# ALAS2023-2026-1695: Security update for 18 packages

ALAS2023-2026-1695, released May 8, 2026, fixes 106 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1695
- Platform: Linux
- Released: May 8, 2026
- Priority: High (Closes CVE-2026-43284, high severity)
- CVEs: 106, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1695.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [kernel-livepatch-6.12.83-113.160](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.83-113.160.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |
| [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-43284](https://patchblox.com/security/data/cve/CVE-2026-43284.md) | High | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 |  |
| [CVE-2026-43037](https://patchblox.com/security/data/cve/CVE-2026-43037.md) | High | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() | 9.8 | 0.0069 |  |
| [CVE-2026-31682](https://patchblox.com/security/data/cve/CVE-2026-31682.md) | High | bridge: br_nd_send: linearize skb before parsing ND options | 9.1 | 0.0064 |  |
| [CVE-2026-31637](https://patchblox.com/security/data/cve/CVE-2026-31637.md) | High | rxrpc: reject undecryptable rxkad response tickets | 9.8 | 0.0059 |  |
| [CVE-2026-31414](https://patchblox.com/security/data/cve/CVE-2026-31414.md) | High | netfilter: nf_conntrack_expect: use expect->helper | 9.8 | 0.0058 |  |
| [CVE-2026-43341](https://patchblox.com/security/data/cve/CVE-2026-43341.md) | High | kernel-64kb: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044). | 9.8 | 0.0051 |  |
| [CVE-2026-43099](https://patchblox.com/security/data/cve/CVE-2026-43099.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0050 |  |
| [CVE-2026-31685](https://patchblox.com/security/data/cve/CVE-2026-31685.md) | High | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 |  |
| [CVE-2026-43074](https://patchblox.com/security/data/cve/CVE-2026-43074.md) | High | kernel-source: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263). | 7.8 | 0.0048 |  |
| [CVE-2026-31669](https://patchblox.com/security/data/cve/CVE-2026-31669.md) | High | mptcp: fix slab-use-after-free in __inet_lookup_established | 9.8 | 0.0047 |  |
| [CVE-2026-43071](https://patchblox.com/security/data/cve/CVE-2026-43071.md) | High | kernel-uek: dcache: Limit the minimal number of bucket to two (Zhihao Cheng) [Orabug: 39323133] | 9.1 | 0.0046 |  |
| [CVE-2026-43117](https://patchblox.com/security/data/cve/CVE-2026-43117.md) | High | kernel-64kb: Security update for the Linux Kernel | 9.1 | 0.0046 |  |
| [CVE-2026-31668](https://patchblox.com/security/data/cve/CVE-2026-31668.md) | High | seg6: separate dst_cache for input and output paths in seg6 lwtunnel | 9.8 | 0.0044 |  |
| [CVE-2026-43057](https://patchblox.com/security/data/cve/CVE-2026-43057.md) | High | kernel-64kb: net: mpls: error out if inner headers are not set (bsc#1264056). | 7.5 | 0.0044 |  |
| [CVE-2026-43336](https://patchblox.com/security/data/cve/CVE-2026-43336.md) | High | kernel-64kb: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113). | 7.5 | 0.0043 |  |
| [CVE-2026-31450](https://patchblox.com/security/data/cve/CVE-2026-31450.md) | High | ext4: publish jinode after initialization | 8.8 | 0.0041 |  |
| [CVE-2026-31533](https://patchblox.com/security/data/cve/CVE-2026-31533.md) | High | kernel-default: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758). | 9.8 | 0.0040 |  |
| [CVE-2026-31662](https://patchblox.com/security/data/cve/CVE-2026-31662.md) | High | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 7.5 | 0.0039 |  |
| [CVE-2026-43114](https://patchblox.com/security/data/cve/CVE-2026-43114.md) | High | kernel-rt-64k-modules-core: kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry | 9.4 | 0.0037 |  |
| [CVE-2026-43112](https://patchblox.com/security/data/cve/CVE-2026-43112.md) | High | kernel-64kb: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437). | 8.8 | 0.0035 |  |
| [CVE-2026-31607](https://patchblox.com/security/data/cve/CVE-2026-31607.md) | High | usbip: validate number_of_packets in usbip_pack_ret_submit() | 9.8 | 0.0031 |  |
| [CVE-2026-43038](https://patchblox.com/security/data/cve/CVE-2026-43038.md) | High | kpatch-patch-4_18_0-553_125_1: kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() | 9.8 | 0.0026 |  |
| [CVE-2026-31588](https://patchblox.com/security/data/cve/CVE-2026-31588.md) | High | KVM: x86: Use scratch field in MMIO fragment to hold small write values | 8.8 | 0.0019 |  |
| [CVE-2026-31407](https://patchblox.com/security/data/cve/CVE-2026-31407.md) | High | netfilter: conntrack: add missing netlink policy validations | 7.1 | 0.0018 |  |
| [CVE-2026-43329](https://patchblox.com/security/data/cve/CVE-2026-43329.md) | High | kernel-64kb: netfilter: flowtable: strictly check for maximum number of actions (bsc#1265085). | 7.8 | 0.0018 |  |
| [CVE-2026-31532](https://patchblox.com/security/data/cve/CVE-2026-31532.md) | High | can: raw: fix ro->uniq use-after-free in raw_rcv() | 8.8 | 0.0017 |  |
| [CVE-2026-31675](https://patchblox.com/security/data/cve/CVE-2026-31675.md) | High | net/sched: sch_netem: fix out-of-bounds access in packet corruption | 7.8 | 0.0016 |  |
| [CVE-2026-31680](https://patchblox.com/security/data/cve/CVE-2026-31680.md) | High | net: ipv6: flowlabel: defer exclusive option free until RCU teardown | 7.8 | 0.0016 |  |
| [CVE-2026-43332](https://patchblox.com/security/data/cve/CVE-2026-43332.md) | High | kernel-doc: kernel: thermal: core: Fix thermal zone device registration error path | 7.8 | 0.0016 |  |
| [CVE-2026-43339](https://patchblox.com/security/data/cve/CVE-2026-43339.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... | 8.1 | 0.0016 |  |
| [CVE-2026-43030](https://patchblox.com/security/data/cve/CVE-2026-43030.md) | High | kernel-64kb: bpf: Fix regsafe() for pointers to packet (bsc#1264000). | 7.8 | 0.0014 |  |
| [CVE-2026-43093](https://patchblox.com/security/data/cve/CVE-2026-43093.md) | High | kernel-64kb: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254). | 7.8 | 0.0014 |  |
| [CVE-2026-23442](https://patchblox.com/security/data/cve/CVE-2026-23442.md) | High | ipv6: add NULL checks for idev in SRv6 paths | 7.8 | 0.0013 |  |
| [CVE-2026-31586](https://patchblox.com/security/data/cve/CVE-2026-31586.md) | High | mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() | 7.8 | 0.0013 |  |
| [CVE-2026-43028](https://patchblox.com/security/data/cve/CVE-2026-43028.md) | High | kernel-64kb: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934). | 7.1 | 0.0013 |  |
| [CVE-2026-31580](https://patchblox.com/security/data/cve/CVE-2026-31580.md) | High | bcache: fix cached_dev.sb_bio use-after-free and crash | 7.8 | 0.0013 |  |
| [CVE-2026-43027](https://patchblox.com/security/data/cve/CVE-2026-43027.md) | High | kernel-default: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933). | 7.8 | 0.0013 |  |
| [CVE-2026-31673](https://patchblox.com/security/data/cve/CVE-2026-31673.md) | High | af_unix: read UNIX_DIAG_VFS data under unix_state_lock | 7.8 | 0.0013 |  |
| [CVE-2026-43091](https://patchblox.com/security/data/cve/CVE-2026-43091.md) | High | kernel-64kb: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). | 7.8 | 0.0013 |  |
| [CVE-2026-43328](https://patchblox.com/security/data/cve/CVE-2026-43328.md) | High | kernel-64kb: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832). | 7.8 | 0.0013 |  |
| [CVE-2026-31624](https://patchblox.com/security/data/cve/CVE-2026-31624.md) | High | HID: core: clamp report_size in s32ton() to avoid undefined shift | 7.1 | 0.0013 |  |
| [CVE-2026-43040](https://patchblox.com/security/data/cve/CVE-2026-43040.md) | High | kernel-64kb: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info- | 7.1 | 0.0013 |  |
| [CVE-2026-43025](https://patchblox.com/security/data/cve/CVE-2026-43025.md) | High | kernel-default: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931). | 7.3 | 0.0013 |  |
| [CVE-2026-23374](https://patchblox.com/security/data/cve/CVE-2026-23374.md) | High | blktrace: fix __this_cpu_read/write in preemptible context | 8.4 | 0.0013 |  |
| [CVE-2026-43016](https://patchblox.com/security/data/cve/CVE-2026-43016.md) | High | kernel-64kb: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007). | 7.8 | 0.0013 |  |
| [CVE-2026-31614](https://patchblox.com/security/data/cve/CVE-2026-31614.md) | High | kernel-64kb: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774). | 7.1 | 0.0013 |  |
| [CVE-2026-31774](https://patchblox.com/security/data/cve/CVE-2026-31774.md) | High | kernel-64kb: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040). | 7.1 | 0.0013 |  |
| [CVE-2026-31416](https://patchblox.com/security/data/cve/CVE-2026-31416.md) | High | netfilter: nfnetlink_log: account for netlink header size | 8.1 | 0.0013 |  |
| [CVE-2026-31418](https://patchblox.com/security/data/cve/CVE-2026-31418.md) | High | netfilter: ipset: drop logically empty buckets in mtype_del | 8.1 | 0.0013 |  |
| [CVE-2026-43084](https://patchblox.com/security/data/cve/CVE-2026-43084.md) | High | kernel-uek: netfilter: nfnetlink_queue: make hash table per queue (Florian Westphal) [Orabug: 39339273] | 7.8 | 0.0013 |  |
| [CVE-2026-31665](https://patchblox.com/security/data/cve/CVE-2026-31665.md) | High | netfilter: nft_ct: fix use-after-free in timeout object destroy | 7.8 | 0.0012 |  |
| [CVE-2026-31593](https://patchblox.com/security/data/cve/CVE-2026-31593.md) | High | KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU | 8.8 | 0.0012 |  |
| [CVE-2026-43047](https://patchblox.com/security/data/cve/CVE-2026-43047.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 |  |
| [CVE-2026-31648](https://patchblox.com/security/data/cve/CVE-2026-31648.md) | High | mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() | 7.8 | 0.0012 |  |
| [CVE-2026-31666](https://patchblox.com/security/data/cve/CVE-2026-31666.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0012 |  |
| [CVE-2026-31684](https://patchblox.com/security/data/cve/CVE-2026-31684.md) | High | net: sched: act_csum: validate nested VLAN headers | 7.8 | 0.0012 |  |
| [CVE-2026-31731](https://patchblox.com/security/data/cve/CVE-2026-31731.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0010 |  |
| [CVE-2026-31667](https://patchblox.com/security/data/cve/CVE-2026-31667.md) | High | Input: uinput - fix circular locking dependency with ff-core | 7.8 | 0.0010 |  |
| [CVE-2026-23302](https://patchblox.com/security/data/cve/CVE-2026-23302.md) | High | net: annotate data-races around sk->sk_{data_ready,write_space} | 7.1 | 0.0010 |  |
| [CVE-2026-31656](https://patchblox.com/security/data/cve/CVE-2026-31656.md) | High | drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat | 8.8 | 0.0009 |  |
| [CVE-2026-31430](https://patchblox.com/security/data/cve/CVE-2026-31430.md) | High | X.509: Fix out-of-bounds access when parsing extensions | 7.8 | 0.0008 |  |
| [CVE-2026-31429](https://patchblox.com/security/data/cve/CVE-2026-31429.md) | Routine | net: skb: fix cross-cache free of KFENCE-allocated skb head | 6.6 | 0.0026 |  |
| [CVE-2025-71269](https://patchblox.com/security/data/cve/CVE-2025-71269.md) | Routine | btrfs: do not free data reservation in fallback from inline due to -ENOSPC | 5.5 | 0.0023 |  |
| [CVE-2026-31531](https://patchblox.com/security/data/cve/CVE-2026-31531.md) | Routine | ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() | 5.5 | 0.0017 |  |
| [CVE-2026-31767](https://patchblox.com/security/data/cve/CVE-2026-31767.md) | Routine | drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode | 5.5 | 0.0016 |  |
| [CVE-2026-43073](https://patchblox.com/security/data/cve/CVE-2026-43073.md) | Routine | x86-64: rename misleadingly named '__copy_user_nocache()' function | 5.5 | 0.0016 |  |
| [CVE-2026-31677](https://patchblox.com/security/data/cve/CVE-2026-31677.md) | Routine | crypto: af_alg - limit RX SG extraction by receive buffer budget | 5.5 | 0.0016 |  |
| [CVE-2026-43036](https://patchblox.com/security/data/cve/CVE-2026-43036.md) | Routine | net: use skb_header_pointer() for TCPv4 GSO frag_off check | 5.5 | 0.0016 |  |
| [CVE-2026-43107](https://patchblox.com/security/data/cve/CVE-2026-43107.md) | Routine | xfrm: account XFRMA_IF_ID in aevent size calculation | 5.5 | 0.0016 |  |
| [CVE-2026-43089](https://patchblox.com/security/data/cve/CVE-2026-43089.md) | Routine | kernel-64kb: xfrm_user: fix info leak in build_mapping() (bsc#1264261). | 5.5 | 0.0013 |  |
| [CVE-2026-31733](https://patchblox.com/security/data/cve/CVE-2026-31733.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 |  |
| [CVE-2026-43026](https://patchblox.com/security/data/cve/CVE-2026-43026.md) | Routine | kernel-64kb: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932). | 6.1 | 0.0013 |  |
| [CVE-2026-31625](https://patchblox.com/security/data/cve/CVE-2026-31625.md) | Routine | HID: alps: fix NULL pointer dereference in alps_raw_event() | 5.5 | 0.0013 |  |
| [CVE-2026-31628](https://patchblox.com/security/data/cve/CVE-2026-31628.md) | Routine | x86/CPU: Fix FPDSS on Zen1 | 5.5 | 0.0013 |  |
| [CVE-2026-31634](https://patchblox.com/security/data/cve/CVE-2026-31634.md) | Routine | rxrpc: fix reference count leak in rxrpc_server_keyring() | 5.5 | 0.0013 |  |
| [CVE-2026-31752](https://patchblox.com/security/data/cve/CVE-2026-31752.md) | Routine | kernel-64kb: bridge: br_nd_send: validate ND option lengths (bsc#1264045). | 5.5 | 0.0013 |  |
| [CVE-2026-43024](https://patchblox.com/security/data/cve/CVE-2026-43024.md) | Routine | kernel-64kb: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930). | 5.5 | 0.0013 |  |
| [CVE-2026-43035](https://patchblox.com/security/data/cve/CVE-2026-43035.md) | Routine | kernel-64kb: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996). | 5.5 | 0.0013 |  |
| [CVE-2026-43085](https://patchblox.com/security/data/cve/CVE-2026-43085.md) | Routine | kernel-64kb: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230). | 5.5 | 0.0013 |  |
| [CVE-2026-31422](https://patchblox.com/security/data/cve/CVE-2026-31422.md) | Routine | net/sched: cls_flow: fix NULL pointer dereference on shared blocks | 5.5 | 0.0013 |  |
| [CVE-2026-31424](https://patchblox.com/security/data/cve/CVE-2026-31424.md) | Routine | netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP | 5.5 | 0.0013 |  |
| [CVE-2026-31421](https://patchblox.com/security/data/cve/CVE-2026-31421.md) | Routine | net/sched: cls_fw: fix NULL pointer dereference on shared blocks | 5.5 | 0.0013 |  |
| [CVE-2026-31423](https://patchblox.com/security/data/cve/CVE-2026-31423.md) | Routine | net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() | 5.5 | 0.0013 |  |
| [CVE-2026-31681](https://patchblox.com/security/data/cve/CVE-2026-31681.md) | Routine | netfilter: xt_multiport: validate range encoding in checkentry | 6.1 | 0.0012 |  |
| [CVE-2026-31738](https://patchblox.com/security/data/cve/CVE-2026-31738.md) | Routine | kernel-source: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059). | 5.5 | 0.0012 |  |
| [CVE-2026-31781](https://patchblox.com/security/data/cve/CVE-2026-31781.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43013](https://patchblox.com/security/data/cve/CVE-2026-43013.md) | Routine | kernel-64kb: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011). | 5.5 | 0.0012 |  |
| [CVE-2026-43079](https://patchblox.com/security/data/cve/CVE-2026-43079.md) | Routine | kernel-64kb: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228). | 5.5 | 0.0012 |  |
| [CVE-2026-43094](https://patchblox.com/security/data/cve/CVE-2026-43094.md) | Routine | kernel-64kb: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231). | 5.5 | 0.0012 |  |
| [CVE-2026-43333](https://patchblox.com/security/data/cve/CVE-2026-43333.md) | Routine | kernel-64kb: bpf: reject direct access to nullable PTR_TO_BUF pointers (bsc#1264726). | 5.5 | 0.0012 |  |
| [CVE-2026-43012](https://patchblox.com/security/data/cve/CVE-2026-43012.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-43086](https://patchblox.com/security/data/cve/CVE-2026-43086.md) | Routine | kernel-64kb: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286). | 5.5 | 0.0012 |  |
| [CVE-2026-43090](https://patchblox.com/security/data/cve/CVE-2026-43090.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-43092](https://patchblox.com/security/data/cve/CVE-2026-43092.md) | Routine | kernel-64kb: xsk: validate MTU against usable frame size on bind (bsc#1264270). | 5.5 | 0.0012 |  |
| [CVE-2026-43323](https://patchblox.com/security/data/cve/CVE-2026-43323.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  sched/fair: Fix zero_vruntime tracking fix  John... | 5.5 | 0.0012 |  |
| [CVE-2026-23389](https://patchblox.com/security/data/cve/CVE-2026-23389.md) | Routine | ice: Fix memory leak in ice_set_ringparam() | 6.2 | 0.0012 |  |
| [CVE-2026-31664](https://patchblox.com/security/data/cve/CVE-2026-31664.md) | Routine | xfrm: clear trailing padding in build_polexpire() | 5.5 | 0.0012 |  |
| [CVE-2026-31671](https://patchblox.com/security/data/cve/CVE-2026-31671.md) | Routine | xfrm_user: fix info leak in build_report() | 5.5 | 0.0012 |  |
| [CVE-2026-31415](https://patchblox.com/security/data/cve/CVE-2026-31415.md) | Routine | kernel-64kb: ipv6: avoid overflows in ip6_datagram_send_ctl() (bsc#1262099). | 5.5 | 0.0012 |  |
| [CVE-2026-31689](https://patchblox.com/security/data/cve/CVE-2026-31689.md) | Routine | EDAC/mc: Fix error path ordering in edac_mc_alloc() | 5.5 | 0.0012 |  |
| [CVE-2026-43338](https://patchblox.com/security/data/cve/CVE-2026-43338.md) | Routine | btrfs: reserve enough transaction items for qgroup ioctls | 5.5 | 0.0012 |  |
| [CVE-2026-43043](https://patchblox.com/security/data/cve/CVE-2026-43043.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43046](https://patchblox.com/security/data/cve/CVE-2026-43046.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43054](https://patchblox.com/security/data/cve/CVE-2026-43054.md) | Routine | kernel-64kb: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063). | 5.5 | 0.0011 |  |
| [CVE-2026-22986](https://patchblox.com/security/data/cve/CVE-2026-22986.md) | Routine | kernel-uek: gpiolib: fix race condition for gdev->srcu (Pawel Narewski) [Orabug: 38887677] | 5.3 | 0.0010 |  |
| [CVE-2026-31466](https://patchblox.com/security/data/cve/CVE-2026-31466.md) | Routine | kernel-64kb: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825). | 5.5 | 0.0009 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.