# ALAS2023-2026-1881: Security update for 19 packages ALAS2023-2026-1881, released June 22, 2026, fixes 164 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1881 - Platform: Linux - Released: Jun 22, 2026 - Priority: Urgent (Closes CVE-2026-64150, rated Critical) - CVEs: 164, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1881.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.18](https://patchblox.com/security/data/product/linux/bpftool6.18.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [bpftool6.18-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.18-debuginfo.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel-livepatch-6.18.35-68.127](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.18.35-68.127.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.18](https://patchblox.com/security/data/product/linux/kernel6.18.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-devel](https://patchblox.com/security/data/product/linux/kernel6.18-devel.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-headers](https://patchblox.com/security/data/product/linux/kernel6.18-headers.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra-common.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-tools](https://patchblox.com/security/data/product/linux/kernel6.18-tools.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-tools-debuginfo.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.18-tools-devel.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [microvm-kernel6.18](https://patchblox.com/security/data/product/linux/microvm-kernel6.18.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [perf6.18](https://patchblox.com/security/data/product/linux/perf6.18.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [python3-perf6.18](https://patchblox.com/security/data/product/linux/python3-perf6.18.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [python3-perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-64066](https://patchblox.com/security/data/cve/CVE-2026-64066.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on... | 9.8 | 0.0065 | | | [CVE-2026-64069](https://patchblox.com/security/data/cve/CVE-2026-64069.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read... | 9.8 | 0.0065 | | | [CVE-2026-64150](https://patchblox.com/security/data/cve/CVE-2026-64150.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before... | 9.8 | 0.0065 | | | [CVE-2026-64046](https://patchblox.com/security/data/cve/CVE-2026-64046.md) | Urgent | kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). | 9.8 | 0.0051 | | | [CVE-2026-64047](https://patchblox.com/security/data/cve/CVE-2026-64047.md) | Urgent | kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060). | 9.8 | 0.0051 | | | [CVE-2026-64061](https://patchblox.com/security/data/cve/CVE-2026-64061.md) | Urgent | kernel-64kb: netfs: Fix early put of sink folio in netfs_read_gaps() (bsc#1272505). | 9.8 | 0.0047 | | | [CVE-2026-64216](https://patchblox.com/security/data/cve/CVE-2026-64216.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandon... | 9.8 | 0.0046 | | | [CVE-2026-64232](https://patchblox.com/security/data/cve/CVE-2026-64232.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_in... | 9.8 | 0.0043 | | | [CVE-2026-64025](https://patchblox.com/security/data/cve/CVE-2026-64025.md) | Urgent | kernel-64kb: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117). | 9.8 | 0.0037 | | | [CVE-2026-64080](https://patchblox.com/security/data/cve/CVE-2026-64080.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks u... | 9.3 | 0.0020 | | | [CVE-2026-64106](https://patchblox.com/security/data/cve/CVE-2026-64106.md) | Urgent | kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242). | 9.0 | 0.0015 | | | [CVE-2026-64076](https://patchblox.com/security/data/cve/CVE-2026-64076.md) | Urgent | netfilter: bridge: eb_tables: close module init race | 9.8 | 0.0014 | | | [CVE-2026-64078](https://patchblox.com/security/data/cve/CVE-2026-64078.md) | Urgent | netfilter: x_tables: add and use xtables_unregister_table_exit | 9.8 | 0.0013 | | | [CVE-2026-63999](https://patchblox.com/security/data/cve/CVE-2026-63999.md) | Urgent | ethtool: rss: fix indir_table and hkey leak on get_rxfh failure | 9.8 | 0.0012 | | | [CVE-2026-63913](https://patchblox.com/security/data/cve/CVE-2026-63913.md) | High | kernel-64k-modules-core: kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check | 8.8 | 0.0097 | | | [CVE-2026-63887](https://patchblox.com/security/data/cve/CVE-2026-63887.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_outp... | 9.8 | 0.0078 | | | [CVE-2026-63888](https://patchblox.com/security/data/cve/CVE-2026-63888.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-... | 9.8 | 0.0078 | | | [CVE-2026-63912](https://patchblox.com/security/data/cve/CVE-2026-63912.md) | High | kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836). | 9.8 | 0.0071 | | | [CVE-2026-63922](https://patchblox.com/security/data/cve/CVE-2026-63922.md) | High | kernel: kernel: ipv6: exthdrs: refresh nh after handling HAO option | 9.8 | 0.0071 | | | [CVE-2026-63924](https://patchblox.com/security/data/cve/CVE-2026-63924.md) | High | kernel: kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() | 9.8 | 0.0071 | | | [CVE-2026-63886](https://patchblox.com/security/data/cve/CVE-2026-63886.md) | High | kernel-default: Security update for the Linux Kernel | 9.8 | 0.0071 | | | [CVE-2026-63968](https://patchblox.com/security/data/cve/CVE-2026-63968.md) | High | kernel-default: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466). | 7.5 | 0.0067 | | | [CVE-2026-63919](https://patchblox.com/security/data/cve/CVE-2026-63919.md) | High | kernel-default: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907). | 8.8 | 0.0065 | | | [CVE-2026-64122](https://patchblox.com/security/data/cve/CVE-2026-64122.md) | High | kernel-uek64k-modules-core: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover (Matt Fleming) [Orabug: 39203117,39870622] | 9.8 | 0.0063 | | | [CVE-2026-52932](https://patchblox.com/security/data/cve/CVE-2026-52932.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp er... | 7.5 | 0.0061 | | | [CVE-2026-64113](https://patchblox.com/security/data/cve/CVE-2026-64113.md) | High | perf: kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning | 9.8 | 0.0053 | | | [CVE-2026-63984](https://patchblox.com/security/data/cve/CVE-2026-63984.md) | High | kernel-default: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865). | 9.8 | 0.0051 | | | [CVE-2026-63993](https://patchblox.com/security/data/cve/CVE-2026-63993.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after s... | 9.8 | 0.0051 | | | [CVE-2026-63994](https://patchblox.com/security/data/cve/CVE-2026-63994.md) | High | kernel-default: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035). | 9.8 | 0.0051 | | | [CVE-2026-64007](https://patchblox.com/security/data/cve/CVE-2026-64007.md) | High | kernel-default: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105). | 9.8 | 0.0051 | | | [CVE-2026-63992](https://patchblox.com/security/data/cve/CVE-2026-63992.md) | High | kernel-default: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868). | 9.1 | 0.0051 | | | [CVE-2026-64522](https://patchblox.com/security/data/cve/CVE-2026-64522.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on I... | 8.8 | 0.0051 | | | [CVE-2026-64116](https://patchblox.com/security/data/cve/CVE-2026-64116.md) | High | kernel-64kb: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). | 7.5 | 0.0051 | | | [CVE-2026-64132](https://patchblox.com/security/data/cve/CVE-2026-64132.md) | High | kernel-rt-debug-modules-extra: kernel: ipv6: ioam: refresh hdr pointer before ioam6_event() | 9.8 | 0.0049 | | | [CVE-2026-64035](https://patchblox.com/security/data/cve/CVE-2026-64035.md) | High | kernel-modules-extra: kernel: igc: set tx buffer type for SMD frames | 9.8 | 0.0044 | | | [CVE-2026-64003](https://patchblox.com/security/data/cve/CVE-2026-64003.md) | High | kernel-64kb: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). | 7.5 | 0.0044 | | | [CVE-2026-46244](https://patchblox.com/security/data/cve/CVE-2026-46244.md) | High | netfilter: nft_inner: Fix IPv6 inner_thoff desync | 9.1 | 0.0042 | | | [CVE-2026-64136](https://patchblox.com/security/data/cve/CVE-2026-64136.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_f... | 9.8 | 0.0041 | | | [CVE-2026-63889](https://patchblox.com/security/data/cve/CVE-2026-63889.md) | High | kernel-rt-modules-core: kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 | 8.8 | 0.0036 | | | [CVE-2026-63925](https://patchblox.com/security/data/cve/CVE-2026-63925.md) | High | kernel-64kb: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008). | 8.1 | 0.0035 | | | [CVE-2026-31709](https://patchblox.com/security/data/cve/CVE-2026-31709.md) | High | smb: client: validate the whole DACL before rewriting it in cifsacl | 8.8 | 0.0035 | | | [CVE-2026-63980](https://patchblox.com/security/data/cve/CVE-2026-63980.md) | High | kernel-64kb: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028). | 7.5 | 0.0034 | | | [CVE-2026-46316](https://patchblox.com/security/data/cve/CVE-2026-46316.md) | High | kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] | 9.3 | 0.0034 | | | [CVE-2026-64235](https://patchblox.com/security/data/cve/CVE-2026-64235.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs i... | 8.1 | 0.0033 | | | [CVE-2026-64024](https://patchblox.com/security/data/cve/CVE-2026-64024.md) | High | kernel-debug-modules: kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction | 9.4 | 0.0031 | | | [CVE-2026-52943](https://patchblox.com/security/data/cve/CVE-2026-52943.md) | High | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 | | | [CVE-2026-53360](https://patchblox.com/security/data/cve/CVE-2026-53360.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2... | 8.8 | 0.0030 | | | [CVE-2025-71289](https://patchblox.com/security/data/cve/CVE-2025-71289.md) | High | fs/ntfs3: handle attr_set_size() errors when truncating files | 7.1 | 0.0026 | | | [CVE-2026-52923](https://patchblox.com/security/data/cve/CVE-2026-52923.md) | High | ipc: limit next_id allocation to the valid ID range | 7.8 | 0.0022 | | | [CVE-2026-63896](https://patchblox.com/security/data/cve/CVE-2026-63896.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2026-63939](https://patchblox.com/security/data/cve/CVE-2026-63939.md) | High | kernel-64kb: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272691). | 9.3 | 0.0020 | | | [CVE-2026-53365](https://patchblox.com/security/data/cve/CVE-2026-53365.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-... | 8.8 | 0.0020 | | | [CVE-2026-63938](https://patchblox.com/security/data/cve/CVE-2026-63938.md) | High | kernel-64kb: KVM: SEV: Check PSC request indices against the actual size of the buffer (bsc#1272620). | 9.3 | 0.0020 | | | [CVE-2026-64172](https://patchblox.com/security/data/cve/CVE-2026-64172.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hyg... | 7.1 | 0.0020 | | | [CVE-2026-64045](https://patchblox.com/security/data/cve/CVE-2026-64045.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer pointer in ovpn_tcp_... | 8.4 | 0.0019 | | | [CVE-2026-64081](https://patchblox.com/security/data/cve/CVE-2026-64081.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Validate framework notificati... | 8.4 | 0.0019 | | | [CVE-2026-63940](https://patchblox.com/security/data/cve/CVE-2026-63940.md) | High | KVM: SEV: Ignore Port I/O requests of length '0' | 9.3 | 0.0019 | | | [CVE-2026-63926](https://patchblox.com/security/data/cve/CVE-2026-63926.md) | High | kernel-64kb: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019). | 8.4 | 0.0019 | | | [CVE-2026-64044](https://patchblox.com/security/data/cve/CVE-2026-64044.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in CMD_NEW_PEER erro... | 7.8 | 0.0018 | | | [CVE-2026-63875](https://patchblox.com/security/data/cve/CVE-2026-63875.md) | High | kernel-modules: kernel: arm64: tlb: Flush walk cache when unsharing PMD tables | 8.8 | 0.0018 | | | [CVE-2026-63970](https://patchblox.com/security/data/cve/CVE-2026-63970.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy... | 8.8 | 0.0018 | | | [CVE-2026-63884](https://patchblox.com/security/data/cve/CVE-2026-63884.md) | High | kernel-zfcpdump: kernel: drm/i915: Fix potential UAF in TTM object purge | 7.8 | 0.0018 | | | [CVE-2026-64226](https://patchblox.com/security/data/cve/CVE-2026-64226.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn()... | 7.8 | 0.0018 | | | [CVE-2026-64124](https://patchblox.com/security/data/cve/CVE-2026-64124.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-a... | 8.8 | 0.0017 | | | [CVE-2026-63950](https://patchblox.com/security/data/cve/CVE-2026-63950.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nr_pages to 1 at loop start... | 7.8 | 0.0017 | | | [CVE-2026-64074](https://patchblox.com/security/data/cve/CVE-2026-64074.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/statmount: fix slab out-of-bounds write in st... | 7.8 | 0.0017 | | | [CVE-2026-64181](https://patchblox.com/security/data/cve/CVE-2026-64181.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing sup... | 7.8 | 0.0017 | | | [CVE-2026-63920](https://patchblox.com/security/data/cve/CVE-2026-63920.md) | High | kernel-default: ipv6: validate extension header length before copying to cmsg (bsc#1272877). | 8.1 | 0.0017 | | | [CVE-2026-63917](https://patchblox.com/security/data/cve/CVE-2026-63917.md) | High | kernel-default: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904). | 8.8 | 0.0017 | | | [CVE-2026-64104](https://patchblox.com/security/data/cve/CVE-2026-64104.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.7 | 0.0017 | | | [CVE-2026-64075](https://patchblox.com/security/data/cve/CVE-2026-64075.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregister_fprobe() to wait for RCU... | 7.8 | 0.0017 | | | [CVE-2026-64518](https://patchblox.com/security/data/cve/CVE-2026-64518.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao... | n/a | 0.0017 | | | [CVE-2026-64519](https://patchblox.com/security/data/cve/CVE-2026-64519.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocati... | n/a | 0.0017 | | | [CVE-2026-64186](https://patchblox.com/security/data/cve/CVE-2026-64186.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Remove latent out-of-bounds access in... | 7.1 | 0.0016 | | | [CVE-2026-63962](https://patchblox.com/security/data/cve/CVE-2026-63962.md) | High | usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() | 8.8 | 0.0016 | | | [CVE-2026-63921](https://patchblox.com/security/data/cve/CVE-2026-63921.md) | High | kernel-default: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918). | 8.8 | 0.0016 | | | [CVE-2026-52912](https://patchblox.com/security/data/cve/CVE-2026-52912.md) | High | netfilter: nf_queue: hold bridge skb->dev while queued | 7.8 | 0.0016 | | | [CVE-2026-64015](https://patchblox.com/security/data/cve/CVE-2026-64015.md) | High | kernel-default: security/keys: fix missed RCU read section on lookup (bsc#1273762). | 8.1 | 0.0016 | | | [CVE-2026-64526](https://patchblox.com/security/data/cve/CVE-2026-64526.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnl_ops_complet... | n/a | 0.0016 | | | [CVE-2026-63914](https://patchblox.com/security/data/cve/CVE-2026-63914.md) | High | bpftool: xfrm: route MIGRATE notifications to caller's netns (Maoyi Xie) [Orabug: 39754286] | 7.3 | 0.0015 | | | [CVE-2026-64009](https://patchblox.com/security/data/cve/CVE-2026-64009.md) | High | kernel-64kb: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). | 7.8 | 0.0014 | | | [CVE-2026-64153](https://patchblox.com/security/data/cve/CVE-2026-64153.md) | High | bpftool: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (Mikko Perttunen) [Orabug: 39754904] | 8.8 | 0.0014 | | | [CVE-2026-64114](https://patchblox.com/security/data/cve/CVE-2026-64114.md) | High | kernel-default: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742). | 8.8 | 0.0014 | | | [CVE-2026-64077](https://patchblox.com/security/data/cve/CVE-2026-64077.md) | High | netfilter: ebtables: move to two-stage removal scheme | 7.8 | 0.0014 | | | [CVE-2026-63937](https://patchblox.com/security/data/cve/CVE-2026-63937.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0014 | | | [CVE-2026-64111](https://patchblox.com/security/data/cve/CVE-2026-64111.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr(... | 8.8 | 0.0014 | | | [CVE-2026-64115](https://patchblox.com/security/data/cve/CVE-2026-64115.md) | High | kernel-default: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). | 8.8 | 0.0014 | | | [CVE-2026-63885](https://patchblox.com/security/data/cve/CVE-2026-63885.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/gem: fix race between change_handle and hand... | 8.8 | 0.0013 | | | [CVE-2026-46322](https://patchblox.com/security/data/cve/CVE-2026-46322.md) | High | tun: free page on build_skb failure in tun_xdp_one() | 7.1 | 0.0013 | | | [CVE-2026-64032](https://patchblox.com/security/data/cve/CVE-2026-64032.md) | High | kernel-rt-64k-debug-devel: kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port | 8.8 | 0.0013 | | | [CVE-2026-64071](https://patchblox.com/security/data/cve/CVE-2026-64071.md) | High | kernel-64kb: nvme-pci: fix use-after-free in nvme_free_host_mem() (bsc#1273486). | 7.8 | 0.0013 | | | [CVE-2026-64073](https://patchblox.com/security/data/cve/CVE-2026-64073.md) | High | kernel-64kb: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490). | 7.8 | 0.0013 | | | [CVE-2026-46321](https://patchblox.com/security/data/cve/CVE-2026-46321.md) | High | tun: free page on short-frame rejection in tun_xdp_one() | 7.1 | 0.0013 | | | [CVE-2026-63971](https://patchblox.com/security/data/cve/CVE-2026-63971.md) | High | kernel-default: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678). | 8.8 | 0.0013 | | | [CVE-2026-64520](https://patchblox.com/security/data/cve/CVE-2026-64520.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS... | 8.4 | 0.0013 | | | [CVE-2026-64002](https://patchblox.com/security/data/cve/CVE-2026-64002.md) | High | kernel-default: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774). | 8.8 | 0.0013 | | | [CVE-2026-63985](https://patchblox.com/security/data/cve/CVE-2026-63985.md) | High | kernel-64kb: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963). | 7.8 | 0.0013 | | | [CVE-2026-64036](https://patchblox.com/security/data/cve/CVE-2026-64036.md) | High | cgroup/rstat: validate cpu before css_rstat_cpu() access | 7.8 | 0.0013 | | | [CVE-2026-64109](https://patchblox.com/security/data/cve/CVE-2026-64109.md) | High | kernel-default: af_unix: Peek the queue synchronized (bsc#1273748). | 8.8 | 0.0013 | | | [CVE-2026-64053](https://patchblox.com/security/data/cve/CVE-2026-64053.md) | High | kernel-64k-debug-core: kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() | 8.3 | 0.0013 | | | [CVE-2026-63987](https://patchblox.com/security/data/cve/CVE-2026-63987.md) | High | kernel-64kb: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971). | 7.8 | 0.0013 | | | [CVE-2026-63995](https://patchblox.com/security/data/cve/CVE-2026-63995.md) | High | kernel-64kb: ethtool: cmis: validate start_cmd_payload_size from module (bsc#1273033). | 7.8 | 0.0013 | | | [CVE-2026-63996](https://patchblox.com/security/data/cve/CVE-2026-63996.md) | High | kernel-64kb: ethtool: cmis: require exact CDB reply length (bsc#1273032). | 7.8 | 0.0013 | | | [CVE-2026-64058](https://patchblox.com/security/data/cve/CVE-2026-64058.md) | High | kernel-64kb: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). | 7.8 | 0.0013 | | | [CVE-2026-64063](https://patchblox.com/security/data/cve/CVE-2026-64063.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In... | 7.8 | 0.0013 | | | [CVE-2026-64108](https://patchblox.com/security/data/cve/CVE-2026-64108.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Sin... | 7.8 | 0.0013 | | | [CVE-2026-64217](https://patchblox.com/security/data/cve/CVE-2026-64217.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_i... | 7.8 | 0.0013 | | | [CVE-2026-63952](https://patchblox.com/security/data/cve/CVE-2026-63952.md) | High | kernel-default: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468). | 8.4 | 0.0013 | | | [CVE-2026-64054](https://patchblox.com/security/data/cve/CVE-2026-64054.md) | High | kernel-64kb: net: shaper: reject duplicate leaves in GROUP request (bsc#1272894). | 7.8 | 0.0013 | | | [CVE-2026-46317](https://patchblox.com/security/data/cve/CVE-2026-46317.md) | High | kernel: kernel: KVM: arm64: Reassign nested_mmus array behind mmu_lock | 8.8 | 0.0013 | | | [CVE-2026-52915](https://patchblox.com/security/data/cve/CVE-2026-52915.md) | High | netfilter: ip6t_hbh: reject oversized option lists | 7.1 | 0.0013 | | | [CVE-2026-64121](https://patchblox.com/security/data/cve/CVE-2026-64121.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queue... | 7.1 | 0.0013 | | | [CVE-2026-64239](https://patchblox.com/security/data/cve/CVE-2026-64239.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in r... | 7.8 | 0.0012 | | | [CVE-2026-64098](https://patchblox.com/security/data/cve/CVE-2026-64098.md) | High | kernel-default: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488). | 7.8 | 0.0011 | | | [CVE-2026-53277](https://patchblox.com/security/data/cve/CVE-2026-53277.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table wal... | 8.8 | 0.0011 | | | [CVE-2026-64005](https://patchblox.com/security/data/cve/CVE-2026-64005.md) | High | kernel-64kb: net/smc: Do not re-initialize smc hashtables (bsc#1273831). | 7.8 | 0.0010 | | | [CVE-2026-64112](https://patchblox.com/security/data/cve/CVE-2026-64112.md) | High | rbd: eliminate a race in lock_dwork draining on unmap | 7.8 | 0.0010 | | | [CVE-2026-64027](https://patchblox.com/security/data/cve/CVE-2026-64027.md) | High | kernel: net: shaper: rework the VALID marking (again) (Jamie Bainbridge) [RHEL-231705] | 8.8 | 0.0010 | | | [CVE-2026-64031](https://patchblox.com/security/data/cve/CVE-2026-64031.md) | High | kernel-uek: erofs: fix managed cache race for unaligned extents (Gao Xiang) [Orabug: 40081005] | 7.8 | 0.0010 | | | [CVE-2026-64158](https://patchblox.com/security/data/cve/CVE-2026-64158.md) | High | kernel-64kb: netfs: Fix write streaming disablement if fd open O_RDWR (bsc#1272524). | 7.3 | n/a | | | [CVE-2026-63969](https://patchblox.com/security/data/cve/CVE-2026-63969.md) | Routine | kernel-64kb: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484). | 5.5 | 0.0021 | | | [CVE-2026-63876](https://patchblox.com/security/data/cve/CVE-2026-63876.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Pr... | 5.5 | 0.0017 | | | [CVE-2026-63877](https://patchblox.com/security/data/cve/CVE-2026-63877.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Pr... | 5.5 | 0.0017 | | | [CVE-2026-64059](https://patchblox.com/security/data/cve/CVE-2026-64059.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio->private handling in netfs_perf... | 5.5 | 0.0016 | | | [CVE-2026-64065](https://patchblox.com/security/data/cve/CVE-2026-64065.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_writ... | 5.5 | 0.0016 | | | [CVE-2026-64105](https://patchblox.com/security/data/cve/CVE-2026-64105.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 | | | [CVE-2026-64157](https://patchblox.com/security/data/cve/CVE-2026-64157.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-wri... | 5.5 | 0.0016 | | | [CVE-2026-53311](https://patchblox.com/security/data/cve/CVE-2026-53311.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fuse: fix uninit-value in fuse_dentry_revalidate... | 5.5 | 0.0016 | | | [CVE-2026-64072](https://patchblox.com/security/data/cve/CVE-2026-64072.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local... | 5.5 | 0.0016 | | | [CVE-2026-64110](https://patchblox.com/security/data/cve/CVE-2026-64110.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igc_fpe_xmit_smd_... | 5.5 | 0.0016 | | | [CVE-2026-64120](https://patchblox.com/security/data/cve/CVE-2026-64120.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix NULL pointer dereference in ph... | 5.5 | 0.0016 | | | [CVE-2026-64130](https://patchblox.com/security/data/cve/CVE-2026-64130.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix initialization of tags of the... | 5.5 | 0.0016 | | | [CVE-2026-64149](https://patchblox.com/security/data/cve/CVE-2026-64149.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dma_map_resource() sanity chec... | 5.5 | 0.0016 | | | [CVE-2026-64156](https://patchblox.com/security/data/cve/CVE-2026-64156.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs, afs: Fix write skipping in dir/link write... | 5.5 | 0.0016 | | | [CVE-2026-64228](https://patchblox.com/security/data/cve/CVE-2026-64228.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY dri... | 5.5 | 0.0016 | | | [CVE-2026-64229](https://patchblox.com/security/data/cve/CVE-2026-64229.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is... | 5.5 | 0.0016 | | | [CVE-2026-64302](https://patchblox.com/security/data/cve/CVE-2026-64302.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix freeing of PMD-sized vmemmap pages... | 5.5 | 0.0016 | | | [CVE-2026-64525](https://patchblox.com/security/data/cve/CVE-2026-64525.md) | Routine | xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit | 5.5 | 0.0016 | | | [CVE-2026-63990](https://patchblox.com/security/data/cve/CVE-2026-63990.md) | Routine | kernel-64kb: bonding: refuse to enslave CAN devices (bsc#1273027). | 5.5 | 0.0013 | | | [CVE-2026-64006](https://patchblox.com/security/data/cve/CVE-2026-64006.md) | Routine | kernel-64kb: netfilter: nf_tables: fix dst corruption in same register operation (bsc#1273834). | 5.5 | 0.0013 | | | [CVE-2026-63988](https://patchblox.com/security/data/cve/CVE-2026-63988.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in sysfs pat... | 5.5 | 0.0012 | | | [CVE-2026-63989](https://patchblox.com/security/data/cve/CVE-2026-63989.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in netlink p... | 5.5 | 0.0012 | | | [CVE-2026-64012](https://patchblox.com/security/data/cve/CVE-2026-64012.md) | Routine | kernel-64kb: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). | 5.5 | 0.0012 | | | [CVE-2026-64131](https://patchblox.com/security/data/cve/CVE-2026-64131.md) | Routine | kernel-64kb: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063). | 5.5 | 0.0012 | | | [CVE-2026-64220](https://patchblox.com/security/data/cve/CVE-2026-64220.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL i... | 5.5 | 0.0012 | | | [CVE-2026-63997](https://patchblox.com/security/data/cve/CVE-2026-63997.md) | Routine | kernel-64kb: ethtool: module: avoid leaking a netdev ref on module flash errors (bsc#1273036). | 5.5 | 0.0012 | | | [CVE-2026-63998](https://patchblox.com/security/data/cve/CVE-2026-63998.md) | Routine | kernel-64kb: ethtool: module: call ethnl_ops_complete() on module flash errors (bsc#1273037). | 5.5 | 0.0012 | | | [CVE-2026-64052](https://patchblox.com/security/data/cve/CVE-2026-64052.md) | Routine | kernel-64kb: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983). | 5.5 | 0.0012 | | | [CVE-2026-64060](https://patchblox.com/security/data/cve/CVE-2026-64060.md) | Routine | netfs: Fix leak of request in netfs_write_begin() error handling | 5.5 | 0.0012 | | | [CVE-2026-64064](https://patchblox.com/security/data/cve/CVE-2026-64064.md) | Routine | kernel-64kb: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). | 5.5 | 0.0012 | | | [CVE-2026-63986](https://patchblox.com/security/data/cve/CVE-2026-63986.md) | Routine | kernel-64kb: ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure (bsc#1272969). | 5.5 | 0.0012 | | | [CVE-2026-64163](https://patchblox.com/security/data/cve/CVE-2026-64163.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: test_kprobes: clear kprobes between test runs R... | 5.5 | 0.0012 | | | [CVE-2026-64166](https://patchblox.com/security/data/cve/CVE-2026-64166.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table... | 5.5 | 0.0012 | | | [CVE-2026-64183](https://patchblox.com/security/data/cve/CVE-2026-64183.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init... | 5.5 | 0.0012 | | | [CVE-2026-64190](https://patchblox.com/security/data/cve/CVE-2026-64190.md) | Routine | net: team: fix NULL pointer dereference in team_xmit during mode change | 5.5 | 0.0012 | | | [CVE-2026-64185](https://patchblox.com/security/data/cve/CVE-2026-64185.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update... | 5.5 | 0.0012 | | | [CVE-2026-52937](https://patchblox.com/security/data/cve/CVE-2026-52937.md) | Routine | tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR | 5.5 | 0.0012 | | | [CVE-2026-46315](https://patchblox.com/security/data/cve/CVE-2026-46315.md) | Routine | kernel-64kb: io_uring/waitid: clear waitid info before copying it to userspace (bsc#1267953). | 5.5 | 0.0011 | | | [CVE-2026-52921](https://patchblox.com/security/data/cve/CVE-2026-52921.md) | Routine | netfilter: ipset: stop hash:* range iteration at end | 5.5 | 0.0011 | | | [CVE-2026-64164](https://patchblox.com/security/data/cve/CVE-2026-64164.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic co... | 5.5 | 0.0011 | | | [CVE-2026-64180](https://patchblox.com/security/data/cve/CVE-2026-64180.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference le... | 5.5 | 0.0011 | | | [CVE-2026-64182](https://patchblox.com/security/data/cve/CVE-2026-64182.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference... | 5.5 | 0.0011 | | | [CVE-2026-64184](https://patchblox.com/security/data/cve/CVE-2026-64184.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing mem_cgroup_... | 5.5 | 0.0011 | | | [CVE-2026-64062](https://patchblox.com/security/data/cve/CVE-2026-64062.md) | Routine | kernel-64kb: netfs: Fix potential deadlock in write-through mode (bsc#1272952). | 5.5 | 0.0009 | | --- Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.