{ "fix": "ALAS2023-2026-1882", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1882", "summary": "ALAS2023-2026-1882, released June 22, 2026, fixes 166 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 18 packages", "released": "2026-06-22T09:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-64047, rated Critical", "supported": true, "cveCount": 166, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.05372, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1882.html", "appliesTo": [ { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "bpftool-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel", "productUrl": "https://patchblox.com/security/product/linux/kernel", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel-headers", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.1.175-219.357", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.175-219.357", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "kernel-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "perf", "productUrl": "https://patchblox.com/security/product/linux/perf", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "python3-perf", "productUrl": "https://patchblox.com/security/product/linux/python3-perf", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true }, { "product": "python3-perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.175-219.357.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-64046", "url": "https://patchblox.com/security/cve/CVE-2026-64046", "title": "kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64047", "url": "https://patchblox.com/security/cve/CVE-2026-64047", "title": "kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52993", "url": "https://patchblox.com/security/cve/CVE-2026-52993", "title": "tipc: fix double-free in tipc_buf_append()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00404, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52955", "url": "https://patchblox.com/security/cve/CVE-2026-52955", "title": "kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.0038, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53002", "url": "https://patchblox.com/security/cve/CVE-2026-53002", "title": "netfilter: conntrack: remove sprintf usage", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00368, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53075", "url": "https://patchblox.com/security/cve/CVE-2026-53075", "title": "ppp: require CAP_NET_ADMIN in target netns for unattached ioctls", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00273, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64106", "url": "https://patchblox.com/security/cve/CVE-2026-64106", "title": "kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).", "priority": "Urgent", "severity": "critical", "cvss": 9, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53036", "url": "https://patchblox.com/security/cve/CVE-2026-53036", "title": "bpf, arm64: Fix off-by-one in check_imm signed range check", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53077", "url": "https://patchblox.com/security/cve/CVE-2026-53077", "title": "net/rds: Restrict use of RDS/IB to the initial network namespace", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53062", "url": "https://patchblox.com/security/cve/CVE-2026-53062", "title": "dm cache policy smq: fix missing locks in invalidating cache blocks", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43499", "url": "https://patchblox.com/security/cve/CVE-2026-43499", "title": "rtmutex: Use waiter::task instead of current in remove_waiter()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.05372, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46242", "url": "https://patchblox.com/security/cve/CVE-2026-46242", "title": "kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.04576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52958", "url": "https://patchblox.com/security/cve/CVE-2026-52958", "title": "libceph: Fix potential out-of-bounds access in osdmap_decode()", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00735, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53003", "url": "https://patchblox.com/security/cve/CVE-2026-53003", "title": "pppoe: drop PFC frames", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43493", "url": "https://patchblox.com/security/cve/CVE-2026-43493", "title": "crypto: pcrypt - Fix handling of MAY_BACKLOG requests", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00681, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52986", "url": "https://patchblox.com/security/cve/CVE-2026-52986", "title": "netfilter: nf_conntrack_sip: don\u0027t use simple_strtoul", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00634, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43083", "url": "https://patchblox.com/security/cve/CVE-2026-43083", "title": "net: ioam6: fix OOB and missing lock", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.006, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52999", "url": "https://patchblox.com/security/cve/CVE-2026-52999", "title": "netfilter: nfnetlink_osf: fix out-of-bounds read on option matching", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00591, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52998", "url": "https://patchblox.com/security/cve/CVE-2026-52998", "title": "netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00579, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46102", "url": "https://patchblox.com/security/cve/CVE-2026-46102", "title": "net: strparser: fix skb_head leak in strp_abort_strp()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00564, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52981", "url": "https://patchblox.com/security/cve/CVE-2026-52981", "title": "kernel-64kb: neigh: let neigh_xmit take skb ownership (bsc#1269254).", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00532, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64113", "url": "https://patchblox.com/security/cve/CVE-2026-64113", "title": "perf: kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46119", "url": "https://patchblox.com/security/cve/CVE-2026-46119", "title": "libceph: Fix slab-out-of-bounds access in auth message processing", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46185", "url": "https://patchblox.com/security/cve/CVE-2026-46185", "title": "smb/client: fix out-of-bounds read in symlink_data()", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52954", "url": "https://patchblox.com/security/cve/CVE-2026-52954", "title": "libceph: handle rbtree insertion error in decode_choose_args()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52957", "url": "https://patchblox.com/security/cve/CVE-2026-52957", "title": "libceph: Fix potential null-ptr-deref in decode_choose_args()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46037", "url": "https://patchblox.com/security/cve/CVE-2026-46037", "title": "ipv4: icmp: validate reply type before using icmp_pointers", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52974", "url": "https://patchblox.com/security/cve/CVE-2026-52974", "title": "net: tls: fix strparser anchor skb leak on offload RX setup failure", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46024", "url": "https://patchblox.com/security/cve/CVE-2026-46024", "title": "libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31685", "url": "https://patchblox.com/security/cve/CVE-2026-31685", "title": "netfilter: ip6t_eui64: reject invalid MAC header for all packets", "priority": "High", "severity": "Moderate", "cvss": 9.4, "epss": 0.00485, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46124", "url": "https://patchblox.com/security/cve/CVE-2026-46124", "title": "kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847).", "priority": "High", "severity": "N/A", "cvss": 7.5, "epss": 0.00476, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43071", "url": "https://patchblox.com/security/cve/CVE-2026-43071", "title": "kernel-uek: dcache: Limit the minimal number of bucket to two (Zhihao Cheng) [Orabug: 39323133]", "priority": "High", "severity": "IMPORTANT", "cvss": 9.1, "epss": 0.00459, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43117", "url": "https://patchblox.com/security/cve/CVE-2026-43117", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 9.1, "epss": 0.00458, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46306", "url": "https://patchblox.com/security/cve/CVE-2026-46306", "title": "flow_dissector: do not dissect PPPoE PFC frames", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00449, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45843", "url": "https://patchblox.com/security/cve/CVE-2026-45843", "title": "slip: bound decode() reads against the compressed packet length", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00398, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53006", "url": "https://patchblox.com/security/cve/CVE-2026-53006", "title": "ipv6: fix possible UAF in icmpv6_rcv()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00394, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52967", "url": "https://patchblox.com/security/cve/CVE-2026-52967", "title": "kernel-default: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00393, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31613", "url": "https://patchblox.com/security/cve/CVE-2026-31613", "title": "smb: client: fix OOB reads parsing symlink error response", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53069", "url": "https://patchblox.com/security/cve/CVE-2026-53069", "title": "kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).", "priority": "High", "severity": "N/A", "cvss": 7.5, "epss": 0.0038, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43114", "url": "https://patchblox.com/security/cve/CVE-2026-43114", "title": "kernel-rt-64k-modules-core: kernel: netfilter: nft_set_pipapo_avx2: don\u0027t return non-matching entry on expiry", "priority": "High", "severity": "Important", "cvss": 9.4, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43112", "url": "https://patchblox.com/security/cve/CVE-2026-43112", "title": "kernel-64kb: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00352, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31708", "url": "https://patchblox.com/security/cve/CVE-2026-31708", "title": "smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00352, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43502", "url": "https://patchblox.com/security/cve/CVE-2026-43502", "title": "net/rds: handle zerocopy send cleanup before the message is queued", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00324, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43350", "url": "https://patchblox.com/security/cve/CVE-2026-43350", "title": "kernel-64kb: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.6, "epss": 0.00324, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31607", "url": "https://patchblox.com/security/cve/CVE-2026-31607", "title": "usbip: validate number_of_packets in usbip_pack_ret_submit()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00311, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52920", "url": "https://patchblox.com/security/cve/CVE-2026-52920", "title": "netfilter: xt_policy: fix strict mode inbound policy matching", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00299, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46099", "url": "https://patchblox.com/security/cve/CVE-2026-46099", "title": "net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00288, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31663", "url": "https://patchblox.com/security/cve/CVE-2026-31663", "title": "xfrm: hold dev ref until after transport_finish NF_HOOK", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00224, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46113", "url": "https://patchblox.com/security/cve/CVE-2026-46113", "title": "kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52969", "url": "https://patchblox.com/security/cve/CVE-2026-52969", "title": "KVM: Reject wrapped offset in kvm_reset_dirty_gfn()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31588", "url": "https://patchblox.com/security/cve/CVE-2026-31588", "title": "KVM: x86: Use scratch field in MMIO fragment to hold small write values", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53369", "url": "https://patchblox.com/security/cve/CVE-2026-53369", "title": "kernel-64kb: udf: reject descriptors with oversized CRC length (bsc#1271818).", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63860", "url": "https://patchblox.com/security/cve/CVE-2026-63860", "title": "kernel-64kb: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23272", "url": "https://patchblox.com/security/cve/CVE-2026-23272", "title": "netfilter: nf_tables: unconditionally bump set-\u003Enelems before insertion", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31407", "url": "https://patchblox.com/security/cve/CVE-2026-31407", "title": "netfilter: conntrack: add missing netlink policy validations", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53023", "url": "https://patchblox.com/security/cve/CVE-2026-53023", "title": "fs/ntfs3: terminate the cached volume label after UTF-8 conversion", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52912", "url": "https://patchblox.com/security/cve/CVE-2026-52912", "title": "netfilter: nf_queue: hold bridge skb-\u003Edev while queued", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64015", "url": "https://patchblox.com/security/cve/CVE-2026-64015", "title": "kernel-default: security/keys: fix missed RCU read section on lookup (bsc#1273762).", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52933", "url": "https://patchblox.com/security/cve/CVE-2026-52933", "title": "io_uring/poll: fix signed comparison in io_poll_get_ownership()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46294", "url": "https://patchblox.com/security/cve/CVE-2026-46294", "title": "kernel-uek: dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585]", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52972", "url": "https://patchblox.com/security/cve/CVE-2026-52972", "title": "crypto: af_alg - Cap AEAD AD length to 0x80000000", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46149", "url": "https://patchblox.com/security/cve/CVE-2026-46149", "title": "scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46209", "url": "https://patchblox.com/security/cve/CVE-2026-46209", "title": "kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460...", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46062", "url": "https://patchblox.com/security/cve/CVE-2026-46062", "title": "ntfs3: fix integer overflow in run_unpack() volume boundary check", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53059", "url": "https://patchblox.com/security/cve/CVE-2026-53059", "title": "dm log: fix out-of-bounds write due to region_count overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64153", "url": "https://patchblox.com/security/cve/CVE-2026-64153", "title": "bpftool: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (Mikko Perttunen) [Orabug: 39754904]", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46129", "url": "https://patchblox.com/security/cve/CVE-2026-46129", "title": "btrfs: fix double free in create_space_info() error path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52962", "url": "https://patchblox.com/security/cve/CVE-2026-52962", "title": "ceph: fix a buffer leak in __ceph_setxattr()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46274", "url": "https://patchblox.com/security/cve/CVE-2026-46274", "title": "io-wq: check that the predecessor is hashed in io_wq_remove_pending()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64114", "url": "https://patchblox.com/security/cve/CVE-2026-64114", "title": "kernel-default: ipv4: raw: reject IP_HDRINCL packets with ihl \u003C 5 (bsc#1273742).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45839", "url": "https://patchblox.com/security/cve/CVE-2026-45839", "title": "bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46033", "url": "https://patchblox.com/security/cve/CVE-2026-46033", "title": "crypto: authencesn - reject short ahash digests during instance creation", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64115", "url": "https://patchblox.com/security/cve/CVE-2026-64115", "title": "kernel-default: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46015", "url": "https://patchblox.com/security/cve/CVE-2026-46015", "title": "tcp: call sk_data_ready() after listener migration", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43093", "url": "https://patchblox.com/security/cve/CVE-2026-43093", "title": "kernel-64kb: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53033", "url": "https://patchblox.com/security/cve/CVE-2026-53033", "title": "kernel-64kb: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46132", "url": "https://patchblox.com/security/cve/CVE-2026-46132", "title": "bpftool: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297]", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31419", "url": "https://patchblox.com/security/cve/CVE-2026-31419", "title": "net: bonding: fix use-after-free in bond_xmit_broadcast()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23442", "url": "https://patchblox.com/security/cve/CVE-2026-23442", "title": "ipv6: add NULL checks for idev in SRv6 paths", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46172", "url": "https://patchblox.com/security/cve/CVE-2026-46172", "title": "kernel-64kb: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (bsc#1266903).", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52970", "url": "https://patchblox.com/security/cve/CVE-2026-52970", "title": "netfilter: nft_ct: fix missing expect put in obj eval", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64032", "url": "https://patchblox.com/security/cve/CVE-2026-64032", "title": "kernel-rt-64k-debug-devel: kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64073", "url": "https://patchblox.com/security/cve/CVE-2026-64073", "title": "kernel-64kb: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46023", "url": "https://patchblox.com/security/cve/CVE-2026-46023", "title": "dm mirror: fix integer overflow in create_dirty_log()", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31586", "url": "https://patchblox.com/security/cve/CVE-2026-31586", "title": "mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46173", "url": "https://patchblox.com/security/cve/CVE-2026-46173", "title": "exit: prevent preemption of oopsing TASK_DEAD task", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46078", "url": "https://patchblox.com/security/cve/CVE-2026-46078", "title": "erofs: fix the out-of-bounds nameoff handling for trailing dirents", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45840", "url": "https://patchblox.com/security/cve/CVE-2026-45840", "title": "kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479]", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31580", "url": "https://patchblox.com/security/cve/CVE-2026-31580", "title": "bcache: fix cached_dev.sb_bio use-after-free and crash", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46234", "url": "https://patchblox.com/security/cve/CVE-2026-46234", "title": "vsock: fix buffer size clamping order", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53011", "url": "https://patchblox.com/security/cve/CVE-2026-53011", "title": "net/sched: taprio: fix use-after-free in advance_sched() on schedule switch", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31673", "url": "https://patchblox.com/security/cve/CVE-2026-31673", "title": "af_unix: read UNIX_DIAG_VFS data under unix_state_lock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46150", "url": "https://patchblox.com/security/cve/CVE-2026-46150", "title": "fanotify: fix false positive on permission events", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46053", "url": "https://patchblox.com/security/cve/CVE-2026-46053", "title": "net: rds: fix MR cleanup on copy error", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53004", "url": "https://patchblox.com/security/cve/CVE-2026-53004", "title": "kernel-uek-modules-extra: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757]", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64108", "url": "https://patchblox.com/security/cve/CVE-2026-64108", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Sin...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46120", "url": "https://patchblox.com/security/cve/CVE-2026-46120", "title": "kernel: kernel: ip6_gre: Use cached t-\u003Enet in ip6erspan_changelink()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31716", "url": "https://patchblox.com/security/cve/CVE-2026-31716", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate rec-\u003Eused in journal-replay f...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46070", "url": "https://patchblox.com/security/cve/CVE-2026-46070", "title": "md/raid5: validate payload size before accessing journal metadata", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53063", "url": "https://patchblox.com/security/cve/CVE-2026-53063", "title": "dm cache: fix write hang in passthrough mode", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53034", "url": "https://patchblox.com/security/cve/CVE-2026-53034", "title": "bpf, sockmap: Fix af_unix null-ptr-deref in proto update", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63865", "url": "https://patchblox.com/security/cve/CVE-2026-63865", "title": "kernel-64kb: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52915", "url": "https://patchblox.com/security/cve/CVE-2026-52915", "title": "netfilter: ip6t_hbh: reject oversized option lists", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64121", "url": "https://patchblox.com/security/cve/CVE-2026-64121", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queue...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46072", "url": "https://patchblox.com/security/cve/CVE-2026-46072", "title": "ntfs3: add buffer boundary checks to run_unpack()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53064", "url": "https://patchblox.com/security/cve/CVE-2026-53064", "title": "dm cache: fix null-deref with concurrent writes in passthrough mode", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53021", "url": "https://patchblox.com/security/cve/CVE-2026-53021", "title": "scsi: target: core: Fix integer overflow in UNMAP bounds check", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31692", "url": "https://patchblox.com/security/cve/CVE-2026-31692", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nrtnetlink: add missing netlink_ns_capable() check...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31684", "url": "https://patchblox.com/security/cve/CVE-2026-31684", "title": "net: sched: act_csum: validate nested VLAN headers", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64098", "url": "https://patchblox.com/security/cve/CVE-2026-64098", "title": "kernel-default: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00113, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31700", "url": "https://patchblox.com/security/cve/CVE-2026-31700", "title": "net/packet: fix TOCTOU race on mmap\u0027d vnet_hdr in tpacket_snd()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00111, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52975", "url": "https://patchblox.com/security/cve/CVE-2026-52975", "title": "bonding: 3ad: implement proper RCU rules for port-\u003Eaggregator", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46227", "url": "https://patchblox.com/security/cve/CVE-2026-46227", "title": "sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53050", "url": "https://patchblox.com/security/cve/CVE-2026-53050", "title": "quota: Fix race of dquot_scan_active() with quota deactivation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46107", "url": "https://patchblox.com/security/cve/CVE-2026-46107", "title": "dm-thin: fix metadata refcount underflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53096", "url": "https://patchblox.com/security/cve/CVE-2026-53096", "title": "bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43116", "url": "https://patchblox.com/security/cve/CVE-2026-43116", "title": "netfilter: ctnetlink: ensure safe access to master conntrack", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00101, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-53989", "url": "https://patchblox.com/security/cve/CVE-2023-53989", "title": "dtb-aarch64: Security update for the Linux Kernel", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53047", "url": "https://patchblox.com/security/cve/CVE-2026-53047", "title": "efi/capsule-loader: fix incorrect sizeof in phys array reallocation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53128", "url": "https://patchblox.com/security/cve/CVE-2026-53128", "title": "drbd: Balance RCU calls in drbd_adm_dump_devices()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46079", "url": "https://patchblox.com/security/cve/CVE-2026-46079", "title": "rbd: fix null-ptr-deref when device_add_disk() fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53012", "url": "https://patchblox.com/security/cve/CVE-2026-53012", "title": "nexthop: fix IPv6 route referencing IPv4 nexthop", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53295", "url": "https://patchblox.com/security/cve/CVE-2026-53295", "title": "mailbox: add sanity check for channel array", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23399", "url": "https://patchblox.com/security/cve/CVE-2026-23399", "title": "nf_tables: nft_dynset: fix possible stateful expression memleak in error path", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45841", "url": "https://patchblox.com/security/cve/CVE-2026-45841", "title": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43089", "url": "https://patchblox.com/security/cve/CVE-2026-43089", "title": "kernel-64kb: xfrm_user: fix info leak in build_mapping() (bsc#1264261).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46161", "url": "https://patchblox.com/security/cve/CVE-2026-46161", "title": "bpftool: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46214", "url": "https://patchblox.com/security/cve/CVE-2026-46214", "title": "kernel-uek-debug-modules-extra: vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43085", "url": "https://patchblox.com/security/cve/CVE-2026-43085", "title": "kernel-64kb: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45838", "url": "https://patchblox.com/security/cve/CVE-2026-45838", "title": "bpf: fix end-of-list detection in cgroup_storage_get_next_key()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45842", "url": "https://patchblox.com/security/cve/CVE-2026-45842", "title": "slip: reject VJ receive packets on instances with no rstate array", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46040", "url": "https://patchblox.com/security/cve/CVE-2026-46040", "title": "bpftool: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (Chia-Ming Chang) [Orabug: 39452251]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46046", "url": "https://patchblox.com/security/cve/CVE-2026-46046", "title": "ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46101", "url": "https://patchblox.com/security/cve/CVE-2026-46101", "title": "bpftool: netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452465]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53001", "url": "https://patchblox.com/security/cve/CVE-2026-53001", "title": "kernel-uek: netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621740]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46168", "url": "https://patchblox.com/security/cve/CVE-2026-46168", "title": "mptcp: fix scheduling with atomic in timestamp sockopt", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52984", "url": "https://patchblox.com/security/cve/CVE-2026-52984", "title": "kernel-uek-container: net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53060", "url": "https://patchblox.com/security/cve/CVE-2026-53060", "title": "dm cache metadata: fix memory leak on metadata abort retry", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31590", "url": "https://patchblox.com/security/cve/CVE-2026-31590", "title": "KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31681", "url": "https://patchblox.com/security/cve/CVE-2026-31681", "title": "netfilter: xt_multiport: validate range encoding in checkentry", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43079", "url": "https://patchblox.com/security/cve/CVE-2026-43079", "title": "kernel-64kb: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43094", "url": "https://patchblox.com/security/cve/CVE-2026-43094", "title": "kernel-64kb: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45987", "url": "https://patchblox.com/security/cve/CVE-2026-45987", "title": "KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45997", "url": "https://patchblox.com/security/cve/CVE-2026-45997", "title": "kernel-64kb: scsi: sd: fix missing put_disk() when device_add(\u0026disk_dev) fails (bsc#1266740).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46082", "url": "https://patchblox.com/security/cve/CVE-2026-46082", "title": "KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52977", "url": "https://patchblox.com/security/cve/CVE-2026-52977", "title": "futex: Prevent lockup in requeue-PI during signal/ timeout wakeup", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52985", "url": "https://patchblox.com/security/cve/CVE-2026-52985", "title": "kernel-uek-debug-devel: netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52995", "url": "https://patchblox.com/security/cve/CVE-2026-52995", "title": "kernel-64kb: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53061", "url": "https://patchblox.com/security/cve/CVE-2026-53061", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix dirty mapping checking in passthro...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53287", "url": "https://patchblox.com/security/cve/CVE-2026-53287", "title": "audit: fix incorrect inheritable capability in CAPSET records", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64220", "url": "https://patchblox.com/security/cve/CVE-2026-64220", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-\u003Esecondary to NULL i...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23255", "url": "https://patchblox.com/security/cve/CVE-2026-23255", "title": "net: add proper RCU protection to /proc/net/ptype", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43496", "url": "https://patchblox.com/security/cve/CVE-2026-43496", "title": "net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53111", "url": "https://patchblox.com/security/cve/CVE-2026-53111", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: test_run: Fix the null pointer dereference...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39961", "url": "https://patchblox.com/security/cve/CVE-2025-39961", "title": "iommu/amd/pgtbl: Fix possible race while increase page table level", "priority": "Routine", "severity": "Moderate", "cvss": 5.8, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53314", "url": "https://patchblox.com/security/cve/CVE-2026-53314", "title": "padata: Put CPU offline callback in ONLINE section to allow failure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64185", "url": "https://patchblox.com/security/cve/CVE-2026-64185", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sysfs: don\u0027t remove existing directory on update...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53074", "url": "https://patchblox.com/security/cve/CVE-2026-53074", "title": "bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52921", "url": "https://patchblox.com/security/cve/CVE-2026-52921", "title": "netfilter: ipset: stop hash:* range iteration at end", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52925", "url": "https://patchblox.com/security/cve/CVE-2026-52925", "title": "vrf: Fix a potential NPD when removing a port from a VRF", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53304", "url": "https://patchblox.com/security/cve/CVE-2026-53304", "title": "scsi: sg: Resolve soft lockup issue when opening /dev/sgX", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00101, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46165", "url": "https://patchblox.com/security/cve/CVE-2026-46165", "title": "openvswitch: vport: fix self-deadlock on release of tunnel ports", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00099, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46051", "url": "https://patchblox.com/security/cve/CVE-2026-46051", "title": "md/raid5: fix soft lockup in retry_aligned_read()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46050", "url": "https://patchblox.com/security/cve/CVE-2026-46050", "title": "md/raid10: fix deadlock with check operation and nowait requests", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53035", "url": "https://patchblox.com/security/cve/CVE-2026-53035", "title": "bpf, sockmap: Fix af_unix iter deadlock", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53037", "url": "https://patchblox.com/security/cve/CVE-2026-53037", "title": "HID: usbhid: fix deadlock in hid_post_reset()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-11T19:49:26Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }