# ELSA-2025-20551: Security update for 35 packages ELSA-2025-20551, released September 8, 2025, fixes 266 CVEs across 35 products. One of them is being exploited (CVE-2025-38352); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/elsa-2025-20551 - Platform: Linux - Released: Sep 8, 2025 - Priority: Patch now (Closes CVE-2025-38352, exploited (CISA KEV)) - CVEs: 266, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-20551.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 10 | 0:6.12.0-103.40.4.1.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 9 | 0:6.12.0-103.40.4.1.el9uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-38352](https://patchblox.com/security/data/cve/CVE-2025-38352.md) | Patch now | posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() | 7.8 | 0.0136 | CISA KEV | | [CVE-2025-38488](https://patchblox.com/security/data/cve/CVE-2025-38488.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_0: This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.5 fixes various security issues The following security... | 7.8 | 0.0077 | | | [CVE-2025-38430](https://patchblox.com/security/data/cve/CVE-2025-38430.md) | High | nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request | 7.1 | 0.0059 | | | [CVE-2025-38439](https://patchblox.com/security/data/cve/CVE-2025-38439.md) | High | bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT | 7.8 | 0.0058 | | | [CVE-2025-38181](https://patchblox.com/security/data/cve/CVE-2025-38181.md) | High | calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). | 7.0 | 0.0058 | | | [CVE-2025-38399](https://patchblox.com/security/data/cve/CVE-2025-38399.md) | High | scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() | 7.0 | 0.0051 | | | [CVE-2025-38146](https://patchblox.com/security/data/cve/CVE-2025-38146.md) | High | net: openvswitch: Fix the dead loop of MPLS parse | 7.8 | 0.0049 | | | [CVE-2025-38124](https://patchblox.com/security/data/cve/CVE-2025-38124.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.0 | 0.0047 | | | [CVE-2025-38471](https://patchblox.com/security/data/cve/CVE-2025-38471.md) | High | tls: always refresh the queue when reading sock | 7.8 | 0.0047 | | | [CVE-2025-38472](https://patchblox.com/security/data/cve/CVE-2025-38472.md) | High | netfilter: nf_conntrack: fix crash due to removal of uninitialised entry | 7.5 | 0.0046 | | | [CVE-2025-38527](https://patchblox.com/security/data/cve/CVE-2025-38527.md) | High | smb: client: fix use-after-free in cifs_oplock_break | 7.8 | 0.0046 | | | [CVE-2025-38264](https://patchblox.com/security/data/cve/CVE-2025-38264.md) | High | nvme-tcp: sanitize request list handling | 7.8 | 0.0045 | | | [CVE-2025-38211](https://patchblox.com/security/data/cve/CVE-2025-38211.md) | High | RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction | 7.8 | 0.0042 | | | [CVE-2025-38379](https://patchblox.com/security/data/cve/CVE-2025-38379.md) | High | smb: client: fix warning when reconnecting channel | 7.1 | 0.0041 | | | [CVE-2025-38523](https://patchblox.com/security/data/cve/CVE-2025-38523.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix the smbd_response slab to allow usercop... | 7.3 | 0.0039 | | | [CVE-2025-38495](https://patchblox.com/security/data/cve/CVE-2025-38495.md) | High | HID: core: ensure the allocated report buffer can contain the reserved report ID | 7.0 | 0.0038 | | | [CVE-2025-38552](https://patchblox.com/security/data/cve/CVE-2025-38552.md) | High | mptcp: plug races between subflow fail and subflow creation | 7.8 | 0.0035 | | | [CVE-2025-38293](https://patchblox.com/security/data/cve/CVE-2025-38293.md) | High | wifi: ath11k: fix node corruption in ar->arvifs list | 7.0 | 0.0034 | | | [CVE-2025-38350](https://patchblox.com/security/data/cve/CVE-2025-38350.md) | High | net/sched: Always pass notifications when child class becomes empty | 7.8 | 0.0030 | | | [CVE-2025-38236](https://patchblox.com/security/data/cve/CVE-2025-38236.md) | High | af_unix: Don't leave consecutive consumed OOB skbs. | 7.8 | 0.0030 | | | [CVE-2025-38494](https://patchblox.com/security/data/cve/CVE-2025-38494.md) | High | HID: core: do not bypass hid_hw_raw_request | 7.8 | 0.0026 | | | [CVE-2025-38244](https://patchblox.com/security/data/cve/CVE-2025-38244.md) | High | smb: client: fix potential deadlock when reconnecting channels | 7.0 | 0.0025 | | | [CVE-2025-38512](https://patchblox.com/security/data/cve/CVE-2025-38512.md) | High | wifi: prevent A-MSDU attacks in mesh networks | 7.8 | 0.0025 | | | [CVE-2025-38491](https://patchblox.com/security/data/cve/CVE-2025-38491.md) | High | mptcp: make fallback action and fallback decision atomic | 7.0 | 0.0024 | | | [CVE-2025-38201](https://patchblox.com/security/data/cve/CVE-2025-38201.md) | High | netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX | 7.8 | 0.0024 | | | [CVE-2025-38279](https://patchblox.com/security/data/cve/CVE-2025-38279.md) | High | bpf: Do not include stack ptr register in precision backtracking bookkeeping | 7.8 | 0.0024 | | | [CVE-2025-38361](https://patchblox.com/security/data/cve/CVE-2025-38361.md) | High | drm/amd/display: Check dce_hwseq before dereferencing it | 7.8 | 0.0024 | | | [CVE-2025-38111](https://patchblox.com/security/data/cve/CVE-2025-38111.md) | High | net/mdiobus: Fix potential out-of-bounds read/write access | 7.1 | 0.0023 | | | [CVE-2025-38115](https://patchblox.com/security/data/cve/CVE-2025-38115.md) | High | net_sched: sch_sfq: fix a potential crash on gso_skb handling | 7.0 | 0.0023 | | | [CVE-2025-38466](https://patchblox.com/security/data/cve/CVE-2025-38466.md) | High | perf: Revert to requiring CAP_SYS_ADMIN for uprobes | 7.8 | 0.0023 | | | [CVE-2025-38103](https://patchblox.com/security/data/cve/CVE-2025-38103.md) | High | HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() | 7.1 | 0.0023 | | | [CVE-2025-38096](https://patchblox.com/security/data/cve/CVE-2025-38096.md) | High | wifi: iwlwifi: don't warn when if there is a FW error | 7.0 | 0.0023 | | | [CVE-2025-38415](https://patchblox.com/security/data/cve/CVE-2025-38415.md) | High | Squashfs: check return result of sb_min_blocksize | 7.8 | 0.0023 | | | [CVE-2025-38147](https://patchblox.com/security/data/cve/CVE-2025-38147.md) | High | calipso: Don't call calipso functions for AF_INET sk. | 7.8 | 0.0023 | | | [CVE-2025-38298](https://patchblox.com/security/data/cve/CVE-2025-38298.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: EDAC/skx_common: Fix general protection fault A... | 7.8 | 0.0023 | | | [CVE-2025-38194](https://patchblox.com/security/data/cve/CVE-2025-38194.md) | High | jffs2: check that raw node were preallocated before writing summary | 7.0 | 0.0023 | | | [CVE-2025-38184](https://patchblox.com/security/data/cve/CVE-2025-38184.md) | High | tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer | 7.0 | 0.0022 | | | [CVE-2025-38100](https://patchblox.com/security/data/cve/CVE-2025-38100.md) | High | x86/iopl: Cure TIF_IO_BITMAP inconsistencies | 7.0 | 0.0022 | | | [CVE-2025-38372](https://patchblox.com/security/data/cve/CVE-2025-38372.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix unsafe xarray access in implicit... | 7.0 | 0.0022 | | | [CVE-2025-38498](https://patchblox.com/security/data/cve/CVE-2025-38498.md) | High | do_change_type(): refuse to operate on unmounted/not ours mounts | 7.9 | 0.0022 | | | [CVE-2025-38332](https://patchblox.com/security/data/cve/CVE-2025-38332.md) | High | scsi: lpfc: Use memcpy() for BIOS version | 7.8 | 0.0022 | | | [CVE-2025-38403](https://patchblox.com/security/data/cve/CVE-2025-38403.md) | High | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 | | | [CVE-2025-38464](https://patchblox.com/security/data/cve/CVE-2025-38464.md) | High | tipc: Fix use-after-free in tipc_conn_close(). | 7.8 | 0.0022 | | | [CVE-2025-38084](https://patchblox.com/security/data/cve/CVE-2025-38084.md) | High | mm/hugetlb: unshare page tables during VMA split, not before | 7.3 | 0.0022 | | | [CVE-2025-38328](https://patchblox.com/security/data/cve/CVE-2025-38328.md) | High | jffs2: check jffs2_prealloc_raw_node_refs() result in few other places | 7.1 | 0.0022 | | | [CVE-2025-38177](https://patchblox.com/security/data/cve/CVE-2025-38177.md) | High | sch_hfsc: make hfsc_qlen_notify() idempotent | 7.0 | 0.0022 | | | [CVE-2025-38324](https://patchblox.com/security/data/cve/CVE-2025-38324.md) | High | mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). | 7.0 | 0.0022 | | | [CVE-2025-38424](https://patchblox.com/security/data/cve/CVE-2025-38424.md) | High | perf: Fix sample vs do_exit() | 7.0 | 0.0022 | | | [CVE-2025-38200](https://patchblox.com/security/data/cve/CVE-2025-38200.md) | High | i40e: fix MMIO write access to an invalid page in i40e_clear_hw | 7.8 | 0.0022 | | | [CVE-2025-38389](https://patchblox.com/security/data/cve/CVE-2025-38389.md) | High | drm/i915/gt: Fix timeline left held on VMA alloc error | 7.8 | 0.0022 | | | [CVE-2025-38095](https://patchblox.com/security/data/cve/CVE-2025-38095.md) | High | dma-buf: insert memory barrier before updating num_fences | 7.0 | 0.0022 | | | [CVE-2025-38323](https://patchblox.com/security/data/cve/CVE-2025-38323.md) | High | net: atm: add lec_mutex | 7.8 | 0.0021 | | | [CVE-2025-38280](https://patchblox.com/security/data/cve/CVE-2025-38280.md) | High | bpf: Avoid __bpf_prog_ret0_warn when jit fails | 7.8 | 0.0021 | | | [CVE-2025-38386](https://patchblox.com/security/data/cve/CVE-2025-38386.md) | High | ACPICA: Refuse to evaluate a method if arguments are missing | 7.1 | 0.0021 | | | [CVE-2025-38180](https://patchblox.com/security/data/cve/CVE-2025-38180.md) | High | net: atm: fix /proc/net/atm/lec handling | 7.8 | 0.0021 | | | [CVE-2025-38267](https://patchblox.com/security/data/cve/CVE-2025-38267.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0021 | | | [CVE-2025-38320](https://patchblox.com/security/data/cve/CVE-2025-38320.md) | High | arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() | 7.1 | 0.0021 | | | [CVE-2025-38193](https://patchblox.com/security/data/cve/CVE-2025-38193.md) | High | net_sched: sch_sfq: reject invalid perturb period | 7.0 | 0.0021 | | | [CVE-2025-38375](https://patchblox.com/security/data/cve/CVE-2025-38375.md) | High | virtio-net: ensure the received length does not exceed allocated size | 7.8 | 0.0021 | | | [CVE-2025-22112](https://patchblox.com/security/data/cve/CVE-2025-22112.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.1 | 0.0021 | | | [CVE-2025-38395](https://patchblox.com/security/data/cve/CVE-2025-38395.md) | High | regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods | 7.1 | 0.0021 | | | [CVE-2025-38285](https://patchblox.com/security/data/cve/CVE-2025-38285.md) | High | bpf: Fix WARN() in get_bpf_raw_tp_regs | 7.1 | 0.0021 | | | [CVE-2025-38192](https://patchblox.com/security/data/cve/CVE-2025-38192.md) | High | net: clear the dst when changing skb protocol | 7.0 | 0.0021 | | | [CVE-2025-38420](https://patchblox.com/security/data/cve/CVE-2025-38420.md) | High | wifi: carl9170: do not ping device which has failed to load firmware | 7.0 | 0.0021 | | | [CVE-2025-38086](https://patchblox.com/security/data/cve/CVE-2025-38086.md) | High | net: ch9200: fix uninitialised access during mii_nway_restart | 7.8 | 0.0021 | | | [CVE-2025-38459](https://patchblox.com/security/data/cve/CVE-2025-38459.md) | High | atm: clip: Fix infinite recursive call of clip_push(). | 7.8 | 0.0021 | | | [CVE-2025-38101](https://patchblox.com/security/data/cve/CVE-2025-38101.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix buffer locking in ring_buffer_s... | 7.8 | 0.0020 | | | [CVE-2025-38212](https://patchblox.com/security/data/cve/CVE-2025-38212.md) | High | ipc: fix to protect IPCS lookups using RCU | 7.8 | 0.0020 | | | [CVE-2025-38346](https://patchblox.com/security/data/cve/CVE-2025-38346.md) | High | ftrace: Fix UAF when lookup kallsym after ftrace disabled | 7.8 | 0.0020 | | | [CVE-2025-38363](https://patchblox.com/security/data/cve/CVE-2025-38363.md) | High | drm/tegra: Fix a possible null pointer dereference | 7.0 | 0.0020 | | | [CVE-2025-38110](https://patchblox.com/security/data/cve/CVE-2025-38110.md) | High | net/mdiobus: Fix potential out-of-bounds clause 45 read/write access | 7.1 | 0.0020 | | | [CVE-2025-38348](https://patchblox.com/security/data/cve/CVE-2025-38348.md) | High | wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() | 7.8 | 0.0020 | | | [CVE-2025-38425](https://patchblox.com/security/data/cve/CVE-2025-38425.md) | High | i2c: tegra: check msg length in SMBUS block read | 7.8 | 0.0020 | | | [CVE-2025-38385](https://patchblox.com/security/data/cve/CVE-2025-38385.md) | High | net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect | 7.8 | 0.0020 | | | [CVE-2025-38412](https://patchblox.com/security/data/cve/CVE-2025-38412.md) | High | platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks | 7.8 | 0.0020 | | | [CVE-2025-38449](https://patchblox.com/security/data/cve/CVE-2025-38449.md) | High | drm/gem: Acquire references on GEM handles for framebuffers | 7.8 | 0.0020 | | | [CVE-2025-38465](https://patchblox.com/security/data/cve/CVE-2025-38465.md) | High | netlink: Fix wraparounds of sk->sk_rmem_alloc. | 7.8 | 0.0020 | | | [CVE-2025-38118](https://patchblox.com/security/data/cve/CVE-2025-38118.md) | High | Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete | 7.8 | 0.0020 | | | [CVE-2025-38129](https://patchblox.com/security/data/cve/CVE-2025-38129.md) | High | page_pool: Fix use-after-free in page_pool_recycle_in_ring | 7.8 | 0.0020 | | | [CVE-2025-38445](https://patchblox.com/security/data/cve/CVE-2025-38445.md) | High | md/raid1: Fix stack memory use after return in raid1_reshape | 7.1 | 0.0020 | | | [CVE-2025-38126](https://patchblox.com/security/data/cve/CVE-2025-38126.md) | High | net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping | 7.0 | 0.0020 | | | [CVE-2025-38197](https://patchblox.com/security/data/cve/CVE-2025-38197.md) | High | platform/x86: dell_rbu: Fix list usage | 7.0 | 0.0020 | | | [CVE-2025-38109](https://patchblox.com/security/data/cve/CVE-2025-38109.md) | High | net/mlx5: Fix ECVF vports unload on shutdown flow | 7.8 | 0.0020 | | | [CVE-2025-38270](https://patchblox.com/security/data/cve/CVE-2025-38270.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: drv: netdevsim: don't napi_complete() from... | 7.8 | 0.0020 | | | [CVE-2025-38396](https://patchblox.com/security/data/cve/CVE-2025-38396.md) | High | fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass | 7.8 | 0.0020 | | | [CVE-2025-38125](https://patchblox.com/security/data/cve/CVE-2025-38125.md) | High | net: stmmac: make sure that ptp_rate is not 0 before configuring EST | 7.0 | 0.0020 | | | [CVE-2025-38141](https://patchblox.com/security/data/cve/CVE-2025-38141.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... | 7.8 | 0.0020 | | | [CVE-2025-38288](https://patchblox.com/security/data/cve/CVE-2025-38288.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.8 | 0.0020 | | | [CVE-2025-38413](https://patchblox.com/security/data/cve/CVE-2025-38413.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame's length chec... | 7.0 | 0.0020 | | | [CVE-2025-38090](https://patchblox.com/security/data/cve/CVE-2025-38090.md) | High | drivers/rapidio/rio_cm.c: prevent possible heap overwrite | 7.8 | 0.0020 | | | [CVE-2025-38106](https://patchblox.com/security/data/cve/CVE-2025-38106.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0020 | | | [CVE-2025-38468](https://patchblox.com/security/data/cve/CVE-2025-38468.md) | High | net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree | 7.8 | 0.0020 | | | [CVE-2025-38457](https://patchblox.com/security/data/cve/CVE-2025-38457.md) | High | net/sched: Abort __tc_modify_qdisc if parent class does not exist | 7.1 | 0.0020 | | | [CVE-2025-38161](https://patchblox.com/security/data/cve/CVE-2025-38161.md) | High | RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction | 7.0 | 0.0020 | | | [CVE-2025-38458](https://patchblox.com/security/data/cve/CVE-2025-38458.md) | High | atm: clip: Fix NULL pointer dereference in vcc_sendmsg() | 7.0 | 0.0020 | | | [CVE-2025-38113](https://patchblox.com/security/data/cve/CVE-2025-38113.md) | High | ACPI: CPPC: Fix NULL pointer dereference when nosmp is used | 7.0 | 0.0020 | | | [CVE-2025-38119](https://patchblox.com/security/data/cve/CVE-2025-38119.md) | High | scsi: core: ufs: Fix a hang in the error handler | 7.0 | 0.0020 | | | [CVE-2025-38157](https://patchblox.com/security/data/cve/CVE-2025-38157.md) | High | wifi: ath9k_htc: Abort software beacon handling if disabled | 7.8 | 0.0019 | | | [CVE-2025-38198](https://patchblox.com/security/data/cve/CVE-2025-38198.md) | High | fbcon: Make sure modelist not set on unregistered console | 7.8 | 0.0019 | | | [CVE-2025-38312](https://patchblox.com/security/data/cve/CVE-2025-38312.md) | High | fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() | 7.8 | 0.0019 | | | [CVE-2025-38342](https://patchblox.com/security/data/cve/CVE-2025-38342.md) | High | software node: Correct a OOB check in software_node_get_reference_args() | 7.1 | 0.0019 | | | [CVE-2025-38214](https://patchblox.com/security/data/cve/CVE-2025-38214.md) | High | fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0019 | | | [CVE-2025-38099](https://patchblox.com/security/data/cve/CVE-2025-38099.md) | High | Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken | 7.0 | 0.0019 | | | [CVE-2025-38160](https://patchblox.com/security/data/cve/CVE-2025-38160.md) | High | clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() | 7.0 | 0.0019 | | | [CVE-2025-38154](https://patchblox.com/security/data/cve/CVE-2025-38154.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.8 | 0.0019 | | | [CVE-2025-38179](https://patchblox.com/security/data/cve/CVE-2025-38179.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix max_sge overflow in smb_extract... | 7.8 | 0.0019 | | | [CVE-2025-38410](https://patchblox.com/security/data/cve/CVE-2025-38410.md) | High | drm/msm: Fix a fence leak in submit error path | 7.1 | 0.0019 | | | [CVE-2025-38134](https://patchblox.com/security/data/cve/CVE-2025-38134.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: acpi: Prevent null pointer dereference in u... | 7.0 | 0.0019 | | | [CVE-2025-38473](https://patchblox.com/security/data/cve/CVE-2025-38473.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.0 | 0.0019 | | | [CVE-2025-38474](https://patchblox.com/security/data/cve/CVE-2025-38474.md) | High | usb: net: sierra: check for no status endpoint | 7.0 | 0.0019 | | | [CVE-2025-38289](https://patchblox.com/security/data/cve/CVE-2025-38289.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.8 | 0.0019 | | | [CVE-2025-38456](https://patchblox.com/security/data/cve/CVE-2025-38456.md) | High | ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() | 7.8 | 0.0019 | | | [CVE-2025-38245](https://patchblox.com/security/data/cve/CVE-2025-38245.md) | High | atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). | 7.8 | 0.0019 | | | [CVE-2025-38392](https://patchblox.com/security/data/cve/CVE-2025-38392.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.3 | 0.0019 | | | [CVE-2025-38409](https://patchblox.com/security/data/cve/CVE-2025-38409.md) | High | drm/msm: Fix another leak in the submit error path | 7.1 | 0.0019 | | | [CVE-2025-38417](https://patchblox.com/security/data/cve/CVE-2025-38417.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.1 | 0.0019 | | | [CVE-2025-38231](https://patchblox.com/security/data/cve/CVE-2025-38231.md) | High | nfsd: Initialize ssc before laundromat_work to prevent NULL dereference | 7.0 | 0.0019 | | | [CVE-2025-38427](https://patchblox.com/security/data/cve/CVE-2025-38427.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.0 | 0.0019 | | | [CVE-2025-38463](https://patchblox.com/security/data/cve/CVE-2025-38463.md) | High | tcp: Correct signedness in skb remaining space calculation | 7.3 | 0.0019 | | | [CVE-2025-38162](https://patchblox.com/security/data/cve/CVE-2025-38162.md) | High | netfilter: nft_set_pipapo: prevent overflow in lookup table allocation | 7.0 | 0.0019 | | | [CVE-2025-38117](https://patchblox.com/security/data/cve/CVE-2025-38117.md) | High | Bluetooth: MGMT: Protect mgmt_pending list with its own lock | 7.8 | 0.0019 | | | [CVE-2025-38369](https://patchblox.com/security/data/cve/CVE-2025-38369.md) | High | dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using | 7.8 | 0.0019 | | | [CVE-2025-38159](https://patchblox.com/security/data/cve/CVE-2025-38159.md) | High | wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds | 7.3 | 0.0019 | | | [CVE-2025-38438](https://patchblox.com/security/data/cve/CVE-2025-38438.md) | High | ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. | 7.1 | 0.0019 | | | [CVE-2025-38229](https://patchblox.com/security/data/cve/CVE-2025-38229.md) | High | media: cxusb: no longer judge rbuf when the write fails | 7.0 | 0.0019 | | | [CVE-2025-38499](https://patchblox.com/security/data/cve/CVE-2025-38499.md) | High | clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns | 8.2 | 0.0019 | | | [CVE-2025-38338](https://patchblox.com/security/data/cve/CVE-2025-38338.md) | High | fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() | 7.8 | 0.0019 | | | [CVE-2025-38535](https://patchblox.com/security/data/cve/CVE-2025-38535.md) | High | phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode | 7.8 | 0.0019 | | | [CVE-2025-38349](https://patchblox.com/security/data/cve/CVE-2025-38349.md) | High | eventpoll: don't decrement ep refcount while still holding the ep mutex | 8.4 | 0.0018 | | | [CVE-2025-38249](https://patchblox.com/security/data/cve/CVE-2025-38249.md) | High | ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() | 7.1 | 0.0018 | | | [CVE-2025-38443](https://patchblox.com/security/data/cve/CVE-2025-38443.md) | High | nbd: fix uaf in nbd_genl_connect() error path | 7.8 | 0.0018 | | | [CVE-2025-38493](https://patchblox.com/security/data/cve/CVE-2025-38493.md) | High | tracing/osnoise: Fix crash in timerlat_dump_stack() | 7.0 | 0.0018 | | | [CVE-2025-38250](https://patchblox.com/security/data/cve/CVE-2025-38250.md) | High | Bluetooth: hci_core: Fix use-after-free in vhci_flush() | 7.8 | 0.0018 | | | [CVE-2025-38208](https://patchblox.com/security/data/cve/CVE-2025-38208.md) | High | smb: client: add NULL check in automount_fullpath | 7.0 | 0.0018 | | | [CVE-2025-38149](https://patchblox.com/security/data/cve/CVE-2025-38149.md) | High | net: phy: clear phydev->devlink when the link is deleted | 7.0 | 0.0018 | | | [CVE-2025-38186](https://patchblox.com/security/data/cve/CVE-2025-38186.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix double invocation of bnxt_ulp_stop(... | 7.0 | 0.0018 | | | [CVE-2025-38210](https://patchblox.com/security/data/cve/CVE-2025-38210.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.0 | 0.0018 | | | [CVE-2025-38305](https://patchblox.com/security/data/cve/CVE-2025-38305.md) | High | ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() | 7.0 | 0.0018 | | | [CVE-2025-38087](https://patchblox.com/security/data/cve/CVE-2025-38087.md) | High | net/sched: fix use-after-free in taprio_dev_notifier | 7.8 | 0.0018 | | | [CVE-2025-38091](https://patchblox.com/security/data/cve/CVE-2025-38091.md) | High | drm/amd/display: check stream id dml21 wrapper to get plane_id | 7.8 | 0.0018 | | | [CVE-2025-38216](https://patchblox.com/security/data/cve/CVE-2025-38216.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0018 | | | [CVE-2025-38239](https://patchblox.com/security/data/cve/CVE-2025-38239.md) | High | scsi: megaraid_sas: Fix invalid node index | 7.8 | 0.0018 | | | [CVE-2025-38169](https://patchblox.com/security/data/cve/CVE-2025-38169.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD sta... | 7.0 | 0.0018 | | | [CVE-2025-38304](https://patchblox.com/security/data/cve/CVE-2025-38304.md) | High | Bluetooth: Fix NULL pointer deference on eir_get_service_data | 7.0 | 0.0018 | | | [CVE-2025-38550](https://patchblox.com/security/data/cve/CVE-2025-38550.md) | High | ipv6: mcast: Delay put pmc->idev in mld_del_delrec() | 7.8 | 0.0017 | | | [CVE-2025-38215](https://patchblox.com/security/data/cve/CVE-2025-38215.md) | High | fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var | 7.0 | 0.0017 | | | [CVE-2025-38220](https://patchblox.com/security/data/cve/CVE-2025-38220.md) | High | ext4: only dirty folios when data journaling regular files | 7.3 | 0.0017 | | | [CVE-2025-38170](https://patchblox.com/security/data/cve/CVE-2025-38170.md) | High | arm64/fpsimd: Discard stale CPU state when handling SME traps | 7.0 | 0.0017 | | | [CVE-2025-38310](https://patchblox.com/security/data/cve/CVE-2025-38310.md) | High | seg6: Fix validation of nexthop addresses | 7.1 | 0.0017 | | | [CVE-2025-38496](https://patchblox.com/security/data/cve/CVE-2025-38496.md) | High | dm-bufio: fix sched in atomic context | 7.0 | 0.0017 | | | [CVE-2025-38102](https://patchblox.com/security/data/cve/CVE-2025-38102.md) | High | VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify | 7.0 | 0.0017 | | | [CVE-2025-38108](https://patchblox.com/security/data/cve/CVE-2025-38108.md) | High | net_sched: red: fix a race in __red_change() | 7.0 | 0.0017 | | | [CVE-2025-38543](https://patchblox.com/security/data/cve/CVE-2025-38543.md) | High | drm/tegra: nvdec: Fix dma_alloc_coherent error check | 7.1 | 0.0017 | | | [CVE-2025-38107](https://patchblox.com/security/data/cve/CVE-2025-38107.md) | High | net_sched: ets: fix a race in ets_qdisc_change() | 7.0 | 0.0016 | | | [CVE-2025-38085](https://patchblox.com/security/data/cve/CVE-2025-38085.md) | High | mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race | 7.3 | 0.0016 | | | [CVE-2025-38083](https://patchblox.com/security/data/cve/CVE-2025-38083.md) | High | net_sched: prio: fix a race in prio_tune() | 7.0 | 0.0016 | | | [CVE-2025-38461](https://patchblox.com/security/data/cve/CVE-2025-38461.md) | High | vsock: Fix transport_* TOCTOU | 7.8 | 0.0015 | | | [CVE-2025-38477](https://patchblox.com/security/data/cve/CVE-2025-38477.md) | High | net/sched: sch_qfq: Fix race condition on qfq_aggregate | 7.8 | 0.0015 | | | [CVE-2025-38112](https://patchblox.com/security/data/cve/CVE-2025-38112.md) | High | net: Fix TOCTOU issue in sk_is_readable() | 7.0 | 0.0015 | | | [CVE-2025-38302](https://patchblox.com/security/data/cve/CVE-2025-38302.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: block: don't use submit_bio_noacct_nocheck in bl... | 7.0 | 0.0015 | | | [CVE-2025-38440](https://patchblox.com/security/data/cve/CVE-2025-38440.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.0 | 0.0014 | | | [CVE-2025-38462](https://patchblox.com/security/data/cve/CVE-2025-38462.md) | High | vsock: Fix transport_{g2h,h2g} TOCTOU | 7.0 | 0.0014 | | | [CVE-2025-38383](https://patchblox.com/security/data/cve/CVE-2025-38383.md) | High | kernel-abi-stablelists: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.0 | 0.0013 | | | [CVE-2025-38373](https://patchblox.com/security/data/cve/CVE-2025-38373.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.0 | 0.0013 | | | [CVE-2025-38380](https://patchblox.com/security/data/cve/CVE-2025-38380.md) | High | i2c/designware: Fix an initialization issue | 7.1 | n/a | | | [CVE-2025-38067](https://patchblox.com/security/data/cve/CVE-2025-38067.md) | Routine | rseq: Fix segfault on registration when rseq_cs is non-zero | 5.5 | 0.0058 | | | [CVE-2025-38120](https://patchblox.com/security/data/cve/CVE-2025-38120.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0052 | | | [CVE-2025-38405](https://patchblox.com/security/data/cve/CVE-2025-38405.md) | Routine | kernel-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 5.5 | 0.0043 | | | [CVE-2025-38526](https://patchblox.com/security/data/cve/CVE-2025-38526.md) | Routine | ice: add NULL check in eswitch lag check | 5.5 | 0.0041 | | | [CVE-2025-38393](https://patchblox.com/security/data/cve/CVE-2025-38393.md) | Routine | NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN | 5.5 | 0.0041 | | | [CVE-2025-38165](https://patchblox.com/security/data/cve/CVE-2025-38165.md) | Routine | bpf, sockmap: Fix panic when calling skb_linearize | 5.5 | 0.0036 | | | [CVE-2025-38365](https://patchblox.com/security/data/cve/CVE-2025-38365.md) | Routine | btrfs: fix a race between renames and directory logging | 5.5 | 0.0036 | | | [CVE-2025-38246](https://patchblox.com/security/data/cve/CVE-2025-38246.md) | Routine | bnxt: properly flush XDP redirect lists | 5.5 | 0.0034 | | | [CVE-2024-57976](https://patchblox.com/security/data/cve/CVE-2024-57976.md) | Routine | btrfs: do proper folio cleanup when cow_file_range() failed | 5.5 | 0.0027 | | | [CVE-2025-38174](https://patchblox.com/security/data/cve/CVE-2025-38174.md) | Routine | thunderbolt: Do not double dequeue a configuration request | 5.5 | 0.0025 | | | [CVE-2025-21942](https://patchblox.com/security/data/cve/CVE-2025-21942.md) | Routine | kernel-uek: [6.12.0-103.40.4.1.el10uek] - netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [Orabug: 3... | 5.5 | 0.0024 | | | [CVE-2024-49929](https://patchblox.com/security/data/cve/CVE-2024-49929.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0024 | | | [CVE-2025-38303](https://patchblox.com/security/data/cve/CVE-2025-38303.md) | Routine | Bluetooth: eir: Fix possible crashes on eir_create_adv_data | 5.5 | 0.0024 | | | [CVE-2025-38253](https://patchblox.com/security/data/cve/CVE-2025-38253.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix crash in wacom_aes_battery_handl... | 5.5 | 0.0023 | | | [CVE-2025-38400](https://patchblox.com/security/data/cve/CVE-2025-38400.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0022 | | | [CVE-2025-38326](https://patchblox.com/security/data/cve/CVE-2025-38326.md) | Routine | aoe: clean device rq_list in aoedev_downdev() | 5.5 | 0.0022 | | | [CVE-2024-58091](https://patchblox.com/security/data/cve/CVE-2024-58091.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0021 | | | [CVE-2025-38238](https://patchblox.com/security/data/cve/CVE-2025-38238.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0021 | | | [CVE-2025-21879](https://patchblox.com/security/data/cve/CVE-2025-21879.md) | Routine | kernel-uek: [6.12.0-103.40.4.1.el10uek] - netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [Orabug: 3... | 5.5 | 0.0021 | | | [CVE-2025-23155](https://patchblox.com/security/data/cve/CVE-2025-23155.md) | Routine | net: stmmac: Fix accessing freed irq affinity_hint | 5.5 | 0.0021 | | | [CVE-2025-38387](https://patchblox.com/security/data/cve/CVE-2025-38387.md) | Routine | RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert | 5.5 | 0.0021 | | | [CVE-2025-38391](https://patchblox.com/security/data/cve/CVE-2025-38391.md) | Routine | usb: typec: altmodes/displayport: do not index invalid pin_assignments | 5.5 | 0.0021 | | | [CVE-2025-38406](https://patchblox.com/security/data/cve/CVE-2025-38406.md) | Routine | wifi: ath6kl: remove WARN on bad firmware input | 5.5 | 0.0021 | | | [CVE-2025-38273](https://patchblox.com/security/data/cve/CVE-2025-38273.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0021 | | | [CVE-2025-38460](https://patchblox.com/security/data/cve/CVE-2025-38460.md) | Routine | atm: clip: Fix potential null-ptr-deref in to_atmarpd(). | 5.5 | 0.0021 | | | [CVE-2025-38470](https://patchblox.com/security/data/cve/CVE-2025-38470.md) | Routine | net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime | 5.5 | 0.0021 | | | [CVE-2025-38097](https://patchblox.com/security/data/cve/CVE-2025-38097.md) | Routine | espintcp: remove encap socket caching to avoid reference leak | 5.5 | 0.0021 | | | [CVE-2025-38190](https://patchblox.com/security/data/cve/CVE-2025-38190.md) | Routine | atm: Revert atm_account_tx() if copy_from_iter_full() fails. | 5.5 | 0.0021 | | | [CVE-2025-38166](https://patchblox.com/security/data/cve/CVE-2025-38166.md) | Routine | bpf: fix ktls panic with sockmap | 5.5 | 0.0020 | | | [CVE-2025-38505](https://patchblox.com/security/data/cve/CVE-2025-38505.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: discard erroneous disassoc frames... | 5.5 | 0.0020 | | | [CVE-2025-38127](https://patchblox.com/security/data/cve/CVE-2025-38127.md) | Routine | ice: fix Tx scheduler error handling in XDP callback | 5.5 | 0.0020 | | | [CVE-2025-38122](https://patchblox.com/security/data/cve/CVE-2025-38122.md) | Routine | gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO | 5.5 | 0.0020 | | | [CVE-2025-38185](https://patchblox.com/security/data/cve/CVE-2025-38185.md) | Routine | atm: atmtcp: Free invalid length skb in atmtcp_c_send(). | 5.5 | 0.0020 | | | [CVE-2025-38382](https://patchblox.com/security/data/cve/CVE-2025-38382.md) | Routine | btrfs: fix iteration of extrefs during log replay | 5.5 | 0.0020 | | | [CVE-2025-38098](https://patchblox.com/security/data/cve/CVE-2025-38098.md) | Routine | drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink | 5.5 | 0.0020 | | | [CVE-2025-38321](https://patchblox.com/security/data/cve/CVE-2025-38321.md) | Routine | smb: Log an error when close_all_cached_dirs fails | 5.5 | 0.0020 | | | [CVE-2025-38345](https://patchblox.com/security/data/cve/CVE-2025-38345.md) | Routine | ACPICA: fix acpi operand cache leak in dswstate.c | 5.5 | 0.0020 | | | [CVE-2025-38336](https://patchblox.com/security/data/cve/CVE-2025-38336.md) | Routine | ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 | 5.5 | 0.0020 | | | [CVE-2025-38337](https://patchblox.com/security/data/cve/CVE-2025-38337.md) | Routine | jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() | 6.3 | 0.0020 | | | [CVE-2025-38467](https://patchblox.com/security/data/cve/CVE-2025-38467.md) | Routine | drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling | 5.5 | 0.0020 | | | [CVE-2025-38344](https://patchblox.com/security/data/cve/CVE-2025-38344.md) | Routine | ACPICA: fix acpi parse and parseext cache leaks | 6.2 | 0.0019 | | | [CVE-2025-22119](https://patchblox.com/security/data/cve/CVE-2025-22119.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 5.5 | 0.0019 | | | [CVE-2025-38441](https://patchblox.com/security/data/cve/CVE-2025-38441.md) | Routine | kernel-debug-modules: The kernel packages contain the Linux kernel, the core of any Linux operating system | 5.5 | 0.0019 | | | [CVE-2025-23137](https://patchblox.com/security/data/cve/CVE-2025-23137.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues we... | 5.5 | 0.0019 | | | [CVE-2025-38282](https://patchblox.com/security/data/cve/CVE-2025-38282.md) | Routine | kernfs: Relax constraint in draining guard | 5.5 | 0.0019 | | | [CVE-2025-38418](https://patchblox.com/security/data/cve/CVE-2025-38418.md) | Routine | remoteproc: core: Release rproc->clean_table after rproc_attach() fails | 5.5 | 0.0019 | | | [CVE-2025-38419](https://patchblox.com/security/data/cve/CVE-2025-38419.md) | Routine | remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() | 5.5 | 0.0019 | | | [CVE-2025-38539](https://patchblox.com/security/data/cve/CVE-2025-38539.md) | Routine | tracing: Add down_write(trace_event_sem) when adding trace event | 6.1 | 0.0019 | | | [CVE-2025-38265](https://patchblox.com/security/data/cve/CVE-2025-38265.md) | Routine | serial: jsm: fix NPE during jsm_uart_port_init | 5.5 | 0.0019 | | | [CVE-2025-38455](https://patchblox.com/security/data/cve/CVE-2025-38455.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0019 | | | [CVE-2025-37984](https://patchblox.com/security/data/cve/CVE-2025-37984.md) | Routine | crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() | 6.5 | 0.0019 | | | [CVE-2025-38354](https://patchblox.com/security/data/cve/CVE-2025-38354.md) | Routine | drm/msm/gpu: Fix crash when throttling GPU immediately during boot | 5.5 | 0.0019 | | | [CVE-2025-38364](https://patchblox.com/security/data/cve/CVE-2025-38364.md) | Routine | maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() | 5.5 | 0.0019 | | | [CVE-2025-38269](https://patchblox.com/security/data/cve/CVE-2025-38269.md) | Routine | btrfs: exit after state insertion failure at btrfs_convert_extent_bit() | 5.5 | 0.0019 | | | [CVE-2025-38222](https://patchblox.com/security/data/cve/CVE-2025-38222.md) | Routine | ext4: inline: fix len overflow in ext4_prepare_inline_data | 5.5 | 0.0019 | | | [CVE-2025-38360](https://patchblox.com/security/data/cve/CVE-2025-38360.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0019 | | | [CVE-2025-38104](https://patchblox.com/security/data/cve/CVE-2025-38104.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0019 | | | [CVE-2025-38202](https://patchblox.com/security/data/cve/CVE-2025-38202.md) | Routine | bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() | 5.5 | 0.0018 | | | [CVE-2025-38148](https://patchblox.com/security/data/cve/CVE-2025-38148.md) | Routine | net: phy: mscc: Fix memory leak when using one step timestamping | 5.5 | 0.0018 | | | [CVE-2025-38151](https://patchblox.com/security/data/cve/CVE-2025-38151.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0018 | | | [CVE-2025-22115](https://patchblox.com/security/data/cve/CVE-2025-22115.md) | Routine | btrfs: fix block group refcount race in btrfs_create_pending_block_groups() | 5.5 | 0.0018 | | | [CVE-2025-38513](https://patchblox.com/security/data/cve/CVE-2025-38513.md) | Routine | wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() | 5.5 | 0.0018 | | | [CVE-2025-38516](https://patchblox.com/security/data/cve/CVE-2025-38516.md) | Routine | pinctrl: qcom: msm: mark certain pins as invalid for interrupts | 5.5 | 0.0018 | | | [CVE-2025-38528](https://patchblox.com/security/data/cve/CVE-2025-38528.md) | Routine | bpf: Reject %p% format string in bprintf-like helpers | 5.5 | 0.0018 | | | [CVE-2025-38540](https://patchblox.com/security/data/cve/CVE-2025-38540.md) | Routine | HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras | 5.5 | 0.0018 | | | [CVE-2025-38546](https://patchblox.com/security/data/cve/CVE-2025-38546.md) | Routine | atm: clip: Fix memory leak of struct clip_vcc. | 5.5 | 0.0018 | | | [CVE-2025-38188](https://patchblox.com/security/data/cve/CVE-2025-38188.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE Calli... | 5.5 | 0.0018 | | | [CVE-2025-38444](https://patchblox.com/security/data/cve/CVE-2025-38444.md) | Routine | raid10: cleanup memleak at raid10_make_request | 5.5 | 0.0018 | | | [CVE-2025-38251](https://patchblox.com/security/data/cve/CVE-2025-38251.md) | Routine | atm: clip: prevent NULL deref in clip_push() | 5.5 | 0.0018 | | | [CVE-2025-38263](https://patchblox.com/security/data/cve/CVE-2025-38263.md) | Routine | bcache: fix NULL pointer in cache_set_flush() | 5.5 | 0.0018 | | | [CVE-2025-38319](https://patchblox.com/security/data/cve/CVE-2025-38319.md) | Routine | drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table | 5.5 | 0.0018 | | | [CVE-2025-38451](https://patchblox.com/security/data/cve/CVE-2025-38451.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix GPF in bitmap_get_stats() The... | 5.5 | 0.0018 | | | [CVE-2025-38402](https://patchblox.com/security/data/cve/CVE-2025-38402.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0018 | | | [CVE-2025-38531](https://patchblox.com/security/data/cve/CVE-2025-38531.md) | Routine | iio: common: st_sensors: Fix use of uninitialize device structs | 5.5 | 0.0018 | | | [CVE-2025-38094](https://patchblox.com/security/data/cve/CVE-2025-38094.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0018 | | | [CVE-2025-38307](https://patchblox.com/security/data/cve/CVE-2025-38307.md) | Routine | ASoC: Intel: avs: Verify content returned by parse_int_array() | 5.5 | 0.0018 | | | [CVE-2025-38334](https://patchblox.com/security/data/cve/CVE-2025-38334.md) | Routine | x86/sgx: Prevent attempts to reclaim poisoned pages | 5.5 | 0.0018 | | | [CVE-2025-38374](https://patchblox.com/security/data/cve/CVE-2025-38374.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: optee: ffa: fix sleep in atomic context The OP-... | 5.5 | 0.0018 | | | [CVE-2025-38155](https://patchblox.com/security/data/cve/CVE-2025-38155.md) | Routine | wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() | 5.5 | 0.0017 | | | [CVE-2025-38232](https://patchblox.com/security/data/cve/CVE-2025-38232.md) | Routine | NFSD: fix race between nfsd registration and exports_proc | 4.7 | 0.0017 | | | [CVE-2025-38515](https://patchblox.com/security/data/cve/CVE-2025-38515.md) | Routine | drm/sched: Increment job count before swapping tail spsc queue | 5.5 | 0.0017 | | | [CVE-2025-38547](https://patchblox.com/security/data/cve/CVE-2025-38547.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20x_adc: Add missing sentinel to AX... | 5.5 | 0.0017 | | | [CVE-2025-38255](https://patchblox.com/security/data/cve/CVE-2025-38255.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0017 | | | [CVE-2025-38258](https://patchblox.com/security/data/cve/CVE-2025-38258.md) | Routine | mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write | 5.5 | 0.0017 | | | [CVE-2025-38260](https://patchblox.com/security/data/cve/CVE-2025-38260.md) | Routine | btrfs: handle csum tree error with rescue=ibadroots correctly | 5.5 | 0.0017 | | | [CVE-2025-38256](https://patchblox.com/security/data/cve/CVE-2025-38256.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0017 | | | [CVE-2025-38315](https://patchblox.com/security/data/cve/CVE-2025-38315.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 6.4 | 0.0016 | | | [CVE-2025-38243](https://patchblox.com/security/data/cve/CVE-2025-38243.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0016 | | | [CVE-2025-38503](https://patchblox.com/security/data/cve/CVE-2025-38503.md) | Routine | btrfs: fix assertion when building free space tree | 5.5 | 0.0016 | | | [CVE-2025-38537](https://patchblox.com/security/data/cve/CVE-2025-38537.md) | Routine | net: phy: Don't register LEDs for genphy | 5.5 | 0.0016 | | | [CVE-2025-38436](https://patchblox.com/security/data/cve/CVE-2025-38436.md) | Routine | drm/scheduler: signal scheduled fence when kill job | 5.5 | 0.0016 | | | [CVE-2025-38549](https://patchblox.com/security/data/cve/CVE-2025-38549.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0016 | | | [CVE-2025-38404](https://patchblox.com/security/data/cve/CVE-2025-38404.md) | Routine | usb: typec: displayport: Fix potential deadlock | 5.5 | 0.0016 | | | [CVE-2025-38268](https://patchblox.com/security/data/cve/CVE-2025-38268.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0014 | | | [CVE-2025-38242](https://patchblox.com/security/data/cve/CVE-2025-38242.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm: userfaultfd: fix race of userfaultfd_move an... | 5.5 | 0.0013 | | | [CVE-2025-38362](https://patchblox.com/security/data/cve/CVE-2025-38362.md) | Routine | drm/amd/display: Add null pointer check for get_first_active_display() | 5.5 | 0.0013 | | | [CVE-2025-38520](https://patchblox.com/security/data/cve/CVE-2025-38520.md) | Routine | drm/amdkfd: Don't call mmput from MMU notifier callback | 5.5 | 0.0013 | | | [CVE-2025-38506](https://patchblox.com/security/data/cve/CVE-2025-38506.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0013 | | | [CVE-2025-38551](https://patchblox.com/security/data/cve/CVE-2025-38551.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix recursived rtnl_lock() during pr... | 5.5 | 0.0013 | | | [CVE-2025-38217](https://patchblox.com/security/data/cve/CVE-2025-38217.md) | Routine | hwmon: (ftsteutates) Fix TOCTOU race in fts_read() | 5.5 | 0.0013 | | | [CVE-2025-38223](https://patchblox.com/security/data/cve/CVE-2025-38223.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ceph: avoid kernel BUG for encrypted inode with... | 5.5 | 0.0011 | | --- Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.