# SUSE-SU-2026:20015-1: Security update for 9 packages

SUSE-SU-2026:20015-1, released December 19, 2025, fixes 100 CVEs across 9 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-20015-1
- Platform: Linux
- Released: Dec 19, 2025
- Priority: Urgent (Closes CVE-2025-40172, rated Critical)
- CVEs: 100, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:20015-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 16.0 | 6.12.0-160000.8.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 16.0 | 6.12.0-160000.8.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 16.0 | 6.12.0-160000.8.1.160000.2.5 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 16.0 | 6.12.0-160000.8.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | sles 16.0 | 6.12.0-160000.8.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | sles 16.0 | 6.12.0-160000.8.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 16.0 | 6.12.0-160000.8.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 16.0 | 6.12.0-160000.8.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 16.0 | 6.12.0-160000.8.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-40172](https://patchblox.com/security/data/cve/CVE-2025-40172.md) | Urgent | accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages() | 9.8 | 0.0015 |  |
| [CVE-2025-40165](https://patchblox.com/security/data/cve/CVE-2025-40165.md) | Urgent | media: nxp: imx8-isi: m2m: Fix streaming cleanup on release | 9.8 | 0.0015 |  |
| [CVE-2025-40135](https://patchblox.com/security/data/cve/CVE-2025-40135.md) | High | ipv6: use RCU in ip6_xmit() | 8.4 | 0.0071 |  |
| [CVE-2025-40187](https://patchblox.com/security/data/cve/CVE-2025-40187.md) | High | net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() | 7.5 | 0.0064 |  |
| [CVE-2025-40053](https://patchblox.com/security/data/cve/CVE-2025-40053.md) | High | net: dlink: handle copy_thresh allocation failure | 7.5 | 0.0063 |  |
| [CVE-2025-40183](https://patchblox.com/security/data/cve/CVE-2025-40183.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix metadata_dst leak __bpf_redirect_neigh_... | 7.5 | 0.0063 |  |
| [CVE-2025-40186](https://patchblox.com/security/data/cve/CVE-2025-40186.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: Don't call reqsk_fastopen_remove() in tcp_c... | 8.1 | 0.0059 |  |
| [CVE-2025-40129](https://patchblox.com/security/data/cve/CVE-2025-40129.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  sunrpc: fix null pointer dereference on zero-len... | 7.5 | 0.0057 |  |
| [CVE-2025-40158](https://patchblox.com/security/data/cve/CVE-2025-40158.md) | High | ipv6: use RCU in ip6_output() | 8.1 | 0.0056 |  |
| [CVE-2025-40133](https://patchblox.com/security/data/cve/CVE-2025-40133.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mptcp: Use __sk_dst_get() and dst_dev_rcu() in m... | 8.1 | 0.0051 |  |
| [CVE-2025-40075](https://patchblox.com/security/data/cve/CVE-2025-40075.md) | High | tcp_metrics: use dst_dev_net_rcu() | 8.1 | 0.0049 |  |
| [CVE-2025-40176](https://patchblox.com/security/data/cve/CVE-2025-40176.md) | High | tls: wait for pending async decryptions if tls_strp_msg_hold fails | 9.8 | 0.0049 |  |
| [CVE-2025-40171](https://patchblox.com/security/data/cve/CVE-2025-40171.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nvmet-fc: move lsop put work to nvmet_fc_ls_req_... | 7.5 | 0.0048 |  |
| [CVE-2025-40204](https://patchblox.com/security/data/cve/CVE-2025-40204.md) | High | sctp: Fix MAC comparison to be constant-time | 8.1 | 0.0047 |  |
| [CVE-2025-40074](https://patchblox.com/security/data/cve/CVE-2025-40074.md) | High | ipv4: start using dst_dev_rcu() | 9.8 | 0.0046 |  |
| [CVE-2025-40168](https://patchblox.com/security/data/cve/CVE-2025-40168.md) | High | smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). | 8.1 | 0.0042 |  |
| [CVE-2025-38728](https://patchblox.com/security/data/cve/CVE-2025-38728.md) | High | smb3: fix for slab out of bounds on mount to ksmbd | 7.1 | 0.0036 |  |
| [CVE-2025-40141](https://patchblox.com/security/data/cve/CVE-2025-40141.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: ISO: Fix possible UAF on iso_conn_fre... | 8.0 | 0.0032 |  |
| [CVE-2025-40140](https://patchblox.com/security/data/cve/CVE-2025-40140.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: Remove disruptive netif_wake_queue in... | 8.8 | 0.0032 |  |
| [CVE-2025-40001](https://patchblox.com/security/data/cve/CVE-2025-40001.md) | High | scsi: mvsas: Fix use-after-free bugs in mvs_work_queue | 7.8 | 0.0026 |  |
| [CVE-2025-40003](https://patchblox.com/security/data/cve/CVE-2025-40003.md) | High | net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work | 7.8 | 0.0026 |  |
| [CVE-2025-39980](https://patchblox.com/security/data/cve/CVE-2025-39980.md) | High | nexthop: Forbid FDB status change while nexthop is in a group | 7.1 | 0.0023 |  |
| [CVE-2025-37916](https://patchblox.com/security/data/cve/CVE-2025-37916.md) | High | pds_core: remove write-after-free of client_id | 7.8 | 0.0023 |  |
| [CVE-2025-40121](https://patchblox.com/security/data/cve/CVE-2025-40121.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0023 |  |
| [CVE-2025-40055](https://patchblox.com/security/data/cve/CVE-2025-40055.md) | High | ocfs2: fix double free in user_cluster_connect() | 7.8 | 0.0023 |  |
| [CVE-2025-40102](https://patchblox.com/security/data/cve/CVE-2025-40102.md) | High | KVM: arm64: Prevent access to vCPU events before init | 7.1 | 0.0022 |  |
| [CVE-2025-38084](https://patchblox.com/security/data/cve/CVE-2025-38084.md) | High | mm/hugetlb: unshare page tables during VMA split, not before | 7.3 | 0.0022 |  |
| [CVE-2025-40185](https://patchblox.com/security/data/cve/CVE-2025-40185.md) | High | kernel-64kb: ice: ice_adapter: release xa entry on adapter allocation failure (bsc#1253394). | 7.8 | 0.0021 |  |
| [CVE-2025-40154](https://patchblox.com/security/data/cve/CVE-2025-40154.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-40006](https://patchblox.com/security/data/cve/CVE-2025-40006.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/hugetlb: fix folio is still mapped when delet... | 7.8 | 0.0021 |  |
| [CVE-2025-40196](https://patchblox.com/security/data/cve/CVE-2025-40196.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs: quota: create dedicated workqueue for quota_... | n/a | 0.0021 |  |
| [CVE-2025-39990](https://patchblox.com/security/data/cve/CVE-2025-39990.md) | High | bpf: Check the helper function is valid in get_helper_proto | 7.8 | 0.0020 |  |
| [CVE-2025-40101](https://patchblox.com/security/data/cve/CVE-2025-40101.md) | High | kernel-64kb: btrfs: fix memory leaks when rejecting a non SINGLE data profile without an RST (bsc#1252901). | n/a | 0.0020 |  |
| [CVE-2025-39859](https://patchblox.com/security/data/cve/CVE-2025-39859.md) | High | ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog | 7.8 | 0.0020 |  |
| [CVE-2025-40038](https://patchblox.com/security/data/cve/CVE-2025-40038.md) | High | KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid | 7.1 | 0.0018 |  |
| [CVE-2025-40149](https://patchblox.com/security/data/cve/CVE-2025-40149.md) | High | tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). | 8.8 | 0.0017 |  |
| [CVE-2025-40105](https://patchblox.com/security/data/cve/CVE-2025-40105.md) | High | vfs: Don't leak disconnected dentries on umount | 7.8 | 0.0017 |  |
| [CVE-2025-40118](https://patchblox.com/security/data/cve/CVE-2025-40118.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: pm80xx: Fix array-index-out-of-of-bounds o... | 7.8 | 0.0017 |  |
| [CVE-2025-40139](https://patchblox.com/security/data/cve/CVE-2025-40139.md) | High | smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set(). | 8.4 | 0.0017 |  |
| [CVE-2025-40198](https://patchblox.com/security/data/cve/CVE-2025-40198.md) | High | ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() | 7.8 | 0.0017 |  |
| [CVE-2025-40047](https://patchblox.com/security/data/cve/CVE-2025-40047.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/waitid: always prune wait queue entry i... | 7.8 | 0.0016 |  |
| [CVE-2025-40027](https://patchblox.com/security/data/cve/CVE-2025-40027.md) | High | net/9p: fix double req put in p9_fd_cancelled | 7.8 | 0.0016 |  |
| [CVE-2025-38085](https://patchblox.com/security/data/cve/CVE-2025-38085.md) | High | mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race | 7.3 | 0.0016 |  |
| [CVE-2025-39917](https://patchblox.com/security/data/cve/CVE-2025-39917.md) | High | kernel-64kb: bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (bsc#1250723). | 7.8 | 0.0015 |  |
| [CVE-2025-40024](https://patchblox.com/security/data/cve/CVE-2025-40024.md) | High | vhost: Take a reference on the task in struct vhost_task. | 7.8 | 0.0015 |  |
| [CVE-2025-40081](https://patchblox.com/security/data/cve/CVE-2025-40081.md) | High | perf: arm_spe: Prevent overflow in PERF_IDX2OFF() | 7.8 | 0.0015 |  |
| [CVE-2025-40169](https://patchblox.com/security/data/cve/CVE-2025-40169.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Reject negative offsets for ALU ops  When v... | 7.8 | 0.0015 |  |
| [CVE-2025-40173](https://patchblox.com/security/data/cve/CVE-2025-40173.md) | High | net/ip6_tunnel: Prevent perpetual tunnel growth | 7.8 | 0.0015 |  |
| [CVE-2025-40205](https://patchblox.com/security/data/cve/CVE-2025-40205.md) | High | btrfs: avoid potential out-of-bounds in btrfs_encode_fh() | 7.8 | 0.0015 |  |
| [CVE-2025-40206](https://patchblox.com/security/data/cve/CVE-2025-40206.md) | High | netfilter: nft_objref: validate objref and objrefmap expressions | 7.8 | 0.0015 |  |
| [CVE-2025-39944](https://patchblox.com/security/data/cve/CVE-2025-39944.md) | High | octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() | 7.8 | 0.0015 |  |
| [CVE-2025-40201](https://patchblox.com/security/data/cve/CVE-2025-40201.md) | High | kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in sys_prlimit64() paths | 7.8 | 0.0015 |  |
| [CVE-2025-40159](https://patchblox.com/security/data/cve/CVE-2025-40159.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: Harden userspace-supplied xdp_desc validati... | 7.8 | 0.0015 |  |
| [CVE-2025-40166](https://patchblox.com/security/data/cve/CVE-2025-40166.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/xe/guc: Check GuC running state before dereg... | 7.8 | 0.0015 |  |
| [CVE-2025-40203](https://patchblox.com/security/data/cve/CVE-2025-40203.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  listmount: don't call path_put() under namespace... | 7.8 | 0.0015 |  |
| [CVE-2025-40064](https://patchblox.com/security/data/cve/CVE-2025-40064.md) | High | smc: Fix use-after-free in __pnet_find_base_ndev(). | 8.8 | 0.0015 |  |
| [CVE-2025-40111](https://patchblox.com/security/data/cve/CVE-2025-40111.md) | High | drm/vmwgfx: Fix Use-after-free in validation | 7.8 | 0.0015 |  |
| [CVE-2025-39819](https://patchblox.com/security/data/cve/CVE-2025-39819.md) | High | fs/smb: Fix inconsistent refcnt update | 7.6 | 0.0015 |  |
| [CVE-2025-40202](https://patchblox.com/security/data/cve/CVE-2025-40202.md) | High | ipmi: Rework user message limit handling | 7.8 | 0.0015 |  |
| [CVE-2025-39897](https://patchblox.com/security/data/cve/CVE-2025-39897.md) | Routine | kernel-64kb: net: xilinx: axienet: Add error handling for RX metadata pointer retrieval (bsc#1250746). | 5.5 | 0.0028 |  |
| [CVE-2025-40180](https://patchblox.com/security/data/cve/CVE-2025-40180.md) | Routine | mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop | 5.5 | 0.0025 |  |
| [CVE-2025-40157](https://patchblox.com/security/data/cve/CVE-2025-40157.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.4 | 0.0025 |  |
| [CVE-2025-40070](https://patchblox.com/security/data/cve/CVE-2025-40070.md) | Routine | kernel-64kb: pps: fix warning in pps_register_cdev when register device fail (bsc#1252836). | 5.5 | 0.0024 |  |
| [CVE-2025-40115](https://patchblox.com/security/data/cve/CVE-2025-40115.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-40188](https://patchblox.com/security/data/cve/CVE-2025-40188.md) | Routine | pwm: berlin: Fix wrong register in suspend/resume | 5.5 | 0.0023 |  |
| [CVE-2025-40134](https://patchblox.com/security/data/cve/CVE-2025-40134.md) | Routine | kernel-64k-debug-modules-core: kernel: dm: fix NULL pointer dereference in __dm_suspend() | 4.7 | 0.0023 |  |
| [CVE-2025-40086](https://patchblox.com/security/data/cve/CVE-2025-40086.md) | Routine | kernel-64kb: drm/xe: Don't allow evicting of BOs in same VM in array of VM binds (bsc#1252923). | n/a | 0.0023 |  |
| [CVE-2025-40116](https://patchblox.com/security/data/cve/CVE-2025-40116.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0023 |  |
| [CVE-2025-40109](https://patchblox.com/security/data/cve/CVE-2025-40109.md) | Routine | crypto: rng - Ensure set_ent is always present | 5.5 | 0.0023 |  |
| [CVE-2025-40178](https://patchblox.com/security/data/cve/CVE-2025-40178.md) | Routine | pid: Add a judgment for ns null in pid_nr_ns | 5.5 | 0.0023 |  |
| [CVE-2025-40120](https://patchblox.com/security/data/cve/CVE-2025-40120.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0022 |  |
| [CVE-2025-40127](https://patchblox.com/security/data/cve/CVE-2025-40127.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0022 |  |
| [CVE-2025-40033](https://patchblox.com/security/data/cve/CVE-2025-40033.md) | Routine | remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() | 5.5 | 0.0021 |  |
| [CVE-2025-40059](https://patchblox.com/security/data/cve/CVE-2025-40059.md) | Routine | kernel-64kb: coresight: Fix incorrect handling for return value of devm_kzalloc (bsc#1252809). | n/a | 0.0021 |  |
| [CVE-2025-40194](https://patchblox.com/security/data/cve/CVE-2025-40194.md) | Routine | cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() | 5.8 | 0.0021 |  |
| [CVE-2025-40031](https://patchblox.com/security/data/cve/CVE-2025-40031.md) | Routine | kernel-64kb: tee: fix register_shm_helper() (bsc#1252779). | 5.5 | 0.0021 |  |
| [CVE-2025-40153](https://patchblox.com/security/data/cve/CVE-2025-40153.md) | Routine | kernel-64kb: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408). | 5.5 | 0.0021 |  |
| [CVE-2025-40200](https://patchblox.com/security/data/cve/CVE-2025-40200.md) | Routine | Squashfs: reject negative file sizes in squashfs_read_inode() | 5.5 | 0.0021 |  |
| [CVE-2025-40132](https://patchblox.com/security/data/cve/CVE-2025-40132.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-40142](https://patchblox.com/security/data/cve/CVE-2025-40142.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2025-40197](https://patchblox.com/security/data/cve/CVE-2025-40197.md) | Routine | media: mc: Clear minor number before put device | 5.5 | 0.0021 |  |
| [CVE-2025-40083](https://patchblox.com/security/data/cve/CVE-2025-40083.md) | Routine | net/sched: sch_qfq: Fix null-deref in agg_dequeue | 5.9 | 0.0021 |  |
| [CVE-2025-40021](https://patchblox.com/security/data/cve/CVE-2025-40021.md) | Routine | tracing: dynevent: Add a missing lockdown check on dynevent | 5.5 | 0.0021 |  |
| [CVE-2025-40110](https://patchblox.com/security/data/cve/CVE-2025-40110.md) | Routine | drm/vmwgfx: Fix a null-ptr access in the cursor snooper | 4.7 | 0.0021 |  |
| [CVE-2025-40107](https://patchblox.com/security/data/cve/CVE-2025-40107.md) | Routine | can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled | 5.5 | 0.0020 |  |
| [CVE-2025-40207](https://patchblox.com/security/data/cve/CVE-2025-40207.md) | Routine | media: v4l2-subdev: Fix alloc failure check in v4l2_subdev_call_state_try() | 5.5 | 0.0020 |  |
| [CVE-2025-40156](https://patchblox.com/security/data/cve/CVE-2025-40156.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-38321](https://patchblox.com/security/data/cve/CVE-2025-38321.md) | Routine | smb: Log an error when close_all_cached_dirs fails | 5.5 | 0.0020 |  |
| [CVE-2025-40192](https://patchblox.com/security/data/cve/CVE-2025-40192.md) | Routine | Revert "ipmi: fix msg stack when IPMI is disconnected" | 5.5 | 0.0020 |  |
| [CVE-2025-40098](https://patchblox.com/security/data/cve/CVE-2025-40098.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: hda: cs35l41: Fix NULL pointer dereference... | n/a | 0.0020 |  |
| [CVE-2025-40161](https://patchblox.com/security/data/cve/CVE-2025-40161.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-40162](https://patchblox.com/security/data/cve/CVE-2025-40162.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-40177](https://patchblox.com/security/data/cve/CVE-2025-40177.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 |  |
| [CVE-2025-40164](https://patchblox.com/security/data/cve/CVE-2025-40164.md) | Routine | usbnet: Fix using smp_processor_id() in preemptible code warnings | 5.5 | 0.0019 |  |
| [CVE-2025-40175](https://patchblox.com/security/data/cve/CVE-2025-40175.md) | Routine | kernel-64kb: idpf: cleanup remaining SKBs in PTP flows (bsc#1253426). | n/a | 0.0019 |  |
| [CVE-2022-50253](https://patchblox.com/security/data/cve/CVE-2022-50253.md) | Routine | kernel-64kb: bpf: make sure skb->len != 0 when redirecting to a tunneling device (bsc#1249912). | 5.5 | 0.0016 |  |
| [CVE-2025-39805](https://patchblox.com/security/data/cve/CVE-2025-39805.md) | Routine | net: macb: fix unregister_netdev call order in macb_remove() | 5.5 | 0.0016 |  |
| [CVE-2025-39831](https://patchblox.com/security/data/cve/CVE-2025-39831.md) | Routine | kernel-64kb: fbnic: Move phylink resume out of service_task and into open/close (bsc#1249977). | 5.5 | 0.0015 |  |
| [CVE-2025-39822](https://patchblox.com/security/data/cve/CVE-2025-39822.md) | Routine | kernel-64kb: io_uring/kbuf: fix signedness in this_len calculation (bsc#1250034). | 5.5 | 0.0013 |  |
| [CVE-2025-39961](https://patchblox.com/security/data/cve/CVE-2025-39961.md) | Routine | iommu/amd/pgtbl: Fix possible race while increase page table level | 5.8 | 0.0012 |  |

---

Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.