# ALAS2023-2026-1754: Security update for 18 packages

ALAS2023-2026-1754, released May 25, 2026, fixes 126 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1754
- Platform: Linux
- Released: May 25, 2026
- Priority: High (Closes CVE-2026-43499, high severity)
- CVEs: 126, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1754.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool6.18](https://patchblox.com/security/data/product/linux/bpftool6.18.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [bpftool6.18-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.18-debuginfo.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [kernel-livepatch-6.18.30-61.116](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.18.30-61.116.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel6.18](https://patchblox.com/security/data/product/linux/kernel6.18.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [kernel6.18-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [kernel6.18-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [kernel6.18-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [kernel6.18-devel](https://patchblox.com/security/data/product/linux/kernel6.18-devel.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [kernel6.18-headers](https://patchblox.com/security/data/product/linux/kernel6.18-headers.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [kernel6.18-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [kernel6.18-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra-common.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [kernel6.18-tools](https://patchblox.com/security/data/product/linux/kernel6.18-tools.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [kernel6.18-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-tools-debuginfo.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [kernel6.18-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.18-tools-devel.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [perf6.18](https://patchblox.com/security/data/product/linux/perf6.18.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [python3-perf6.18](https://patchblox.com/security/data/product/linux/python3-perf6.18.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |
| [python3-perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-43499](https://patchblox.com/security/data/cve/CVE-2026-43499.md) | High | rtmutex: Use waiter::task instead of current in remove_waiter() | 7.8 | 0.0537 |  |
| [CVE-2026-46333](https://patchblox.com/security/data/cve/CVE-2026-46333.md) | High | ptrace: slightly saner 'get_dumpable()' logic | 8.1 | 0.0430 |  |
| [CVE-2026-43501](https://patchblox.com/security/data/cve/CVE-2026-43501.md) | High | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 |  |
| [CVE-2026-43493](https://patchblox.com/security/data/cve/CVE-2026-43493.md) | High | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | 9.8 | 0.0068 |  |
| [CVE-2026-46195](https://patchblox.com/security/data/cve/CVE-2026-46195.md) | High | smb: client: validate dacloffset before building DACL pointers | 9.8 | 0.0068 |  |
| [CVE-2026-46102](https://patchblox.com/security/data/cve/CVE-2026-46102.md) | High | net: strparser: fix skb_head leak in strp_abort_strp() | 7.5 | 0.0056 |  |
| [CVE-2026-46177](https://patchblox.com/security/data/cve/CVE-2026-46177.md) | High | kernel-uek64k: ipmi: Add limits to event and receive message requests (Corey Minyard) [Orabug: 39460490] | 7.5 | 0.0056 |  |
| [CVE-2026-46119](https://patchblox.com/security/data/cve/CVE-2026-46119.md) | High | libceph: Fix slab-out-of-bounds access in auth message processing | 9.1 | 0.0053 |  |
| [CVE-2026-46185](https://patchblox.com/security/data/cve/CVE-2026-46185.md) | High | smb/client: fix out-of-bounds read in symlink_data() | 9.1 | 0.0053 |  |
| [CVE-2026-46037](https://patchblox.com/security/data/cve/CVE-2026-46037.md) | High | ipv4: icmp: validate reply type before using icmp_pointers | 8.2 | 0.0051 |  |
| [CVE-2026-46052](https://patchblox.com/security/data/cve/CVE-2026-46052.md) | High | ceph: only d_add() negative dentries when they are unhashed | 7.5 | 0.0050 |  |
| [CVE-2026-46115](https://patchblox.com/security/data/cve/CVE-2026-46115.md) | High | block: add pgmap check to biovec_phys_mergeable | 9.8 | 0.0049 |  |
| [CVE-2026-46024](https://patchblox.com/security/data/cve/CVE-2026-46024.md) | High | libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() | 7.5 | 0.0049 |  |
| [CVE-2026-46155](https://patchblox.com/security/data/cve/CVE-2026-46155.md) | High | kernel-64kb: smb/client: fix out-of-bounds read in smb2_compound_op() (bsc#1267720). | 9.1 | 0.0048 |  |
| [CVE-2026-46137](https://patchblox.com/security/data/cve/CVE-2026-46137.md) | High | mptcp: pm: ADD_ADDR rtx: fix potential data-race | 9.8 | 0.0048 |  |
| [CVE-2026-46124](https://patchblox.com/security/data/cve/CVE-2026-46124.md) | High | kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847). | 7.5 | 0.0048 |  |
| [CVE-2026-45988](https://patchblox.com/security/data/cve/CVE-2026-45988.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0046 |  |
| [CVE-2026-46289](https://patchblox.com/security/data/cve/CVE-2026-46289.md) | High | lib/scatterlist: fix length calculations in extract_kvec_to_sg | 9.8 | 0.0046 |  |
| [CVE-2026-46306](https://patchblox.com/security/data/cve/CVE-2026-46306.md) | High | flow_dissector: do not dissect PPPoE PFC frames | 8.1 | 0.0045 |  |
| [CVE-2026-31589](https://patchblox.com/security/data/cve/CVE-2026-31589.md) | High | mm: call ->free_folio() directly in folio_unmap_invalidate() | 9.8 | 0.0044 |  |
| [CVE-2026-43494](https://patchblox.com/security/data/cve/CVE-2026-43494.md) | High | net/rds: reset op_nents when zerocopy page pin fails | 7.8 | 0.0041 |  |
| [CVE-2026-43502](https://patchblox.com/security/data/cve/CVE-2026-43502.md) | High | net/rds: handle zerocopy send cleanup before the message is queued | 7.8 | 0.0032 |  |
| [CVE-2026-46303](https://patchblox.com/security/data/cve/CVE-2026-46303.md) | High | isofs: validate Rock Ridge CE continuation extent against volume size | 8.2 | 0.0032 |  |
| [CVE-2026-46099](https://patchblox.com/security/data/cve/CVE-2026-46099.md) | High | net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels | 8.1 | 0.0029 |  |
| [CVE-2026-31786](https://patchblox.com/security/data/cve/CVE-2026-31786.md) | High | kernel-uek64k: Buffer overflow in drivers/xen/sys-hypervisor.c (Juergen Gross) [Orabug: 39305898] | 7.8 | 0.0020 |  |
| [CVE-2026-46113](https://patchblox.com/security/data/cve/CVE-2026-46113.md) | High | kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | 8.8 | 0.0020 |  |
| [CVE-2026-53369](https://patchblox.com/security/data/cve/CVE-2026-53369.md) | High | kernel-64kb: udf: reject descriptors with oversized CRC length (bsc#1271818). | 8.4 | 0.0019 |  |
| [CVE-2026-31787](https://patchblox.com/security/data/cve/CVE-2026-31787.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting pr... | 7.8 | 0.0018 |  |
| [CVE-2026-46081](https://patchblox.com/security/data/cve/CVE-2026-46081.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: acomp - fix wrong pointer stored by acom... | 7.8 | 0.0017 |  |
| [CVE-2026-45989](https://patchblox.com/security/data/cve/CVE-2026-45989.md) | High | of: unittest: fix use-after-free in testdrv_probe() | 7.8 | 0.0016 |  |
| [CVE-2026-46174](https://patchblox.com/security/data/cve/CVE-2026-46174.md) | High | x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache | 9.8 | 0.0015 |  |
| [CVE-2026-52933](https://patchblox.com/security/data/cve/CVE-2026-52933.md) | High | io_uring/poll: fix signed comparison in io_poll_get_ownership() | 7.8 | 0.0015 |  |
| [CVE-2026-46145](https://patchblox.com/security/data/cve/CVE-2026-46145.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2026-46029](https://patchblox.com/security/data/cve/CVE-2026-46029.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/slab: return NULL early from kmalloc_nolock()... | 7.0 | 0.0015 |  |
| [CVE-2026-46294](https://patchblox.com/security/data/cve/CVE-2026-46294.md) | High | kernel-uek: dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585] | 7.8 | 0.0015 |  |
| [CVE-2026-46149](https://patchblox.com/security/data/cve/CVE-2026-46149.md) | High | scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() | 8.8 | 0.0014 |  |
| [CVE-2026-46062](https://patchblox.com/security/data/cve/CVE-2026-46062.md) | High | ntfs3: fix integer overflow in run_unpack() volume boundary check | 7.8 | 0.0014 |  |
| [CVE-2026-46176](https://patchblox.com/security/data/cve/CVE-2026-46176.md) | High | RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() | 7.8 | 0.0014 |  |
| [CVE-2026-46021](https://patchblox.com/security/data/cve/CVE-2026-46021.md) | High | thermal: core: Fix thermal zone governor cleanup issues | 7.0 | 0.0014 |  |
| [CVE-2026-46076](https://patchblox.com/security/data/cve/CVE-2026-46076.md) | High | KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 | 8.8 | 0.0014 |  |
| [CVE-2026-46100](https://patchblox.com/security/data/cve/CVE-2026-46100.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs: afs: revert mmap_prepare() change  Partially... | 7.8 | 0.0014 |  |
| [CVE-2026-46281](https://patchblox.com/security/data/cve/CVE-2026-46281.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  vmalloc: fix buffer overflow in vrealloc_node_al... | 7.8 | 0.0014 |  |
| [CVE-2026-46129](https://patchblox.com/security/data/cve/CVE-2026-46129.md) | High | btrfs: fix double free in create_space_info() error path | 7.8 | 0.0014 |  |
| [CVE-2026-46162](https://patchblox.com/security/data/cve/CVE-2026-46162.md) | High | kernel-64kb: ice: fix double free in ice_sf_eth_activate() error path (bsc#1266840). | 7.8 | 0.0014 |  |
| [CVE-2026-46193](https://patchblox.com/security/data/cve/CVE-2026-46193.md) | High | kernel-uek-debug-devel: xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460554] | 7.0 | 0.0014 |  |
| [CVE-2026-46033](https://patchblox.com/security/data/cve/CVE-2026-46033.md) | High | crypto: authencesn - reject short ahash digests during instance creation | 7.3 | 0.0014 |  |
| [CVE-2026-46015](https://patchblox.com/security/data/cve/CVE-2026-46015.md) | High | tcp: call sk_data_ready() after listener migration | 8.1 | 0.0014 |  |
| [CVE-2026-46132](https://patchblox.com/security/data/cve/CVE-2026-46132.md) | High | bpftool: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297] | 7.0 | 0.0014 |  |
| [CVE-2026-46172](https://patchblox.com/security/data/cve/CVE-2026-46172.md) | High | kernel-64kb: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (bsc#1266903). | 7.0 | 0.0013 |  |
| [CVE-2026-46023](https://patchblox.com/security/data/cve/CVE-2026-46023.md) | High | dm mirror: fix integer overflow in create_dirty_log() | 7.0 | 0.0013 |  |
| [CVE-2026-46173](https://patchblox.com/security/data/cve/CVE-2026-46173.md) | High | exit: prevent preemption of oopsing TASK_DEAD task | 7.8 | 0.0013 |  |
| [CVE-2026-46078](https://patchblox.com/security/data/cve/CVE-2026-46078.md) | High | erofs: fix the out-of-bounds nameoff handling for trailing dirents | 7.1 | 0.0013 |  |
| [CVE-2026-45999](https://patchblox.com/security/data/cve/CVE-2026-45999.md) | High | erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() | 7.1 | 0.0013 |  |
| [CVE-2026-46190](https://patchblox.com/security/data/cve/CVE-2026-46190.md) | High | mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() | 7.1 | 0.0013 |  |
| [CVE-2026-46116](https://patchblox.com/security/data/cve/CVE-2026-46116.md) | High | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete | 8.4 | 0.0013 |  |
| [CVE-2026-46065](https://patchblox.com/security/data/cve/CVE-2026-46065.md) | High | fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info | 7.8 | 0.0013 |  |
| [CVE-2026-46150](https://patchblox.com/security/data/cve/CVE-2026-46150.md) | High | fanotify: fix false positive on permission events | 7.8 | 0.0013 |  |
| [CVE-2026-46053](https://patchblox.com/security/data/cve/CVE-2026-46053.md) | High | net: rds: fix MR cleanup on copy error | 7.8 | 0.0013 |  |
| [CVE-2026-46084](https://patchblox.com/security/data/cve/CVE-2026-46084.md) | High | RDMA/mana_ib: Disable RX steering on RSS QP destroy | 7.8 | 0.0013 |  |
| [CVE-2026-46086](https://patchblox.com/security/data/cve/CVE-2026-46086.md) | High | net: bridge: use a stable FDB dst snapshot in RCU readers | 7.8 | 0.0013 |  |
| [CVE-2026-46093](https://patchblox.com/security/data/cve/CVE-2026-46093.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/vmalloc: take vmap_purge_lock in shrinker  de... | 7.8 | 0.0013 |  |
| [CVE-2026-46120](https://patchblox.com/security/data/cve/CVE-2026-46120.md) | High | kernel: kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() | 8.8 | 0.0013 |  |
| [CVE-2026-46070](https://patchblox.com/security/data/cve/CVE-2026-46070.md) | High | md/raid5: validate payload size before accessing journal metadata | 7.1 | 0.0013 |  |
| [CVE-2026-46158](https://patchblox.com/security/data/cve/CVE-2026-46158.md) | High | mptcp: pm: ADD_ADDR rtx: always decrease sk refcount | 7.0 | 0.0013 |  |
| [CVE-2026-46160](https://patchblox.com/security/data/cve/CVE-2026-46160.md) | High | btrfs: fix missing last_unlink_trans update when removing a directory | 7.0 | 0.0013 |  |
| [CVE-2026-46170](https://patchblox.com/security/data/cve/CVE-2026-46170.md) | High | mptcp: pm: ADD_ADDR rtx: free sk if last | 7.0 | 0.0013 |  |
| [CVE-2026-46045](https://patchblox.com/security/data/cve/CVE-2026-46045.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  md/md-llbitmap: skip reading rdevs that are not... | 7.8 | 0.0013 |  |
| [CVE-2026-46105](https://patchblox.com/security/data/cve/CVE-2026-46105.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: mpt3sas: Limit NVMe request size to 2 MiB... | 7.8 | 0.0013 |  |
| [CVE-2026-46279](https://patchblox.com/security/data/cve/CVE-2026-46279.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/alloc_tag: clear codetag for pages allocated... | 7.8 | 0.0013 |  |
| [CVE-2026-46121](https://patchblox.com/security/data/cve/CVE-2026-46121.md) | High | mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock | 7.8 | 0.0013 |  |
| [CVE-2026-46094](https://patchblox.com/security/data/cve/CVE-2026-46094.md) | High | ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access | 7.1 | 0.0013 |  |
| [CVE-2026-46020](https://patchblox.com/security/data/cve/CVE-2026-46020.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/core: validate damos_quota_goal->nid fo... | 7.1 | 0.0012 |  |
| [CVE-2026-43088](https://patchblox.com/security/data/cve/CVE-2026-43088.md) | High | net: af_key: zero aligned sockaddr tail in PF_KEY exports | 7.1 | 0.0012 |  |
| [CVE-2026-46072](https://patchblox.com/security/data/cve/CVE-2026-46072.md) | High | ntfs3: add buffer boundary checks to run_unpack() | 7.1 | 0.0012 |  |
| [CVE-2026-45837](https://patchblox.com/security/data/cve/CVE-2026-45837.md) | High | kernel-64kb: Require (reasonably) normal mappings for MADV_DOFORK (bsc#1266398). | 7.8 | 0.0012 |  |
| [CVE-2026-46107](https://patchblox.com/security/data/cve/CVE-2026-46107.md) | High | dm-thin: fix metadata refcount underflow | 7.8 | 0.0010 |  |
| [CVE-2026-46000](https://patchblox.com/security/data/cve/CVE-2026-46000.md) | Routine | rxrpc: Fix conn-level packet handling to unshare RESPONSE packets | 5.5 | 0.0016 |  |
| [CVE-2026-53367](https://patchblox.com/security/data/cve/CVE-2026-53367.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  selinux: fix avdcache auditing  The per-task avd... | 5.5 | 0.0016 |  |
| [CVE-2026-53370](https://patchblox.com/security/data/cve/CVE-2026-53370.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  perf/x86/intel: Improve validation and configura... | 5.5 | 0.0016 |  |
| [CVE-2026-53372](https://patchblox.com/security/data/cve/CVE-2026-53372.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Block PASID attachment to nested dom... | 5.5 | 0.0016 |  |
| [CVE-2026-43492](https://patchblox.com/security/data/cve/CVE-2026-43492.md) | Routine | lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() | 5.5 | 0.0016 |  |
| [CVE-2026-46079](https://patchblox.com/security/data/cve/CVE-2026-46079.md) | Routine | rbd: fix null-ptr-deref when device_add_disk() fails | 5.5 | 0.0014 |  |
| [CVE-2026-46089](https://patchblox.com/security/data/cve/CVE-2026-46089.md) | Routine | zram: do not forget to endio for partial discard requests | 5.5 | 0.0014 |  |
| [CVE-2026-46196](https://patchblox.com/security/data/cve/CVE-2026-46196.md) | Routine | tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() | 5.5 | 0.0013 |  |
| [CVE-2026-45990](https://patchblox.com/security/data/cve/CVE-2026-45990.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  slub: fix data loss and overflow in krealloc()... | 5.5 | 0.0013 |  |
| [CVE-2026-46128](https://patchblox.com/security/data/cve/CVE-2026-46128.md) | Routine | bpftool: ipmi: Check event message buffer response for bad data (Corey Minyard) [Orabug: 39460284] | 5.5 | 0.0013 |  |
| [CVE-2026-46161](https://patchblox.com/security/data/cve/CVE-2026-46161.md) | Routine | bpftool: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415] | 5.5 | 0.0013 |  |
| [CVE-2026-46040](https://patchblox.com/security/data/cve/CVE-2026-46040.md) | Routine | bpftool: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (Chia-Ming Chang) [Orabug: 39452251] | 5.5 | 0.0013 |  |
| [CVE-2026-46046](https://patchblox.com/security/data/cve/CVE-2026-46046.md) | Routine | ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() | 5.5 | 0.0013 |  |
| [CVE-2026-46101](https://patchblox.com/security/data/cve/CVE-2026-46101.md) | Routine | bpftool: netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452465] | 5.5 | 0.0013 |  |
| [CVE-2026-46005](https://patchblox.com/security/data/cve/CVE-2026-46005.md) | Routine | xfs: fix a resource leak in xfs_alloc_buftarg() | 5.5 | 0.0013 |  |
| [CVE-2026-46168](https://patchblox.com/security/data/cve/CVE-2026-46168.md) | Routine | mptcp: fix scheduling with atomic in timestamp sockopt | 5.5 | 0.0013 |  |
| [CVE-2026-46131](https://patchblox.com/security/data/cve/CVE-2026-46131.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-46144](https://patchblox.com/security/data/cve/CVE-2026-46144.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-46042](https://patchblox.com/security/data/cve/CVE-2026-46042.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/mempolicy: fix memory leaks in weighted_inter... | 5.5 | 0.0013 |  |
| [CVE-2026-46147](https://patchblox.com/security/data/cve/CVE-2026-46147.md) | Routine | KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() | 5.5 | 0.0013 |  |
| [CVE-2026-45987](https://patchblox.com/security/data/cve/CVE-2026-45987.md) | Routine | KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 | 5.5 | 0.0012 |  |
| [CVE-2026-45997](https://patchblox.com/security/data/cve/CVE-2026-45997.md) | Routine | kernel-64kb: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (bsc#1266740). | 5.5 | 0.0012 |  |
| [CVE-2026-46044](https://patchblox.com/security/data/cve/CVE-2026-46044.md) | Routine | kernel-uek-modules-extra: ipmi:ssif: Clean up kthread on errors (Corey Minyard) [Orabug: 39452264] | 5.5 | 0.0012 |  |
| [CVE-2026-46059](https://patchblox.com/security/data/cve/CVE-2026-46059.md) | Routine | KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN | 5.5 | 0.0012 |  |
| [CVE-2026-46071](https://patchblox.com/security/data/cve/CVE-2026-46071.md) | Routine | KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 | 5.5 | 0.0012 |  |
| [CVE-2026-46082](https://patchblox.com/security/data/cve/CVE-2026-46082.md) | Routine | KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 | 5.5 | 0.0012 |  |
| [CVE-2026-46083](https://patchblox.com/security/data/cve/CVE-2026-46083.md) | Routine | spi: fix resource leaks on device setup failure | 5.5 | 0.0012 |  |
| [CVE-2026-46108](https://patchblox.com/security/data/cve/CVE-2026-46108.md) | Routine | kernel-uek: ipmi:si: Return state to normal if message allocation fails (Corey Minyard) [Orabug: 39460202] | 5.5 | 0.0012 |  |
| [CVE-2026-46292](https://patchblox.com/security/data/cve/CVE-2026-46292.md) | Routine | pmdomain: core: Fix detach procedure for virtual devices in genpd | 5.5 | 0.0012 |  |
| [CVE-2026-46066](https://patchblox.com/security/data/cve/CVE-2026-46066.md) | Routine | ceph: fix num_ops off-by-one when crypto allocation fails | 5.5 | 0.0012 |  |
| [CVE-2026-46106](https://patchblox.com/security/data/cve/CVE-2026-46106.md) | Routine | eventfs: Hold eventfs_mutex and SRCU when remount walks events | 5.5 | 0.0012 |  |
| [CVE-2026-46139](https://patchblox.com/security/data/cve/CVE-2026-46139.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: use kzalloc to zero-initialize secu... | 5.5 | 0.0012 |  |
| [CVE-2026-46283](https://patchblox.com/security/data/cve/CVE-2026-46283.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43496](https://patchblox.com/security/data/cve/CVE-2026-43496.md) | Routine | net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked | 5.5 | 0.0012 |  |
| [CVE-2026-46035](https://patchblox.com/security/data/cve/CVE-2026-46035.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/page_alloc: return NULL early from alloc_froz... | 5.5 | 0.0012 |  |
| [CVE-2026-46095](https://patchblox.com/security/data/cve/CVE-2026-46095.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  md/md-llbitmap: raise barrier before state machi... | 5.5 | 0.0012 |  |
| [CVE-2026-46096](https://patchblox.com/security/data/cve/CVE-2026-46096.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-46104](https://patchblox.com/security/data/cve/CVE-2026-46104.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  selinux: use sk blob accessor in socket permissi... | 5.5 | 0.0012 |  |
| [CVE-2026-46284](https://patchblox.com/security/data/cve/CVE-2026-46284.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/hugetlb: fix early boot crash on parameters w... | 5.5 | 0.0012 |  |
| [CVE-2026-46290](https://patchblox.com/security/data/cve/CVE-2026-46290.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  x86/efi: Fix graceful fault handling after FPU s... | 5.5 | 0.0012 |  |
| [CVE-2026-46057](https://patchblox.com/security/data/cve/CVE-2026-46057.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  landlock: Fix LOG_SUBDOMAINS_OFF inheritance acr... | 3.3 | 0.0012 |  |
| [CVE-2026-52928](https://patchblox.com/security/data/cve/CVE-2026-52928.md) | Routine | af_unix: Reject SIOCATMARK on non-stream sockets | 5.5 | 0.0011 |  |
| [CVE-2026-46295](https://patchblox.com/security/data/cve/CVE-2026-46295.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: x86: Do IRR scan in __kvm_apic_update_irr e... | 5.5 | 0.0011 |  |
| [CVE-2026-52905](https://patchblox.com/security/data/cve/CVE-2026-52905.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/core: disallow non-power of two min_reg... | 5.5 | 0.0011 |  |
| [CVE-2026-46165](https://patchblox.com/security/data/cve/CVE-2026-46165.md) | Routine | openvswitch: vport: fix self-deadlock on release of tunnel ports | 5.5 | 0.0010 |  |
| [CVE-2026-46051](https://patchblox.com/security/data/cve/CVE-2026-46051.md) | Routine | md/raid5: fix soft lockup in retry_aligned_read() | 5.5 | 0.0010 |  |
| [CVE-2026-46014](https://patchblox.com/security/data/cve/CVE-2026-46014.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: SVM: Add missing save/restore handling of L... | 5.5 | 0.0010 |  |
| [CVE-2026-46050](https://patchblox.com/security/data/cve/CVE-2026-46050.md) | Routine | md/raid10: fix deadlock with check operation and nowait requests | 5.5 | 0.0010 |  |
| [CVE-2026-46061](https://patchblox.com/security/data/cve/CVE-2026-46061.md) | Routine | kernel-uek: jbd2: fix deadlock in jbd2_journal_cancel_revoke() (Zhang Yi) [Orabug: 39452318] | 5.5 | 0.0009 |  |
| [CVE-2026-46025](https://patchblox.com/security/data/cve/CVE-2026-46025.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/core: fix damon_call() vs kdamond_fn()... | 4.7 | 0.0009 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.