# SUSE-SU-2025:01972-1: kernel-livepatch-SLE15-SP7-RT_Update_1 security update

SUSE-SU-2025:01972-1, released June 17, 2025, fixes 119 CVEs in kernel-livepatch-SLE15-SP7-RT_Update_1 (version 1-150700.1.3.1). None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2025-01972-1
- Platform: Linux
- Released: Jun 17, 2025
- Priority: Urgent (Closes CVE-2025-22088, rated Critical)
- CVEs: 119, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2025:01972-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-livepatch-SLE15-SP7-RT_Update_1](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-rt-update-1.md) | sles 15.7 | 1-150700.1.3.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2025-22088](https://patchblox.com/security/data/cve/CVE-2025-22088.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0055 |  |
| [CVE-2024-50083](https://patchblox.com/security/data/cve/CVE-2024-50083.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0087 |  |
| [CVE-2025-37879](https://patchblox.com/security/data/cve/CVE-2025-37879.md) | High | 9p/net: fix improper handling of bogus negative read/write replies | 7.1 | 0.0073 |  |
| [CVE-2024-27018](https://patchblox.com/security/data/cve/CVE-2024-27018.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0064 |  |
| [CVE-2024-46865](https://patchblox.com/security/data/cve/CVE-2024-46865.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0055 |  |
| [CVE-2025-37750](https://patchblox.com/security/data/cve/CVE-2025-37750.md) | High | smb: client: fix UAF in decryption with multichannel | 7.8 | 0.0050 |  |
| [CVE-2024-50106](https://patchblox.com/security/data/cve/CVE-2024-50106.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0050 |  |
| [CVE-2024-28956](https://patchblox.com/security/data/cve/CVE-2024-28956.md) | High | kernel-64kb: x86/ibt: Keep IBT disabled during alternative patching (bsc#1242006). | 7.8 | 0.0043 |  |
| [CVE-2025-37749](https://patchblox.com/security/data/cve/CVE-2025-37749.md) | High | net: ppp: Add bound checking for skb data on ppp_sync_txmung | 7.8 | 0.0041 |  |
| [CVE-2025-37799](https://patchblox.com/security/data/cve/CVE-2025-37799.md) | High | kernel-64kb: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (bsc#1242283). | 9.4 | 0.0037 |  |
| [CVE-2025-22056](https://patchblox.com/security/data/cve/CVE-2025-22056.md) | High | kernel-64kb: netfilter: nft_tunnel: fix geneve_opt type confusion addition (bsc#1241525). | 7.8 | 0.0033 |  |
| [CVE-2025-22063](https://patchblox.com/security/data/cve/CVE-2025-22063.md) | High | kernel-64kb: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (bsc#1241351). | 7.8 | 0.0030 |  |
| [CVE-2024-46713](https://patchblox.com/security/data/cve/CVE-2024-46713.md) | High | kernel-64kb: kabi fix for perf/aux: Fix AUX buffer serialization (bsc#1230581). | 7.8 | 0.0030 |  |
| [CVE-2023-53034](https://patchblox.com/security/data/cve/CVE-2023-53034.md) | High | ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans | 7.5 | 0.0030 |  |
| [CVE-2025-21702](https://patchblox.com/security/data/cve/CVE-2025-21702.md) | High | kernel-64kb: pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (bsc#1237312). | 7.8 | 0.0028 |  |
| [CVE-2025-21787](https://patchblox.com/security/data/cve/CVE-2025-21787.md) | High | kernel-64kb: team: better TEAM_OPTION_TYPE_STRING validation (bsc#1238774). | 7.8 | 0.0027 |  |
| [CVE-2024-54458](https://patchblox.com/security/data/cve/CVE-2024-54458.md) | High | kernel-64kb: scsi: ufs: bsg: Set bsg_queue to NULL after removal (bsc#1238992). | 7.8 | 0.0026 |  |
| [CVE-2025-37803](https://patchblox.com/security/data/cve/CVE-2025-37803.md) | High | udmabuf: fix a buf size overflow issue during udmabuf creation | 7.8 | 0.0025 |  |
| [CVE-2025-21853](https://patchblox.com/security/data/cve/CVE-2025-21853.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0025 |  |
| [CVE-2024-57998](https://patchblox.com/security/data/cve/CVE-2024-57998.md) | High | kernel-azure: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-21919](https://patchblox.com/security/data/cve/CVE-2025-21919.md) | High | kernel-64kb: sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (bsc#1240593). | 7.8 | 0.0024 |  |
| [CVE-2024-58093](https://patchblox.com/security/data/cve/CVE-2024-58093.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0024 |  |
| [CVE-2025-22058](https://patchblox.com/security/data/cve/CVE-2025-22058.md) | High | kernel-64kb: udp: Fix memory accounting leak (bsc#1241332). | 7.3 | 0.0024 |  |
| [CVE-2025-22104](https://patchblox.com/security/data/cve/CVE-2025-22104.md) | High | kernel-64kb: ibmvnic: Use kernel helpers for hex dumps (bsc#1241550). | 7.1 | 0.0023 |  |
| [CVE-2025-23150](https://patchblox.com/security/data/cve/CVE-2025-23150.md) | High | ext4: fix off-by-one error in do_split | 8.4 | 0.0023 |  |
| [CVE-2025-37823](https://patchblox.com/security/data/cve/CVE-2025-37823.md) | High | net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too | 7.8 | 0.0023 |  |
| [CVE-2025-37798](https://patchblox.com/security/data/cve/CVE-2025-37798.md) | High | codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | 7.8 | 0.0023 |  |
| [CVE-2025-37958](https://patchblox.com/security/data/cve/CVE-2025-37958.md) | High | mm/huge_memory: fix dereferencing invalid pmd migration entry | 7.1 | 0.0023 |  |
| [CVE-2025-22097](https://patchblox.com/security/data/cve/CVE-2025-22097.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0023 |  |
| [CVE-2025-37797](https://patchblox.com/security/data/cve/CVE-2025-37797.md) | High | net_sched: hfsc: Fix a UAF vulnerability in class handling | 7.8 | 0.0023 |  |
| [CVE-2025-37789](https://patchblox.com/security/data/cve/CVE-2025-37789.md) | High | net: openvswitch: fix nested key length validation in the set() action | 7.8 | 0.0022 |  |
| [CVE-2025-22107](https://patchblox.com/security/data/cve/CVE-2025-22107.md) | High | kernel-64kb: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() (bsc#1241575). | 7.1 | 0.0022 |  |
| [CVE-2025-21648](https://patchblox.com/security/data/cve/CVE-2025-21648.md) | High | kernel-64kb: netfilter: conntrack: clamp maximum hashtable size to INT_MAX (bsc#1236142). | 7.8 | 0.0022 |  |
| [CVE-2025-37780](https://patchblox.com/security/data/cve/CVE-2025-37780.md) | High | isofs: Prevent the use of too small fid | 7.1 | 0.0022 |  |
| [CVE-2025-21929](https://patchblox.com/security/data/cve/CVE-2025-21929.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0021 |  |
| [CVE-2025-22085](https://patchblox.com/security/data/cve/CVE-2025-22085.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0021 |  |
| [CVE-2025-22112](https://patchblox.com/security/data/cve/CVE-2025-22112.md) | High | kernel-default-base: Security update for the Linux Kernel | 7.1 | 0.0021 |  |
| [CVE-2025-21962](https://patchblox.com/security/data/cve/CVE-2025-21962.md) | High | kernel-64kb: cifs: Fix integer overflow while processing closetimeo mount option (bsc#1240655). | 7.8 | 0.0021 |  |
| [CVE-2025-21963](https://patchblox.com/security/data/cve/CVE-2025-21963.md) | High | kernel-64kb: cifs: Fix integer overflow while processing acdirmax mount option (bsc#1240717). | 7.3 | 0.0021 |  |
| [CVE-2025-22091](https://patchblox.com/security/data/cve/CVE-2025-22091.md) | High | kernel-uek: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0021 |  |
| [CVE-2025-21964](https://patchblox.com/security/data/cve/CVE-2025-21964.md) | High | kernel-64kb: cifs: Fix integer overflow while processing acregmax mount option (bsc#1240740). | 7.0 | 0.0021 |  |
| [CVE-2025-22126](https://patchblox.com/security/data/cve/CVE-2025-22126.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0020 |  |
| [CVE-2025-37957](https://patchblox.com/security/data/cve/CVE-2025-37957.md) | High | KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception | 7.8 | 0.0019 |  |
| [CVE-2025-37831](https://patchblox.com/security/data/cve/CVE-2025-37831.md) | High | cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() | 7.0 | 0.0019 |  |
| [CVE-2025-37833](https://patchblox.com/security/data/cve/CVE-2025-37833.md) | High | net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads | 7.0 | 0.0019 |  |
| [CVE-2025-37960](https://patchblox.com/security/data/cve/CVE-2025-37960.md) | High | memblock: Accept allocated memory before use in memblock_double_array() | 7.0 | 0.0019 |  |
| [CVE-2025-21758](https://patchblox.com/security/data/cve/CVE-2025-21758.md) | Routine | kernel-64kb: ipv6: mcast: add RCU protection to mld_newpack() (bsc#1238737). | 5.5 | 0.1693 |  |
| [CVE-2024-46763](https://patchblox.com/security/data/cve/CVE-2024-46763.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0071 |  |
| [CVE-2025-22025](https://patchblox.com/security/data/cve/CVE-2025-22025.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0059 |  |
| [CVE-2025-23145](https://patchblox.com/security/data/cve/CVE-2025-23145.md) | Routine | mptcp: fix NULL pointer in can_accept_new_subflow | 5.5 | 0.0059 |  |
| [CVE-2025-21707](https://patchblox.com/security/data/cve/CVE-2025-21707.md) | Routine | kernel-64kb: mptcp: consolidate suboption status (bsc#1238862). | 5.5 | 0.0054 |  |
| [CVE-2024-56641](https://patchblox.com/security/data/cve/CVE-2024-56641.md) | Routine | net/smc: initialize close_work early to avoid warning | 5.5 | 0.0053 |  |
| [CVE-2025-22021](https://patchblox.com/security/data/cve/CVE-2025-22021.md) | Routine | kernel-64kb: netfilter: socket: Lookup orig tuple for IPv6 SNAT (bsc#1241282). | 5.5 | 0.0048 |  |
| [CVE-2025-37820](https://patchblox.com/security/data/cve/CVE-2025-37820.md) | Routine | xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() | 5.5 | 0.0040 |  |
| [CVE-2025-22108](https://patchblox.com/security/data/cve/CVE-2025-22108.md) | Routine | bnxt_en: Mask the bd_cnt field in the TX BD properly | 5.5 | 0.0038 |  |
| [CVE-2025-37755](https://patchblox.com/security/data/cve/CVE-2025-37755.md) | Routine | net: libwx: handle page_pool_dev_alloc_pages error | 5.5 | 0.0038 |  |
| [CVE-2025-38637](https://patchblox.com/security/data/cve/CVE-2025-38637.md) | Routine | kernel-64kb: net_sched: skbprio: Remove overly strict queue assertions (bsc#1241657). | 5.5 | 0.0034 |  |
| [CVE-2024-58096](https://patchblox.com/security/data/cve/CVE-2024-58096.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0032 |  |
| [CVE-2025-37870](https://patchblox.com/security/data/cve/CVE-2025-37870.md) | Routine | drm/amd/display: prevent hang on link training fail | 5.5 | 0.0031 |  |
| [CVE-2025-37886](https://patchblox.com/security/data/cve/CVE-2025-37886.md) | Routine | pds_core: make wait_context part of q_info | 5.5 | 0.0030 |  |
| [CVE-2025-22062](https://patchblox.com/security/data/cve/CVE-2025-22062.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2025-22086](https://patchblox.com/security/data/cve/CVE-2025-22086.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0030 |  |
| [CVE-2025-40325](https://patchblox.com/security/data/cve/CVE-2025-40325.md) | Routine | md/raid10: wait barrier before returning discard request with REQ_NOWAIT | 5.5 | 0.0029 |  |
| [CVE-2025-37887](https://patchblox.com/security/data/cve/CVE-2025-37887.md) | Routine | pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result | 5.5 | 0.0029 |  |
| [CVE-2025-37842](https://patchblox.com/security/data/cve/CVE-2025-37842.md) | Routine | spi: fsl-qspi: use devm function instead of driver remove | 5.5 | 0.0028 |  |
| [CVE-2025-38152](https://patchblox.com/security/data/cve/CVE-2025-38152.md) | Routine | kernel-64kb: remoteproc: core: Clear table_sz when rproc_shutdown (bsc#1241627). | 5.5 | 0.0028 |  |
| [CVE-2025-22064](https://patchblox.com/security/data/cve/CVE-2025-22064.md) | Routine | kernel-64kb: netfilter: nf_tables: do not unregister hook when table is dormant (bsc#1241413). | 5.5 | 0.0027 |  |
| [CVE-2025-22065](https://patchblox.com/security/data/cve/CVE-2025-22065.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0027 |  |
| [CVE-2025-21814](https://patchblox.com/security/data/cve/CVE-2025-21814.md) | Routine | kernel-64kb: ptp: Ensure info->enable callback is always set (bsc#1238473). | 5.5 | 0.0026 |  |
| [CVE-2025-22109](https://patchblox.com/security/data/cve/CVE-2025-22109.md) | Routine | ax25: Remove broken autobind | 5.5 | 0.0026 |  |
| [CVE-2025-21768](https://patchblox.com/security/data/cve/CVE-2025-21768.md) | Routine | net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels | 5.5 | 0.0025 |  |
| [CVE-2024-27415](https://patchblox.com/security/data/cve/CVE-2024-27415.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0025 |  |
| [CVE-2024-56702](https://patchblox.com/security/data/cve/CVE-2024-56702.md) | Routine | bpf: Mark raw_tp arguments with PTR_MAYBE_NULL | 5.5 | 0.0025 |  |
| [CVE-2025-37747](https://patchblox.com/security/data/cve/CVE-2025-37747.md) | Routine | perf: Fix hang while freeing sigtrap event | 5.5 | 0.0025 |  |
| [CVE-2025-22070](https://patchblox.com/security/data/cve/CVE-2025-22070.md) | Routine | kernel-64kb: fs/9p: fix NULL pointer dereference on mkdir (bsc#1241305). | 5.5 | 0.0025 |  |
| [CVE-2025-37790](https://patchblox.com/security/data/cve/CVE-2025-37790.md) | Routine | net: mctp: Set SOCK_RCU_FREE | 5.5 | 0.0024 |  |
| [CVE-2025-21792](https://patchblox.com/security/data/cve/CVE-2025-21792.md) | Routine | ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt | 5.5 | 0.0024 |  |
| [CVE-2025-37949](https://patchblox.com/security/data/cve/CVE-2025-37949.md) | Routine | kernel-64kb: xenbus: Use kref to track req lifetime (bsc#1243541). | 5.5 | 0.0024 |  |
| [CVE-2024-50223](https://patchblox.com/security/data/cve/CVE-2024-50223.md) | Routine | kernel-64kb: sched/numa: Fix the potential null pointer dereference in (bsc#1233192). | 5.5 | 0.0024 |  |
| [CVE-2024-58097](https://patchblox.com/security/data/cve/CVE-2024-58097.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-58001](https://patchblox.com/security/data/cve/CVE-2024-58001.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-22018](https://patchblox.com/security/data/cve/CVE-2025-22018.md) | Routine | kernel-64kb: atm: Fix NULL pointer dereference (bsc#1241266). | 5.5 | 0.0023 |  |
| [CVE-2025-23136](https://patchblox.com/security/data/cve/CVE-2025-23136.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2024-58094](https://patchblox.com/security/data/cve/CVE-2024-58094.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21683](https://patchblox.com/security/data/cve/CVE-2025-21683.md) | Routine | kernel-64kb: bpf: Fix bpf_sk_select_reuseport() memory leak (bsc#1236704). | 5.5 | 0.0023 |  |
| [CVE-2025-23140](https://patchblox.com/security/data/cve/CVE-2025-23140.md) | Routine | misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error | 5.5 | 0.0022 |  |
| [CVE-2025-22044](https://patchblox.com/security/data/cve/CVE-2025-22044.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-22057](https://patchblox.com/security/data/cve/CVE-2025-22057.md) | Routine | net: decrease cached dst counters in dst_release | 6.6 | 0.0022 |  |
| [CVE-2024-35840](https://patchblox.com/security/data/cve/CVE-2024-35840.md) | Routine | kernel-64kb: mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() (bsc#1224597). | 5.5 | 0.0022 |  |
| [CVE-2025-22075](https://patchblox.com/security/data/cve/CVE-2025-22075.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0022 |  |
| [CVE-2025-22102](https://patchblox.com/security/data/cve/CVE-2025-22102.md) | Routine | kernel-64kb: Bluetooth: btnxpuart: Fix kernel panic during FW release (bsc#1241456). | 5.5 | 0.0022 |  |
| [CVE-2025-21852](https://patchblox.com/security/data/cve/CVE-2025-21852.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0022 |  |
| [CVE-2025-23160](https://patchblox.com/security/data/cve/CVE-2025-23160.md) | Routine | kernel-64kb: media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (bsc#1242507). | 5.5 | 0.0022 |  |
| [CVE-2025-23138](https://patchblox.com/security/data/cve/CVE-2025-23138.md) | Routine | kernel-64kb: watch_queue: fix pipe accounting mismatch (bsc#1241648). | 5.5 | 0.0022 |  |
| [CVE-2025-22094](https://patchblox.com/security/data/cve/CVE-2025-22094.md) | Routine | kernel-64kb: powerpc/perf: Fix ref-counting on the PMU 'vpa_pmu' (bsc#1241512). | 5.5 | 0.0021 |  |
| [CVE-2025-37824](https://patchblox.com/security/data/cve/CVE-2025-37824.md) | Routine | tipc: fix NULL pointer dereference in tipc_mon_reinit_self() | 5.5 | 0.0021 |  |
| [CVE-2025-37829](https://patchblox.com/security/data/cve/CVE-2025-37829.md) | Routine | cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() | 5.5 | 0.0021 |  |
| [CVE-2024-58095](https://patchblox.com/security/data/cve/CVE-2024-58095.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22033](https://patchblox.com/security/data/cve/CVE-2025-22033.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22093](https://patchblox.com/security/data/cve/CVE-2025-22093.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-22103](https://patchblox.com/security/data/cve/CVE-2025-22103.md) | Routine | kernel-64kb: net: fix NULL pointer dereference in l3mdev_l3_rcv (bsc#1241448). | 5.5 | 0.0021 |  |
| [CVE-2025-22116](https://patchblox.com/security/data/cve/CVE-2025-22116.md) | Routine | kernel-azure: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2025-37809](https://patchblox.com/security/data/cve/CVE-2025-37809.md) | Routine | kernel-64kb: usb: typec: class: Unlocked on error in typec_register_partner() (bsc#1242856). | 5.5 | 0.0020 |  |
| [CVE-2025-22030](https://patchblox.com/security/data/cve/CVE-2025-22030.md) | Routine | kernel-64kb: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (bsc#1241376). | 5.5 | 0.0020 |  |
| [CVE-2025-22050](https://patchblox.com/security/data/cve/CVE-2025-22050.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-23154](https://patchblox.com/security/data/cve/CVE-2025-23154.md) | Routine | kernel-obs-build: io_uring/net: fix io_req_post_cqe abuse by send bundle (bsc#1242533). | 5.5 | 0.0020 |  |
| [CVE-2025-37773](https://patchblox.com/security/data/cve/CVE-2025-37773.md) | Routine | virtiofs: add filesystem context source name check | 5.5 | 0.0020 |  |
| [CVE-2025-23131](https://patchblox.com/security/data/cve/CVE-2025-23131.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-22125](https://patchblox.com/security/data/cve/CVE-2025-22125.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-23129](https://patchblox.com/security/data/cve/CVE-2025-23129.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37830](https://patchblox.com/security/data/cve/CVE-2025-37830.md) | Routine | cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() | 5.5 | 0.0019 |  |
| [CVE-2025-22128](https://patchblox.com/security/data/cve/CVE-2025-22128.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2025-37787](https://patchblox.com/security/data/cve/CVE-2025-37787.md) | Routine | net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered | 5.5 | 0.0019 |  |
| [CVE-2025-37748](https://patchblox.com/security/data/cve/CVE-2025-37748.md) | Routine | kernel-64kb: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (bsc#1242523). | 5.5 | 0.0019 |  |
| [CVE-2025-37974](https://patchblox.com/security/data/cve/CVE-2025-37974.md) | Routine | kernel-64kb: s390/pci: Fix missing check for zpci_create_device() error return (bsc#1243547). | 6.4 | 0.0019 |  |
| [CVE-2025-22027](https://patchblox.com/security/data/cve/CVE-2025-22027.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0017 |  |
| [CVE-2025-23134](https://patchblox.com/security/data/cve/CVE-2025-23134.md) | Routine | kernel-obs-build: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2024-58070](https://patchblox.com/security/data/cve/CVE-2024-58070.md) | Routine | kernel-64kb: bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (bsc#1238983). | 5.5 | 0.0015 |  |
| [CVE-2025-37804](https://patchblox.com/security/data/cve/CVE-2025-37804.md) | Routine | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | n/a | n/a |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.