# ELSA-2025-20663: Security update for 8 packages ELSA-2025-20663, released October 11, 2025, fixes 136 CVEs across 8 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2025-20663 - Platform: Linux - Released: Oct 11, 2025 - Priority: High (Closes CVE-2025-38439, high severity) - CVEs: 136, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2025-20663.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 8 | 0:5.4.17-2136.348.3.el7uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-38439](https://patchblox.com/security/data/cve/CVE-2025-38439.md) | High | bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT | 7.8 | 0.0058 | | | [CVE-2025-38563](https://patchblox.com/security/data/cve/CVE-2025-38563.md) | High | perf/core: Prevent VMA split of buffer mappings | 7.8 | 0.0044 | | | [CVE-2025-38608](https://patchblox.com/security/data/cve/CVE-2025-38608.md) | High | bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls | 7.1 | 0.0044 | | | [CVE-2025-38211](https://patchblox.com/security/data/cve/CVE-2025-38211.md) | High | RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction | 7.8 | 0.0042 | | | [CVE-2025-38617](https://patchblox.com/security/data/cve/CVE-2025-38617.md) | High | net/packet: fix a race in packet_set_ring() and packet_notifier() | 7.0 | 0.0041 | | | [CVE-2025-38574](https://patchblox.com/security/data/cve/CVE-2025-38574.md) | High | pptp: ensure minimal skb length in pptp_xmit() | 7.8 | 0.0041 | | | [CVE-2025-38708](https://patchblox.com/security/data/cve/CVE-2025-38708.md) | High | drbd: add missing kref_get in handle_write_conflicts | 7.8 | 0.0040 | | | [CVE-2024-53237](https://patchblox.com/security/data/cve/CVE-2024-53237.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 7.8 | 0.0032 | | | [CVE-2025-38377](https://patchblox.com/security/data/cve/CVE-2025-38377.md) | High | rose: fix dangling neighbour pointers in rose_rt_device_down() | 7.8 | 0.0028 | | | [CVE-2025-39798](https://patchblox.com/security/data/cve/CVE-2025-39798.md) | High | NFS: Fix the setting of capabilities when automounting a new filesystem | 7.0 | 0.0028 | | | [CVE-2024-26958](https://patchblox.com/security/data/cve/CVE-2024-26958.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0025 | | | [CVE-2025-37798](https://patchblox.com/security/data/cve/CVE-2025-37798.md) | High | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | 7.8 | 0.0023 | | | [CVE-2025-38403](https://patchblox.com/security/data/cve/CVE-2025-38403.md) | High | vsock/vmci: Clear the vmci transport packet properly when initializing it | 7.8 | 0.0022 | | | [CVE-2025-38464](https://patchblox.com/security/data/cve/CVE-2025-38464.md) | High | tipc: Fix use-after-free in tipc_conn_close(). | 7.8 | 0.0022 | | | [CVE-2025-38177](https://patchblox.com/security/data/cve/CVE-2025-38177.md) | High | sch_hfsc: make hfsc_qlen_notify() idempotent | 7.0 | 0.0022 | | | [CVE-2025-38389](https://patchblox.com/security/data/cve/CVE-2025-38389.md) | High | drm/i915/gt: Fix timeline left held on VMA alloc error | 7.8 | 0.0022 | | | [CVE-2025-38386](https://patchblox.com/security/data/cve/CVE-2025-38386.md) | High | ACPICA: Refuse to evaluate a method if arguments are missing | 7.1 | 0.0021 | | | [CVE-2025-38193](https://patchblox.com/security/data/cve/CVE-2025-38193.md) | High | net_sched: sch_sfq: reject invalid perturb period | 7.0 | 0.0021 | | | [CVE-2025-38375](https://patchblox.com/security/data/cve/CVE-2025-38375.md) | High | virtio-net: ensure the received length does not exceed allocated size | 7.8 | 0.0021 | | | [CVE-2025-38395](https://patchblox.com/security/data/cve/CVE-2025-38395.md) | High | regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods | 7.1 | 0.0021 | | | [CVE-2025-39730](https://patchblox.com/security/data/cve/CVE-2025-39730.md) | High | NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() | 7.8 | 0.0021 | | | [CVE-2025-38401](https://patchblox.com/security/data/cve/CVE-2025-38401.md) | High | mtk-sd: Prevent memory corruption from DMA map failure | 7.8 | 0.0021 | | | [CVE-2025-38459](https://patchblox.com/security/data/cve/CVE-2025-38459.md) | High | atm: clip: Fix infinite recursive call of clip_push(). | 7.8 | 0.0021 | | | [CVE-2025-38565](https://patchblox.com/security/data/cve/CVE-2025-38565.md) | High | perf/core: Exit early on perf_mmap() fail | 7.8 | 0.0020 | | | [CVE-2025-38572](https://patchblox.com/security/data/cve/CVE-2025-38572.md) | High | ipv6: reject malicious packets in ipv6_gso_segment() | 7.8 | 0.0020 | | | [CVE-2025-38465](https://patchblox.com/security/data/cve/CVE-2025-38465.md) | High | netlink: Fix wraparounds of sk->sk_rmem_alloc. | 7.8 | 0.0020 | | | [CVE-2025-38729](https://patchblox.com/security/data/cve/CVE-2025-38729.md) | High | ALSA: usb-audio: Validate UAC3 power domain descriptors, too | 7.8 | 0.0020 | | | [CVE-2025-38445](https://patchblox.com/security/data/cve/CVE-2025-38445.md) | High | md/raid1: Fix stack memory use after return in raid1_reshape | 7.1 | 0.0020 | | | [CVE-2025-38578](https://patchblox.com/security/data/cve/CVE-2025-38578.md) | High | f2fs: fix to avoid UAF in f2fs_sync_inode_meta() | 7.3 | 0.0020 | | | [CVE-2025-38555](https://patchblox.com/security/data/cve/CVE-2025-38555.md) | High | usb: gadget : fix use-after-free in composite_dev_cleanup() | 7.8 | 0.0020 | | | [CVE-2025-38529](https://patchblox.com/security/data/cve/CVE-2025-38529.md) | High | comedi: aio_iiro_16: Fix bit shift out of bounds | 7.1 | 0.0020 | | | [CVE-2025-38530](https://patchblox.com/security/data/cve/CVE-2025-38530.md) | High | comedi: pcl812: Fix bit shift out of bounds | 7.1 | 0.0020 | | | [CVE-2025-38226](https://patchblox.com/security/data/cve/CVE-2025-38226.md) | High | media: vivid: Change the siize of the composing | 7.8 | 0.0020 | | | [CVE-2025-38230](https://patchblox.com/security/data/cve/CVE-2025-38230.md) | High | jfs: validate AG parameters in dbMount() to prevent crashes | 7.8 | 0.0020 | | | [CVE-2025-38468](https://patchblox.com/security/data/cve/CVE-2025-38468.md) | High | net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree | 7.8 | 0.0020 | | | [CVE-2025-38457](https://patchblox.com/security/data/cve/CVE-2025-38457.md) | High | net/sched: Abort __tc_modify_qdisc if parent class does not exist | 7.1 | 0.0020 | | | [CVE-2025-38458](https://patchblox.com/security/data/cve/CVE-2025-38458.md) | High | atm: clip: Fix NULL pointer dereference in vcc_sendmsg() | 7.0 | 0.0020 | | | [CVE-2025-38482](https://patchblox.com/security/data/cve/CVE-2025-38482.md) | High | comedi: das6402: Fix bit shift out of bounds | 9.8 | 0.0020 | | | [CVE-2025-38483](https://patchblox.com/security/data/cve/CVE-2025-38483.md) | High | comedi: das16m1: Fix bit shift out of bounds | 9.8 | 0.0019 | | | [CVE-2025-39691](https://patchblox.com/security/data/cve/CVE-2025-39691.md) | High | fs/buffer: fix use-after-free when call bh_read() helper | 7.8 | 0.0019 | | | [CVE-2025-38569](https://patchblox.com/security/data/cve/CVE-2025-38569.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: benet: fix BUG when creating VFs benet crashes... | 7.0 | 0.0019 | | | [CVE-2025-38581](https://patchblox.com/security/data/cve/CVE-2025-38581.md) | High | crypto: ccp - Fix crash when rebind ccp device for ccp.ko | 7.0 | 0.0019 | | | [CVE-2025-38478](https://patchblox.com/security/data/cve/CVE-2025-38478.md) | High | comedi: Fix initialization of data for instructions that write to subdevice | 9.8 | 0.0019 | | | [CVE-2025-38697](https://patchblox.com/security/data/cve/CVE-2025-38697.md) | High | jfs: upper bound check of tree index in dbAllocAG | 7.8 | 0.0019 | | | [CVE-2025-38699](https://patchblox.com/security/data/cve/CVE-2025-38699.md) | High | scsi: bfa: Double-free fix | 7.8 | 0.0019 | | | [CVE-2025-39689](https://patchblox.com/security/data/cve/CVE-2025-39689.md) | High | ftrace: Also allocate and copy hash for reading of filter files | 7.8 | 0.0019 | | | [CVE-2025-38473](https://patchblox.com/security/data/cve/CVE-2025-38473.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 7.0 | 0.0019 | | | [CVE-2025-38474](https://patchblox.com/security/data/cve/CVE-2025-38474.md) | High | usb: net: sierra: check for no status endpoint | 7.0 | 0.0019 | | | [CVE-2025-38701](https://patchblox.com/security/data/cve/CVE-2025-38701.md) | High | ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr | 7.0 | 0.0019 | | | [CVE-2025-38245](https://patchblox.com/security/data/cve/CVE-2025-38245.md) | High | atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). | 7.8 | 0.0019 | | | [CVE-2025-38538](https://patchblox.com/security/data/cve/CVE-2025-38538.md) | High | dmaengine: nbpfaxi: Fix memory corruption in probe() | 7.8 | 0.0019 | | | [CVE-2025-38680](https://patchblox.com/security/data/cve/CVE-2025-38680.md) | High | media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() | 7.1 | 0.0019 | | | [CVE-2025-38229](https://patchblox.com/security/data/cve/CVE-2025-38229.md) | High | media: cxusb: no longer judge rbuf when the write fails | 7.0 | 0.0019 | | | [CVE-2025-38497](https://patchblox.com/security/data/cve/CVE-2025-38497.md) | High | usb: gadget: configfs: Fix OOB read on empty string write | 9.8 | 0.0019 | | | [CVE-2025-39743](https://patchblox.com/security/data/cve/CVE-2025-39743.md) | High | jfs: truncate good inode pages when hard link is 0 | 9.8 | 0.0018 | | | [CVE-2025-39766](https://patchblox.com/security/data/cve/CVE-2025-39766.md) | High | net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit | 8.1 | 0.0018 | | | [CVE-2025-38249](https://patchblox.com/security/data/cve/CVE-2025-38249.md) | High | ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() | 7.1 | 0.0018 | | | [CVE-2025-38698](https://patchblox.com/security/data/cve/CVE-2025-38698.md) | High | jfs: Regular file corruption check | 7.1 | 0.0018 | | | [CVE-2025-38695](https://patchblox.com/security/data/cve/CVE-2025-38695.md) | High | scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure | 7.0 | 0.0018 | | | [CVE-2025-38700](https://patchblox.com/security/data/cve/CVE-2025-38700.md) | High | scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated | 7.0 | 0.0018 | | | [CVE-2025-38652](https://patchblox.com/security/data/cve/CVE-2025-38652.md) | High | f2fs: fix to avoid out-of-boundary access in devs.path | 7.1 | 0.0018 | | | [CVE-2025-38714](https://patchblox.com/security/data/cve/CVE-2025-38714.md) | High | hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() | 9.0 | 0.0018 | | | [CVE-2025-39757](https://patchblox.com/security/data/cve/CVE-2025-39757.md) | High | ALSA: usb-audio: Validate UAC3 cluster segment descriptors | 7.8 | 0.0018 | | | [CVE-2025-38677](https://patchblox.com/security/data/cve/CVE-2025-38677.md) | High | f2fs: fix to avoid out-of-boundary access in dnode page | 7.1 | 0.0018 | | | [CVE-2025-38715](https://patchblox.com/security/data/cve/CVE-2025-38715.md) | High | hfs: fix slab-out-of-bounds in hfs_bnode_read() | 7.1 | 0.0018 | | | [CVE-2025-39710](https://patchblox.com/security/data/cve/CVE-2025-39710.md) | High | media: venus: Add a check for packet size after reading from shared memory | 7.1 | 0.0018 | | | [CVE-2025-39742](https://patchblox.com/security/data/cve/CVE-2025-39742.md) | High | RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() | 7.0 | 0.0018 | | | [CVE-2025-38666](https://patchblox.com/security/data/cve/CVE-2025-38666.md) | High | net: appletalk: Fix use-after-free in AARP proxy probe | 7.8 | 0.0017 | | | [CVE-2025-38713](https://patchblox.com/security/data/cve/CVE-2025-38713.md) | High | hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() | 7.1 | 0.0017 | | | [CVE-2025-39749](https://patchblox.com/security/data/cve/CVE-2025-39749.md) | High | rcu: Protect ->defer_qs_iw_pending from data race | 7.0 | 0.0017 | | | [CVE-2025-39828](https://patchblox.com/security/data/cve/CVE-2025-39828.md) | High | atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). | 7.8 | 0.0017 | | | [CVE-2025-38718](https://patchblox.com/security/data/cve/CVE-2025-38718.md) | High | sctp: linearize cloned gso packets in sctp_rcv | 7.8 | 0.0017 | | | [CVE-2025-38668](https://patchblox.com/security/data/cve/CVE-2025-38668.md) | High | regulator: core: fix NULL dereference on unbind due to stale coupling data | 7.0 | 0.0017 | | | [CVE-2025-39783](https://patchblox.com/security/data/cve/CVE-2025-39783.md) | High | PCI: endpoint: Fix configfs group list head handling | 7.8 | 0.0017 | | | [CVE-2025-39824](https://patchblox.com/security/data/cve/CVE-2025-39824.md) | High | HID: asus: fix UAF via HID_CLAIMED_INPUT validation | 7.8 | 0.0017 | | | [CVE-2025-39817](https://patchblox.com/security/data/cve/CVE-2025-39817.md) | High | efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare | 7.6 | 0.0017 | | | [CVE-2025-38102](https://patchblox.com/security/data/cve/CVE-2025-38102.md) | High | VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify | 7.0 | 0.0017 | | | [CVE-2025-39794](https://patchblox.com/security/data/cve/CVE-2025-39794.md) | High | ARM: tegra: Use I/O memcpy to write to IRAM | 7.0 | 0.0016 | | | [CVE-2025-38477](https://patchblox.com/security/data/cve/CVE-2025-38477.md) | High | net/sched: sch_qfq: Fix race condition on qfq_aggregate | 7.8 | 0.0015 | | | [CVE-2025-39713](https://patchblox.com/security/data/cve/CVE-2025-39713.md) | High | media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() | 7.0 | 0.0014 | | | [CVE-2025-38514](https://patchblox.com/security/data/cve/CVE-2025-38514.md) | Routine | rxrpc: Fix oops due to non-existence of prealloc backlog struct | 6.5 | 0.0039 | | | [CVE-2024-49935](https://patchblox.com/security/data/cve/CVE-2024-49935.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0025 | | | [CVE-2024-26644](https://patchblox.com/security/data/cve/CVE-2024-26644.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: don't abort filesystem when attempting to... | 5.5 | 0.0023 | | | [CVE-2025-38400](https://patchblox.com/security/data/cve/CVE-2025-38400.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0022 | | | [CVE-2025-38387](https://patchblox.com/security/data/cve/CVE-2025-38387.md) | Routine | RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert | 5.5 | 0.0021 | | | [CVE-2025-38391](https://patchblox.com/security/data/cve/CVE-2025-38391.md) | Routine | usb: typec: altmodes/displayport: do not index invalid pin_assignments | 5.5 | 0.0021 | | | [CVE-2025-38406](https://patchblox.com/security/data/cve/CVE-2025-38406.md) | Routine | wifi: ath6kl: remove WARN on bad firmware input | 5.5 | 0.0021 | | | [CVE-2025-38470](https://patchblox.com/security/data/cve/CVE-2025-38470.md) | Routine | net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime | 5.5 | 0.0021 | | | [CVE-2025-38460](https://patchblox.com/security/data/cve/CVE-2025-38460.md) | Routine | atm: clip: Fix potential null-ptr-deref in to_atmarpd(). | 5.5 | 0.0020 | | | [CVE-2025-38577](https://patchblox.com/security/data/cve/CVE-2025-38577.md) | Routine | f2fs: fix to avoid panic in f2fs_evict_inode | 6.6 | 0.0020 | | | [CVE-2025-38371](https://patchblox.com/security/data/cve/CVE-2025-38371.md) | Routine | drm/v3d: Disable interrupts before resetting the GPU | 5.5 | 0.0020 | | | [CVE-2025-38467](https://patchblox.com/security/data/cve/CVE-2025-38467.md) | Routine | drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling | 5.5 | 0.0020 | | | [CVE-2025-38347](https://patchblox.com/security/data/cve/CVE-2025-38347.md) | Routine | f2fs: fix to do sanity check on ino and xnid | 5.5 | 0.0019 | | | [CVE-2025-38612](https://patchblox.com/security/data/cve/CVE-2025-38612.md) | Routine | staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() | 5.5 | 0.0019 | | | [CVE-2025-38691](https://patchblox.com/security/data/cve/CVE-2025-38691.md) | Routine | pNFS: Fix uninited ptr deref in block/scsi layout | 6.2 | 0.0019 | | | [CVE-2025-38539](https://patchblox.com/security/data/cve/CVE-2025-38539.md) | Routine | tracing: Add down_write(trace_event_sem) when adding trace event | 6.1 | 0.0019 | | | [CVE-2025-38480](https://patchblox.com/security/data/cve/CVE-2025-38480.md) | Routine | comedi: Fix use of uninitialized data in insn_rw_emulate_bits() | 5.5 | 0.0019 | | | [CVE-2025-38481](https://patchblox.com/security/data/cve/CVE-2025-38481.md) | Routine | comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large | 5.5 | 0.0019 | | | [CVE-2025-38604](https://patchblox.com/security/data/cve/CVE-2025-38604.md) | Routine | wifi: rtl818x: Kill URBs before clearing tx status queue | 5.5 | 0.0019 | | | [CVE-2025-38542](https://patchblox.com/security/data/cve/CVE-2025-38542.md) | Routine | net: appletalk: Fix device refcount leak in atrtr_create() | 5.5 | 0.0019 | | | [CVE-2025-38639](https://patchblox.com/security/data/cve/CVE-2025-38639.md) | Routine | netfilter: xt_nfacct: don't assume acct name is null-terminated | 5.5 | 0.0019 | | | [CVE-2025-38262](https://patchblox.com/security/data/cve/CVE-2025-38262.md) | Routine | tty: serial: uartlite: register uart driver in init | 5.5 | 0.0019 | | | [CVE-2025-38622](https://patchblox.com/security/data/cve/CVE-2025-38622.md) | Routine | net: drop UFO packets in udp_rcv_segment() | 5.5 | 0.0018 | | | [CVE-2025-38664](https://patchblox.com/security/data/cve/CVE-2025-38664.md) | Routine | ice: Fix a null pointer dereference in ice_copy_and_init_pkg() | 5.5 | 0.0018 | | | [CVE-2025-38693](https://patchblox.com/security/data/cve/CVE-2025-38693.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-38694](https://patchblox.com/security/data/cve/CVE-2025-38694.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-39676](https://patchblox.com/security/data/cve/CVE-2025-39676.md) | Routine | scsi: qla4xxx: Prevent a potential error pointer dereference | 5.5 | 0.0018 | | | [CVE-2025-39756](https://patchblox.com/security/data/cve/CVE-2025-39756.md) | Routine | fs: Prevent file descriptor table allocations exceeding INT_MAX | 5.5 | 0.0018 | | | [CVE-2025-38513](https://patchblox.com/security/data/cve/CVE-2025-38513.md) | Routine | wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() | 5.5 | 0.0018 | | | [CVE-2025-38516](https://patchblox.com/security/data/cve/CVE-2025-38516.md) | Routine | pinctrl: qcom: msm: mark certain pins as invalid for interrupts | 5.5 | 0.0018 | | | [CVE-2025-38540](https://patchblox.com/security/data/cve/CVE-2025-38540.md) | Routine | HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras | 5.5 | 0.0018 | | | [CVE-2025-38546](https://patchblox.com/security/data/cve/CVE-2025-38546.md) | Routine | atm: clip: Fix memory leak of struct clip_vcc. | 5.5 | 0.0018 | | | [CVE-2025-38635](https://patchblox.com/security/data/cve/CVE-2025-38635.md) | Routine | clk: davinci: Add NULL check in davinci_lpsc_clk_register() | 5.5 | 0.0018 | | | [CVE-2025-38663](https://patchblox.com/security/data/cve/CVE-2025-38663.md) | Routine | nilfs2: reject invalid file types when reading inodes | 5.5 | 0.0018 | | | [CVE-2025-39724](https://patchblox.com/security/data/cve/CVE-2025-39724.md) | Routine | serial: 8250: fix panic due to PSLVERR | 5.5 | 0.0018 | | | [CVE-2025-38602](https://patchblox.com/security/data/cve/CVE-2025-38602.md) | Routine | iwlwifi: Add missing check for alloc_ordered_workqueue | 5.5 | 0.0018 | | | [CVE-2025-39714](https://patchblox.com/security/data/cve/CVE-2025-39714.md) | Routine | media: usbtv: Lock resolution while streaming | 5.5 | 0.0018 | | | [CVE-2025-38727](https://patchblox.com/security/data/cve/CVE-2025-38727.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0018 | | | [CVE-2025-38721](https://patchblox.com/security/data/cve/CVE-2025-38721.md) | Routine | netfilter: ctnetlink: fix refcount leak on table dump | 5.5 | 0.0018 | | | [CVE-2025-39737](https://patchblox.com/security/data/cve/CVE-2025-39737.md) | Routine | mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() | 5.5 | 0.0018 | | | [CVE-2025-39752](https://patchblox.com/security/data/cve/CVE-2025-39752.md) | Routine | ARM: rockchip: fix kernel hang during smp initialization | 5.5 | 0.0018 | | | [CVE-2025-39808](https://patchblox.com/security/data/cve/CVE-2025-39808.md) | Routine | HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() | 5.5 | 0.0018 | | | [CVE-2025-39812](https://patchblox.com/security/data/cve/CVE-2025-39812.md) | Routine | sctp: initialize more fields in sctp_v6_from_sk() | 5.5 | 0.0018 | | | [CVE-2025-38630](https://patchblox.com/security/data/cve/CVE-2025-38630.md) | Routine | fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref | 5.5 | 0.0017 | | | [CVE-2025-39787](https://patchblox.com/security/data/cve/CVE-2025-39787.md) | Routine | soc: qcom: mdt_loader: Ensure we don't read past the ELF header | 5.5 | 0.0017 | | | [CVE-2025-38515](https://patchblox.com/security/data/cve/CVE-2025-38515.md) | Routine | drm/sched: Increment job count before swapping tail spsc queue | 5.5 | 0.0017 | | | [CVE-2025-39709](https://patchblox.com/security/data/cve/CVE-2025-39709.md) | Routine | media: venus: protect against spurious interrupts during probe | 5.5 | 0.0017 | | | [CVE-2025-38671](https://patchblox.com/security/data/cve/CVE-2025-38671.md) | Routine | i2c: qup: jump out of the loop in case of timeout | 5.5 | 0.0017 | | | [CVE-2025-38404](https://patchblox.com/security/data/cve/CVE-2025-38404.md) | Routine | usb: typec: displayport: Fix potential deadlock | 5.5 | 0.0016 | | | [CVE-2025-38448](https://patchblox.com/security/data/cve/CVE-2025-38448.md) | Routine | usb: gadget: u_serial: Fix race condition in TTY wakeup | 6.2 | 0.0014 | | | [CVE-2025-38650](https://patchblox.com/security/data/cve/CVE-2025-38650.md) | Routine | hfsplus: remove mutex_lock check in hfsplus_free_extents | 5.5 | 0.0014 | | | [CVE-2025-38687](https://patchblox.com/security/data/cve/CVE-2025-38687.md) | Routine | comedi: fix race between polling and detaching | 5.5 | 0.0013 | | | [CVE-2025-39736](https://patchblox.com/security/data/cve/CVE-2025-39736.md) | Routine | mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock | 5.5 | 0.0013 | | | [CVE-2025-39782](https://patchblox.com/security/data/cve/CVE-2025-39782.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoi... | 5.5 | 0.0013 | | | [CVE-2025-39813](https://patchblox.com/security/data/cve/CVE-2025-39813.md) | Routine | ftrace: Fix potential warning in trace_printk_seq during ftrace_dump | 5.5 | 0.0012 | | | [CVE-2025-38553](https://patchblox.com/security/data/cve/CVE-2025-38553.md) | Routine | net/sched: Restrict conditions for adding duplicating netems to qdisc tree | 5.5 | n/a | | --- Data as of 2026-11-10T07:50:38Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.