{
  "fix": "SUSE-SU-2026:20015-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-20015-1",
  "summary": "SUSE-SU-2026:20015-1, released December 19, 2025, fixes 100 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 9 packages",
  "released": "2025-12-19T16:46:47Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-40172, rated Critical",
  "supported": true,
  "cveCount": 100,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.0071,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:20015-1",
  "appliesTo": [
    {
      "product": "kernel-64kb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.8.1.160000.2.5",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-kvmsmall",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-kvmsmall",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-obs-qa",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-qa",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    },
    {
      "product": "kernel-zfcpdump",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump",
      "release": "sles 16.0",
      "fixedVersion": "6.12.0-160000.8.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-40172",
      "url": "https://patchblox.com/security/cve/CVE-2025-40172",
      "title": "accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40165",
      "url": "https://patchblox.com/security/cve/CVE-2025-40165",
      "title": "media: nxp: imx8-isi: m2m: Fix streaming cleanup on release",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40135",
      "url": "https://patchblox.com/security/cve/CVE-2025-40135",
      "title": "ipv6: use RCU in ip6_xmit()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.0071,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40187",
      "url": "https://patchblox.com/security/cve/CVE-2025-40187",
      "title": "net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00638,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40053",
      "url": "https://patchblox.com/security/cve/CVE-2025-40053",
      "title": "net: dlink: handle copy_thresh allocation failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00629,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40183",
      "url": "https://patchblox.com/security/cve/CVE-2025-40183",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix metadata_dst leak __bpf_redirect_neigh_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00629,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40186",
      "url": "https://patchblox.com/security/cve/CVE-2025-40186",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: Don\u0027t call reqsk_fastopen_remove() in tcp_c...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40129",
      "url": "https://patchblox.com/security/cve/CVE-2025-40129",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sunrpc: fix null pointer dereference on zero-len...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00566,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40158",
      "url": "https://patchblox.com/security/cve/CVE-2025-40158",
      "title": "ipv6: use RCU in ip6_output()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00555,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40133",
      "url": "https://patchblox.com/security/cve/CVE-2025-40133",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mptcp: Use __sk_dst_get() and dst_dev_rcu() in m...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40075",
      "url": "https://patchblox.com/security/cve/CVE-2025-40075",
      "title": "tcp_metrics: use dst_dev_net_rcu()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00492,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40176",
      "url": "https://patchblox.com/security/cve/CVE-2025-40176",
      "title": "tls: wait for pending async decryptions if tls_strp_msg_hold fails",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00487,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40171",
      "url": "https://patchblox.com/security/cve/CVE-2025-40171",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet-fc: move lsop put work to nvmet_fc_ls_req_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00477,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40204",
      "url": "https://patchblox.com/security/cve/CVE-2025-40204",
      "title": "sctp: Fix MAC comparison to be constant-time",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40074",
      "url": "https://patchblox.com/security/cve/CVE-2025-40074",
      "title": "ipv4: start using dst_dev_rcu()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00461,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40168",
      "url": "https://patchblox.com/security/cve/CVE-2025-40168",
      "title": "smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.0042,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38728",
      "url": "https://patchblox.com/security/cve/CVE-2025-38728",
      "title": "smb3: fix for slab out of bounds on mount to ksmbd",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00356,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40141",
      "url": "https://patchblox.com/security/cve/CVE-2025-40141",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: ISO: Fix possible UAF on iso_conn_fre...",
      "priority": "High",
      "severity": "high",
      "cvss": 8,
      "epss": 0.00324,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40140",
      "url": "https://patchblox.com/security/cve/CVE-2025-40140",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: Remove disruptive netif_wake_queue in...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00322,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40001",
      "url": "https://patchblox.com/security/cve/CVE-2025-40001",
      "title": "scsi: mvsas: Fix use-after-free bugs in mvs_work_queue",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40003",
      "url": "https://patchblox.com/security/cve/CVE-2025-40003",
      "title": "net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39980",
      "url": "https://patchblox.com/security/cve/CVE-2025-39980",
      "title": "nexthop: Forbid FDB status change while nexthop is in a group",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-37916",
      "url": "https://patchblox.com/security/cve/CVE-2025-37916",
      "title": "pds_core: remove write-after-free of client_id",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40121",
      "url": "https://patchblox.com/security/cve/CVE-2025-40121",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40055",
      "url": "https://patchblox.com/security/cve/CVE-2025-40055",
      "title": "ocfs2: fix double free in user_cluster_connect()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40102",
      "url": "https://patchblox.com/security/cve/CVE-2025-40102",
      "title": "KVM: arm64: Prevent access to vCPU events before init",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38084",
      "url": "https://patchblox.com/security/cve/CVE-2025-38084",
      "title": "mm/hugetlb: unshare page tables during VMA split, not before",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40185",
      "url": "https://patchblox.com/security/cve/CVE-2025-40185",
      "title": "kernel-64kb: ice: ice_adapter: release xa entry on adapter allocation failure (bsc#1253394).",
      "priority": "High",
      "severity": "MODERATE",
      "cvss": 7.8,
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40154",
      "url": "https://patchblox.com/security/cve/CVE-2025-40154",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40006",
      "url": "https://patchblox.com/security/cve/CVE-2025-40006",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/hugetlb: fix folio is still mapped when delet...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40196",
      "url": "https://patchblox.com/security/cve/CVE-2025-40196",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs: quota: create dedicated workqueue for quota_...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39990",
      "url": "https://patchblox.com/security/cve/CVE-2025-39990",
      "title": "bpf: Check the helper function is valid in get_helper_proto",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00198,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40101",
      "url": "https://patchblox.com/security/cve/CVE-2025-40101",
      "title": "kernel-64kb: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST (bsc#1252901).",
      "priority": "High",
      "severity": "IMPORTANT",
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39859",
      "url": "https://patchblox.com/security/cve/CVE-2025-39859",
      "title": "ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40038",
      "url": "https://patchblox.com/security/cve/CVE-2025-40038",
      "title": "KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn\u0027t valid",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40149",
      "url": "https://patchblox.com/security/cve/CVE-2025-40149",
      "title": "tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40105",
      "url": "https://patchblox.com/security/cve/CVE-2025-40105",
      "title": "vfs: Don\u0027t leak disconnected dentries on umount",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40118",
      "url": "https://patchblox.com/security/cve/CVE-2025-40118",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: pm80xx: Fix array-index-out-of-of-bounds o...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40139",
      "url": "https://patchblox.com/security/cve/CVE-2025-40139",
      "title": "smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40198",
      "url": "https://patchblox.com/security/cve/CVE-2025-40198",
      "title": "ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40047",
      "url": "https://patchblox.com/security/cve/CVE-2025-40047",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/waitid: always prune wait queue entry i...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40027",
      "url": "https://patchblox.com/security/cve/CVE-2025-40027",
      "title": "net/9p: fix double req put in p9_fd_cancelled",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38085",
      "url": "https://patchblox.com/security/cve/CVE-2025-38085",
      "title": "mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39917",
      "url": "https://patchblox.com/security/cve/CVE-2025-39917",
      "title": "kernel-64kb: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (bsc#1250723).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40024",
      "url": "https://patchblox.com/security/cve/CVE-2025-40024",
      "title": "vhost: Take a reference on the task in struct vhost_task.",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40081",
      "url": "https://patchblox.com/security/cve/CVE-2025-40081",
      "title": "perf: arm_spe: Prevent overflow in PERF_IDX2OFF()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40169",
      "url": "https://patchblox.com/security/cve/CVE-2025-40169",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Reject negative offsets for ALU ops  When v...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40173",
      "url": "https://patchblox.com/security/cve/CVE-2025-40173",
      "title": "net/ip6_tunnel: Prevent perpetual tunnel growth",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40205",
      "url": "https://patchblox.com/security/cve/CVE-2025-40205",
      "title": "btrfs: avoid potential out-of-bounds in btrfs_encode_fh()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40206",
      "url": "https://patchblox.com/security/cve/CVE-2025-40206",
      "title": "netfilter: nft_objref: validate objref and objrefmap expressions",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39944",
      "url": "https://patchblox.com/security/cve/CVE-2025-39944",
      "title": "octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40201",
      "url": "https://patchblox.com/security/cve/CVE-2025-40201",
      "title": "kernel/sys.c: fix the racy usage of task_lock(tsk-\u003Egroup_leader) in sys_prlimit64() paths",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40159",
      "url": "https://patchblox.com/security/cve/CVE-2025-40159",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: Harden userspace-supplied xdp_desc validati...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40166",
      "url": "https://patchblox.com/security/cve/CVE-2025-40166",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe/guc: Check GuC running state before dereg...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40203",
      "url": "https://patchblox.com/security/cve/CVE-2025-40203",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  listmount: don\u0027t call path_put() under namespace...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40064",
      "url": "https://patchblox.com/security/cve/CVE-2025-40064",
      "title": "smc: Fix use-after-free in __pnet_find_base_ndev().",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40111",
      "url": "https://patchblox.com/security/cve/CVE-2025-40111",
      "title": "drm/vmwgfx: Fix Use-after-free in validation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39819",
      "url": "https://patchblox.com/security/cve/CVE-2025-39819",
      "title": "fs/smb: Fix inconsistent refcnt update",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.6,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40202",
      "url": "https://patchblox.com/security/cve/CVE-2025-40202",
      "title": "ipmi: Rework user message limit handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39897",
      "url": "https://patchblox.com/security/cve/CVE-2025-39897",
      "title": "kernel-64kb: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval (bsc#1250746).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00279,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40180",
      "url": "https://patchblox.com/security/cve/CVE-2025-40180",
      "title": "mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00249,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40157",
      "url": "https://patchblox.com/security/cve/CVE-2025-40157",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.4,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40070",
      "url": "https://patchblox.com/security/cve/CVE-2025-40070",
      "title": "kernel-64kb: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40115",
      "url": "https://patchblox.com/security/cve/CVE-2025-40115",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00232,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40188",
      "url": "https://patchblox.com/security/cve/CVE-2025-40188",
      "title": "pwm: berlin: Fix wrong register in suspend/resume",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40134",
      "url": "https://patchblox.com/security/cve/CVE-2025-40134",
      "title": "kernel-64k-debug-modules-core: kernel: dm: fix NULL pointer dereference in __dm_suspend()",
      "priority": "Routine",
      "severity": "moderate",
      "cvss": 4.7,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40086",
      "url": "https://patchblox.com/security/cve/CVE-2025-40086",
      "title": "kernel-64kb: drm/xe: Don\u0027t allow evicting of BOs in same VM in array of VM binds (bsc#1252923).",
      "priority": "Routine",
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40116",
      "url": "https://patchblox.com/security/cve/CVE-2025-40116",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40109",
      "url": "https://patchblox.com/security/cve/CVE-2025-40109",
      "title": "crypto: rng - Ensure set_ent is always present",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40178",
      "url": "https://patchblox.com/security/cve/CVE-2025-40178",
      "title": "pid: Add a judgment for ns null in pid_nr_ns",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00225,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40120",
      "url": "https://patchblox.com/security/cve/CVE-2025-40120",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.7,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40127",
      "url": "https://patchblox.com/security/cve/CVE-2025-40127",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40033",
      "url": "https://patchblox.com/security/cve/CVE-2025-40033",
      "title": "remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40059",
      "url": "https://patchblox.com/security/cve/CVE-2025-40059",
      "title": "kernel-64kb: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809).",
      "priority": "Routine",
      "epss": 0.00213,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40194",
      "url": "https://patchblox.com/security/cve/CVE-2025-40194",
      "title": "cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.8,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40031",
      "url": "https://patchblox.com/security/cve/CVE-2025-40031",
      "title": "kernel-64kb: tee: fix register_shm_helper() (bsc#1252779).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40153",
      "url": "https://patchblox.com/security/cve/CVE-2025-40153",
      "title": "kernel-64kb: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40200",
      "url": "https://patchblox.com/security/cve/CVE-2025-40200",
      "title": "Squashfs: reject negative file sizes in squashfs_read_inode()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40132",
      "url": "https://patchblox.com/security/cve/CVE-2025-40132",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40142",
      "url": "https://patchblox.com/security/cve/CVE-2025-40142",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40197",
      "url": "https://patchblox.com/security/cve/CVE-2025-40197",
      "title": "media: mc: Clear minor number before put device",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0021,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40083",
      "url": "https://patchblox.com/security/cve/CVE-2025-40083",
      "title": "net/sched: sch_qfq: Fix null-deref in agg_dequeue",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.9,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40021",
      "url": "https://patchblox.com/security/cve/CVE-2025-40021",
      "title": "tracing: dynevent: Add a missing lockdown check on dynevent",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40110",
      "url": "https://patchblox.com/security/cve/CVE-2025-40110",
      "title": "drm/vmwgfx: Fix a null-ptr access in the cursor snooper",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40107",
      "url": "https://patchblox.com/security/cve/CVE-2025-40107",
      "title": "can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40207",
      "url": "https://patchblox.com/security/cve/CVE-2025-40207",
      "title": "media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40156",
      "url": "https://patchblox.com/security/cve/CVE-2025-40156",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38321",
      "url": "https://patchblox.com/security/cve/CVE-2025-38321",
      "title": "smb: Log an error when close_all_cached_dirs fails",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40192",
      "url": "https://patchblox.com/security/cve/CVE-2025-40192",
      "title": "Revert \u0022ipmi: fix msg stack when IPMI is disconnected\u0022",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40098",
      "url": "https://patchblox.com/security/cve/CVE-2025-40098",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: hda: cs35l41: Fix NULL pointer dereference...",
      "priority": "Routine",
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40161",
      "url": "https://patchblox.com/security/cve/CVE-2025-40161",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40162",
      "url": "https://patchblox.com/security/cve/CVE-2025-40162",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40177",
      "url": "https://patchblox.com/security/cve/CVE-2025-40177",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40164",
      "url": "https://patchblox.com/security/cve/CVE-2025-40164",
      "title": "usbnet: Fix using smp_processor_id() in preemptible code warnings",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40175",
      "url": "https://patchblox.com/security/cve/CVE-2025-40175",
      "title": "kernel-64kb: idpf: cleanup remaining SKBs in PTP flows (bsc#1253426).",
      "priority": "Routine",
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-50253",
      "url": "https://patchblox.com/security/cve/CVE-2022-50253",
      "title": "kernel-64kb: bpf: make sure skb-\u003Elen != 0 when redirecting to a tunneling device (bsc#1249912).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39805",
      "url": "https://patchblox.com/security/cve/CVE-2025-39805",
      "title": "net: macb: fix unregister_netdev call order in macb_remove()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39831",
      "url": "https://patchblox.com/security/cve/CVE-2025-39831",
      "title": "kernel-64kb: fbnic: Move phylink resume out of service_task and into open/close (bsc#1249977).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39822",
      "url": "https://patchblox.com/security/cve/CVE-2025-39822",
      "title": "kernel-64kb: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39961",
      "url": "https://patchblox.com/security/cve/CVE-2025-39961",
      "title": "iommu/amd/pgtbl: Fix possible race while increase page table level",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.8,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T07:45:43Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}