{
  "fix": "ALAS2023-2026-1702",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1702",
  "summary": "ALAS2023-2026-1702, released May 11, 2026, fixes 88 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 22 packages",
  "released": "2026-05-11T09:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-43208, rated Critical",
  "supported": true,
  "cveCount": 88,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00642,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1702.html",
  "appliesTo": [
    {
      "product": "bpftool6.18",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.18.16-18.222",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.18.16-18.222",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-libbpf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.18",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.18",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-43208",
      "url": "https://patchblox.com/security/cve/CVE-2026-43208",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: do not pass flow_id to set_rps_cpu()  Blame...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00481,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71305",
      "url": "https://patchblox.com/security/cve/CVE-2025-71305",
      "title": "drm/display/dp_mst: Add protection against 0 vcpi",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43186",
      "url": "https://patchblox.com/security/cve/CVE-2026-43186",
      "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00642,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43304",
      "url": "https://patchblox.com/security/cve/CVE-2026-43304",
      "title": "kernel-64kb: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00613,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23240",
      "url": "https://patchblox.com/security/cve/CVE-2026-23240",
      "title": "tls: Fix race condition in tls_sw_cancel_work_tx()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00563,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43194",
      "url": "https://patchblox.com/security/cve/CVE-2026-43194",
      "title": "kernel-64kb: net: consume xmit errors of GSO frames (bsc#1264304).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00533,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43226",
      "url": "https://patchblox.com/security/cve/CVE-2026-43226",
      "title": "kernel-64kb: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43230",
      "url": "https://patchblox.com/security/cve/CVE-2026-43230",
      "title": "kernel-64kb: net/rds: Clear reconnect pending bit (bsc#1264539).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43158",
      "url": "https://patchblox.com/security/cve/CVE-2026-43158",
      "title": "kernel-64kb: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00469,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43187",
      "url": "https://patchblox.com/security/cve/CVE-2026-43187",
      "title": "kernel-64kb: xfs: delete attr leaf freemap entries when empty (bsc#1264603).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00469,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43190",
      "url": "https://patchblox.com/security/cve/CVE-2026-43190",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: xt_tcpmss: check remaining length befo...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.2,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43233",
      "url": "https://patchblox.com/security/cve/CVE-2026-43233",
      "title": "kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.2,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43164",
      "url": "https://patchblox.com/security/cve/CVE-2026-43164",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  udplite: Fix null-ptr-deref in __udp_enqueue_sch...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00451,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43254",
      "url": "https://patchblox.com/security/cve/CVE-2026-43254",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ovpn: tcp - fix packet extraction from stream  W...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00451,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43245",
      "url": "https://patchblox.com/security/cve/CVE-2026-43245",
      "title": "ntfs: -\u003Ed_compare() must not block",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43199",
      "url": "https://patchblox.com/security/cve/CVE-2026-43199",
      "title": "net/mlx5e: Fix \u0022scheduling while atomic\u0022 in IPsec MAC address query",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00415,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43139",
      "url": "https://patchblox.com/security/cve/CVE-2026-43139",
      "title": "kernel-64kb: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.6,
      "epss": 0.00375,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43253",
      "url": "https://patchblox.com/security/cve/CVE-2026-43253",
      "title": "kernel-64kb: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.0037,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43215",
      "url": "https://patchblox.com/security/cve/CVE-2026-43215",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0032,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43198",
      "url": "https://patchblox.com/security/cve/CVE-2026-43198",
      "title": "tcp: fix potential race in tcp_v6_syn_recv_sock()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00298,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43239",
      "url": "https://patchblox.com/security/cve/CVE-2026-43239",
      "title": "kernel-64kb: smb: client: prevent races in -\u003Equery_interfaces() (bsc#1264444).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00294,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43153",
      "url": "https://patchblox.com/security/cve/CVE-2026-43153",
      "title": "xfs: remove xfs_attr_leaf_hasname",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43258",
      "url": "https://patchblox.com/security/cve/CVE-2026-43258",
      "title": "alpha: fix user-space corruption during memory compaction",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43303",
      "url": "https://patchblox.com/security/cve/CVE-2026-43303",
      "title": "mm/page_alloc: clear page-\u003Eprivate in free_pages_prepare()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31693",
      "url": "https://patchblox.com/security/cve/CVE-2026-31693",
      "title": "kernel-64kb: cifs: some missing initializations on replay (bsc#1267744).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43321",
      "url": "https://patchblox.com/security/cve/CVE-2026-43321",
      "title": "bpf: Properly mark live registers for indirect jumps",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43128",
      "url": "https://patchblox.com/security/cve/CVE-2026-43128",
      "title": "kernel-64kb: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43150",
      "url": "https://patchblox.com/security/cve/CVE-2026-43150",
      "title": "kernel-64kb: perf/arm-cmn: Ensure dtm_idx is big enough (bsc#1264415).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43133",
      "url": "https://patchblox.com/security/cve/CVE-2026-43133",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23239",
      "url": "https://patchblox.com/security/cve/CVE-2026-23239",
      "title": "espintcp: Fix race condition in espintcp_close()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43166",
      "url": "https://patchblox.com/security/cve/CVE-2026-43166",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: fix interlaced plain identification for e...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43306",
      "url": "https://patchblox.com/security/cve/CVE-2026-43306",
      "title": "bpf: crypto: Use the correct destructor kfunc type",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43281",
      "url": "https://patchblox.com/security/cve/CVE-2026-43281",
      "title": "kernel-64kb: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43278",
      "url": "https://patchblox.com/security/cve/CVE-2026-43278",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43211",
      "url": "https://patchblox.com/security/cve/CVE-2026-43211",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43214",
      "url": "https://patchblox.com/security/cve/CVE-2026-43214",
      "title": "kernel-default: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (bsc#1264651).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43163",
      "url": "https://patchblox.com/security/cve/CVE-2026-43163",
      "title": "kernel-64kb: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00091,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43188",
      "url": "https://patchblox.com/security/cve/CVE-2026-43188",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ceph: do not propagate page array emplacement er...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43272",
      "url": "https://patchblox.com/security/cve/CVE-2026-43272",
      "title": "kernel-64kb: ring-buffer: Fix possible dereference of uninitialized pointer (bsc#1264607).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43234",
      "url": "https://patchblox.com/security/cve/CVE-2026-43234",
      "title": "team: avoid NETDEV_CHANGEMTU event when unregistering slave",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43244",
      "url": "https://patchblox.com/security/cve/CVE-2026-43244",
      "title": "kcm: fix zero-frag skb in frag_list on partial sendmsg error",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23249",
      "url": "https://patchblox.com/security/cve/CVE-2026-23249",
      "title": "kernel-uek: ELSA-2026-50260: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43216",
      "url": "https://patchblox.com/security/cve/CVE-2026-43216",
      "title": "net: Drop the lock in skb_may_tx_timestamp()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43314",
      "url": "https://patchblox.com/security/cve/CVE-2026-43314",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23241",
      "url": "https://patchblox.com/security/cve/CVE-2026-23241",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  audit: add missing syscalls to read class  The \u0022...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71239",
      "url": "https://patchblox.com/security/cve/CVE-2025-71239",
      "title": "audit: add fchmodat2() to change attributes class",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71265",
      "url": "https://patchblox.com/security/cve/CVE-2025-71265",
      "title": "fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71266",
      "url": "https://patchblox.com/security/cve/CVE-2025-71266",
      "title": "fs: ntfs3: check return value of indx_find to avoid infinite loop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71267",
      "url": "https://patchblox.com/security/cve/CVE-2025-71267",
      "title": "fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43288",
      "url": "https://patchblox.com/security/cve/CVE-2026-43288",
      "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43315",
      "url": "https://patchblox.com/security/cve/CVE-2026-43315",
      "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43123",
      "url": "https://patchblox.com/security/cve/CVE-2026-43123",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43124",
      "url": "https://patchblox.com/security/cve/CVE-2026-43124",
      "title": "kernel-64kb: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43132",
      "url": "https://patchblox.com/security/cve/CVE-2026-43132",
      "title": "kernel-64kb: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43143",
      "url": "https://patchblox.com/security/cve/CVE-2026-43143",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43152",
      "url": "https://patchblox.com/security/cve/CVE-2026-43152",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43238",
      "url": "https://patchblox.com/security/cve/CVE-2026-43238",
      "title": "kernel-64kb: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43261",
      "url": "https://patchblox.com/security/cve/CVE-2026-43261",
      "title": "kernel-64kb: arm64: Add support for TSV110 Spectre-BHB mitigation (bsc#1264430).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43210",
      "url": "https://patchblox.com/security/cve/CVE-2026-43210",
      "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43169",
      "url": "https://patchblox.com/security/cve/CVE-2026-43169",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43189",
      "url": "https://patchblox.com/security/cve/CVE-2026-43189",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43201",
      "url": "https://patchblox.com/security/cve/CVE-2026-43201",
      "title": "APEI/GHES: ARM processor Error: don\u0027t go past allocated memory",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43154",
      "url": "https://patchblox.com/security/cve/CVE-2026-43154",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: fix incorrect early exits in volume label...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43179",
      "url": "https://patchblox.com/security/cve/CVE-2026-43179",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: fix incorrect early exits for invalid met...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43224",
      "url": "https://patchblox.com/security/cve/CVE-2026-43224",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/zcrx: fix sgtable leak on mapping failu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71295",
      "url": "https://patchblox.com/security/cve/CVE-2025-71295",
      "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43129",
      "url": "https://patchblox.com/security/cve/CVE-2026-43129",
      "title": "ima: verify the previous kernel\u0027s IMA buffer lies in addressable RAM",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43130",
      "url": "https://patchblox.com/security/cve/CVE-2026-43130",
      "title": "kernel-64kb: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43167",
      "url": "https://patchblox.com/security/cve/CVE-2026-43167",
      "title": "kernel-64kb: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43171",
      "url": "https://patchblox.com/security/cve/CVE-2026-43171",
      "title": "kernel-64kb: EFI/CPER: do not dump the entire memory region (bsc#1264549).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43240",
      "url": "https://patchblox.com/security/cve/CVE-2026-43240",
      "title": "kernel-64kb: ima: verify the previous kernel\u0027s IMA buffer lies in addressable RAM (bsc#1264386).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43287",
      "url": "https://patchblox.com/security/cve/CVE-2026-43287",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43289",
      "url": "https://patchblox.com/security/cve/CVE-2026-43289",
      "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43313",
      "url": "https://patchblox.com/security/cve/CVE-2026-43313",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43292",
      "url": "https://patchblox.com/security/cve/CVE-2026-43292",
      "title": "mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43309",
      "url": "https://patchblox.com/security/cve/CVE-2026-43309",
      "title": "md raid: fix hang when stopping arrays with metadata through dm-raid",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71296",
      "url": "https://patchblox.com/security/cve/CVE-2025-71296",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/tests: shmem: Hold reservation lock around p...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71298",
      "url": "https://patchblox.com/security/cve/CVE-2025-71298",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/tests: shmem: Hold reservation lock around m...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71301",
      "url": "https://patchblox.com/security/cve/CVE-2025-71301",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/tests: shmem: Hold reservation lock around v...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43285",
      "url": "https://patchblox.com/security/cve/CVE-2026-43285",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/slab: do not access current-\u003Emems_allowed_seq...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43286",
      "url": "https://patchblox.com/security/cve/CVE-2026-43286",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/hugetlb: restore failed global reservations t...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43127",
      "url": "https://patchblox.com/security/cve/CVE-2026-43127",
      "title": "ntfs3: fix circular locking dependency in run_unpack_ex",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43266",
      "url": "https://patchblox.com/security/cve/CVE-2026-43266",
      "title": "kernel-64kb: EFI/CPER: don\u0027t go past the ARM processor CPER record buffer (bsc#1264418).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43273",
      "url": "https://patchblox.com/security/cve/CVE-2026-43273",
      "title": "cephfs: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43277",
      "url": "https://patchblox.com/security/cve/CVE-2026-43277",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43121",
      "url": "https://patchblox.com/security/cve/CVE-2026-43121",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/zcrx: fix user_ref race between scrub a...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.7,
      "epss": 0.00111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43147",
      "url": "https://patchblox.com/security/cve/CVE-2026-43147",
      "title": "kernel-default: Revert \u0027PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV\u0027 (bsc#1264642).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43252",
      "url": "https://patchblox.com/security/cve/CVE-2026-43252",
      "title": "kernel-64kb: mptcp: pm: in-kernel: always set ID as avail when rm endp (bsc#1264300).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}