{
  "fix": "ALAS2023-2026-1753",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1753",
  "summary": "ALAS2023-2026-1753, released May 25, 2026, fixes 95 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 18 packages",
  "released": "2026-05-25T09:00:00Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2026-43499, high severity",
  "supported": true,
  "cveCount": 95,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.05372,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1753.html",
  "appliesTo": [
    {
      "product": "bpftool6.12",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.12.88-119.157",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.88-119.157",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-43499",
      "url": "https://patchblox.com/security/cve/CVE-2026-43499",
      "title": "rtmutex: Use waiter::task instead of current in remove_waiter()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.05372,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46333",
      "url": "https://patchblox.com/security/cve/CVE-2026-46333",
      "title": "ptrace: slightly saner \u0027get_dumpable()\u0027 logic",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.04299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43501",
      "url": "https://patchblox.com/security/cve/CVE-2026-43501",
      "title": "ipv6: rpl: reserve mac_len headroom when recompressed SRH grows",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00732,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43493",
      "url": "https://patchblox.com/security/cve/CVE-2026-43493",
      "title": "crypto: pcrypt - Fix handling of MAY_BACKLOG requests",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00681,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46195",
      "url": "https://patchblox.com/security/cve/CVE-2026-46195",
      "title": "smb: client: validate dacloffset before building DACL pointers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00675,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46102",
      "url": "https://patchblox.com/security/cve/CVE-2026-46102",
      "title": "net: strparser: fix skb_head leak in strp_abort_strp()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00564,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46177",
      "url": "https://patchblox.com/security/cve/CVE-2026-46177",
      "title": "kernel-uek64k: ipmi: Add limits to event and receive message requests (Corey Minyard) [Orabug: 39460490]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.00564,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46119",
      "url": "https://patchblox.com/security/cve/CVE-2026-46119",
      "title": "libceph: Fix slab-out-of-bounds access in auth message processing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46185",
      "url": "https://patchblox.com/security/cve/CVE-2026-46185",
      "title": "smb/client: fix out-of-bounds read in symlink_data()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46037",
      "url": "https://patchblox.com/security/cve/CVE-2026-46037",
      "title": "ipv4: icmp: validate reply type before using icmp_pointers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00512,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46052",
      "url": "https://patchblox.com/security/cve/CVE-2026-46052",
      "title": "ceph: only d_add() negative dentries when they are unhashed",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46115",
      "url": "https://patchblox.com/security/cve/CVE-2026-46115",
      "title": "block: add pgmap check to biovec_phys_mergeable",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46024",
      "url": "https://patchblox.com/security/cve/CVE-2026-46024",
      "title": "libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46155",
      "url": "https://patchblox.com/security/cve/CVE-2026-46155",
      "title": "kernel-64kb: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.1,
      "epss": 0.00478,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46124",
      "url": "https://patchblox.com/security/cve/CVE-2026-46124",
      "title": "kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.00476,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45988",
      "url": "https://patchblox.com/security/cve/CVE-2026-45988",
      "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46289",
      "url": "https://patchblox.com/security/cve/CVE-2026-46289",
      "title": "lib/scatterlist: fix length calculations in extract_kvec_to_sg",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46306",
      "url": "https://patchblox.com/security/cve/CVE-2026-46306",
      "title": "flow_dissector: do not dissect PPPoE PFC frames",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00449,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43494",
      "url": "https://patchblox.com/security/cve/CVE-2026-43494",
      "title": "net/rds: reset op_nents when zerocopy page pin fails",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31709",
      "url": "https://patchblox.com/security/cve/CVE-2026-31709",
      "title": "smb: client: validate the whole DACL before rewriting it in cifsacl",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00345,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43502",
      "url": "https://patchblox.com/security/cve/CVE-2026-43502",
      "title": "net/rds: handle zerocopy send cleanup before the message is queued",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00324,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46303",
      "url": "https://patchblox.com/security/cve/CVE-2026-46303",
      "title": "isofs: validate Rock Ridge CE continuation extent against volume size",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.0032,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46099",
      "url": "https://patchblox.com/security/cve/CVE-2026-46099",
      "title": "net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00288,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31694",
      "url": "https://patchblox.com/security/cve/CVE-2026-31694",
      "title": "fuse: reject oversized dirents in page cache",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00284,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46113",
      "url": "https://patchblox.com/security/cve/CVE-2026-46113",
      "title": "kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53369",
      "url": "https://patchblox.com/security/cve/CVE-2026-53369",
      "title": "kernel-64kb: udf: reject descriptors with oversized CRC length (bsc#1271818).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45991",
      "url": "https://patchblox.com/security/cve/CVE-2026-45991",
      "title": "udf: fix partition descriptor append bookkeeping",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45989",
      "url": "https://patchblox.com/security/cve/CVE-2026-45989",
      "title": "of: unittest: fix use-after-free in testdrv_probe()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46174",
      "url": "https://patchblox.com/security/cve/CVE-2026-46174",
      "title": "x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52933",
      "url": "https://patchblox.com/security/cve/CVE-2026-52933",
      "title": "io_uring/poll: fix signed comparison in io_poll_get_ownership()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46145",
      "url": "https://patchblox.com/security/cve/CVE-2026-46145",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46294",
      "url": "https://patchblox.com/security/cve/CVE-2026-46294",
      "title": "kernel-uek: dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46149",
      "url": "https://patchblox.com/security/cve/CVE-2026-46149",
      "title": "scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46062",
      "url": "https://patchblox.com/security/cve/CVE-2026-46062",
      "title": "ntfs3: fix integer overflow in run_unpack() volume boundary check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46176",
      "url": "https://patchblox.com/security/cve/CVE-2026-46176",
      "title": "RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46021",
      "url": "https://patchblox.com/security/cve/CVE-2026-46021",
      "title": "thermal: core: Fix thermal zone governor cleanup issues",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46076",
      "url": "https://patchblox.com/security/cve/CVE-2026-46076",
      "title": "KVM: nSVM: Raise #UD if unhandled VMMCALL isn\u0027t intercepted by L1",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46129",
      "url": "https://patchblox.com/security/cve/CVE-2026-46129",
      "title": "btrfs: fix double free in create_space_info() error path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46162",
      "url": "https://patchblox.com/security/cve/CVE-2026-46162",
      "title": "kernel-64kb: ice: fix double free in ice_sf_eth_activate() error path (bsc#1266840).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46193",
      "url": "https://patchblox.com/security/cve/CVE-2026-46193",
      "title": "kernel-uek-debug-devel: xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460554]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46033",
      "url": "https://patchblox.com/security/cve/CVE-2026-46033",
      "title": "crypto: authencesn - reject short ahash digests during instance creation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46015",
      "url": "https://patchblox.com/security/cve/CVE-2026-46015",
      "title": "tcp: call sk_data_ready() after listener migration",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46132",
      "url": "https://patchblox.com/security/cve/CVE-2026-46132",
      "title": "bpftool: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46172",
      "url": "https://patchblox.com/security/cve/CVE-2026-46172",
      "title": "kernel-64kb: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (bsc#1266903).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46023",
      "url": "https://patchblox.com/security/cve/CVE-2026-46023",
      "title": "dm mirror: fix integer overflow in create_dirty_log()",
      "priority": "High",
      "severity": "Low",
      "cvss": 7,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46173",
      "url": "https://patchblox.com/security/cve/CVE-2026-46173",
      "title": "exit: prevent preemption of oopsing TASK_DEAD task",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46078",
      "url": "https://patchblox.com/security/cve/CVE-2026-46078",
      "title": "erofs: fix the out-of-bounds nameoff handling for trailing dirents",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45999",
      "url": "https://patchblox.com/security/cve/CVE-2026-45999",
      "title": "erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46190",
      "url": "https://patchblox.com/security/cve/CVE-2026-46190",
      "title": "mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46116",
      "url": "https://patchblox.com/security/cve/CVE-2026-46116",
      "title": "xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46065",
      "url": "https://patchblox.com/security/cve/CVE-2026-46065",
      "title": "fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46150",
      "url": "https://patchblox.com/security/cve/CVE-2026-46150",
      "title": "fanotify: fix false positive on permission events",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46053",
      "url": "https://patchblox.com/security/cve/CVE-2026-46053",
      "title": "net: rds: fix MR cleanup on copy error",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46084",
      "url": "https://patchblox.com/security/cve/CVE-2026-46084",
      "title": "RDMA/mana_ib: Disable RX steering on RSS QP destroy",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46086",
      "url": "https://patchblox.com/security/cve/CVE-2026-46086",
      "title": "net: bridge: use a stable FDB dst snapshot in RCU readers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46120",
      "url": "https://patchblox.com/security/cve/CVE-2026-46120",
      "title": "kernel: kernel: ip6_gre: Use cached t-\u003Enet in ip6erspan_changelink()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31716",
      "url": "https://patchblox.com/security/cve/CVE-2026-31716",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: validate rec-\u003Eused in journal-replay f...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46070",
      "url": "https://patchblox.com/security/cve/CVE-2026-46070",
      "title": "md/raid5: validate payload size before accessing journal metadata",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46121",
      "url": "https://patchblox.com/security/cve/CVE-2026-46121",
      "title": "mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46094",
      "url": "https://patchblox.com/security/cve/CVE-2026-46094",
      "title": "ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46072",
      "url": "https://patchblox.com/security/cve/CVE-2026-46072",
      "title": "ntfs3: add buffer boundary checks to run_unpack()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45837",
      "url": "https://patchblox.com/security/cve/CVE-2026-45837",
      "title": "kernel-64kb: Require (reasonably) normal mappings for MADV_DOFORK (bsc#1266398).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43109",
      "url": "https://patchblox.com/security/cve/CVE-2026-43109",
      "title": "x86: shadow stacks: proper error handling for mmap lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31700",
      "url": "https://patchblox.com/security/cve/CVE-2026-31700",
      "title": "net/packet: fix TOCTOU race on mmap\u0027d vnet_hdr in tpacket_snd()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46107",
      "url": "https://patchblox.com/security/cve/CVE-2026-46107",
      "title": "dm-thin: fix metadata refcount underflow",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46000",
      "url": "https://patchblox.com/security/cve/CVE-2026-46000",
      "title": "rxrpc: Fix conn-level packet handling to unshare RESPONSE packets",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43492",
      "url": "https://patchblox.com/security/cve/CVE-2026-43492",
      "title": "lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46079",
      "url": "https://patchblox.com/security/cve/CVE-2026-46079",
      "title": "rbd: fix null-ptr-deref when device_add_disk() fails",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46089",
      "url": "https://patchblox.com/security/cve/CVE-2026-46089",
      "title": "zram: do not forget to endio for partial discard requests",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46196",
      "url": "https://patchblox.com/security/cve/CVE-2026-46196",
      "title": "tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46128",
      "url": "https://patchblox.com/security/cve/CVE-2026-46128",
      "title": "bpftool: ipmi: Check event message buffer response for bad data (Corey Minyard) [Orabug: 39460284]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46161",
      "url": "https://patchblox.com/security/cve/CVE-2026-46161",
      "title": "bpftool: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46040",
      "url": "https://patchblox.com/security/cve/CVE-2026-46040",
      "title": "bpftool: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (Chia-Ming Chang) [Orabug: 39452251]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46046",
      "url": "https://patchblox.com/security/cve/CVE-2026-46046",
      "title": "ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46101",
      "url": "https://patchblox.com/security/cve/CVE-2026-46101",
      "title": "bpftool: netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452465]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46005",
      "url": "https://patchblox.com/security/cve/CVE-2026-46005",
      "title": "xfs: fix a resource leak in xfs_alloc_buftarg()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46168",
      "url": "https://patchblox.com/security/cve/CVE-2026-46168",
      "title": "mptcp: fix scheduling with atomic in timestamp sockopt",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46131",
      "url": "https://patchblox.com/security/cve/CVE-2026-46131",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46144",
      "url": "https://patchblox.com/security/cve/CVE-2026-46144",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45987",
      "url": "https://patchblox.com/security/cve/CVE-2026-45987",
      "title": "KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45997",
      "url": "https://patchblox.com/security/cve/CVE-2026-45997",
      "title": "kernel-64kb: scsi: sd: fix missing put_disk() when device_add(\u0026disk_dev) fails (bsc#1266740).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46082",
      "url": "https://patchblox.com/security/cve/CVE-2026-46082",
      "title": "KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46083",
      "url": "https://patchblox.com/security/cve/CVE-2026-46083",
      "title": "spi: fix resource leaks on device setup failure",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46108",
      "url": "https://patchblox.com/security/cve/CVE-2026-46108",
      "title": "kernel-uek: ipmi:si: Return state to normal if message allocation fails (Corey Minyard) [Orabug: 39460202]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46292",
      "url": "https://patchblox.com/security/cve/CVE-2026-46292",
      "title": "pmdomain: core: Fix detach procedure for virtual devices in genpd",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46106",
      "url": "https://patchblox.com/security/cve/CVE-2026-46106",
      "title": "eventfs: Hold eventfs_mutex and SRCU when remount walks events",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46139",
      "url": "https://patchblox.com/security/cve/CVE-2026-46139",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: use kzalloc to zero-initialize secu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46283",
      "url": "https://patchblox.com/security/cve/CVE-2026-46283",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43496",
      "url": "https://patchblox.com/security/cve/CVE-2026-43496",
      "title": "net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52928",
      "url": "https://patchblox.com/security/cve/CVE-2026-52928",
      "title": "af_unix: Reject SIOCATMARK on non-stream sockets",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46165",
      "url": "https://patchblox.com/security/cve/CVE-2026-46165",
      "title": "openvswitch: vport: fix self-deadlock on release of tunnel ports",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00099,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46051",
      "url": "https://patchblox.com/security/cve/CVE-2026-46051",
      "title": "md/raid5: fix soft lockup in retry_aligned_read()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46050",
      "url": "https://patchblox.com/security/cve/CVE-2026-46050",
      "title": "md/raid10: fix deadlock with check operation and nowait requests",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46061",
      "url": "https://patchblox.com/security/cve/CVE-2026-46061",
      "title": "kernel-uek: jbd2: fix deadlock in jbd2_journal_cancel_revoke() (Zhang Yi) [Orabug: 39452318]",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31456",
      "url": "https://patchblox.com/security/cve/CVE-2026-31456",
      "title": "kernel-uek: mm/pagewalk: fix race between concurrent split and refault (Max Boone) [Orabug: 39250782]",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00089,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}