# ALAS2023-2026-1594: Security update for 22 packages

ALAS2023-2026-1594, released April 27, 2026, fixes 97 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1594
- Platform: Linux
- Released: Apr 27, 2026
- Priority: Urgent (Closes CVE-2026-43384, rated Critical)
- CVEs: 97, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1594.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel-livepatch-6.12.79-101.147](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.79-101.147.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-libbpf](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-debuginfo.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-devel.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-libbpf-static](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-static.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-43384](https://patchblox.com/security/data/cve/CVE-2026-43384.md) | Urgent | kernel-64kb: net/tcp-ao: Fix MAC comparison to be constant-time (bsc#1265097). | 9.8 | 0.0046 |  |
| [CVE-2026-23455](https://patchblox.com/security/data/cve/CVE-2026-23455.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng... | 9.1 | 0.0159 |  |
| [CVE-2026-31402](https://patchblox.com/security/data/cve/CVE-2026-31402.md) | High | kernel-64kb: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638). | 9.8 | 0.0122 |  |
| [CVE-2025-40135](https://patchblox.com/security/data/cve/CVE-2025-40135.md) | High | ipv6: use RCU in ip6_xmit() | 8.4 | 0.0071 |  |
| [CVE-2026-43407](https://patchblox.com/security/data/cve/CVE-2026-43407.md) | High | kernel-64kb: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (bsc#1265020). | 9.1 | 0.0066 |  |
| [CVE-2026-43406](https://patchblox.com/security/data/cve/CVE-2026-43406.md) | High | kernel-64kb: libceph: prevent potential out-of-bounds reads in process_message_header() (bsc#1265073). | 9.1 | 0.0061 |  |
| [CVE-2026-43405](https://patchblox.com/security/data/cve/CVE-2026-43405.md) | High | kernel-64kb: libceph: Use u32 for non-negative values in ceph_monmap_decode() (bsc#1264741). | 7.5 | 0.0060 |  |
| [CVE-2026-43441](https://patchblox.com/security/data/cve/CVE-2026-43441.md) | High | kernel-64kb: net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1264674). | 7.5 | 0.0059 |  |
| [CVE-2026-23456](https://patchblox.com/security/data/cve/CVE-2026-23456.md) | High | kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703). | 8.2 | 0.0054 |  |
| [CVE-2026-43383](https://patchblox.com/security/data/cve/CVE-2026-43383.md) | High | kernel-64kb: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744). | 9.4 | 0.0054 |  |
| [CVE-2026-43452](https://patchblox.com/security/data/cve/CVE-2026-43452.md) | High | kernel-64kb: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142). | 8.2 | 0.0054 |  |
| [CVE-2026-43365](https://patchblox.com/security/data/cve/CVE-2026-43365.md) | High | kernel-64kb: xfs: fix undersized l_iclog_roundoff values (bsc#1265119). | 8.2 | 0.0051 |  |
| [CVE-2026-23457](https://patchblox.com/security/data/cve/CVE-2026-23457.md) | High | kernel-64kb: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686). | 8.6 | 0.0045 |  |
| [CVE-2026-43466](https://patchblox.com/security/data/cve/CVE-2026-43466.md) | High | kernel-64kb: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790). | 8.2 | 0.0041 |  |
| [CVE-2026-43362](https://patchblox.com/security/data/cve/CVE-2026-43362.md) | High | kernel-64kb: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989). | 8.1 | 0.0026 |  |
| [CVE-2026-23278](https://patchblox.com/security/data/cve/CVE-2026-23278.md) | High | netfilter: nf_tables: always walk all pending catchall elements | 7.8 | 0.0023 |  |
| [CVE-2026-31788](https://patchblox.com/security/data/cve/CVE-2026-31788.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: xen/privcmd: restrict usage in unprivileged domU (bsc#1259707). | 8.2 | 0.0020 |  |
| [CVE-2026-43456](https://patchblox.com/security/data/cve/CVE-2026-43456.md) | High | kernel-64kb: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734). | 7.8 | 0.0019 |  |
| [CVE-2026-23274](https://patchblox.com/security/data/cve/CVE-2026-23274.md) | High | netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels | 7.8 | 0.0018 |  |
| [CVE-2026-23392](https://patchblox.com/security/data/cve/CVE-2026-23392.md) | High | netfilter: nf_tables: release flowtable after rcu grace period on error | 8.8 | 0.0017 |  |
| [CVE-2026-43368](https://patchblox.com/security/data/cve/CVE-2026-43368.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0016 |  |
| [CVE-2026-43408](https://patchblox.com/security/data/cve/CVE-2026-43408.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 |  |
| [CVE-2026-23413](https://patchblox.com/security/data/cve/CVE-2026-23413.md) | High | kernel-uek64k-modules-deprecated: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 |  |
| [CVE-2026-43374](https://patchblox.com/security/data/cve/CVE-2026-43374.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 |  |
| [CVE-2026-45943](https://patchblox.com/security/data/cve/CVE-2026-45943.md) | High | erofs: fix inline data read failure for ztailpacking pclusters | 7.1 | 0.0016 |  |
| [CVE-2026-23412](https://patchblox.com/security/data/cve/CVE-2026-23412.md) | High | kernel-64kb: netfilter: bpf: defer hook memory release until rcu readers are done (bsc#1261412). | 7.8 | 0.0016 |  |
| [CVE-2026-23004](https://patchblox.com/security/data/cve/CVE-2026-23004.md) | High | kernel-64kb: dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() (bsc#1257231). | 7.0 | 0.0016 |  |
| [CVE-2026-31401](https://patchblox.com/security/data/cve/CVE-2026-31401.md) | High | kernel-64kb: HID: bpf: prevent buffer overflow in hid_hw_request (bsc#1261603). | 7.8 | 0.0014 |  |
| [CVE-2026-23449](https://patchblox.com/security/data/cve/CVE-2026-23449.md) | High | kernel-default: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779). | 7.8 | 0.0014 |  |
| [CVE-2026-23458](https://patchblox.com/security/data/cve/CVE-2026-23458.md) | High | kernel-64kb: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781). | 7.8 | 0.0014 |  |
| [CVE-2026-23391](https://patchblox.com/security/data/cve/CVE-2026-23391.md) | High | netfilter: xt_CT: drop pending enqueued packets on template removal | 7.8 | 0.0013 |  |
| [CVE-2026-43450](https://patchblox.com/security/data/cve/CVE-2026-43450.md) | High | kernel-rt-64k-modules-core: kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() | 8.8 | 0.0013 |  |
| [CVE-2026-43427](https://patchblox.com/security/data/cve/CVE-2026-43427.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 |  |
| [CVE-2026-31403](https://patchblox.com/security/data/cve/CVE-2026-31403.md) | High | kernel-64kb: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796). | 7.8 | 0.0013 |  |
| [CVE-2026-43403](https://patchblox.com/security/data/cve/CVE-2026-43403.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0013 |  |
| [CVE-2026-43366](https://patchblox.com/security/data/cve/CVE-2026-43366.md) | High | kernel-docs: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265116). | 7.8 | 0.0013 |  |
| [CVE-2026-23397](https://patchblox.com/security/data/cve/CVE-2026-23397.md) | High | nfnetlink_osf: validate individual option lengths in fingerprints | 7.1 | 0.0013 |  |
| [CVE-2026-23375](https://patchblox.com/security/data/cve/CVE-2026-23375.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes f... | 7.5 | 0.0013 |  |
| [CVE-2026-43449](https://patchblox.com/security/data/cve/CVE-2026-43449.md) | High | kernel-64kb: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023). | 7.1 | 0.0013 |  |
| [CVE-2026-43453](https://patchblox.com/security/data/cve/CVE-2026-43453.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0013 |  |
| [CVE-2026-43438](https://patchblox.com/security/data/cve/CVE-2026-43438.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-31389](https://patchblox.com/security/data/cve/CVE-2026-31389.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 |  |
| [CVE-2026-31399](https://patchblox.com/security/data/cve/CVE-2026-31399.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0012 |  |
| [CVE-2026-31392](https://patchblox.com/security/data/cve/CVE-2026-31392.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0012 |  |
| [CVE-2026-43060](https://patchblox.com/security/data/cve/CVE-2026-43060.md) | High | kernel-64kb: netfilter: nft_ct: drop pending enqueued packets on removal (bsc#1264183). | 7.8 | 0.0012 |  |
| [CVE-2025-71161](https://patchblox.com/security/data/cve/CVE-2025-71161.md) | Routine | dm-verity: disable recursive forward error correction | 5.5 | 0.0047 |  |
| [CVE-2026-23440](https://patchblox.com/security/data/cve/CVE-2026-23440.md) | Routine | kernel-64kb: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641). | 4.7 | 0.0028 |  |
| [CVE-2025-40147](https://patchblox.com/security/data/cve/CVE-2025-40147.md) | Routine | kernel-uek64k-core: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 6.2 | 0.0026 |  |
| [CVE-2025-68239](https://patchblox.com/security/data/cve/CVE-2025-68239.md) | Routine | binfmt_misc: restore write access before closing files opened by open_exec() | 6.2 | 0.0020 |  |
| [CVE-2026-23276](https://patchblox.com/security/data/cve/CVE-2026-23276.md) | Routine | net: add xmit recursion limit to tunnel xmit functions | 5.5 | 0.0018 |  |
| [CVE-2025-39764](https://patchblox.com/security/data/cve/CVE-2025-39764.md) | Routine | netfilter: ctnetlink: remove refcounting in expectation dumpers | 5.5 | 0.0018 |  |
| [CVE-2026-43360](https://patchblox.com/security/data/cve/CVE-2026-43360.md) | Routine | kernel-64kb: btrfs: fix transaction abort on file creation due to name hash collision (bsc#1264720). | 5.5 | 0.0016 |  |
| [CVE-2026-23138](https://patchblox.com/security/data/cve/CVE-2026-23138.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0015 |  |
| [CVE-2026-23321](https://patchblox.com/security/data/cve/CVE-2026-23321.md) | Routine | kernel-64kb: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505). | 5.5 | 0.0014 |  |
| [CVE-2026-23439](https://patchblox.com/security/data/cve/CVE-2026-23439.md) | Routine | udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n | 5.5 | 0.0013 |  |
| [CVE-2026-23445](https://patchblox.com/security/data/cve/CVE-2026-23445.md) | Routine | kernel-64kb: igc: fix page fault in XDP TX timestamps handling (bsc#1261702). | 5.5 | 0.0013 |  |
| [CVE-2026-23399](https://patchblox.com/security/data/cve/CVE-2026-23399.md) | Routine | nf_tables: nft_dynset: fix possible stateful expression memleak in error path | 6.5 | 0.0013 |  |
| [CVE-2026-23475](https://patchblox.com/security/data/cve/CVE-2026-23475.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43392](https://patchblox.com/security/data/cve/CVE-2026-43392.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 |  |
| [CVE-2026-23398](https://patchblox.com/security/data/cve/CVE-2026-23398.md) | Routine | icmp: fix NULL pointer dereference in icmp_tag_validation() | 6.5 | 0.0013 |  |
| [CVE-2026-31546](https://patchblox.com/security/data/cve/CVE-2026-31546.md) | Routine | net: bonding: fix NULL deref in bond_debug_rlb_hash_show | 5.5 | 0.0013 |  |
| [CVE-2026-23465](https://patchblox.com/security/data/cve/CVE-2026-23465.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-23277](https://patchblox.com/security/data/cve/CVE-2026-23277.md) | Routine | net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit | 5.9 | 0.0013 |  |
| [CVE-2026-23443](https://patchblox.com/security/data/cve/CVE-2026-23443.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-31540](https://patchblox.com/security/data/cve/CVE-2026-31540.md) | Routine | drm/i915/gt: Check set_default_submission() before deferencing | 5.5 | 0.0012 |  |
| [CVE-2026-43359](https://patchblox.com/security/data/cve/CVE-2026-43359.md) | Routine | kernel-64kb: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719). | 5.5 | 0.0012 |  |
| [CVE-2026-43361](https://patchblox.com/security/data/cve/CVE-2026-43361.md) | Routine | kernel-64kb: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722). | 5.5 | 0.0012 |  |
| [CVE-2026-43363](https://patchblox.com/security/data/cve/CVE-2026-43363.md) | Routine | kernel-64kb: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068). | 5.5 | 0.0012 |  |
| [CVE-2026-43411](https://patchblox.com/security/data/cve/CVE-2026-43411.md) | Routine | kernel-64kb: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672). | 5.5 | 0.0012 |  |
| [CVE-2026-43419](https://patchblox.com/security/data/cve/CVE-2026-43419.md) | Routine | kernel-rt-debug: kernel: ceph: fix memory leaks in ceph_mdsc_build_path() | 5.5 | 0.0012 |  |
| [CVE-2026-43428](https://patchblox.com/security/data/cve/CVE-2026-43428.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43432](https://patchblox.com/security/data/cve/CVE-2026-43432.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43445](https://patchblox.com/security/data/cve/CVE-2026-43445.md) | Routine | kernel-64kb: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041). | 5.5 | 0.0012 |  |
| [CVE-2026-43451](https://patchblox.com/security/data/cve/CVE-2026-43451.md) | Routine | kernel-64kb: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009). | 5.5 | 0.0012 |  |
| [CVE-2026-43393](https://patchblox.com/security/data/cve/CVE-2026-43393.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-43394](https://patchblox.com/security/data/cve/CVE-2026-43394.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-43409](https://patchblox.com/security/data/cve/CVE-2026-43409.md) | Routine | kernel-64kb: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). | 5.5 | 0.0012 |  |
| [CVE-2026-43482](https://patchblox.com/security/data/cve/CVE-2026-43482.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-31400](https://patchblox.com/security/data/cve/CVE-2026-31400.md) | Routine | kernel-64kb: sunrpc: fix cache_request leak in cache_release (bsc#1261645). | 5.5 | 0.0012 |  |
| [CVE-2026-43470](https://patchblox.com/security/data/cve/CVE-2026-43470.md) | Routine | kernel-64kb: nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (bsc#1265128). | 5.5 | 0.0012 |  |
| [CVE-2026-43467](https://patchblox.com/security/data/cve/CVE-2026-43467.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43472](https://patchblox.com/security/data/cve/CVE-2026-43472.md) | Routine | kernel-64kb: unshare: fix unshare_fs() handling (bsc#1264748). | 5.5 | 0.0011 |  |
| [CVE-2026-43473](https://patchblox.com/security/data/cve/CVE-2026-43473.md) | Routine | kernel-64kb: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731). | 5.5 | 0.0011 |  |
| [CVE-2026-43475](https://patchblox.com/security/data/cve/CVE-2026-43475.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43483](https://patchblox.com/security/data/cve/CVE-2026-43483.md) | Routine | kernel-64kb: KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (bsc#1265240). | 5.5 | 0.0011 |  |
| [CVE-2026-43486](https://patchblox.com/security/data/cve/CVE-2026-43486.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0011 |  |
| [CVE-2026-43487](https://patchblox.com/security/data/cve/CVE-2026-43487.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0011 |  |
| [CVE-2026-43488](https://patchblox.com/security/data/cve/CVE-2026-43488.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-23368](https://patchblox.com/security/data/cve/CVE-2026-23368.md) | Routine | kernel-source: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530). | 5.5 | 0.0011 |  |
| [CVE-2026-23452](https://patchblox.com/security/data/cve/CVE-2026-23452.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 |  |
| [CVE-2026-43252](https://patchblox.com/security/data/cve/CVE-2026-43252.md) | Routine | kernel-64kb: mptcp: pm: in-kernel: always set ID as avail when rm endp (bsc#1264300). | 5.5 | 0.0010 |  |
| [CVE-2026-43420](https://patchblox.com/security/data/cve/CVE-2026-43420.md) | Routine | cephfs: ceph: fix i_nlink underrun during async unlink (bsc#1264814). | 5.5 | 0.0009 |  |
| [CVE-2026-23441](https://patchblox.com/security/data/cve/CVE-2026-23441.md) | Routine | kernel-64kb: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768). | 5.5 | 0.0009 |  |
| [CVE-2026-43061](https://patchblox.com/security/data/cve/CVE-2026-43061.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0009 |  |
| [CVE-2026-43468](https://patchblox.com/security/data/cve/CVE-2026-43468.md) | Routine | kernel-64kb: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978). | 5.5 | 0.0009 |  |
| [CVE-2026-43439](https://patchblox.com/security/data/cve/CVE-2026-43439.md) | Routine | kernel-64kb: cgroup: fix race between task migration and iteration (bsc#1265141). | 4.7 | 0.0009 |  |
| [CVE-2026-43448](https://patchblox.com/security/data/cve/CVE-2026-43448.md) | Routine | kernel-64kb: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). | 4.7 | 0.0009 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.