# ALAS2023-2026-1866: Security update for 18 packages ALAS2023-2026-1866, released June 22, 2026, fixes 130 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1866 - Platform: Linux - Released: Jun 22, 2026 - Priority: Urgent (Closes CVE-2026-52993, rated Critical) - CVEs: 130, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1866.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.18](https://patchblox.com/security/data/product/linux/bpftool6.18.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [bpftool6.18-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.18-debuginfo.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel-livepatch-6.18.33-63.124](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.18.33-63.124.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.18](https://patchblox.com/security/data/product/linux/kernel6.18.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-devel](https://patchblox.com/security/data/product/linux/kernel6.18-devel.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-headers](https://patchblox.com/security/data/product/linux/kernel6.18-headers.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra-common.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-tools](https://patchblox.com/security/data/product/linux/kernel6.18-tools.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-tools-debuginfo.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.18-tools-devel.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [perf6.18](https://patchblox.com/security/data/product/linux/perf6.18.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [python3-perf6.18](https://patchblox.com/security/data/product/linux/python3-perf6.18.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [python3-perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-52993](https://patchblox.com/security/data/cve/CVE-2026-52993.md) | Urgent | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 | | | [CVE-2026-52955](https://patchblox.com/security/data/cve/CVE-2026-52955.md) | Urgent | kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159). | 9.8 | 0.0038 | | | [CVE-2026-53002](https://patchblox.com/security/data/cve/CVE-2026-53002.md) | Urgent | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 | | | [CVE-2026-53075](https://patchblox.com/security/data/cve/CVE-2026-53075.md) | Urgent | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 | | | [CVE-2026-53009](https://patchblox.com/security/data/cve/CVE-2026-53009.md) | Urgent | ice: fix double-free of tx_buf skb | 9.8 | 0.0018 | | | [CVE-2026-52991](https://patchblox.com/security/data/cve/CVE-2026-52991.md) | Urgent | sched/psi: fix race between file release and pressure write | 9.8 | 0.0015 | | | [CVE-2026-53036](https://patchblox.com/security/data/cve/CVE-2026-53036.md) | Urgent | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 | | | [CVE-2026-53053](https://patchblox.com/security/data/cve/CVE-2026-53053.md) | Urgent | iommu/amd: Fix clone_alias() to use the original device's devid | 9.8 | 0.0013 | | | [CVE-2026-53077](https://patchblox.com/security/data/cve/CVE-2026-53077.md) | Urgent | net/rds: Restrict use of RDS/IB to the initial network namespace | 9.8 | 0.0012 | | | [CVE-2026-53062](https://patchblox.com/security/data/cve/CVE-2026-53062.md) | Urgent | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 | | | [CVE-2026-46242](https://patchblox.com/security/data/cve/CVE-2026-46242.md) | High | kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618). | 7.8 | 0.0458 | | | [CVE-2026-52958](https://patchblox.com/security/data/cve/CVE-2026-52958.md) | High | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 | | | [CVE-2026-53003](https://patchblox.com/security/data/cve/CVE-2026-53003.md) | High | pppoe: drop PFC frames | 7.5 | 0.0072 | | | [CVE-2026-52986](https://patchblox.com/security/data/cve/CVE-2026-52986.md) | High | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | | | [CVE-2026-52999](https://patchblox.com/security/data/cve/CVE-2026-52999.md) | High | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 | | | [CVE-2026-52998](https://patchblox.com/security/data/cve/CVE-2026-52998.md) | High | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 | | | [CVE-2026-52981](https://patchblox.com/security/data/cve/CVE-2026-52981.md) | High | kernel-64kb: neigh: let neigh_xmit take skb ownership (bsc#1269254). | 7.5 | 0.0053 | | | [CVE-2026-52954](https://patchblox.com/security/data/cve/CVE-2026-52954.md) | High | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 | | | [CVE-2026-52957](https://patchblox.com/security/data/cve/CVE-2026-52957.md) | High | libceph: Fix potential null-ptr-deref in decode_choose_args() | 7.5 | 0.0052 | | | [CVE-2026-52974](https://patchblox.com/security/data/cve/CVE-2026-52974.md) | High | net: tls: fix strparser anchor skb leak on offload RX setup failure | 7.5 | 0.0050 | | | [CVE-2026-53284](https://patchblox.com/security/data/cve/CVE-2026-53284.md) | High | btrfs: only release the dirty pages io tree after successful writes | 7.5 | 0.0048 | | | [CVE-2026-53026](https://patchblox.com/security/data/cve/CVE-2026-53026.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in nfsd4_a... | 8.8 | 0.0043 | | | [CVE-2026-45843](https://patchblox.com/security/data/cve/CVE-2026-45843.md) | High | slip: bound decode() reads against the compressed packet length | 8.2 | 0.0040 | | | [CVE-2026-53006](https://patchblox.com/security/data/cve/CVE-2026-53006.md) | High | ipv6: fix possible UAF in icmpv6_rcv() | 9.8 | 0.0039 | | | [CVE-2026-52967](https://patchblox.com/security/data/cve/CVE-2026-52967.md) | High | kernel-default: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181). | 8.1 | 0.0039 | | | [CVE-2026-53069](https://patchblox.com/security/data/cve/CVE-2026-53069.md) | High | kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186). | 7.5 | 0.0038 | | | [CVE-2026-64379](https://patchblox.com/security/data/cve/CVE-2026-64379.md) | High | smb: client: mask server-provided mode to 07777 in modefromsid | 7.8 | 0.0031 | | | [CVE-2026-52920](https://patchblox.com/security/data/cve/CVE-2026-52920.md) | High | netfilter: xt_policy: fix strict mode inbound policy matching | 8.3 | 0.0030 | | | [CVE-2026-46215](https://patchblox.com/security/data/cve/CVE-2026-46215.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap in... | 7.8 | 0.0023 | | | [CVE-2026-52969](https://patchblox.com/security/data/cve/CVE-2026-52969.md) | High | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 | | | [CVE-2026-52973](https://patchblox.com/security/data/cve/CVE-2026-52973.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: futex: Drop CLONE_THREAD requirement for private... | 7.8 | 0.0018 | | | [CVE-2026-53000](https://patchblox.com/security/data/cve/CVE-2026-53000.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Flor... | 7.8 | 0.0018 | | | [CVE-2026-63860](https://patchblox.com/security/data/cve/CVE-2026-63860.md) | High | kernel-64kb: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429). | 8.4 | 0.0018 | | | [CVE-2026-53081](https://patchblox.com/security/data/cve/CVE-2026-53081.md) | High | kernel-64kb: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars (bsc#1269708). | 7.8 | 0.0018 | | | [CVE-2026-53085](https://patchblox.com/security/data/cve/CVE-2026-53085.md) | High | kernel-64kb: bpf: fix mm lifecycle in open-coded task_vma iterator (bsc#1269879). | 7.8 | 0.0018 | | | [CVE-2026-53115](https://patchblox.com/security/data/cve/CVE-2026-53115.md) | High | bus: fsl-mc: use generic driver_override infrastructure | 7.8 | 0.0018 | | | [CVE-2026-53119](https://patchblox.com/security/data/cve/CVE-2026-53119.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: platform/wmi: use generic driver_override infras... | 7.8 | 0.0018 | | | [CVE-2026-53120](https://patchblox.com/security/data/cve/CVE-2026-53120.md) | High | PCI: use generic driver_override infrastructure | 7.8 | 0.0018 | | | [CVE-2026-53067](https://patchblox.com/security/data/cve/CVE-2026-53067.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-ep-msi: Fix error unwind and... | 7.8 | 0.0017 | | | [CVE-2026-53023](https://patchblox.com/security/data/cve/CVE-2026-53023.md) | High | fs/ntfs3: terminate the cached volume label after UTF-8 conversion | 7.1 | 0.0016 | | | [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 | | | [CVE-2026-46209](https://patchblox.com/security/data/cve/CVE-2026-46209.md) | High | kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460... | 8.4 | 0.0014 | | | [CVE-2026-53059](https://patchblox.com/security/data/cve/CVE-2026-53059.md) | High | dm log: fix out-of-bounds write due to region_count overflow | 7.8 | 0.0014 | | | [CVE-2026-52962](https://patchblox.com/security/data/cve/CVE-2026-52962.md) | High | ceph: fix a buffer leak in __ceph_setxattr() | 7.8 | 0.0014 | | | [CVE-2026-46274](https://patchblox.com/security/data/cve/CVE-2026-46274.md) | High | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | 7.8 | 0.0014 | | | [CVE-2026-53281](https://patchblox.com/security/data/cve/CVE-2026-53281.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or ref... | 8.8 | 0.0014 | | | [CVE-2026-45839](https://patchblox.com/security/data/cve/CVE-2026-45839.md) | High | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | 7.8 | 0.0014 | | | [CVE-2026-46164](https://patchblox.com/security/data/cve/CVE-2026-46164.md) | High | btrfs: fix double free in create_space_info_sub_group() error path | 7.0 | 0.0014 | | | [CVE-2026-53033](https://patchblox.com/security/data/cve/CVE-2026-53033.md) | High | kernel-64kb: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388). | 7.8 | 0.0014 | | | [CVE-2026-52953](https://patchblox.com/security/data/cve/CVE-2026-52953.md) | High | iommu/vt-d: Fix oops due to out of scope access | 7.1 | 0.0013 | | | [CVE-2026-52970](https://patchblox.com/security/data/cve/CVE-2026-52970.md) | High | netfilter: nft_ct: fix missing expect put in obj eval | 7.0 | 0.0013 | | | [CVE-2026-53092](https://patchblox.com/security/data/cve/CVE-2026-53092.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg... | 7.8 | 0.0013 | | | [CVE-2026-45840](https://patchblox.com/security/data/cve/CVE-2026-45840.md) | High | kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479] | 7.0 | 0.0013 | | | [CVE-2026-46234](https://patchblox.com/security/data/cve/CVE-2026-46234.md) | High | vsock: fix buffer size clamping order | 7.8 | 0.0013 | | | [CVE-2026-53011](https://patchblox.com/security/data/cve/CVE-2026-53011.md) | High | net/sched: taprio: fix use-after-free in advance_sched() on schedule switch | 8.8 | 0.0013 | | | [CVE-2026-53004](https://patchblox.com/security/data/cve/CVE-2026-53004.md) | High | kernel-uek-modules-extra: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757] | 7.8 | 0.0013 | | | [CVE-2026-53031](https://patchblox.com/security/data/cve/CVE-2026-53031.md) | High | kernel-64kb: bpf: Validate node_id in arena_alloc_pages() (bsc#1269380). | 7.8 | 0.0013 | | | [CVE-2026-53094](https://patchblox.com/security/data/cve/CVE-2026-53094.md) | High | bpf: Fix stale offload->prog pointer after constant blinding | 7.8 | 0.0013 | | | [CVE-2026-53063](https://patchblox.com/security/data/cve/CVE-2026-53063.md) | High | dm cache: fix write hang in passthrough mode | 7.1 | 0.0013 | | | [CVE-2026-53034](https://patchblox.com/security/data/cve/CVE-2026-53034.md) | High | bpf, sockmap: Fix af_unix null-ptr-deref in proto update | 7.0 | 0.0013 | | | [CVE-2026-63865](https://patchblox.com/security/data/cve/CVE-2026-63865.md) | High | kernel-64kb: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486). | 8.8 | 0.0013 | | | [CVE-2026-46324](https://patchblox.com/security/data/cve/CVE-2026-46324.md) | High | kernel-default: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995). | 7.8 | 0.0013 | | | [CVE-2026-53064](https://patchblox.com/security/data/cve/CVE-2026-53064.md) | High | dm cache: fix null-deref with concurrent writes in passthrough mode | 7.1 | 0.0012 | | | [CVE-2026-53021](https://patchblox.com/security/data/cve/CVE-2026-53021.md) | High | scsi: target: core: Fix integer overflow in UNMAP bounds check | 7.0 | 0.0012 | | | [CVE-2026-53110](https://patchblox.com/security/data/cve/CVE-2026-53110.md) | High | s390/bpf: Zero-extend bpf prog return values and kfunc arguments | 7.8 | 0.0012 | | | [CVE-2026-46154](https://patchblox.com/security/data/cve/CVE-2026-46154.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Read scx_root under scx_cgroup_ops_rw... | 7.0 | 0.0012 | | | [CVE-2026-53129](https://patchblox.com/security/data/cve/CVE-2026-53129.md) | High | fs/mbcache: cancel shrink work before destroying the cache | 7.8 | 0.0012 | | | [CVE-2026-53076](https://patchblox.com/security/data/cve/CVE-2026-53076.md) | High | kernel-64kb: bpf: Fix OOB in pcpu_init_value (bsc#1269695). | 7.1 | 0.0012 | | | [CVE-2026-52959](https://patchblox.com/security/data/cve/CVE-2026-52959.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0011 | | | [CVE-2026-52975](https://patchblox.com/security/data/cve/CVE-2026-52975.md) | High | bonding: 3ad: implement proper RCU rules for port->aggregator | 7.8 | 0.0011 | | | [CVE-2026-46227](https://patchblox.com/security/data/cve/CVE-2026-46227.md) | High | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 | | | [CVE-2026-53050](https://patchblox.com/security/data/cve/CVE-2026-53050.md) | High | quota: Fix race of dquot_scan_active() with quota deactivation | 7.8 | 0.0010 | | | [CVE-2026-53096](https://patchblox.com/security/data/cve/CVE-2026-53096.md) | High | bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path | 7.8 | 0.0010 | | | [CVE-2026-53047](https://patchblox.com/security/data/cve/CVE-2026-53047.md) | Routine | efi/capsule-loader: fix incorrect sizeof in phys array reallocation | 5.5 | 0.0018 | | | [CVE-2026-52980](https://patchblox.com/security/data/cve/CVE-2026-52980.md) | Routine | kernel-64kb: sched/fair: Clear rel_deadline when initializing forked entities (bsc#1269252). | 5.5 | 0.0016 | | | [CVE-2026-53014](https://patchblox.com/security/data/cve/CVE-2026-53014.md) | Routine | kernel-64kb: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir | 5.5 | 0.0016 | | | [CVE-2026-53038](https://patchblox.com/security/data/cve/CVE-2026-53038.md) | Routine | kernel-64kb: ima_fs: Correctly create securityfs files for unsupported hash algos (bsc#1269391). | 5.5 | 0.0016 | | | [CVE-2026-53083](https://patchblox.com/security/data/cve/CVE-2026-53083.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix RCU stall in bpf_fd_array_map_clear()... | 5.5 | 0.0016 | | | [CVE-2026-53084](https://patchblox.com/security/data/cve/CVE-2026-53084.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: return VMA snapshot from task_vma iterator... | 5.5 | 0.0016 | | | [CVE-2026-53128](https://patchblox.com/security/data/cve/CVE-2026-53128.md) | Routine | drbd: Balance RCU calls in drbd_adm_dump_devices() | 5.5 | 0.0016 | | | [CVE-2026-53288](https://patchblox.com/security/data/cve/CVE-2026-53288.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: arm64: Reserve an extra page for early kernel ma... | 5.5 | 0.0016 | | | [CVE-2026-53321](https://patchblox.com/security/data/cve/CVE-2026-53321.md) | Routine | kernel-64kb: io_uring/napi: cap busy_poll_to 10 msec (bsc#1269724). | 5.5 | 0.0016 | | | [CVE-2026-52978](https://patchblox.com/security/data/cve/CVE-2026-52978.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: psp: require admin permission for dev-set a... | 5.5 | 0.0016 | | | [CVE-2026-52997](https://patchblox.com/security/data/cve/CVE-2026-52997.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_dualpi2: drain both C-queue and L... | 5.5 | 0.0016 | | | [CVE-2026-53095](https://patchblox.com/security/data/cve/CVE-2026-53095.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix abuse of kprobe_write_ctx via freplace... | 5.5 | 0.0016 | | | [CVE-2026-53121](https://patchblox.com/security/data/cve/CVE-2026-53121.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: amd-pstate: Fix memory leak in amd_pstate_epp_cp... | 5.5 | 0.0016 | | | [CVE-2026-53282](https://patchblox.com/security/data/cve/CVE-2026-53282.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Push kjump return address even for no... | 5.5 | 0.0016 | | | [CVE-2026-53283](https://patchblox.com/security/data/cve/CVE-2026-53283.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bounds-check devid in __rlookup_amd_i... | 5.5 | 0.0016 | | | [CVE-2026-53307](https://patchblox.com/security/data/cve/CVE-2026-53307.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fully validate 'pinmux... | 5.5 | 0.0016 | | | [CVE-2026-52961](https://patchblox.com/security/data/cve/CVE-2026-52961.md) | Routine | cephfs: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size (bsc#1269129). | 5.5 | 0.0015 | | | [CVE-2026-53012](https://patchblox.com/security/data/cve/CVE-2026-53012.md) | Routine | nexthop: fix IPv6 route referencing IPv4 nexthop | 5.5 | 0.0014 | | | [CVE-2026-53295](https://patchblox.com/security/data/cve/CVE-2026-53295.md) | Routine | mailbox: add sanity check for channel array | 5.5 | 0.0013 | | | [CVE-2026-45841](https://patchblox.com/security/data/cve/CVE-2026-45841.md) | Routine | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 5.5 | 0.0013 | | | [CVE-2026-45844](https://patchblox.com/security/data/cve/CVE-2026-45844.md) | Routine | bpftool: netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Pablo Neira Ayuso) [Orabug: 39451507] | 5.5 | 0.0013 | | | [CVE-2026-46214](https://patchblox.com/security/data/cve/CVE-2026-46214.md) | Routine | kernel-uek-debug-modules-extra: vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646] | 5.5 | 0.0013 | | | [CVE-2026-45838](https://patchblox.com/security/data/cve/CVE-2026-45838.md) | Routine | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 5.5 | 0.0013 | | | [CVE-2026-45842](https://patchblox.com/security/data/cve/CVE-2026-45842.md) | Routine | slip: reject VJ receive packets on instances with no rstate array | 5.5 | 0.0013 | | | [CVE-2026-53001](https://patchblox.com/security/data/cve/CVE-2026-53001.md) | Routine | kernel-uek: netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621740] | 5.5 | 0.0013 | | | [CVE-2026-52984](https://patchblox.com/security/data/cve/CVE-2026-52984.md) | Routine | kernel-uek-container: net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677] | 5.5 | 0.0013 | | | [CVE-2026-52990](https://patchblox.com/security/data/cve/CVE-2026-52990.md) | Routine | kernel-64kb: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). | 5.5 | 0.0013 | | | [CVE-2026-53060](https://patchblox.com/security/data/cve/CVE-2026-53060.md) | Routine | dm cache metadata: fix memory leak on metadata abort retry | 5.5 | 0.0013 | | | [CVE-2026-45846](https://patchblox.com/security/data/cve/CVE-2026-45846.md) | Routine | bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() | 5.5 | 0.0013 | | | [CVE-2026-46207](https://patchblox.com/security/data/cve/CVE-2026-46207.md) | Routine | kernel-64kb: vsock/virtio: fix length and offset in tap skb for split packets (bsc#1267691). | 5.5 | 0.0013 | | | [CVE-2026-52994](https://patchblox.com/security/data/cve/CVE-2026-52994.md) | Routine | kernel-default: vsock/virtio: fix MSG_ZEROCOPY pinned-pages accounting (bsc#1269126). | 5.5 | 0.0013 | | | [CVE-2026-53122](https://patchblox.com/security/data/cve/CVE-2026-53122.md) | Routine | btrfs: fix deadlock between reflink and transaction commit when using flushoncommit | 5.5 | 0.0013 | | | [CVE-2026-52979](https://patchblox.com/security/data/cve/CVE-2026-52979.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creat... | 5.5 | 0.0012 | | | [CVE-2026-53125](https://patchblox.com/security/data/cve/CVE-2026-53125.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: md: fix array_state=clear sysfs deadlock When "... | 5.5 | 0.0012 | | | [CVE-2026-53323](https://patchblox.com/security/data/cve/CVE-2026-53323.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdev_lock_ops() fro... | 5.5 | 0.0012 | | | [CVE-2026-52977](https://patchblox.com/security/data/cve/CVE-2026-52977.md) | Routine | futex: Prevent lockup in requeue-PI during signal/ timeout wakeup | 5.5 | 0.0012 | | | [CVE-2026-52985](https://patchblox.com/security/data/cve/CVE-2026-52985.md) | Routine | kernel-uek-debug-devel: netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z | 5.5 | 0.0012 | | | [CVE-2026-52995](https://patchblox.com/security/data/cve/CVE-2026-52995.md) | Routine | kernel-64kb: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124). | 5.5 | 0.0012 | | | [CVE-2026-53015](https://patchblox.com/security/data/cve/CVE-2026-53015.md) | Routine | erofs: unify lcn as u64 for 32-bit platforms | 5.5 | 0.0012 | | | [CVE-2026-53061](https://patchblox.com/security/data/cve/CVE-2026-53061.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix dirty mapping checking in passthro... | 5.5 | 0.0012 | | | [CVE-2026-53287](https://patchblox.com/security/data/cve/CVE-2026-53287.md) | Routine | audit: fix incorrect inheritable capability in CAPSET records | 5.5 | 0.0012 | | | [CVE-2026-53289](https://patchblox.com/security/data/cve/CVE-2026-53289.md) | Routine | ice: fix NULL pointer dereference in ice_reset_all_vfs() | 5.5 | 0.0012 | | | [CVE-2026-53013](https://patchblox.com/security/data/cve/CVE-2026-53013.md) | Routine | macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF | 5.5 | 0.0012 | | | [CVE-2026-53032](https://patchblox.com/security/data/cve/CVE-2026-53032.md) | Routine | bpf: Fix NULL deref in map_kptr_match_type for scalar regs | 5.5 | 0.0012 | | | [CVE-2026-53111](https://patchblox.com/security/data/cve/CVE-2026-53111.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: test_run: Fix the null pointer dereference... | 5.5 | 0.0012 | | | [CVE-2026-46236](https://patchblox.com/security/data/cve/CVE-2026-46236.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 | | | [CVE-2026-53314](https://patchblox.com/security/data/cve/CVE-2026-53314.md) | Routine | padata: Put CPU offline callback in ONLINE section to allow failure | 5.5 | 0.0012 | | | [CVE-2026-53123](https://patchblox.com/security/data/cve/CVE-2026-53123.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: md: wake raid456 reshape waiters before suspend... | 5.5 | 0.0012 | | | [CVE-2026-53074](https://patchblox.com/security/data/cve/CVE-2026-53074.md) | Routine | bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb | 6.4 | 0.0011 | | | [CVE-2026-52925](https://patchblox.com/security/data/cve/CVE-2026-52925.md) | Routine | vrf: Fix a potential NPD when removing a port from a VRF | 5.5 | 0.0011 | | | [CVE-2026-52936](https://patchblox.com/security/data/cve/CVE-2026-52936.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 | | | [CVE-2026-53126](https://patchblox.com/security/data/cve/CVE-2026-53126.md) | Routine | blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() | 5.5 | 0.0011 | | | [CVE-2026-53114](https://patchblox.com/security/data/cve/CVE-2026-53114.md) | Routine | kernel-64kb: perf: Extend the bit width of the arch-specific flag (bsc#1269999). | 5.5 | 0.0011 | | | [CVE-2026-53304](https://patchblox.com/security/data/cve/CVE-2026-53304.md) | Routine | scsi: sg: Resolve soft lockup issue when opening /dev/sgX | 5.5 | 0.0010 | | | [CVE-2026-46159](https://patchblox.com/security/data/cve/CVE-2026-46159.md) | Routine | btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak | 5.5 | 0.0010 | | | [CVE-2026-53035](https://patchblox.com/security/data/cve/CVE-2026-53035.md) | Routine | bpf, sockmap: Fix af_unix iter deadlock | 5.5 | 0.0010 | | | [CVE-2026-53037](https://patchblox.com/security/data/cve/CVE-2026-53037.md) | Routine | HID: usbhid: fix deadlock in hid_post_reset() | 5.5 | 0.0010 | | --- Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.