{
  "fix": "ALAS2023-2026-1866",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866",
  "summary": "ALAS2023-2026-1866, released June 22, 2026, fixes 130 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 18 packages",
  "released": "2026-06-22T09:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-52993, rated Critical",
  "supported": true,
  "cveCount": 130,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.04576,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1866.html",
  "appliesTo": [
    {
      "product": "bpftool6.18",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.18.33-63.124",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.18.33-63.124",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.18",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.18",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-52993",
      "url": "https://patchblox.com/security/cve/CVE-2026-52993",
      "title": "tipc: fix double-free in tipc_buf_append()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52955",
      "url": "https://patchblox.com/security/cve/CVE-2026-52955",
      "title": "kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53002",
      "url": "https://patchblox.com/security/cve/CVE-2026-53002",
      "title": "netfilter: conntrack: remove sprintf usage",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53075",
      "url": "https://patchblox.com/security/cve/CVE-2026-53075",
      "title": "ppp: require CAP_NET_ADMIN in target netns for unattached ioctls",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53009",
      "url": "https://patchblox.com/security/cve/CVE-2026-53009",
      "title": "ice: fix double-free of tx_buf skb",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52991",
      "url": "https://patchblox.com/security/cve/CVE-2026-52991",
      "title": "sched/psi: fix race between file release and pressure write",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53036",
      "url": "https://patchblox.com/security/cve/CVE-2026-53036",
      "title": "bpf, arm64: Fix off-by-one in check_imm signed range check",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53053",
      "url": "https://patchblox.com/security/cve/CVE-2026-53053",
      "title": "iommu/amd: Fix clone_alias() to use the original device\u0027s devid",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53077",
      "url": "https://patchblox.com/security/cve/CVE-2026-53077",
      "title": "net/rds: Restrict use of RDS/IB to the initial network namespace",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53062",
      "url": "https://patchblox.com/security/cve/CVE-2026-53062",
      "title": "dm cache policy smq: fix missing locks in invalidating cache blocks",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46242",
      "url": "https://patchblox.com/security/cve/CVE-2026-46242",
      "title": "kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.04576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52958",
      "url": "https://patchblox.com/security/cve/CVE-2026-52958",
      "title": "libceph: Fix potential out-of-bounds access in osdmap_decode()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00735,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53003",
      "url": "https://patchblox.com/security/cve/CVE-2026-53003",
      "title": "pppoe: drop PFC frames",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00716,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52986",
      "url": "https://patchblox.com/security/cve/CVE-2026-52986",
      "title": "netfilter: nf_conntrack_sip: don\u0027t use simple_strtoul",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00634,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52999",
      "url": "https://patchblox.com/security/cve/CVE-2026-52999",
      "title": "netfilter: nfnetlink_osf: fix out-of-bounds read on option matching",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00591,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52998",
      "url": "https://patchblox.com/security/cve/CVE-2026-52998",
      "title": "netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00579,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52981",
      "url": "https://patchblox.com/security/cve/CVE-2026-52981",
      "title": "kernel-64kb: neigh: let neigh_xmit take skb ownership (bsc#1269254).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00532,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52954",
      "url": "https://patchblox.com/security/cve/CVE-2026-52954",
      "title": "libceph: handle rbtree insertion error in decode_choose_args()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52957",
      "url": "https://patchblox.com/security/cve/CVE-2026-52957",
      "title": "libceph: Fix potential null-ptr-deref in decode_choose_args()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52974",
      "url": "https://patchblox.com/security/cve/CVE-2026-52974",
      "title": "net: tls: fix strparser anchor skb leak on offload RX setup failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53284",
      "url": "https://patchblox.com/security/cve/CVE-2026-53284",
      "title": "btrfs: only release the dirty pages io tree after successful writes",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53026",
      "url": "https://patchblox.com/security/cve/CVE-2026-53026",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nNFSD: fix nfs4_file access extra count in nfsd4_a...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00426,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45843",
      "url": "https://patchblox.com/security/cve/CVE-2026-45843",
      "title": "slip: bound decode() reads against the compressed packet length",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53006",
      "url": "https://patchblox.com/security/cve/CVE-2026-53006",
      "title": "ipv6: fix possible UAF in icmpv6_rcv()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00394,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52967",
      "url": "https://patchblox.com/security/cve/CVE-2026-52967",
      "title": "kernel-default: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00393,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53069",
      "url": "https://patchblox.com/security/cve/CVE-2026-53069",
      "title": "kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64379",
      "url": "https://patchblox.com/security/cve/CVE-2026-64379",
      "title": "smb: client: mask server-provided mode to 07777 in modefromsid",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00309,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52920",
      "url": "https://patchblox.com/security/cve/CVE-2026-52920",
      "title": "netfilter: xt_policy: fix strict mode inbound policy matching",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.3,
      "epss": 0.00299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46215",
      "url": "https://patchblox.com/security/cve/CVE-2026-46215",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ndrm: Set old handle to NULL before prime swap in...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52969",
      "url": "https://patchblox.com/security/cve/CVE-2026-52969",
      "title": "KVM: Reject wrapped offset in kvm_reset_dirty_gfn()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52973",
      "url": "https://patchblox.com/security/cve/CVE-2026-52973",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nfutex: Drop CLONE_THREAD requirement for private...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53000",
      "url": "https://patchblox.com/security/cve/CVE-2026-53000",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: nat: use kfree_rcu to release ops\nFlor...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63860",
      "url": "https://patchblox.com/security/cve/CVE-2026-63860",
      "title": "kernel-64kb: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53081",
      "url": "https://patchblox.com/security/cve/CVE-2026-53081",
      "title": "kernel-64kb: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars (bsc#1269708).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53085",
      "url": "https://patchblox.com/security/cve/CVE-2026-53085",
      "title": "kernel-64kb: bpf: fix mm lifecycle in open-coded task_vma iterator (bsc#1269879).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53115",
      "url": "https://patchblox.com/security/cve/CVE-2026-53115",
      "title": "bus: fsl-mc: use generic driver_override infrastructure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53119",
      "url": "https://patchblox.com/security/cve/CVE-2026-53119",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  platform/wmi: use generic driver_override infras...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53120",
      "url": "https://patchblox.com/security/cve/CVE-2026-53120",
      "title": "PCI: use generic driver_override infrastructure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53067",
      "url": "https://patchblox.com/security/cve/CVE-2026-53067",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  PCI: endpoint: pci-ep-msi: Fix error unwind and...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53023",
      "url": "https://patchblox.com/security/cve/CVE-2026-53023",
      "title": "fs/ntfs3: terminate the cached volume label after UTF-8 conversion",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52972",
      "url": "https://patchblox.com/security/cve/CVE-2026-52972",
      "title": "crypto: af_alg - Cap AEAD AD length to 0x80000000",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46209",
      "url": "https://patchblox.com/security/cve/CVE-2026-46209",
      "title": "kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53059",
      "url": "https://patchblox.com/security/cve/CVE-2026-53059",
      "title": "dm log: fix out-of-bounds write due to region_count overflow",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52962",
      "url": "https://patchblox.com/security/cve/CVE-2026-52962",
      "title": "ceph: fix a buffer leak in __ceph_setxattr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46274",
      "url": "https://patchblox.com/security/cve/CVE-2026-46274",
      "title": "io-wq: check that the predecessor is hashed in io_wq_remove_pending()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53281",
      "url": "https://patchblox.com/security/cve/CVE-2026-53281",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\niommu/vt-d: Avoid NULL pointer dereference or ref...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45839",
      "url": "https://patchblox.com/security/cve/CVE-2026-45839",
      "title": "bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46164",
      "url": "https://patchblox.com/security/cve/CVE-2026-46164",
      "title": "btrfs: fix double free in create_space_info_sub_group() error path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53033",
      "url": "https://patchblox.com/security/cve/CVE-2026-53033",
      "title": "kernel-64kb: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52953",
      "url": "https://patchblox.com/security/cve/CVE-2026-52953",
      "title": "iommu/vt-d: Fix oops due to out of scope access",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52970",
      "url": "https://patchblox.com/security/cve/CVE-2026-52970",
      "title": "netfilter: nft_ct: fix missing expect put in obj eval",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53092",
      "url": "https://patchblox.com/security/cve/CVE-2026-53092",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix linked reg delta tracking when src_reg...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45840",
      "url": "https://patchblox.com/security/cve/CVE-2026-45840",
      "title": "kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46234",
      "url": "https://patchblox.com/security/cve/CVE-2026-46234",
      "title": "vsock: fix buffer size clamping order",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53011",
      "url": "https://patchblox.com/security/cve/CVE-2026-53011",
      "title": "net/sched: taprio: fix use-after-free in advance_sched() on schedule switch",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53004",
      "url": "https://patchblox.com/security/cve/CVE-2026-53004",
      "title": "kernel-uek-modules-extra: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53031",
      "url": "https://patchblox.com/security/cve/CVE-2026-53031",
      "title": "kernel-64kb: bpf: Validate node_id in arena_alloc_pages() (bsc#1269380).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53094",
      "url": "https://patchblox.com/security/cve/CVE-2026-53094",
      "title": "bpf: Fix stale offload-\u003Eprog pointer after constant blinding",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53063",
      "url": "https://patchblox.com/security/cve/CVE-2026-53063",
      "title": "dm cache: fix write hang in passthrough mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53034",
      "url": "https://patchblox.com/security/cve/CVE-2026-53034",
      "title": "bpf, sockmap: Fix af_unix null-ptr-deref in proto update",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63865",
      "url": "https://patchblox.com/security/cve/CVE-2026-63865",
      "title": "kernel-64kb: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46324",
      "url": "https://patchblox.com/security/cve/CVE-2026-46324",
      "title": "kernel-default: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53064",
      "url": "https://patchblox.com/security/cve/CVE-2026-53064",
      "title": "dm cache: fix null-deref with concurrent writes in passthrough mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53021",
      "url": "https://patchblox.com/security/cve/CVE-2026-53021",
      "title": "scsi: target: core: Fix integer overflow in UNMAP bounds check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53110",
      "url": "https://patchblox.com/security/cve/CVE-2026-53110",
      "title": "s390/bpf: Zero-extend bpf prog return values and kfunc arguments",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46154",
      "url": "https://patchblox.com/security/cve/CVE-2026-46154",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Read scx_root under scx_cgroup_ops_rw...",
      "priority": "High",
      "severity": "high",
      "cvss": 7,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53129",
      "url": "https://patchblox.com/security/cve/CVE-2026-53129",
      "title": "fs/mbcache: cancel shrink work before destroying the cache",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53076",
      "url": "https://patchblox.com/security/cve/CVE-2026-53076",
      "title": "kernel-64kb: bpf: Fix OOB in pcpu_init_value (bsc#1269695).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52959",
      "url": "https://patchblox.com/security/cve/CVE-2026-52959",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00113,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52975",
      "url": "https://patchblox.com/security/cve/CVE-2026-52975",
      "title": "bonding: 3ad: implement proper RCU rules for port-\u003Eaggregator",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46227",
      "url": "https://patchblox.com/security/cve/CVE-2026-46227",
      "title": "sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53050",
      "url": "https://patchblox.com/security/cve/CVE-2026-53050",
      "title": "quota: Fix race of dquot_scan_active() with quota deactivation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53096",
      "url": "https://patchblox.com/security/cve/CVE-2026-53096",
      "title": "bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53047",
      "url": "https://patchblox.com/security/cve/CVE-2026-53047",
      "title": "efi/capsule-loader: fix incorrect sizeof in phys array reallocation",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52980",
      "url": "https://patchblox.com/security/cve/CVE-2026-52980",
      "title": "kernel-64kb: sched/fair: Clear rel_deadline when initializing forked entities (bsc#1269252).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53014",
      "url": "https://patchblox.com/security/cve/CVE-2026-53014",
      "title": "kernel-64kb: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53038",
      "url": "https://patchblox.com/security/cve/CVE-2026-53038",
      "title": "kernel-64kb: ima_fs: Correctly create securityfs files for unsupported hash algos (bsc#1269391).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53083",
      "url": "https://patchblox.com/security/cve/CVE-2026-53083",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix RCU stall in bpf_fd_array_map_clear()...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53084",
      "url": "https://patchblox.com/security/cve/CVE-2026-53084",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: return VMA snapshot from task_vma iterator...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53128",
      "url": "https://patchblox.com/security/cve/CVE-2026-53128",
      "title": "drbd: Balance RCU calls in drbd_adm_dump_devices()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53288",
      "url": "https://patchblox.com/security/cve/CVE-2026-53288",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: Reserve an extra page for early kernel ma...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53321",
      "url": "https://patchblox.com/security/cve/CVE-2026-53321",
      "title": "kernel-64kb: io_uring/napi: cap busy_poll_to 10 msec (bsc#1269724).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52978",
      "url": "https://patchblox.com/security/cve/CVE-2026-52978",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: psp: require admin permission for dev-set a...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52997",
      "url": "https://patchblox.com/security/cve/CVE-2026-52997",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: sch_dualpi2: drain both C-queue and L...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53095",
      "url": "https://patchblox.com/security/cve/CVE-2026-53095",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix abuse of kprobe_write_ctx via freplace...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53121",
      "url": "https://patchblox.com/security/cve/CVE-2026-53121",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  amd-pstate: Fix memory leak in amd_pstate_epp_cp...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53282",
      "url": "https://patchblox.com/security/cve/CVE-2026-53282",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  x86/kexec: Push kjump return address even for no...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53283",
      "url": "https://patchblox.com/security/cve/CVE-2026-53283",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/amd: Bounds-check devid in __rlookup_amd_i...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53307",
      "url": "https://patchblox.com/security/cve/CVE-2026-53307",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  pinctrl: pinconf-generic: Fully validate \u0027pinmux...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52961",
      "url": "https://patchblox.com/security/cve/CVE-2026-52961",
      "title": "cephfs: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size (bsc#1269129).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53012",
      "url": "https://patchblox.com/security/cve/CVE-2026-53012",
      "title": "nexthop: fix IPv6 route referencing IPv4 nexthop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53295",
      "url": "https://patchblox.com/security/cve/CVE-2026-53295",
      "title": "mailbox: add sanity check for channel array",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45841",
      "url": "https://patchblox.com/security/cve/CVE-2026-45841",
      "title": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45844",
      "url": "https://patchblox.com/security/cve/CVE-2026-45844",
      "title": "bpftool: netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Pablo Neira Ayuso) [Orabug: 39451507]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46214",
      "url": "https://patchblox.com/security/cve/CVE-2026-46214",
      "title": "kernel-uek-debug-modules-extra: vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45838",
      "url": "https://patchblox.com/security/cve/CVE-2026-45838",
      "title": "bpf: fix end-of-list detection in cgroup_storage_get_next_key()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45842",
      "url": "https://patchblox.com/security/cve/CVE-2026-45842",
      "title": "slip: reject VJ receive packets on instances with no rstate array",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53001",
      "url": "https://patchblox.com/security/cve/CVE-2026-53001",
      "title": "kernel-uek: netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621740]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52984",
      "url": "https://patchblox.com/security/cve/CVE-2026-52984",
      "title": "kernel-uek-container: net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52990",
      "url": "https://patchblox.com/security/cve/CVE-2026-52990",
      "title": "kernel-64kb: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53060",
      "url": "https://patchblox.com/security/cve/CVE-2026-53060",
      "title": "dm cache metadata: fix memory leak on metadata abort retry",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45846",
      "url": "https://patchblox.com/security/cve/CVE-2026-45846",
      "title": "bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46207",
      "url": "https://patchblox.com/security/cve/CVE-2026-46207",
      "title": "kernel-64kb: vsock/virtio: fix length and offset in tap skb for split packets (bsc#1267691).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52994",
      "url": "https://patchblox.com/security/cve/CVE-2026-52994",
      "title": "kernel-default: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53122",
      "url": "https://patchblox.com/security/cve/CVE-2026-53122",
      "title": "btrfs: fix deadlock between reflink and transaction commit when using flushoncommit",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52979",
      "url": "https://patchblox.com/security/cve/CVE-2026-52979",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: psp: check for device unregister when creat...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53125",
      "url": "https://patchblox.com/security/cve/CVE-2026-53125",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  md: fix array_state=clear sysfs deadlock  When \u0022...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53323",
      "url": "https://patchblox.com/security/cve/CVE-2026-53323",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: dsa: remove redundant netdev_lock_ops() fro...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52977",
      "url": "https://patchblox.com/security/cve/CVE-2026-52977",
      "title": "futex: Prevent lockup in requeue-PI during signal/ timeout wakeup",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52985",
      "url": "https://patchblox.com/security/cve/CVE-2026-52985",
      "title": "kernel-uek-debug-devel: netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52995",
      "url": "https://patchblox.com/security/cve/CVE-2026-52995",
      "title": "kernel-64kb: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53015",
      "url": "https://patchblox.com/security/cve/CVE-2026-53015",
      "title": "erofs: unify lcn as u64 for 32-bit platforms",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53061",
      "url": "https://patchblox.com/security/cve/CVE-2026-53061",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dm cache: fix dirty mapping checking in passthro...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53287",
      "url": "https://patchblox.com/security/cve/CVE-2026-53287",
      "title": "audit: fix incorrect inheritable capability in CAPSET records",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53289",
      "url": "https://patchblox.com/security/cve/CVE-2026-53289",
      "title": "ice: fix NULL pointer dereference in ice_reset_all_vfs()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53013",
      "url": "https://patchblox.com/security/cve/CVE-2026-53013",
      "title": "macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53032",
      "url": "https://patchblox.com/security/cve/CVE-2026-53032",
      "title": "bpf: Fix NULL deref in map_kptr_match_type for scalar regs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53111",
      "url": "https://patchblox.com/security/cve/CVE-2026-53111",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: test_run: Fix the null pointer dereference...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46236",
      "url": "https://patchblox.com/security/cve/CVE-2026-46236",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53314",
      "url": "https://patchblox.com/security/cve/CVE-2026-53314",
      "title": "padata: Put CPU offline callback in ONLINE section to allow failure",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53123",
      "url": "https://patchblox.com/security/cve/CVE-2026-53123",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  md: wake raid456 reshape waiters before suspend...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53074",
      "url": "https://patchblox.com/security/cve/CVE-2026-53074",
      "title": "bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.4,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52925",
      "url": "https://patchblox.com/security/cve/CVE-2026-52925",
      "title": "vrf: Fix a potential NPD when removing a port from a VRF",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52936",
      "url": "https://patchblox.com/security/cve/CVE-2026-52936",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53126",
      "url": "https://patchblox.com/security/cve/CVE-2026-53126",
      "title": "blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53114",
      "url": "https://patchblox.com/security/cve/CVE-2026-53114",
      "title": "kernel-64kb: perf: Extend the bit width of the arch-specific flag (bsc#1269999).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00112,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53304",
      "url": "https://patchblox.com/security/cve/CVE-2026-53304",
      "title": "scsi: sg: Resolve soft lockup issue when opening /dev/sgX",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00101,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46159",
      "url": "https://patchblox.com/security/cve/CVE-2026-46159",
      "title": "btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00098,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53035",
      "url": "https://patchblox.com/security/cve/CVE-2026-53035",
      "title": "bpf, sockmap: Fix af_unix iter deadlock",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53037",
      "url": "https://patchblox.com/security/cve/CVE-2026-53037",
      "title": "HID: usbhid: fix deadlock in hid_post_reset()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T19:49:26Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}