: Avoid walking the Namespace if start_node is NULL",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71145",
      "url": "https://patchblox.com/security/cve/CVE-2025-71145",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38243",
      "url": "https://patchblox.com/security/cve/CVE-2025-38243",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37751",
      "url": "https://patchblox.com/security/cve/CVE-2025-37751",
      "title": "kernel-default-base: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37744",
      "url": "https://patchblox.com/security/cve/CVE-2025-37744",
      "title": "wifi: ath12k: fix memory leak in ath12k_pci_remove()",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71077",
      "url": "https://patchblox.com/security/cve/CVE-2025-71077",
      "title": "tpm: Cap the number of PCR banks",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71108",
      "url": "https://patchblox.com/security/cve/CVE-2025-71108",
      "title": "usb: typec: ucsi: Handle incorrect num_connectors capability",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71119",
      "url": "https://patchblox.com/security/cve/CVE-2025-71119",
      "title": "powerpc/kexec: Enable SMT before waking offline CPUs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71076",
      "url": "https://patchblox.com/security/cve/CVE-2025-71076",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71088",
      "url": "https://patchblox.com/security/cve/CVE-2025-71088",
      "title": "mptcp: fallback earlier on simult connection",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22988",
      "url": "https://patchblox.com/security/cve/CVE-2026-22988",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71154",
      "url": "https://patchblox.com/security/cve/CVE-2025-71154",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71097",
      "url": "https://patchblox.com/security/cve/CVE-2025-71097",
      "title": "ipv4: Fix reference count leak when using error routes with nexthop objects",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22978",
      "url": "https://patchblox.com/security/cve/CVE-2026-22978",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71083",
      "url": "https://patchblox.com/security/cve/CVE-2025-71083",
      "title": "drm/ttm: Avoid NULL pointer deref for evicted BOs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71084",
      "url": "https://patchblox.com/security/cve/CVE-2025-71084",
      "title": "RDMA/cm: Fix leaking the multicast GID table reference",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71094",
      "url": "https://patchblox.com/security/cve/CVE-2025-71094",
      "title": "net: usb: asix: validate PHY address before use",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71138",
      "url": "https://patchblox.com/security/cve/CVE-2025-71138",
      "title": "drm/msm/dpu: Add missing NULL pointer check for pingpong interface",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22985",
      "url": "https://patchblox.com/security/cve/CVE-2026-22985",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.2,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71142",
      "url": "https://patchblox.com/security/cve/CVE-2025-71142",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-22993",
      "url": "https://patchblox.com/security/cve/CVE-2026-22993",
      "title": "kernel-64kb: idpf: Fix RSS LUT NULL pointer crash on early ethtool operations (bsc#1257180).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39813",
      "url": "https://patchblox.com/security/cve/CVE-2025-39813",
      "title": "ftrace: Fix potential warning in trace_printk_seq during ftrace_dump",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71079",
      "url": "https://patchblox.com/security/cve/CVE-2025-71079",
      "title": "net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00106,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71111",
      "url": "https://patchblox.com/security/cve/CVE-2025-71111",
      "title": "hwmon: (w83791d) Convert macros to functions to avoid TOCTOU",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.3,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71149",
      "url": "https://patchblox.com/security/cve/CVE-2025-71149",
      "title": "bpftool: In the Linux kernel, the following vulnerability has been resolved",
      "priority": "Routine",
      "severity": "important",
      "cvss": 5.5,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}