# ALAS2023-2026-1746: Security update for 18 packages ALAS2023-2026-1746, released May 25, 2026, fixes 128 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1746 - Platform: Linux - Released: May 25, 2026 - Priority: Urgent (Closes CVE-2026-43067, rated Critical) - CVEs: 128, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1746.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.18](https://patchblox.com/security/data/product/linux/bpftool6.18.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [bpftool6.18-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel-livepatch-6.18.25-52.107](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.18.25-52.107.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.18](https://patchblox.com/security/data/product/linux/kernel6.18.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-devel](https://patchblox.com/security/data/product/linux/kernel6.18-devel.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-headers](https://patchblox.com/security/data/product/linux/kernel6.18-headers.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra-common.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-tools](https://patchblox.com/security/data/product/linux/kernel6.18-tools.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-tools-debuginfo.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.18-tools-devel.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [perf6.18](https://patchblox.com/security/data/product/linux/perf6.18.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [python3-perf6.18](https://patchblox.com/security/data/product/linux/python3-perf6.18.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [python3-perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-43067](https://patchblox.com/security/data/cve/CVE-2026-43067.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching for block... | 9.8 | 0.0050 | | | [CVE-2026-43037](https://patchblox.com/security/data/cve/CVE-2026-43037.md) | High | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() | 9.8 | 0.0069 | | | [CVE-2026-31682](https://patchblox.com/security/data/cve/CVE-2026-31682.md) | High | bridge: br_nd_send: linearize skb before parsing ND options | 9.1 | 0.0064 | | | [CVE-2026-31414](https://patchblox.com/security/data/cve/CVE-2026-31414.md) | High | netfilter: nf_conntrack_expect: use expect->helper | 9.8 | 0.0058 | | | [CVE-2026-43341](https://patchblox.com/security/data/cve/CVE-2026-43341.md) | High | kernel-64kb: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044). | 9.8 | 0.0051 | | | [CVE-2026-31448](https://patchblox.com/security/data/cve/CVE-2026-31448.md) | High | ext4: avoid infinite loops caused by residual data | 9.4 | 0.0050 | | | [CVE-2026-31609](https://patchblox.com/security/data/cve/CVE-2026-31609.md) | High | smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() | 9.8 | 0.0046 | | | [CVE-2026-43057](https://patchblox.com/security/data/cve/CVE-2026-43057.md) | High | kernel-64kb: net: mpls: error out if inner headers are not set (bsc#1264056). | 7.5 | 0.0044 | | | [CVE-2026-43336](https://patchblox.com/security/data/cve/CVE-2026-43336.md) | High | kernel-64kb: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113). | 7.5 | 0.0043 | | | [CVE-2026-31450](https://patchblox.com/security/data/cve/CVE-2026-31450.md) | High | ext4: publish jinode after initialization | 8.8 | 0.0041 | | | [CVE-2026-31467](https://patchblox.com/security/data/cve/CVE-2026-31467.md) | High | erofs: add GFP_NOIO in the bio completion if needed | 8.8 | 0.0038 | | | [CVE-2026-43055](https://patchblox.com/security/data/cve/CVE-2026-43055.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: file: Use kzalloc_flex for aio_cmd... | 7.5 | 0.0036 | | | [CVE-2026-31435](https://patchblox.com/security/data/cve/CVE-2026-31435.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix read abandonment during retry Under... | 8.8 | 0.0034 | | | [CVE-2026-43029](https://patchblox.com/security/data/cve/CVE-2026-43029.md) | High | mptcp: fix soft lockup in mptcp_recvmsg() | 7.5 | 0.0033 | | | [CVE-2026-43048](https://patchblox.com/security/data/cve/CVE-2026-43048.md) | High | HID: core: Mitigate potential OOB by removing bogus memset() | 8.8 | 0.0032 | | | [CVE-2026-31570](https://patchblox.com/security/data/cve/CVE-2026-31570.md) | High | can: gw: fix OOB heap access in cgw_csum_crc8_rel() | 8.8 | 0.0026 | | | [CVE-2026-43038](https://patchblox.com/security/data/cve/CVE-2026-43038.md) | High | kpatch-patch-4_18_0-553_125_1: kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() | 9.8 | 0.0026 | | | [CVE-2026-31413](https://patchblox.com/security/data/cve/CVE-2026-31413.md) | High | kernel-uek: ELSA-2026-50260: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0023 | | | [CVE-2026-31554](https://patchblox.com/security/data/cve/CVE-2026-31554.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0021 | | | [CVE-2026-23401](https://patchblox.com/security/data/cve/CVE-2026-23401.md) | High | KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE | 8.8 | 0.0019 | | | [CVE-2026-43329](https://patchblox.com/security/data/cve/CVE-2026-43329.md) | High | kernel-64kb: netfilter: flowtable: strictly check for maximum number of actions (bsc#1265085). | 7.8 | 0.0018 | | | [CVE-2026-23415](https://patchblox.com/security/data/cve/CVE-2026-23415.md) | High | kernel: kernel: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() | 7.8 | 0.0017 | | | [CVE-2026-31674](https://patchblox.com/security/data/cve/CVE-2026-31674.md) | High | netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() | 7.1 | 0.0017 | | | [CVE-2026-31675](https://patchblox.com/security/data/cve/CVE-2026-31675.md) | High | net/sched: sch_netem: fix out-of-bounds access in packet corruption | 7.8 | 0.0016 | | | [CVE-2026-31680](https://patchblox.com/security/data/cve/CVE-2026-31680.md) | High | net: ipv6: flowlabel: defer exclusive option free until RCU teardown | 7.8 | 0.0016 | | | [CVE-2026-31525](https://patchblox.com/security/data/cve/CVE-2026-31525.md) | High | bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN | 7.8 | 0.0016 | | | [CVE-2026-43332](https://patchblox.com/security/data/cve/CVE-2026-43332.md) | High | kernel-doc: kernel: thermal: core: Fix thermal zone device registration error path | 7.8 | 0.0016 | | | [CVE-2026-31406](https://patchblox.com/security/data/cve/CVE-2026-31406.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 | | | [CVE-2026-31679](https://patchblox.com/security/data/cve/CVE-2026-31679.md) | High | openvswitch: validate MPLS set/set_masked payload length | 7.1 | 0.0016 | | | [CVE-2026-43339](https://patchblox.com/security/data/cve/CVE-2026-43339.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... | 8.1 | 0.0016 | | | [CVE-2026-31426](https://patchblox.com/security/data/cve/CVE-2026-31426.md) | High | ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() | 7.0 | 0.0015 | | | [CVE-2026-31449](https://patchblox.com/security/data/cve/CVE-2026-31449.md) | High | ext4: validate p_idx bounds in ext4_ext_correct_indexes | 7.8 | 0.0015 | | | [CVE-2026-31447](https://patchblox.com/security/data/cve/CVE-2026-31447.md) | High | ext4: reject mount if bigalloc with s_first_data_block != 0 | 7.8 | 0.0014 | | | [CVE-2026-31446](https://patchblox.com/security/data/cve/CVE-2026-31446.md) | High | ext4: fix use-after-free in update_super_work when racing with umount | 7.8 | 0.0014 | | | [CVE-2026-31452](https://patchblox.com/security/data/cve/CVE-2026-31452.md) | High | ext4: convert inline data to extents when truncate exceeds inline size | 7.8 | 0.0014 | | | [CVE-2026-31469](https://patchblox.com/security/data/cve/CVE-2026-31469.md) | High | virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false | 7.8 | 0.0014 | | | [CVE-2026-43030](https://patchblox.com/security/data/cve/CVE-2026-43030.md) | High | kernel-64kb: bpf: Fix regsafe() for pointers to packet (bsc#1264000). | 7.8 | 0.0014 | | | [CVE-2026-31419](https://patchblox.com/security/data/cve/CVE-2026-31419.md) | High | net: bonding: fix use-after-free in bond_xmit_broadcast() | 8.8 | 0.0013 | | | [CVE-2026-31678](https://patchblox.com/security/data/cve/CVE-2026-31678.md) | High | openvswitch: defer tunnel netdev_put to RCU release | 8.8 | 0.0013 | | | [CVE-2026-43028](https://patchblox.com/security/data/cve/CVE-2026-43028.md) | High | kernel-64kb: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934). | 7.1 | 0.0013 | | | [CVE-2026-43027](https://patchblox.com/security/data/cve/CVE-2026-43027.md) | High | kernel-default: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933). | 7.8 | 0.0013 | | | [CVE-2026-31453](https://patchblox.com/security/data/cve/CVE-2026-31453.md) | High | xfs: avoid dereferencing log items after push callbacks | 7.8 | 0.0013 | | | [CVE-2026-31502](https://patchblox.com/security/data/cve/CVE-2026-31502.md) | High | team: fix header_ops type confusion with non-Ethernet ports | 7.8 | 0.0013 | | | [CVE-2026-31527](https://patchblox.com/security/data/cve/CVE-2026-31527.md) | High | driver core: platform: use generic driver_override infrastructure | 7.8 | 0.0013 | | | [CVE-2026-31528](https://patchblox.com/security/data/cve/CVE-2026-31528.md) | High | perf: Make sure to use pmu_ctx->pmu for groups | 7.8 | 0.0013 | | | [CVE-2026-31759](https://patchblox.com/security/data/cve/CVE-2026-31759.md) | High | kernel-default: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076). | 7.8 | 0.0013 | | | [CVE-2026-43328](https://patchblox.com/security/data/cve/CVE-2026-43328.md) | High | kernel-64kb: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832). | 7.8 | 0.0013 | | | [CVE-2026-31518](https://patchblox.com/security/data/cve/CVE-2026-31518.md) | High | esp: fix skb leak with espintcp and async crypto | 7.1 | 0.0013 | | | [CVE-2026-43040](https://patchblox.com/security/data/cve/CVE-2026-43040.md) | High | kernel-64kb: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info- | 7.1 | 0.0013 | | | [CVE-2026-31515](https://patchblox.com/security/data/cve/CVE-2026-31515.md) | High | af_key: validate families in pfkey_send_migrate() | 7.0 | 0.0013 | | | [CVE-2026-31521](https://patchblox.com/security/data/cve/CVE-2026-31521.md) | High | module: Fix kernel panic when a symbol st_shndx is out of bounds | 7.0 | 0.0013 | | | [CVE-2026-31555](https://patchblox.com/security/data/cve/CVE-2026-31555.md) | High | futex: Clear stale exiting pointer in futex_lock_pi() retry path | 7.0 | 0.0013 | | | [CVE-2026-31742](https://patchblox.com/security/data/cve/CVE-2026-31742.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vt: discard stale unicode buffer on alt screen e... | 7.8 | 0.0013 | | | [CVE-2026-43025](https://patchblox.com/security/data/cve/CVE-2026-43025.md) | High | kernel-default: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931). | 7.3 | 0.0013 | | | [CVE-2026-31782](https://patchblox.com/security/data/cve/CVE-2026-31782.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad container_of in inte... | 7.8 | 0.0013 | | | [CVE-2026-31454](https://patchblox.com/security/data/cve/CVE-2026-31454.md) | High | xfs: save ailp before dropping the AIL lock in push callbacks | 7.8 | 0.0013 | | | [CVE-2026-31455](https://patchblox.com/security/data/cve/CVE-2026-31455.md) | High | xfs: stop reclaim before pushing AIL during unmount | 7.8 | 0.0013 | | | [CVE-2026-31695](https://patchblox.com/security/data/cve/CVE-2026-31695.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid... | 7.8 | 0.0013 | | | [CVE-2026-43016](https://patchblox.com/security/data/cve/CVE-2026-43016.md) | High | kernel-64kb: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007). | 7.8 | 0.0013 | | | [CVE-2026-43063](https://patchblox.com/security/data/cve/CVE-2026-43063.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-31470](https://patchblox.com/security/data/cve/CVE-2026-31470.md) | High | kernel-64kb: virt: tdx-guest: Fix handling of host controlled 'quote' buffer length (bsc#1262665). | 7.1 | 0.0013 | | | [CVE-2026-31774](https://patchblox.com/security/data/cve/CVE-2026-31774.md) | High | kernel-64kb: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040). | 7.1 | 0.0013 | | | [CVE-2026-31416](https://patchblox.com/security/data/cve/CVE-2026-31416.md) | High | netfilter: nfnetlink_log: account for netlink header size | 8.1 | 0.0013 | | | [CVE-2026-31427](https://patchblox.com/security/data/cve/CVE-2026-31427.md) | High | netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp | 7.8 | 0.0013 | | | [CVE-2026-31503](https://patchblox.com/security/data/cve/CVE-2026-31503.md) | High | udp: Fix wildcard bind conflict check when using hash2 | 7.8 | 0.0013 | | | [CVE-2026-43006](https://patchblox.com/security/data/cve/CVE-2026-43006.md) | High | kernel: ELSA-2026-21557: kernel security update (IMPORTANT) | 7.5 | 0.0012 | | | [CVE-2026-31492](https://patchblox.com/security/data/cve/CVE-2026-31492.md) | High | RDMA/irdma: Initialize free_qp completion before using it | 7.1 | 0.0012 | | | [CVE-2026-31519](https://patchblox.com/security/data/cve/CVE-2026-31519.md) | High | btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create | 7.1 | 0.0012 | | | [CVE-2026-43047](https://patchblox.com/security/data/cve/CVE-2026-43047.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 | | | [CVE-2026-31487](https://patchblox.com/security/data/cve/CVE-2026-31487.md) | High | spi: use generic driver_override infrastructure | 7.0 | 0.0012 | | | [CVE-2026-31508](https://patchblox.com/security/data/cve/CVE-2026-31508.md) | High | net: openvswitch: Avoid releasing netdev before teardown completes | 8.8 | 0.0011 | | | [CVE-2026-31504](https://patchblox.com/security/data/cve/CVE-2026-31504.md) | High | net: fix fanout UAF in packet_release() via NETDEV_UP race | 7.8 | 0.0011 | | | [CVE-2026-31516](https://patchblox.com/security/data/cve/CVE-2026-31516.md) | High | xfrm: prevent policy_hthresh.work from racing with netns teardown | 7.8 | 0.0010 | | | [CVE-2026-31473](https://patchblox.com/security/data/cve/CVE-2026-31473.md) | High | media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex | 7.8 | 0.0010 | | | [CVE-2026-31731](https://patchblox.com/security/data/cve/CVE-2026-31731.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0010 | | | [CVE-2026-31523](https://patchblox.com/security/data/cve/CVE-2026-31523.md) | High | nvme-pci: ensure we're polling a polled queue | 7.1 | 0.0009 | | | [CVE-2026-23414](https://patchblox.com/security/data/cve/CVE-2026-23414.md) | Routine | tls: Purge async_hold in tls_decrypt_async_wait() | 5.5 | 0.0037 | | | [CVE-2026-23416](https://patchblox.com/security/data/cve/CVE-2026-23416.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/mseal: update VMA end correctly on merge Pre... | 5.5 | 0.0022 | | | [CVE-2026-23402](https://patchblox.com/security/data/cve/CVE-2026-23402.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Only WARN in direct MMUs when over... | 5.5 | 0.0017 | | | [CVE-2026-31767](https://patchblox.com/security/data/cve/CVE-2026-31767.md) | Routine | drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode | 5.5 | 0.0016 | | | [CVE-2026-43036](https://patchblox.com/security/data/cve/CVE-2026-43036.md) | Routine | net: use skb_header_pointer() for TCPv4 GSO frag_off check | 5.5 | 0.0016 | | | [CVE-2026-31428](https://patchblox.com/security/data/cve/CVE-2026-31428.md) | Routine | netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD | 5.5 | 0.0014 | | | [CVE-2026-31733](https://patchblox.com/security/data/cve/CVE-2026-31733.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-43026](https://patchblox.com/security/data/cve/CVE-2026-43026.md) | Routine | kernel-64kb: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932). | 6.1 | 0.0013 | | | [CVE-2026-31451](https://patchblox.com/security/data/cve/CVE-2026-31451.md) | Routine | ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio | 5.5 | 0.0013 | | | [CVE-2026-31495](https://patchblox.com/security/data/cve/CVE-2026-31495.md) | Routine | netfilter: ctnetlink: use netlink policy range checks | 5.5 | 0.0013 | | | [CVE-2026-31752](https://patchblox.com/security/data/cve/CVE-2026-31752.md) | Routine | kernel-64kb: bridge: br_nd_send: validate ND option lengths (bsc#1264045). | 5.5 | 0.0013 | | | [CVE-2026-43024](https://patchblox.com/security/data/cve/CVE-2026-43024.md) | Routine | kernel-64kb: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930). | 5.5 | 0.0013 | | | [CVE-2026-43035](https://patchblox.com/security/data/cve/CVE-2026-43035.md) | Routine | kernel-64kb: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996). | 5.5 | 0.0013 | | | [CVE-2026-31567](https://patchblox.com/security/data/cve/CVE-2026-31567.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Drop spurious WARN_ON() from pm_resto... | 5.5 | 0.0013 | | | [CVE-2026-31422](https://patchblox.com/security/data/cve/CVE-2026-31422.md) | Routine | net/sched: cls_flow: fix NULL pointer dereference on shared blocks | 5.5 | 0.0013 | | | [CVE-2026-31424](https://patchblox.com/security/data/cve/CVE-2026-31424.md) | Routine | netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP | 5.5 | 0.0013 | | | [CVE-2026-31526](https://patchblox.com/security/data/cve/CVE-2026-31526.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subpro... | 5.5 | 0.0013 | | | [CVE-2026-31421](https://patchblox.com/security/data/cve/CVE-2026-31421.md) | Routine | net/sched: cls_fw: fix NULL pointer dereference on shared blocks | 5.5 | 0.0013 | | | [CVE-2026-31423](https://patchblox.com/security/data/cve/CVE-2026-31423.md) | Routine | net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() | 5.5 | 0.0013 | | | [CVE-2026-31496](https://patchblox.com/security/data/cve/CVE-2026-31496.md) | Routine | netfilter: nf_conntrack_expect: skip expectations in other netns via proc | 5.5 | 0.0013 | | | [CVE-2026-31434](https://patchblox.com/security/data/cve/CVE-2026-31434.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-31524](https://patchblox.com/security/data/cve/CVE-2026-31524.md) | Routine | HID: asus: avoid memory leak in asus_report_fixup() | 5.5 | 0.0012 | | | [CVE-2026-31738](https://patchblox.com/security/data/cve/CVE-2026-31738.md) | Routine | kernel-source: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059). | 5.5 | 0.0012 | | | [CVE-2026-31781](https://patchblox.com/security/data/cve/CVE-2026-31781.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 | | | [CVE-2026-43010](https://patchblox.com/security/data/cve/CVE-2026-43010.md) | Routine | bpf: Reject sleepable kprobe_multi programs at attach time | 5.5 | 0.0012 | | | [CVE-2026-43013](https://patchblox.com/security/data/cve/CVE-2026-43013.md) | Routine | kernel-64kb: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011). | 5.5 | 0.0012 | | | [CVE-2026-43333](https://patchblox.com/security/data/cve/CVE-2026-43333.md) | Routine | kernel-64kb: bpf: reject direct access to nullable PTR_TO_BUF pointers (bsc#1264726). | 5.5 | 0.0012 | | | [CVE-2026-31438](https://patchblox.com/security/data/cve/CVE-2026-31438.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-31458](https://patchblox.com/security/data/cve/CVE-2026-31458.md) | Routine | mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] | 5.5 | 0.0012 | | | [CVE-2026-31514](https://patchblox.com/security/data/cve/CVE-2026-31514.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-31561](https://patchblox.com/security/data/cve/CVE-2026-31561.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 | | | [CVE-2026-31732](https://patchblox.com/security/data/cve/CVE-2026-31732.md) | Routine | kernel-uek64k: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-43012](https://patchblox.com/security/data/cve/CVE-2026-43012.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-43323](https://patchblox.com/security/data/cve/CVE-2026-43323.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix zero_vruntime tracking fix John... | 5.5 | 0.0012 | | | [CVE-2026-31445](https://patchblox.com/security/data/cve/CVE-2026-31445.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid use of half-online-committe... | 5.5 | 0.0012 | | | [CVE-2026-31457](https://patchblox.com/security/data/cve/CVE-2026-31457.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr in repeat_cal... | 5.5 | 0.0012 | | | [CVE-2026-31459](https://patchblox.com/security/data/cve/CVE-2026-31459.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysf... | 5.5 | 0.0012 | | | [CVE-2026-31465](https://patchblox.com/security/data/cve/CVE-2026-31465.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with... | 5.5 | 0.0012 | | | [CVE-2026-31571](https://patchblox.com/security/data/cve/CVE-2026-31571.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Unlink NV12 planes earlier unlink_nv1... | 5.5 | 0.0012 | | | [CVE-2026-31734](https://patchblox.com/security/data/cve/CVE-2026-31734.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix is_bpf_migration_disabled() false... | 5.5 | 0.0012 | | | [CVE-2026-23417](https://patchblox.com/security/data/cve/CVE-2026-23417.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-31415](https://patchblox.com/security/data/cve/CVE-2026-31415.md) | Routine | kernel-64kb: ipv6: avoid overflows in ip6_datagram_send_ctl() (bsc#1262099). | 5.5 | 0.0012 | | | [CVE-2026-43065](https://patchblox.com/security/data/cve/CVE-2026-43065.md) | Routine | kernel-64kb: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243). | 5.5 | 0.0012 | | | [CVE-2026-43066](https://patchblox.com/security/data/cve/CVE-2026-43066.md) | Routine | kernel-64kb: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245). | 5.5 | 0.0012 | | | [CVE-2026-43068](https://patchblox.com/security/data/cve/CVE-2026-43068.md) | Routine | kernel-64kb: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255). | 5.5 | 0.0012 | | | [CVE-2026-53080](https://patchblox.com/security/data/cve/CVE-2026-53080.md) | Routine | net/sched: cls_fw: fix NULL dereference of "old" filters before change() | 5.5 | 0.0012 | | | [CVE-2026-43338](https://patchblox.com/security/data/cve/CVE-2026-43338.md) | Routine | btrfs: reserve enough transaction items for qgroup ioctls | 5.5 | 0.0012 | | | [CVE-2026-43046](https://patchblox.com/security/data/cve/CVE-2026-43046.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0011 | | | [CVE-2026-43054](https://patchblox.com/security/data/cve/CVE-2026-43054.md) | Routine | kernel-64kb: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063). | 5.5 | 0.0011 | | | [CVE-2026-31480](https://patchblox.com/security/data/cve/CVE-2026-31480.md) | Routine | tracing: Fix potential deadlock in cpu hotplug with osnoise | 5.5 | 0.0010 | | | [CVE-2026-31466](https://patchblox.com/security/data/cve/CVE-2026-31466.md) | Routine | kernel-64kb: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825). | 5.5 | 0.0009 | | | [CVE-2026-31456](https://patchblox.com/security/data/cve/CVE-2026-31456.md) | Routine | kernel-uek: mm/pagewalk: fix race between concurrent split and refault (Max Boone) [Orabug: 39250782] | 5.5 | 0.0009 | | --- Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.