# SUSE-SU-2026:20220-1: Security update for 10 packages SUSE-SU-2026:20220-1, released February 2, 2026, fixes 214 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/suse-su-2026-20220-1 - Platform: Linux - Released: Feb 2, 2026 - Priority: Urgent (Closes CVE-2025-68206, rated Critical) - CVEs: 214, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:20220-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 16.0 | 6.12.0-160000.9.1 | | [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 16.0 | 6.12.0-160000.9.1 | | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 16.0 | 6.12.0-160000.9.1 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 16.0 | 6.12.0-160000.9.1.160000.2.6 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 16.0 | 6.12.0-160000.9.1 | | [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | sles 16.0 | 6.12.0-160000.9.1 | | [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | sles 16.0 | 6.12.0-160000.9.1 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 16.0 | 6.12.0-160000.9.1 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 16.0 | 6.12.0-160000.9.1 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 16.0 | 6.12.0-160000.9.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-68206](https://patchblox.com/security/data/cve/CVE-2025-68206.md) | Urgent | netfilter: nft_ct: add seqadj extension for natted connections | 9.1 | 0.0071 | | | [CVE-2025-68192](https://patchblox.com/security/data/cve/CVE-2025-68192.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset... | 9.8 | 0.0061 | | | [CVE-2025-40350](https://patchblox.com/security/data/cve/CVE-2025-40350.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix generating skb from non-linea... | 9.8 | 0.0055 | | | [CVE-2025-40320](https://patchblox.com/security/data/cve/CVE-2025-40320.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_quer... | 9.8 | 0.0045 | | | [CVE-2025-40212](https://patchblox.com/security/data/cve/CVE-2025-40212.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix refcount leak in nfsd_set_fh_dentry()... | 9.8 | 0.0043 | | | [CVE-2025-40251](https://patchblox.com/security/data/cve/CVE-2025-40251.md) | Urgent | devlink: rate: Unset parent pointer in devl_rate_nodes_destroy | 9.8 | 0.0017 | | | [CVE-2025-40242](https://patchblox.com/security/data/cve/CVE-2025-40242.md) | Urgent | gfs2: Fix unlikely race in gdlm_put_lock | 9.8 | 0.0016 | | | [CVE-2025-40262](https://patchblox.com/security/data/cve/CVE-2025-40262.md) | Urgent | Input: imx_sc_key - fix memory corruption on unload | 9.8 | 0.0015 | | | [CVE-2025-40343](https://patchblox.com/security/data/cve/CVE-2025-40343.md) | High | nvmet-fc: avoid scheduling association deletion twice | 9.8 | 0.0070 | | | [CVE-2025-40252](https://patchblox.com/security/data/cve/CVE-2025-40252.md) | High | net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() | 9.8 | 0.0065 | | | [CVE-2025-40240](https://patchblox.com/security/data/cve/CVE-2025-40240.md) | High | sctp: avoid NULL dereference when chunk data buffer is missing | 8.6 | 0.0064 | | | [CVE-2025-68284](https://patchblox.com/security/data/cve/CVE-2025-68284.md) | High | libceph: prevent potential out-of-bounds writes in handle_auth_session_key() | 9.8 | 0.0059 | | | [CVE-2025-68285](https://patchblox.com/security/data/cve/CVE-2025-68285.md) | High | libceph: fix potential use-after-free in have_mon_and_osd_map() | 9.8 | 0.0059 | | | [CVE-2025-40347](https://patchblox.com/security/data/cve/CVE-2025-40347.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix the deadlock of enetc_mdio_lock... | 7.5 | 0.0053 | | | [CVE-2025-68283](https://patchblox.com/security/data/cve/CVE-2025-68283.md) | High | libceph: replace BUG_ON with bounds check for map->max_osd | 7.5 | 0.0053 | | | [CVE-2025-40337](https://patchblox.com/security/data/cve/CVE-2025-40337.md) | High | net: stmmac: Correctly handle Rx checksum offload errors | 8.2 | 0.0052 | | | [CVE-2025-40258](https://patchblox.com/security/data/cve/CVE-2025-40258.md) | High | mptcp: fix race condition in mptcp_schedule_work() | 9.8 | 0.0050 | | | [CVE-2025-40328](https://patchblox.com/security/data/cve/CVE-2025-40328.md) | High | smb: client: fix potential UAF in smb2_close_cached_fid() | 8.8 | 0.0049 | | | [CVE-2025-40271](https://patchblox.com/security/data/cve/CVE-2025-40271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix uaf in proc_readdir_de() Pde is er... | 7.8 | 0.0049 | | | [CVE-2025-40324](https://patchblox.com/security/data/cve/CVE-2025-40324.md) | High | NFSD: Fix crash in nfsd4_read_release() | 7.5 | 0.0049 | | | [CVE-2025-68301](https://patchblox.com/security/data/cve/CVE-2025-68301.md) | High | net: atlantic: fix fragment overflow handling in RX path | 9.8 | 0.0047 | | | [CVE-2025-40273](https://patchblox.com/security/data/cve/CVE-2025-40273.md) | High | NFSD: free copynotify stateid in nfs4_free_ol_stateid() | 8.8 | 0.0046 | | | [CVE-2025-68302](https://patchblox.com/security/data/cve/CVE-2025-68302.md) | High | net: sxgbe: fix potential NULL dereference in sxgbe_rx() | 7.5 | 0.0046 | | | [CVE-2025-40342](https://patchblox.com/security/data/cve/CVE-2025-40342.md) | High | nvme-fc: use lock accessing port_state and rport state | 8.8 | 0.0039 | | | [CVE-2025-68255](https://patchblox.com/security/data/cve/CVE-2025-68255.md) | High | staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing | 8.8 | 0.0037 | | | [CVE-2025-40282](https://patchblox.com/security/data/cve/CVE-2025-40282.md) | High | Bluetooth: 6lowpan: reset link-local header on ipv6 recv path | 8.8 | 0.0030 | | | [CVE-2025-40318](https://patchblox.com/security/data/cve/CVE-2025-40318.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_de... | 8.8 | 0.0029 | | | [CVE-2025-40301](https://patchblox.com/security/data/cve/CVE-2025-40301.md) | High | Bluetooth: hci_event: validate skb length for unknown CC opcode | 7.8 | 0.0029 | | | [CVE-2025-68254](https://patchblox.com/security/data/cve/CVE-2025-68254.md) | High | staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing | 7.1 | 0.0028 | | | [CVE-2025-68256](https://patchblox.com/security/data/cve/CVE-2025-68256.md) | High | staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser | 8.8 | 0.0027 | | | [CVE-2025-40309](https://patchblox.com/security/data/cve/CVE-2025-40309.md) | High | Bluetooth: SCO: Fix UAF on sco_conn_free | 8.0 | 0.0026 | | | [CVE-2025-40338](https://patchblox.com/security/data/cve/CVE-2025-40338.md) | High | ASoC: Intel: avs: Do not share the name pointer between components | 7.0 | 0.0026 | | | [CVE-2025-40277](https://patchblox.com/security/data/cve/CVE-2025-40277.md) | High | drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE | 7.8 | 0.0025 | | | [CVE-2025-40329](https://patchblox.com/security/data/cve/CVE-2025-40329.md) | High | drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb | 7.0 | 0.0024 | | | [CVE-2025-40340](https://patchblox.com/security/data/cve/CVE-2025-40340.md) | High | drm/xe: Fix oops in xe_gem_fault when running core_hotunplug test. | 7.0 | 0.0024 | | | [CVE-2025-68287](https://patchblox.com/security/data/cve/CVE-2025-68287.md) | High | usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths | 7.8 | 0.0023 | | | [CVE-2025-68209](https://patchblox.com/security/data/cve/CVE-2025-68209.md) | High | mlx5: Fix default values in create CQ | 7.5 | 0.0022 | | | [CVE-2025-68311](https://patchblox.com/security/data/cve/CVE-2025-68311.md) | High | tty: serial: ip22zilog: Use platform device for probing | 7.8 | 0.0022 | | | [CVE-2025-40223](https://patchblox.com/security/data/cve/CVE-2025-40223.md) | High | most: usb: Fix use-after-free in hdm_disconnect | 7.8 | 0.0022 | | | [CVE-2025-40256](https://patchblox.com/security/data/cve/CVE-2025-40256.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0022 | | | [CVE-2025-40294](https://patchblox.com/security/data/cve/CVE-2025-40294.md) | High | Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() | 7.8 | 0.0022 | | | [CVE-2025-40237](https://patchblox.com/security/data/cve/CVE-2025-40237.md) | High | kernel-64kb: fs/notify: call exportfs_encode_fid with s_umount (bsc#1254809). | 7.1 | 0.0022 | | | [CVE-2025-40293](https://patchblox.com/security/data/cve/CVE-2025-40293.md) | High | iommufd: Don't overflow during division for dirty tracking | 7.0 | 0.0022 | | | [CVE-2025-40246](https://patchblox.com/security/data/cve/CVE-2025-40246.md) | High | kernel-64kb: xfs: fix out of bounds memory read error in symlink repair (bsc#1254861). | 7.1 | 0.0021 | | | [CVE-2025-40211](https://patchblox.com/security/data/cve/CVE-2025-40211.md) | High | ACPI: video: Fix use-after-free in acpi_video_switch_brightness() | 7.8 | 0.0021 | | | [CVE-2025-40314](https://patchblox.com/security/data/cve/CVE-2025-40314.md) | High | usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget | 7.8 | 0.0021 | | | [CVE-2025-68190](https://patchblox.com/security/data/cve/CVE-2025-68190.md) | High | drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() | 7.8 | 0.0021 | | | [CVE-2025-68290](https://patchblox.com/security/data/cve/CVE-2025-68290.md) | High | most: usb: fix double free on late probe failure | 7.8 | 0.0021 | | | [CVE-2025-40331](https://patchblox.com/security/data/cve/CVE-2025-40331.md) | High | sctp: Prevent TOCTOU out-of-bounds write | 7.8 | 0.0020 | | | [CVE-2025-40160](https://patchblox.com/security/data/cve/CVE-2025-40160.md) | High | kernel-64kb: xen/events: Cleanup find_virq() return codes (bsc#1253400). | n/a | 0.0020 | | | [CVE-2025-40357](https://patchblox.com/security/data/cve/CVE-2025-40357.md) | High | kernel-64kb: net/smc: fix general protection fault in __smc_diag_dump (bsc#1255097). | n/a | 0.0020 | | | [CVE-2025-68180](https://patchblox.com/security/data/cve/CVE-2025-68180.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-68759](https://patchblox.com/security/data/cve/CVE-2025-68759.md) | High | wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() | 7.1 | 0.0020 | | | [CVE-2025-40345](https://patchblox.com/security/data/cve/CVE-2025-40345.md) | High | usb: storage: sddr55: Reject out-of-bound new_pba | 7.3 | 0.0020 | | | [CVE-2025-68202](https://patchblox.com/security/data/cve/CVE-2025-68202.md) | High | kernel-64kb: sched_ext: Fix unsafe locking in the scx_dump_state() (bsc#1255223). | n/a | 0.0020 | | | [CVE-2025-68210](https://patchblox.com/security/data/cve/CVE-2025-68210.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-40170](https://patchblox.com/security/data/cve/CVE-2025-40170.md) | High | net: use dst_dev_rcu() in sk_setup_caps() | 8.1 | 0.0019 | | | [CVE-2025-40213](https://patchblox.com/security/data/cve/CVE-2025-40213.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: fix crash in set_mesh_sync and... | 7.8 | 0.0019 | | | [CVE-2025-40344](https://patchblox.com/security/data/cve/CVE-2025-40344.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Disable periods-elapsed work w... | 7.8 | 0.0019 | | | [CVE-2025-68766](https://patchblox.com/security/data/cve/CVE-2025-68766.md) | High | irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() | 7.1 | 0.0019 | | | [CVE-2025-68307](https://patchblox.com/security/data/cve/CVE-2025-68307.md) | High | can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs | 7.0 | 0.0019 | | | [CVE-2025-40214](https://patchblox.com/security/data/cve/CVE-2025-40214.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Initialise scc_index in unix_add_edge() | 7.8 | 0.0019 | | | [CVE-2025-68327](https://patchblox.com/security/data/cve/CVE-2025-68327.md) | High | kernel-64kb: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488). | n/a | 0.0019 | | | [CVE-2025-68330](https://patchblox.com/security/data/cve/CVE-2025-68330.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-40269](https://patchblox.com/security/data/cve/CVE-2025-40269.md) | High | ALSA: usb-audio: Fix potential overflow of PCM transfer buffer | 7.8 | 0.0019 | | | [CVE-2025-38704](https://patchblox.com/security/data/cve/CVE-2025-38704.md) | High | rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access | 7.8 | 0.0019 | | | [CVE-2025-68305](https://patchblox.com/security/data/cve/CVE-2025-68305.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0019 | | | [CVE-2025-68237](https://patchblox.com/security/data/cve/CVE-2025-68237.md) | High | mtdchar: fix integer overflow in read/write ioctls | 7.8 | 0.0019 | | | [CVE-2025-68235](https://patchblox.com/security/data/cve/CVE-2025-68235.md) | High | nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot | 7.1 | 0.0019 | | | [CVE-2025-40292](https://patchblox.com/security/data/cve/CVE-2025-40292.md) | High | virtio-net: fix received length check in big packets | 8.4 | 0.0018 | | | [CVE-2025-40190](https://patchblox.com/security/data/cve/CVE-2025-40190.md) | High | ext4: guard against EA inode refcount underflow in xattr update | 7.8 | 0.0018 | | | [CVE-2025-68347](https://patchblox.com/security/data/cve/CVE-2025-68347.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwde... | 7.8 | 0.0018 | | | [CVE-2025-68753](https://patchblox.com/security/data/cve/CVE-2025-68753.md) | High | ALSA: firewire-motu: add bounds check in put_user loop for DSP events | 7.8 | 0.0017 | | | [CVE-2025-40250](https://patchblox.com/security/data/cve/CVE-2025-40250.md) | High | net/mlx5: Clean up only new IRQ glue on request_irq() failure | 7.8 | 0.0017 | | | [CVE-2025-40297](https://patchblox.com/security/data/cve/CVE-2025-40297.md) | High | net: bridge: fix use-after-free due to MST port state bypass | 7.8 | 0.0017 | | | [CVE-2025-40248](https://patchblox.com/security/data/cve/CVE-2025-40248.md) | High | vsock: Ignore signal/timeout on connect() if already established | 7.8 | 0.0017 | | | [CVE-2025-40123](https://patchblox.com/security/data/cve/CVE-2025-40123.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expected_attach_type for tailcall c... | 7.8 | 0.0017 | | | [CVE-2025-40233](https://patchblox.com/security/data/cve/CVE-2025-40233.md) | High | ocfs2: clear extent cache after moving/defragmenting extents | 7.8 | 0.0017 | | | [CVE-2025-40167](https://patchblox.com/security/data/cve/CVE-2025-40167.md) | High | ext4: detect invalid INLINE_DATA + EXTENTS flag combination | 7.8 | 0.0017 | | | [CVE-2025-40362](https://patchblox.com/security/data/cve/CVE-2025-40362.md) | High | ceph: fix multifs mds auth caps issue | 8.8 | 0.0016 | | | [CVE-2025-40266](https://patchblox.com/security/data/cve/CVE-2025-40266.md) | High | KVM: arm64: Check the untrusted offset in FF-A memory share | 8.2 | 0.0016 | | | [CVE-2025-40280](https://patchblox.com/security/data/cve/CVE-2025-40280.md) | High | tipc: Fix use-after-free in tipc_mon_reinit_self(). | 7.8 | 0.0016 | | | [CVE-2025-40307](https://patchblox.com/security/data/cve/CVE-2025-40307.md) | High | exfat: validate cluster allocation bits of the allocation bitmap | 7.8 | 0.0016 | | | [CVE-2025-68286](https://patchblox.com/security/data/cve/CVE-2025-68286.md) | High | drm/amd/display: Check NULL before accessing | 7.8 | 0.0016 | | | [CVE-2025-39977](https://patchblox.com/security/data/cve/CVE-2025-39977.md) | High | futex: Prevent use-after-free during requeue-PI | 7.8 | 0.0015 | | | [CVE-2025-40215](https://patchblox.com/security/data/cve/CVE-2025-40215.md) | High | xfrm: delete x->tunnel as we delete x | 7.8 | 0.0015 | | | [CVE-2025-40304](https://patchblox.com/security/data/cve/CVE-2025-40304.md) | High | fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds | 7.8 | 0.0015 | | | [CVE-2025-40317](https://patchblox.com/security/data/cve/CVE-2025-40317.md) | High | regmap: slimbus: fix bus_context pointer in regmap init calls | 7.8 | 0.0015 | | | [CVE-2025-40319](https://patchblox.com/security/data/cve/CVE-2025-40319.md) | High | bpf: Sync pending IRQ work before freeing ring buffer | 7.8 | 0.0015 | | | [CVE-2025-68171](https://patchblox.com/security/data/cve/CVE-2025-68171.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Se... | 7.8 | 0.0015 | | | [CVE-2025-68183](https://patchblox.com/security/data/cve/CVE-2025-68183.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ima: don't clear IMA_DIGSIG flag when setting or... | 7.8 | 0.0015 | | | [CVE-2025-68208](https://patchblox.com/security/data/cve/CVE-2025-68208.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: account for current allocated stack depth i... | 7.8 | 0.0015 | | | [CVE-2025-40322](https://patchblox.com/security/data/cve/CVE-2025-40322.md) | High | fbdev: bitblit: bound-check glyph index in bit_putcs* | 7.8 | 0.0015 | | | [CVE-2025-68352](https://patchblox.com/security/data/cve/CVE-2025-68352.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix out-of-bounds memory access in c... | 7.8 | 0.0015 | | | [CVE-2025-40272](https://patchblox.com/security/data/cve/CVE-2025-40272.md) | High | mm/secretmem: fix use-after-free race in fault handler | 7.8 | 0.0015 | | | [CVE-2025-40283](https://patchblox.com/security/data/cve/CVE-2025-40283.md) | High | Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF | 7.8 | 0.0015 | | | [CVE-2025-40354](https://patchblox.com/security/data/cve/CVE-2025-40354.md) | High | drm/amd/display: increase max link count and fix link->enc NULL pointer access | 7.8 | 0.0015 | | | [CVE-2025-68167](https://patchblox.com/security/data/cve/CVE-2025-68167.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix invalid pointer access in debugfs... | 7.8 | 0.0015 | | | [CVE-2025-68170](https://patchblox.com/security/data/cve/CVE-2025-68170.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Do not kfree() devres managed rdev... | 7.8 | 0.0015 | | | [CVE-2025-68207](https://patchblox.com/security/data/cve/CVE-2025-68207.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Synchronize Dead CT worker with unbi... | 7.8 | 0.0015 | | | [CVE-2025-40302](https://patchblox.com/security/data/cve/CVE-2025-40302.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: videobuf2: forbid remove_bufs when legacy... | 7.8 | 0.0015 | | | [CVE-2025-40323](https://patchblox.com/security/data/cve/CVE-2025-40323.md) | High | fbcon: Set fb_display[i]->mode to NULL when the mode is released | 8.8 | 0.0015 | | | [CVE-2025-68184](https://patchblox.com/security/data/cve/CVE-2025-68184.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Disable AFBC support on Mediatek D... | 7.1 | 0.0015 | | | [CVE-2025-68340](https://patchblox.com/security/data/cve/CVE-2025-68340.md) | High | kernel-64kb: team: Move team device type change at the end of team_port_add (bsc#1255507). | 7.0 | 0.0015 | | | [CVE-2025-40276](https://patchblox.com/security/data/cve/CVE-2025-40276.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Flush shmem writes before mapping b... | 7.3 | 0.0015 | | | [CVE-2025-40274](https://patchblox.com/security/data/cve/CVE-2025-40274.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Remove bindings on memslot del... | 7.8 | 0.0015 | | | [CVE-2025-40284](https://patchblox.com/security/data/cve/CVE-2025-40284.md) | High | Bluetooth: MGMT: cancel mesh send timer when hdev removed | 7.8 | 0.0015 | | | [CVE-2025-40303](https://patchblox.com/security/data/cve/CVE-2025-40303.md) | High | btrfs: ensure no dirty metadata is written back for an fs with errors | 7.8 | 0.0015 | | | [CVE-2025-68181](https://patchblox.com/security/data/cve/CVE-2025-68181.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Remove calls to drm_put_dev() Since... | 7.8 | 0.0015 | | | [CVE-2025-68736](https://patchblox.com/security/data/cve/CVE-2025-68736.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Fix handling of disconnected directori... | 8.8 | 0.0014 | | | [CVE-2025-68303](https://patchblox.com/security/data/cve/CVE-2025-68303.md) | High | platform/x86: intel: punit_ipc: fix memory corruption | 7.8 | 0.0014 | | | [CVE-2025-68746](https://patchblox.com/security/data/cve/CVE-2025-68746.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When t... | 7.8 | 0.0014 | | | [CVE-2025-68747](https://patchblox.com/security/data/cve/CVE-2025-68747.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF on kernel BO VA nodes If t... | 7.8 | 0.0014 | | | [CVE-2025-68748](https://patchblox.com/security/data/cve/CVE-2025-68748.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF race between device unplug... | 7.8 | 0.0014 | | | [CVE-2025-68215](https://patchblox.com/security/data/cve/CVE-2025-68215.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP cleanup on driver removal in error... | 7.0 | 0.0014 | | | [CVE-2025-68724](https://patchblox.com/security/data/cve/CVE-2025-68724.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in as... | 8.1 | 0.0014 | | | [CVE-2025-68317](https://patchblox.com/security/data/cve/CVE-2025-68317.md) | High | io_uring/zctx: check chained notif contexts | 7.8 | 0.0014 | | | [CVE-2025-68313](https://patchblox.com/security/data/cve/CVE-2025-68313.md) | High | x86/CPU/AMD: Add RDSEED fix for Zen5 | 7.1 | 0.0014 | | | [CVE-2025-71096](https://patchblox.com/security/data/cve/CVE-2025-71096.md) | High | RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly | 7.1 | 0.0014 | | | [CVE-2025-40225](https://patchblox.com/security/data/cve/CVE-2025-40225.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0026 | | | [CVE-2025-40254](https://patchblox.com/security/data/cve/CVE-2025-40254.md) | Routine | net: openvswitch: remove never-working support for setting nsh fields | 5.5 | 0.0026 | | | [CVE-2025-40339](https://patchblox.com/security/data/cve/CVE-2025-40339.md) | Routine | drm/amdgpu: fix nullptr err of vm_handle_moved | 5.5 | 0.0024 | | | [CVE-2025-40219](https://patchblox.com/security/data/cve/CVE-2025-40219.md) | Routine | PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV | 6.7 | 0.0024 | | | [CVE-2025-40130](https://patchblox.com/security/data/cve/CVE-2025-40130.md) | Routine | kernel-64kb: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling | n/a | 0.0024 | | | [CVE-2025-40289](https://patchblox.com/security/data/cve/CVE-2025-40289.md) | Routine | drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM | 5.5 | 0.0024 | | | [CVE-2025-40332](https://patchblox.com/security/data/cve/CVE-2025-40332.md) | Routine | drm/amdkfd: Fix mmap write lock not release | 5.5 | 0.0024 | | | [CVE-2025-68346](https://patchblox.com/security/data/cve/CVE-2025-68346.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.8 | 0.0023 | | | [CVE-2025-40264](https://patchblox.com/security/data/cve/CVE-2025-40264.md) | Routine | be2net: pass wrb_params in case of OS2BMC | 5.5 | 0.0023 | | | [CVE-2025-40278](https://patchblox.com/security/data/cve/CVE-2025-40278.md) | Routine | net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak | 5.5 | 0.0023 | | | [CVE-2025-40330](https://patchblox.com/security/data/cve/CVE-2025-40330.md) | Routine | kernel-64kb: bnxt_en: Shutdown FW DMA in bnxt_shutdown() (bsc#1254616). | 5.2 | 0.0023 | | | [CVE-2025-68345](https://patchblox.com/security/data/cve/CVE-2025-68345.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0023 | | | [CVE-2025-40042](https://patchblox.com/security/data/cve/CVE-2025-40042.md) | Routine | tracing: Fix race condition in kprobe initialization causing NULL pointer dereference | 5.5 | 0.0023 | | | [CVE-2025-68264](https://patchblox.com/security/data/cve/CVE-2025-68264.md) | Routine | ext4: refresh inline data size before write operations | 5.5 | 0.0022 | | | [CVE-2025-68201](https://patchblox.com/security/data/cve/CVE-2025-68201.md) | Routine | drm/amdgpu: remove two invalid BUG_ON()s | 4.0 | 0.0022 | | | [CVE-2025-40179](https://patchblox.com/security/data/cve/CVE-2025-40179.md) | Routine | ext4: verify orphan file size is not too big | 5.5 | 0.0022 | | | [CVE-2025-40231](https://patchblox.com/security/data/cve/CVE-2025-40231.md) | Routine | kernel-64kb: vsock: fix lock inversion in vsock_assign_transport() (bsc#1254815). | 5.5 | 0.0022 | | | [CVE-2025-40355](https://patchblox.com/security/data/cve/CVE-2025-40355.md) | Routine | sysfs: check visibility before changing group attribute ownership | 5.5 | 0.0022 | | | [CVE-2025-68353](https://patchblox.com/security/data/cve/CVE-2025-68353.md) | Routine | kernel-64kb: net: vxlan: prevent NULL deref in vxlan_xmit_one (bsc#1255533). | n/a | 0.0022 | | | [CVE-2025-68378](https://patchblox.com/security/data/cve/CVE-2025-68378.md) | Routine | kernel-64kb: bpf: Refactor stack map trace depth calculation into helper function (bsc#1255614). | 5.5 | 0.0022 | | | [CVE-2025-68217](https://patchblox.com/security/data/cve/CVE-2025-68217.md) | Routine | Input: pegasus-notetaker - fix potential out-of-bounds access | 6.2 | 0.0022 | | | [CVE-2025-40321](https://patchblox.com/security/data/cve/CVE-2025-40321.md) | Routine | wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode | 6.5 | 0.0022 | | | [CVE-2025-40315](https://patchblox.com/security/data/cve/CVE-2025-40315.md) | Routine | usb: gadget: f_fs: Fix epfile null pointer access after ep enable. | 5.5 | 0.0022 | | | [CVE-2025-40226](https://patchblox.com/security/data/cve/CVE-2025-40226.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2025-68230](https://patchblox.com/security/data/cve/CVE-2025-68230.md) | Routine | drm/amdgpu: fix gpu page fault after hibernation on PF passthrough | 5.9 | 0.0021 | | | [CVE-2025-40239](https://patchblox.com/security/data/cve/CVE-2025-40239.md) | Routine | kernel-64kb: net: phy: micrel: always set shared->phydev for LAN8814 (bsc#1254868). | 5.5 | 0.0021 | | | [CVE-2025-40238](https://patchblox.com/security/data/cve/CVE-2025-40238.md) | Routine | kernel-64kb: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871). | 4.7 | 0.0021 | | | [CVE-2025-68362](https://patchblox.com/security/data/cve/CVE-2025-68362.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.5 | 0.0021 | | | [CVE-2025-68742](https://patchblox.com/security/data/cve/CVE-2025-68742.md) | Routine | kernel-64kb: bpf: Improve program stats run-time calculation (bsc#1255707). | 5.8 | 0.0021 | | | [CVE-2025-68354](https://patchblox.com/security/data/cve/CVE-2025-68354.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-68363](https://patchblox.com/security/data/cve/CVE-2025-68363.md) | Routine | kernel-64kb: bpf: Check skb->transport_header is set in bpf_skb_check_mtu (bsc#1255552). | 5.5 | 0.0021 | | | [CVE-2025-68344](https://patchblox.com/security/data/cve/CVE-2025-68344.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2025-40279](https://patchblox.com/security/data/cve/CVE-2025-40279.md) | Routine | net: sched: act_connmark: initialize struct tc_ife to fix kernel leak | 6.1 | 0.0021 | | | [CVE-2025-40235](https://patchblox.com/security/data/cve/CVE-2025-40235.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-40275](https://patchblox.com/security/data/cve/CVE-2025-40275.md) | Routine | ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd | 5.5 | 0.0021 | | | [CVE-2025-40308](https://patchblox.com/security/data/cve/CVE-2025-40308.md) | Routine | Bluetooth: bcsp: receive data only if registered | 5.5 | 0.0021 | | | [CVE-2025-68185](https://patchblox.com/security/data/cve/CVE-2025-68185.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-68194](https://patchblox.com/security/data/cve/CVE-2025-68194.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-68331](https://patchblox.com/security/data/cve/CVE-2025-68331.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-68222](https://patchblox.com/security/data/cve/CVE-2025-68222.md) | Routine | pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc | 6.2 | 0.0021 | | | [CVE-2025-40346](https://patchblox.com/security/data/cve/CVE-2025-40346.md) | Routine | kernel-64kb: arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (bsc#1255318). | 5.5 | 0.0021 | | | [CVE-2025-40360](https://patchblox.com/security/data/cve/CVE-2025-40360.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-68740](https://patchblox.com/security/data/cve/CVE-2025-68740.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-68176](https://patchblox.com/security/data/cve/CVE-2025-68176.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2025-40220](https://patchblox.com/security/data/cve/CVE-2025-40220.md) | Routine | fuse: fix livelock in synchronous file put from fuseblk workers | 5.5 | 0.0021 | | | [CVE-2025-40263](https://patchblox.com/security/data/cve/CVE-2025-40263.md) | Routine | Input: cros_ec_keyb - fix an invalid memory access | 5.5 | 0.0021 | | | [CVE-2025-68213](https://patchblox.com/security/data/cve/CVE-2025-68213.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2025-68293](https://patchblox.com/security/data/cve/CVE-2025-68293.md) | Routine | kernel-64kb: mm/huge_memory: fix NULL pointer deference when splitting folio (bsc#1255150). | 5.5 | 0.0021 | | | [CVE-2025-68289](https://patchblox.com/security/data/cve/CVE-2025-68289.md) | Routine | usb: gadget: f_eem: Fix memory leak in eem_unwrap | 5.5 | 0.0021 | | | [CVE-2025-40316](https://patchblox.com/security/data/cve/CVE-2025-40316.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-68380](https://patchblox.com/security/data/cve/CVE-2025-68380.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.5 | 0.0020 | | | [CVE-2025-40268](https://patchblox.com/security/data/cve/CVE-2025-40268.md) | Routine | cifs: client: fix memory leak in smb3_fs_context_parse_param | 5.5 | 0.0020 | | | [CVE-2025-40218](https://patchblox.com/security/data/cve/CVE-2025-40218.md) | Routine | mm/damon/vaddr: do not repeat pte_offset_map_lock() until success | 4.1 | 0.0020 | | | [CVE-2025-68172](https://patchblox.com/security/data/cve/CVE-2025-68172.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-40255](https://patchblox.com/security/data/cve/CVE-2025-40255.md) | Routine | kernel-64kb: net: core: prevent NULL deref in generic_hwtstamp_ioctl_lower() (bsc#1255156). | n/a | 0.0020 | | | [CVE-2025-40287](https://patchblox.com/security/data/cve/CVE-2025-40287.md) | Routine | exfat: fix improper check of dentry.stream.valid_size | 5.5 | 0.0020 | | | [CVE-2025-40310](https://patchblox.com/security/data/cve/CVE-2025-40310.md) | Routine | amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw | 5.5 | 0.0020 | | | [CVE-2025-40311](https://patchblox.com/security/data/cve/CVE-2025-40311.md) | Routine | accel/habanalabs: support mapping cb with vmalloc-backed coherent memory | 5.5 | 0.0020 | | | [CVE-2025-40359](https://patchblox.com/security/data/cve/CVE-2025-40359.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 | | | [CVE-2025-68198](https://patchblox.com/security/data/cve/CVE-2025-68198.md) | Routine | crash: fix crashkernel resource shrink | 5.5 | 0.0020 | | | [CVE-2025-40288](https://patchblox.com/security/data/cve/CVE-2025-40288.md) | Routine | drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices | 4.7 | 0.0020 | | | [CVE-2025-40353](https://patchblox.com/security/data/cve/CVE-2025-40353.md) | Routine | arm64: mte: Do not warn if the page is already tagged in copy_highpage() | 4.0 | 0.0020 | | | [CVE-2025-68757](https://patchblox.com/security/data/cve/CVE-2025-68757.md) | Routine | drm/vgem-fence: Fix potential deadlock on release | 6.2 | 0.0020 | | | [CVE-2025-68758](https://patchblox.com/security/data/cve/CVE-2025-68758.md) | Routine | backlight: led-bl: Add devlink to supplier LEDs | 5.5 | 0.0020 | | | [CVE-2025-68239](https://patchblox.com/security/data/cve/CVE-2025-68239.md) | Routine | binfmt_misc: restore write access before closing files opened by open_exec() | 6.2 | 0.0020 | | | [CVE-2025-68257](https://patchblox.com/security/data/cve/CVE-2025-68257.md) | Routine | comedi: check device's attached status in compat ioctls | 5.5 | 0.0020 | | | [CVE-2025-68258](https://patchblox.com/security/data/cve/CVE-2025-68258.md) | Routine | comedi: multiq3: sanitize config options in multiq3_attach() | 5.5 | 0.0020 | | | [CVE-2025-40209](https://patchblox.com/security/data/cve/CVE-2025-40209.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.4 | 0.0020 | | | [CVE-2025-40221](https://patchblox.com/security/data/cve/CVE-2025-40221.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-68332](https://patchblox.com/security/data/cve/CVE-2025-68332.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-68750](https://patchblox.com/security/data/cve/CVE-2025-68750.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-68312](https://patchblox.com/security/data/cve/CVE-2025-68312.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0020 | | | [CVE-2025-68259](https://patchblox.com/security/data/cve/CVE-2025-68259.md) | Routine | KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced | 6.2 | 0.0019 | | | [CVE-2025-68732](https://patchblox.com/security/data/cve/CVE-2025-68732.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-68765](https://patchblox.com/security/data/cve/CVE-2025-68765.md) | Routine | mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() | 5.5 | 0.0019 | | | [CVE-2025-68335](https://patchblox.com/security/data/cve/CVE-2025-68335.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68306](https://patchblox.com/security/data/cve/CVE-2025-68306.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2025-68308](https://patchblox.com/security/data/cve/CVE-2025-68308.md) | Routine | can: kvaser_usb: leaf: Fix potential infinite loop in command parsers | 5.5 | 0.0019 | | | [CVE-2025-68244](https://patchblox.com/security/data/cve/CVE-2025-68244.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0019 | | | [CVE-2025-68238](https://patchblox.com/security/data/cve/CVE-2025-68238.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68249](https://patchblox.com/security/data/cve/CVE-2025-68249.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68328](https://patchblox.com/security/data/cve/CVE-2025-68328.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68339](https://patchblox.com/security/data/cve/CVE-2025-68339.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68744](https://patchblox.com/security/data/cve/CVE-2025-68744.md) | Routine | kernel-64kb: bpf: Free special fields when update [lru_,]percpu_hash maps (bsc#1255709). | 5.5 | 0.0019 | | | [CVE-2025-68233](https://patchblox.com/security/data/cve/CVE-2025-68233.md) | Routine | drm/tegra: Add call to put_pid() | 6.2 | 0.0019 | | | [CVE-2025-68342](https://patchblox.com/security/data/cve/CVE-2025-68342.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0019 | | | [CVE-2025-68343](https://patchblox.com/security/data/cve/CVE-2025-68343.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0019 | | | [CVE-2025-68252](https://patchblox.com/security/data/cve/CVE-2025-68252.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0019 | | | [CVE-2025-68197](https://patchblox.com/security/data/cve/CVE-2025-68197.md) | Routine | kernel-64kb: bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (bsc#1255242). | 5.0 | 0.0019 | | | [CVE-2025-68298](https://patchblox.com/security/data/cve/CVE-2025-68298.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0018 | | | [CVE-2025-68242](https://patchblox.com/security/data/cve/CVE-2025-68242.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.5 | 0.0018 | | | [CVE-2025-68351](https://patchblox.com/security/data/cve/CVE-2025-68351.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 | | | [CVE-2025-68223](https://patchblox.com/security/data/cve/CVE-2025-68223.md) | Routine | drm/radeon: delete radeon_fence_process in is_signaled, no deadlock | 6.2 | 0.0012 | | | [CVE-2025-68749](https://patchblox.com/security/data/cve/CVE-2025-68749.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0011 | | | [CVE-2025-68195](https://patchblox.com/security/data/cve/CVE-2025-68195.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | n/a | | --- Data as of 2026-11-11T07:45:43Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.