{
  "fix": "ALAS2023-2026-1681",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681",
  "summary": "ALAS2023-2026-1681, released May 11, 2026, fixes 174 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 22 packages",
  "released": "2026-05-11T09:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-68206, rated Critical",
  "supported": true,
  "cveCount": 174,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.01587,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1681.html",
  "appliesTo": [
    {
      "product": "bpftool",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.1.168-202.320",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.168-202.320",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "perf",
      "productUrl": "https://patchblox.com/security/product/linux/perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.168-202.320.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-68206",
      "url": "https://patchblox.com/security/cve/CVE-2025-68206",
      "title": "netfilter: nft_ct: add seqadj extension for natted connections",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.1,
      "epss": 0.00712,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45899",
      "url": "https://patchblox.com/security/cve/CVE-2026-45899",
      "title": "ext4: drop extent cache when splitting extent fails",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23455",
      "url": "https://patchblox.com/security/cve/CVE-2026-23455",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: nf_conntrack_h323: check for zero leng...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 9.1,
      "epss": 0.01587,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31402",
      "url": "https://patchblox.com/security/cve/CVE-2026-31402",
      "title": "kernel-64kb: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.01219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40135",
      "url": "https://patchblox.com/security/cve/CVE-2025-40135",
      "title": "ipv6: use RCU in ip6_xmit()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.0071,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43037",
      "url": "https://patchblox.com/security/cve/CVE-2026-43037",
      "title": "ip6_tunnel: clear skb2-\u003Ecb[] in ip4ip6_err()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00688,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43407",
      "url": "https://patchblox.com/security/cve/CVE-2026-43407",
      "title": "kernel-64kb: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (bsc#1265020).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.1,
      "epss": 0.00656,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31682",
      "url": "https://patchblox.com/security/cve/CVE-2026-31682",
      "title": "bridge: br_nd_send: linearize skb before parsing ND options",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00638,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43406",
      "url": "https://patchblox.com/security/cve/CVE-2026-43406",
      "title": "kernel-64kb: libceph: prevent potential out-of-bounds reads in process_message_header() (bsc#1265073).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.1,
      "epss": 0.00613,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43405",
      "url": "https://patchblox.com/security/cve/CVE-2026-43405",
      "title": "kernel-64kb: libceph: Use u32 for non-negative values in ceph_monmap_decode() (bsc#1264741).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00598,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43441",
      "url": "https://patchblox.com/security/cve/CVE-2026-43441",
      "title": "kernel-64kb: net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1264674).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31414",
      "url": "https://patchblox.com/security/cve/CVE-2026-31414",
      "title": "netfilter: nf_conntrack_expect: use expect-\u003Ehelper",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00581,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23456",
      "url": "https://patchblox.com/security/cve/CVE-2026-23456",
      "title": "kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.2,
      "epss": 0.00543,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43383",
      "url": "https://patchblox.com/security/cve/CVE-2026-43383",
      "title": "kernel-64kb: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.4,
      "epss": 0.00541,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43452",
      "url": "https://patchblox.com/security/cve/CVE-2026-43452",
      "title": "kernel-64kb: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.2,
      "epss": 0.00541,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43341",
      "url": "https://patchblox.com/security/cve/CVE-2026-43341",
      "title": "kernel-64kb: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00512,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43365",
      "url": "https://patchblox.com/security/cve/CVE-2026-43365",
      "title": "kernel-64kb: xfs: fix undersized l_iclog_roundoff values (bsc#1265119).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.2,
      "epss": 0.00506,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31448",
      "url": "https://patchblox.com/security/cve/CVE-2026-31448",
      "title": "ext4: avoid infinite loops caused by residual data",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.00499,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23457",
      "url": "https://patchblox.com/security/cve/CVE-2026-23457",
      "title": "kernel-64kb: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.6,
      "epss": 0.0045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43057",
      "url": "https://patchblox.com/security/cve/CVE-2026-43057",
      "title": "kernel-64kb: net: mpls: error out if inner headers are not set (bsc#1264056).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00437,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31450",
      "url": "https://patchblox.com/security/cve/CVE-2026-31450",
      "title": "ext4: publish jinode after initialization",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00412,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43466",
      "url": "https://patchblox.com/security/cve/CVE-2026-43466",
      "title": "kernel-64kb: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.2,
      "epss": 0.00412,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31467",
      "url": "https://patchblox.com/security/cve/CVE-2026-31467",
      "title": "erofs: add GFP_NOIO in the bio completion if needed",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00378,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31570",
      "url": "https://patchblox.com/security/cve/CVE-2026-31570",
      "title": "can: gw: fix OOB heap access in cgw_csum_crc8_rel()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00263,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43038",
      "url": "https://patchblox.com/security/cve/CVE-2026-43038",
      "title": "kpatch-patch-4_18_0-553_125_1: kernel: ipv6: icmp: clear skb2-\u003Ecb[] in ip6_err_gen_icmpv6_unreach()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00255,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38192",
      "url": "https://patchblox.com/security/cve/CVE-2025-38192",
      "title": "net: clear the dst when changing skb protocol",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71067",
      "url": "https://patchblox.com/security/cve/CVE-2025-71067",
      "title": "ntfs: set dummy blocksize to read boot_block when mounting",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31788",
      "url": "https://patchblox.com/security/cve/CVE-2026-31788",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: xen/privcmd: restrict usage in unprivileged domU (bsc#1259707).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.2,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23401",
      "url": "https://patchblox.com/security/cve/CVE-2026-23401",
      "title": "KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38704",
      "url": "https://patchblox.com/security/cve/CVE-2025-38704",
      "title": "rcu/nocb: Fix possible invalid rdp\u0027s-\u003Enocb_cb_kthread pointer access",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23274",
      "url": "https://patchblox.com/security/cve/CVE-2026-23274",
      "title": "netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43329",
      "url": "https://patchblox.com/security/cve/CVE-2026-43329",
      "title": "kernel-64kb: netfilter: flowtable: strictly check for maximum number of actions (bsc#1265085).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23392",
      "url": "https://patchblox.com/security/cve/CVE-2026-23392",
      "title": "netfilter: nf_tables: release flowtable after rcu grace period on error",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31674",
      "url": "https://patchblox.com/security/cve/CVE-2026-31674",
      "title": "netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31680",
      "url": "https://patchblox.com/security/cve/CVE-2026-31680",
      "title": "net: ipv6: flowlabel: defer exclusive option free until RCU teardown",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31679",
      "url": "https://patchblox.com/security/cve/CVE-2026-31679",
      "title": "openvswitch: validate MPLS set/set_masked payload length",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45892",
      "url": "https://patchblox.com/security/cve/CVE-2026-45892",
      "title": "ext4: drop extent cache after doing PARTIAL_VALID1 zeroout",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43339",
      "url": "https://patchblox.com/security/cve/CVE-2026-43339",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv6: prevent possible UaF in addrconf_permanent_...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.1,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68265",
      "url": "https://patchblox.com/security/cve/CVE-2025-68265",
      "title": "nvme: fix admin request_queue lifetime",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23204",
      "url": "https://patchblox.com/security/cve/CVE-2026-23204",
      "title": "kernel-64kb: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31426",
      "url": "https://patchblox.com/security/cve/CVE-2026-31426",
      "title": "ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45920",
      "url": "https://patchblox.com/security/cve/CVE-2026-45920",
      "title": "kernel-64kb: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23343",
      "url": "https://patchblox.com/security/cve/CVE-2026-23343",
      "title": "xdp: produce a warning when calculated tailroom is negative",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23359",
      "url": "https://patchblox.com/security/cve/CVE-2026-23359",
      "title": "bpf: Fix stack-out-of-bounds write in devmap",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31447",
      "url": "https://patchblox.com/security/cve/CVE-2026-31447",
      "title": "ext4: reject mount if bigalloc with s_first_data_block != 0",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23317",
      "url": "https://patchblox.com/security/cve/CVE-2026-23317",
      "title": "drm/vmwgfx: Return the correct value in vmw_translate_ptr functions",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23319",
      "url": "https://patchblox.com/security/cve/CVE-2026-23319",
      "title": "bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31446",
      "url": "https://patchblox.com/security/cve/CVE-2026-31446",
      "title": "ext4: fix use-after-free in update_super_work when racing with umount",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23270",
      "url": "https://patchblox.com/security/cve/CVE-2026-23270",
      "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23351",
      "url": "https://patchblox.com/security/cve/CVE-2026-23351",
      "title": "netfilter: nft_set_pipapo: split gc into unlink and reclaim phase",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23449",
      "url": "https://patchblox.com/security/cve/CVE-2026-23449",
      "title": "kernel-default: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23458",
      "url": "https://patchblox.com/security/cve/CVE-2026-23458",
      "title": "kernel-64kb: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23293",
      "url": "https://patchblox.com/security/cve/CVE-2026-23293",
      "title": "net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23300",
      "url": "https://patchblox.com/security/cve/CVE-2026-23300",
      "title": "net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23352",
      "url": "https://patchblox.com/security/cve/CVE-2026-23352",
      "title": "x86/efi: defer freeing of boot services memory",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31452",
      "url": "https://patchblox.com/security/cve/CVE-2026-31452",
      "title": "ext4: convert inline data to extents when truncate exceeds inline size",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31469",
      "url": "https://patchblox.com/security/cve/CVE-2026-31469",
      "title": "virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43030",
      "url": "https://patchblox.com/security/cve/CVE-2026-43030",
      "title": "kernel-64kb: bpf: Fix regsafe() for pointers to packet (bsc#1264000).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23391",
      "url": "https://patchblox.com/security/cve/CVE-2026-23391",
      "title": "netfilter: xt_CT: drop pending enqueued packets on template removal",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31678",
      "url": "https://patchblox.com/security/cve/CVE-2026-31678",
      "title": "openvswitch: defer tunnel netdev_put to RCU release",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43450",
      "url": "https://patchblox.com/security/cve/CVE-2026-43450",
      "title": "kernel-rt-64k-modules-core: kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43028",
      "url": "https://patchblox.com/security/cve/CVE-2026-43028",
      "title": "kernel-64kb: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43427",
      "url": "https://patchblox.com/security/cve/CVE-2026-43427",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31403",
      "url": "https://patchblox.com/security/cve/CVE-2026-31403",
      "title": "kernel-64kb: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43027",
      "url": "https://patchblox.com/security/cve/CVE-2026-43027",
      "title": "kernel-default: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31453",
      "url": "https://patchblox.com/security/cve/CVE-2026-31453",
      "title": "xfs: avoid dereferencing log items after push callbacks",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23296",
      "url": "https://patchblox.com/security/cve/CVE-2026-23296",
      "title": "scsi: core: Fix refcount leak for tagset_refcnt",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31759",
      "url": "https://patchblox.com/security/cve/CVE-2026-31759",
      "title": "kernel-default: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43328",
      "url": "https://patchblox.com/security/cve/CVE-2026-43328",
      "title": "kernel-64kb: cpufreq: governor: Free dbs_data directly when gov-\u003Einit() fails (bsc#1264832).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31518",
      "url": "https://patchblox.com/security/cve/CVE-2026-31518",
      "title": "esp: fix skb leak with espintcp and async crypto",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43040",
      "url": "https://patchblox.com/security/cve/CVE-2026-43040",
      "title": "kernel-64kb: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31515",
      "url": "https://patchblox.com/security/cve/CVE-2026-31515",
      "title": "af_key: validate families in pfkey_send_migrate()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31521",
      "url": "https://patchblox.com/security/cve/CVE-2026-31521",
      "title": "module: Fix kernel panic when a symbol st_shndx is out of bounds",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31555",
      "url": "https://patchblox.com/security/cve/CVE-2026-31555",
      "title": "futex: Clear stale exiting pointer in futex_lock_pi() retry path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43025",
      "url": "https://patchblox.com/security/cve/CVE-2026-43025",
      "title": "kernel-default: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.3,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43366",
      "url": "https://patchblox.com/security/cve/CVE-2026-43366",
      "title": "kernel-docs: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265116).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23388",
      "url": "https://patchblox.com/security/cve/CVE-2026-23388",
      "title": "Squashfs: check metadata block offset is within range",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23397",
      "url": "https://patchblox.com/security/cve/CVE-2026-23397",
      "title": "nfnetlink_osf: validate individual option lengths in fingerprints",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31454",
      "url": "https://patchblox.com/security/cve/CVE-2026-31454",
      "title": "xfs: save ailp before dropping the AIL lock in push callbacks",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31455",
      "url": "https://patchblox.com/security/cve/CVE-2026-31455",
      "title": "xfs: stop reclaim before pushing AIL during unmount",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31695",
      "url": "https://patchblox.com/security/cve/CVE-2026-31695",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: virt_wifi: remove SET_NETDEV_DEV to avoid...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43449",
      "url": "https://patchblox.com/security/cve/CVE-2026-43449",
      "title": "kernel-64kb: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43453",
      "url": "https://patchblox.com/security/cve/CVE-2026-43453",
      "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31416",
      "url": "https://patchblox.com/security/cve/CVE-2026-31416",
      "title": "netfilter: nfnetlink_log: account for netlink header size",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31418",
      "url": "https://patchblox.com/security/cve/CVE-2026-31418",
      "title": "netfilter: ipset: drop logically empty buckets in mtype_del",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31427",
      "url": "https://patchblox.com/security/cve/CVE-2026-31427",
      "title": "netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31503",
      "url": "https://patchblox.com/security/cve/CVE-2026-31503",
      "title": "udp: Fix wildcard bind conflict check when using hash2",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31492",
      "url": "https://patchblox.com/security/cve/CVE-2026-31492",
      "title": "RDMA/irdma: Initialize free_qp completion before using it",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31519",
      "url": "https://patchblox.com/security/cve/CVE-2026-31519",
      "title": "btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31399",
      "url": "https://patchblox.com/security/cve/CVE-2026-31399",
      "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31392",
      "url": "https://patchblox.com/security/cve/CVE-2026-31392",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43047",
      "url": "https://patchblox.com/security/cve/CVE-2026-43047",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43060",
      "url": "https://patchblox.com/security/cve/CVE-2026-43060",
      "title": "kernel-64kb: netfilter: nft_ct: drop pending enqueued packets on removal (bsc#1264183).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23340",
      "url": "https://patchblox.com/security/cve/CVE-2026-23340",
      "title": "net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43281",
      "url": "https://patchblox.com/security/cve/CVE-2026-43281",
      "title": "kernel-64kb: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23271",
      "url": "https://patchblox.com/security/cve/CVE-2026-23271",
      "title": "perf: Fix __perf_event_overflow() vs perf_remove_from_context() race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31508",
      "url": "https://patchblox.com/security/cve/CVE-2026-31508",
      "title": "net: openvswitch: Avoid releasing netdev before teardown completes",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31504",
      "url": "https://patchblox.com/security/cve/CVE-2026-31504",
      "title": "net: fix fanout UAF in packet_release() via NETDEV_UP race",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31473",
      "url": "https://patchblox.com/security/cve/CVE-2026-31473",
      "title": "media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31523",
      "url": "https://patchblox.com/security/cve/CVE-2026-31523",
      "title": "nvme-pci: ensure we\u0027re polling a polled queue",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00089,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71161",
      "url": "https://patchblox.com/security/cve/CVE-2025-71161",
      "title": "dm-verity: disable recursive forward error correction",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00468,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23414",
      "url": "https://patchblox.com/security/cve/CVE-2026-23414",
      "title": "tls: Purge async_hold in tls_decrypt_async_wait()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0037,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71269",
      "url": "https://patchblox.com/security/cve/CVE-2025-71269",
      "title": "btrfs: do not free data reservation in fallback from inline due to -ENOSPC",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00233,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68239",
      "url": "https://patchblox.com/security/cve/CVE-2025-68239",
      "title": "binfmt_misc: restore write access before closing files opened by open_exec()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.2,
      "epss": 0.00197,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23154",
      "url": "https://patchblox.com/security/cve/CVE-2026-23154",
      "title": "kernel-64kb: net: fix segmentation of forwarding fraglist GRO (bsc#1258286).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39748",
      "url": "https://patchblox.com/security/cve/CVE-2025-39748",
      "title": "bpf: Forget ranges when refining tnum after JSET",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39764",
      "url": "https://patchblox.com/security/cve/CVE-2025-39764",
      "title": "netfilter: ctnetlink: remove refcounting in expectation dumpers",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43360",
      "url": "https://patchblox.com/security/cve/CVE-2026-43360",
      "title": "kernel-64kb: btrfs: fix transaction abort on file creation due to name hash collision (bsc#1264720).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45858",
      "url": "https://patchblox.com/security/cve/CVE-2026-45858",
      "title": "ext4: don\u0027t zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23113",
      "url": "https://patchblox.com/security/cve/CVE-2026-23113",
      "title": "kernel-64kb: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop (bsc#1258278).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23100",
      "url": "https://patchblox.com/security/cve/CVE-2026-23100",
      "title": "kernel-uek: ELSA-2026-50232: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23141",
      "url": "https://patchblox.com/security/cve/CVE-2026-23141",
      "title": "kernel-64kb: btrfs: send: check for inline extents in range_is_hole_in_parent() (bsc#1258377).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23356",
      "url": "https://patchblox.com/security/cve/CVE-2026-23356",
      "title": "drbd: fix \u0022LOGIC BUG\u0022 in drbd_al_begin_io_nonblock()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.3,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23157",
      "url": "https://patchblox.com/security/cve/CVE-2026-23157",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23304",
      "url": "https://patchblox.com/security/cve/CVE-2026-23304",
      "title": "ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23321",
      "url": "https://patchblox.com/security/cve/CVE-2026-23321",
      "title": "kernel-64kb: mptcp: pm: in-kernel: always mark signal\u002Bsubflow endp as used (bsc#1260505).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31428",
      "url": "https://patchblox.com/security/cve/CVE-2026-31428",
      "title": "netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23439",
      "url": "https://patchblox.com/security/cve/CVE-2026-23439",
      "title": "udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23303",
      "url": "https://patchblox.com/security/cve/CVE-2026-23303",
      "title": "smb: client: Don\u0027t log plaintext credentials in cifs_set_cifscreds",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23292",
      "url": "https://patchblox.com/security/cve/CVE-2026-23292",
      "title": "scsi: target: Fix recursive locking in __configfs_open_file()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23398",
      "url": "https://patchblox.com/security/cve/CVE-2026-23398",
      "title": "icmp: fix NULL pointer dereference in icmp_tag_validation()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43026",
      "url": "https://patchblox.com/security/cve/CVE-2026-43026",
      "title": "kernel-64kb: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31495",
      "url": "https://patchblox.com/security/cve/CVE-2026-31495",
      "title": "netfilter: ctnetlink: use netlink policy range checks",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31546",
      "url": "https://patchblox.com/security/cve/CVE-2026-31546",
      "title": "net: bonding: fix NULL deref in bond_debug_rlb_hash_show",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31752",
      "url": "https://patchblox.com/security/cve/CVE-2026-31752",
      "title": "kernel-64kb: bridge: br_nd_send: validate ND option lengths (bsc#1264045).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43024",
      "url": "https://patchblox.com/security/cve/CVE-2026-43024",
      "title": "kernel-64kb: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43035",
      "url": "https://patchblox.com/security/cve/CVE-2026-43035",
      "title": "kernel-64kb: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23277",
      "url": "https://patchblox.com/security/cve/CVE-2026-23277",
      "title": "net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.9,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23381",
      "url": "https://patchblox.com/security/cve/CVE-2026-23381",
      "title": "net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31422",
      "url": "https://patchblox.com/security/cve/CVE-2026-31422",
      "title": "net/sched: cls_flow: fix NULL pointer dereference on shared blocks",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31424",
      "url": "https://patchblox.com/security/cve/CVE-2026-31424",
      "title": "netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31421",
      "url": "https://patchblox.com/security/cve/CVE-2026-31421",
      "title": "net/sched: cls_fw: fix NULL pointer dereference on shared blocks",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31423",
      "url": "https://patchblox.com/security/cve/CVE-2026-31423",
      "title": "net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31496",
      "url": "https://patchblox.com/security/cve/CVE-2026-31496",
      "title": "netfilter: nf_conntrack_expect: skip expectations in other netns via proc",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23443",
      "url": "https://patchblox.com/security/cve/CVE-2026-23443",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31434",
      "url": "https://patchblox.com/security/cve/CVE-2026-31434",
      "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31524",
      "url": "https://patchblox.com/security/cve/CVE-2026-31524",
      "title": "HID: asus: avoid memory leak in asus_report_fixup()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31540",
      "url": "https://patchblox.com/security/cve/CVE-2026-31540",
      "title": "drm/i915/gt: Check set_default_submission() before deferencing",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31738",
      "url": "https://patchblox.com/security/cve/CVE-2026-31738",
      "title": "kernel-source: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31781",
      "url": "https://patchblox.com/security/cve/CVE-2026-31781",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43013",
      "url": "https://patchblox.com/security/cve/CVE-2026-43013",
      "title": "kernel-64kb: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43333",
      "url": "https://patchblox.com/security/cve/CVE-2026-43333",
      "title": "kernel-64kb: bpf: reject direct access to nullable PTR_TO_BUF pointers (bsc#1264726).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43359",
      "url": "https://patchblox.com/security/cve/CVE-2026-43359",
      "title": "kernel-64kb: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43361",
      "url": "https://patchblox.com/security/cve/CVE-2026-43361",
      "title": "kernel-64kb: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43363",
      "url": "https://patchblox.com/security/cve/CVE-2026-43363",
      "title": "kernel-64kb: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43411",
      "url": "https://patchblox.com/security/cve/CVE-2026-43411",
      "title": "kernel-64kb: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43428",
      "url": "https://patchblox.com/security/cve/CVE-2026-43428",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43432",
      "url": "https://patchblox.com/security/cve/CVE-2026-43432",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43445",
      "url": "https://patchblox.com/security/cve/CVE-2026-43445",
      "title": "kernel-64kb: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43451",
      "url": "https://patchblox.com/security/cve/CVE-2026-43451",
      "title": "kernel-64kb: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31458",
      "url": "https://patchblox.com/security/cve/CVE-2026-31458",
      "title": "mm/damon/sysfs: check contexts-\u003Enr before accessing contexts_arr[0]",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31400",
      "url": "https://patchblox.com/security/cve/CVE-2026-31400",
      "title": "kernel-64kb: sunrpc: fix cache_request leak in cache_release (bsc#1261645).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43265",
      "url": "https://patchblox.com/security/cve/CVE-2026-43265",
      "title": "kernel-64kb: KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (bsc#1264427).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31415",
      "url": "https://patchblox.com/security/cve/CVE-2026-31415",
      "title": "kernel-64kb: ipv6: avoid overflows in ip6_datagram_send_ctl() (bsc#1262099).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43065",
      "url": "https://patchblox.com/security/cve/CVE-2026-43065",
      "title": "kernel-64kb: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43066",
      "url": "https://patchblox.com/security/cve/CVE-2026-43066",
      "title": "kernel-64kb: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43068",
      "url": "https://patchblox.com/security/cve/CVE-2026-43068",
      "title": "kernel-64kb: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43043",
      "url": "https://patchblox.com/security/cve/CVE-2026-43043",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43046",
      "url": "https://patchblox.com/security/cve/CVE-2026-43046",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43054",
      "url": "https://patchblox.com/security/cve/CVE-2026-43054",
      "title": "kernel-64kb: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43472",
      "url": "https://patchblox.com/security/cve/CVE-2026-43472",
      "title": "kernel-64kb: unshare: fix unshare_fs() handling (bsc#1264748).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43475",
      "url": "https://patchblox.com/security/cve/CVE-2026-43475",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43483",
      "url": "https://patchblox.com/security/cve/CVE-2026-43483",
      "title": "kernel-64kb: KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (bsc#1265240).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23368",
      "url": "https://patchblox.com/security/cve/CVE-2026-23368",
      "title": "kernel-source: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00106,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23362",
      "url": "https://patchblox.com/security/cve/CVE-2026-23362",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00101,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23452",
      "url": "https://patchblox.com/security/cve/CVE-2026-23452",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31480",
      "url": "https://patchblox.com/security/cve/CVE-2026-31480",
      "title": "tracing: Fix potential deadlock in cpu hotplug with osnoise",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43252",
      "url": "https://patchblox.com/security/cve/CVE-2026-43252",
      "title": "kernel-64kb: mptcp: pm: in-kernel: always set ID as avail when rm endp (bsc#1264300).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31466",
      "url": "https://patchblox.com/security/cve/CVE-2026-31466",
      "title": "kernel-64kb: mm/huge_memory: fix folio isn\u0027t locked in softleaf_to_folio() (bsc#1267825).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43420",
      "url": "https://patchblox.com/security/cve/CVE-2026-43420",
      "title": "cephfs: ceph: fix i_nlink underrun during async unlink (bsc#1264814).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43061",
      "url": "https://patchblox.com/security/cve/CVE-2026-43061",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00091,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43468",
      "url": "https://patchblox.com/security/cve/CVE-2026-43468",
      "title": "kernel-64kb: net/mlx5: Fix deadlock between devlink lock and esw-\u003Ewq (bsc#1264978).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00091,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43439",
      "url": "https://patchblox.com/security/cve/CVE-2026-43439",
      "title": "kernel-64kb: cgroup: fix race between task migration and iteration (bsc#1265141).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.7,
      "epss": 0.00089,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43448",
      "url": "https://patchblox.com/security/cve/CVE-2026-43448",
      "title": "kernel-64kb: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.7,
      "epss": 0.00089,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T19:49:26Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}