# ALAS2023-2026-1882: Security update for 18 packages

ALAS2023-2026-1882, released June 22, 2026, fixes 166 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1882
- Platform: Linux
- Released: Jun 22, 2026
- Priority: Urgent (Closes CVE-2026-64047, rated Critical)
- CVEs: 166, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1882.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [kernel-livepatch-6.1.175-219.357](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.175-219.357.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 1:6.1.175-219.357.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-64046](https://patchblox.com/security/data/cve/CVE-2026-64046.md) | Urgent | kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). | 9.8 | 0.0051 |  |
| [CVE-2026-64047](https://patchblox.com/security/data/cve/CVE-2026-64047.md) | Urgent | kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060). | 9.8 | 0.0051 |  |
| [CVE-2026-52993](https://patchblox.com/security/data/cve/CVE-2026-52993.md) | Urgent | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 |  |
| [CVE-2026-52955](https://patchblox.com/security/data/cve/CVE-2026-52955.md) | Urgent | kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159). | 9.8 | 0.0038 |  |
| [CVE-2026-53002](https://patchblox.com/security/data/cve/CVE-2026-53002.md) | Urgent | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 |  |
| [CVE-2026-53075](https://patchblox.com/security/data/cve/CVE-2026-53075.md) | Urgent | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 |  |
| [CVE-2026-64106](https://patchblox.com/security/data/cve/CVE-2026-64106.md) | Urgent | kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242). | 9.0 | 0.0015 |  |
| [CVE-2026-53036](https://patchblox.com/security/data/cve/CVE-2026-53036.md) | Urgent | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 |  |
| [CVE-2026-53077](https://patchblox.com/security/data/cve/CVE-2026-53077.md) | Urgent | net/rds: Restrict use of RDS/IB to the initial network namespace | 9.8 | 0.0012 |  |
| [CVE-2026-53062](https://patchblox.com/security/data/cve/CVE-2026-53062.md) | Urgent | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 |  |
| [CVE-2026-43499](https://patchblox.com/security/data/cve/CVE-2026-43499.md) | High | rtmutex: Use waiter::task instead of current in remove_waiter() | 7.8 | 0.0537 |  |
| [CVE-2026-46242](https://patchblox.com/security/data/cve/CVE-2026-46242.md) | High | kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618). | 7.8 | 0.0458 |  |
| [CVE-2026-52958](https://patchblox.com/security/data/cve/CVE-2026-52958.md) | High | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 |  |
| [CVE-2026-53003](https://patchblox.com/security/data/cve/CVE-2026-53003.md) | High | pppoe: drop PFC frames | 7.5 | 0.0072 |  |
| [CVE-2026-43493](https://patchblox.com/security/data/cve/CVE-2026-43493.md) | High | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | 9.8 | 0.0068 |  |
| [CVE-2026-52986](https://patchblox.com/security/data/cve/CVE-2026-52986.md) | High | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 |  |
| [CVE-2026-43083](https://patchblox.com/security/data/cve/CVE-2026-43083.md) | High | net: ioam6: fix OOB and missing lock | 9.1 | 0.0060 |  |
| [CVE-2026-52999](https://patchblox.com/security/data/cve/CVE-2026-52999.md) | High | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 |  |
| [CVE-2026-52998](https://patchblox.com/security/data/cve/CVE-2026-52998.md) | High | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 |  |
| [CVE-2026-46102](https://patchblox.com/security/data/cve/CVE-2026-46102.md) | High | net: strparser: fix skb_head leak in strp_abort_strp() | 7.5 | 0.0056 |  |
| [CVE-2026-52981](https://patchblox.com/security/data/cve/CVE-2026-52981.md) | High | kernel-64kb: neigh: let neigh_xmit take skb ownership (bsc#1269254). | 7.5 | 0.0053 |  |
| [CVE-2026-64113](https://patchblox.com/security/data/cve/CVE-2026-64113.md) | High | perf: kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning | 9.8 | 0.0053 |  |
| [CVE-2026-46119](https://patchblox.com/security/data/cve/CVE-2026-46119.md) | High | libceph: Fix slab-out-of-bounds access in auth message processing | 9.1 | 0.0053 |  |
| [CVE-2026-46185](https://patchblox.com/security/data/cve/CVE-2026-46185.md) | High | smb/client: fix out-of-bounds read in symlink_data() | 9.1 | 0.0053 |  |
| [CVE-2026-52954](https://patchblox.com/security/data/cve/CVE-2026-52954.md) | High | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 |  |
| [CVE-2026-52957](https://patchblox.com/security/data/cve/CVE-2026-52957.md) | High | libceph: Fix potential null-ptr-deref in decode_choose_args() | 7.5 | 0.0052 |  |
| [CVE-2026-46037](https://patchblox.com/security/data/cve/CVE-2026-46037.md) | High | ipv4: icmp: validate reply type before using icmp_pointers | 8.2 | 0.0051 |  |
| [CVE-2026-52974](https://patchblox.com/security/data/cve/CVE-2026-52974.md) | High | net: tls: fix strparser anchor skb leak on offload RX setup failure | 7.5 | 0.0050 |  |
| [CVE-2026-46024](https://patchblox.com/security/data/cve/CVE-2026-46024.md) | High | libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() | 7.5 | 0.0049 |  |
| [CVE-2026-31685](https://patchblox.com/security/data/cve/CVE-2026-31685.md) | High | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 |  |
| [CVE-2026-46124](https://patchblox.com/security/data/cve/CVE-2026-46124.md) | High | kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847). | 7.5 | 0.0048 |  |
| [CVE-2026-43071](https://patchblox.com/security/data/cve/CVE-2026-43071.md) | High | kernel-uek: dcache: Limit the minimal number of bucket to two (Zhihao Cheng) [Orabug: 39323133] | 9.1 | 0.0046 |  |
| [CVE-2026-43117](https://patchblox.com/security/data/cve/CVE-2026-43117.md) | High | kernel-64kb: Security update for the Linux Kernel | 9.1 | 0.0046 |  |
| [CVE-2026-46306](https://patchblox.com/security/data/cve/CVE-2026-46306.md) | High | flow_dissector: do not dissect PPPoE PFC frames | 8.1 | 0.0045 |  |
| [CVE-2026-45843](https://patchblox.com/security/data/cve/CVE-2026-45843.md) | High | slip: bound decode() reads against the compressed packet length | 8.2 | 0.0040 |  |
| [CVE-2026-53006](https://patchblox.com/security/data/cve/CVE-2026-53006.md) | High | ipv6: fix possible UAF in icmpv6_rcv() | 9.8 | 0.0039 |  |
| [CVE-2026-52967](https://patchblox.com/security/data/cve/CVE-2026-52967.md) | High | kernel-default: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181). | 8.1 | 0.0039 |  |
| [CVE-2026-31613](https://patchblox.com/security/data/cve/CVE-2026-31613.md) | High | smb: client: fix OOB reads parsing symlink error response | 8.8 | 0.0039 |  |
| [CVE-2026-53069](https://patchblox.com/security/data/cve/CVE-2026-53069.md) | High | kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186). | 7.5 | 0.0038 |  |
| [CVE-2026-43114](https://patchblox.com/security/data/cve/CVE-2026-43114.md) | High | kernel-rt-64k-modules-core: kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry | 9.4 | 0.0037 |  |
| [CVE-2026-43112](https://patchblox.com/security/data/cve/CVE-2026-43112.md) | High | kernel-64kb: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437). | 8.8 | 0.0035 |  |
| [CVE-2026-31708](https://patchblox.com/security/data/cve/CVE-2026-31708.md) | High | smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path | 8.1 | 0.0035 |  |
| [CVE-2026-43502](https://patchblox.com/security/data/cve/CVE-2026-43502.md) | High | net/rds: handle zerocopy send cleanup before the message is queued | 7.8 | 0.0032 |  |
| [CVE-2026-43350](https://patchblox.com/security/data/cve/CVE-2026-43350.md) | High | kernel-64kb: smb: client: require a full NFS mode SID before reading mode bits (bsc#1264985). | 7.6 | 0.0032 |  |
| [CVE-2026-31607](https://patchblox.com/security/data/cve/CVE-2026-31607.md) | High | usbip: validate number_of_packets in usbip_pack_ret_submit() | 9.8 | 0.0031 |  |
| [CVE-2026-52920](https://patchblox.com/security/data/cve/CVE-2026-52920.md) | High | netfilter: xt_policy: fix strict mode inbound policy matching | 8.3 | 0.0030 |  |
| [CVE-2026-46099](https://patchblox.com/security/data/cve/CVE-2026-46099.md) | High | net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels | 8.1 | 0.0029 |  |
| [CVE-2026-31663](https://patchblox.com/security/data/cve/CVE-2026-31663.md) | High | xfrm: hold dev ref until after transport_finish NF_HOOK | 8.8 | 0.0022 |  |
| [CVE-2026-46113](https://patchblox.com/security/data/cve/CVE-2026-46113.md) | High | kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | 8.8 | 0.0020 |  |
| [CVE-2026-52969](https://patchblox.com/security/data/cve/CVE-2026-52969.md) | High | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 |  |
| [CVE-2026-31588](https://patchblox.com/security/data/cve/CVE-2026-31588.md) | High | KVM: x86: Use scratch field in MMIO fragment to hold small write values | 8.8 | 0.0019 |  |
| [CVE-2026-53369](https://patchblox.com/security/data/cve/CVE-2026-53369.md) | High | kernel-64kb: udf: reject descriptors with oversized CRC length (bsc#1271818). | 8.4 | 0.0019 |  |
| [CVE-2026-63860](https://patchblox.com/security/data/cve/CVE-2026-63860.md) | High | kernel-64kb: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429). | 8.4 | 0.0018 |  |
| [CVE-2026-23272](https://patchblox.com/security/data/cve/CVE-2026-23272.md) | High | netfilter: nf_tables: unconditionally bump set->nelems before insertion | 7.8 | 0.0018 |  |
| [CVE-2026-31407](https://patchblox.com/security/data/cve/CVE-2026-31407.md) | High | netfilter: conntrack: add missing netlink policy validations | 7.1 | 0.0018 |  |
| [CVE-2026-53023](https://patchblox.com/security/data/cve/CVE-2026-53023.md) | High | fs/ntfs3: terminate the cached volume label after UTF-8 conversion | 7.1 | 0.0016 |  |
| [CVE-2026-52912](https://patchblox.com/security/data/cve/CVE-2026-52912.md) | High | netfilter: nf_queue: hold bridge skb->dev while queued | 7.8 | 0.0016 |  |
| [CVE-2026-64015](https://patchblox.com/security/data/cve/CVE-2026-64015.md) | High | kernel-default: security/keys: fix missed RCU read section on lookup (bsc#1273762). | 8.1 | 0.0016 |  |
| [CVE-2026-52933](https://patchblox.com/security/data/cve/CVE-2026-52933.md) | High | io_uring/poll: fix signed comparison in io_poll_get_ownership() | 7.8 | 0.0015 |  |
| [CVE-2026-46294](https://patchblox.com/security/data/cve/CVE-2026-46294.md) | High | kernel-uek: dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585] | 7.8 | 0.0015 |  |
| [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 |  |
| [CVE-2026-46149](https://patchblox.com/security/data/cve/CVE-2026-46149.md) | High | scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() | 8.8 | 0.0014 |  |
| [CVE-2026-46209](https://patchblox.com/security/data/cve/CVE-2026-46209.md) | High | kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460... | 8.4 | 0.0014 |  |
| [CVE-2026-46062](https://patchblox.com/security/data/cve/CVE-2026-46062.md) | High | ntfs3: fix integer overflow in run_unpack() volume boundary check | 7.8 | 0.0014 |  |
| [CVE-2026-53059](https://patchblox.com/security/data/cve/CVE-2026-53059.md) | High | dm log: fix out-of-bounds write due to region_count overflow | 7.8 | 0.0014 |  |
| [CVE-2026-64153](https://patchblox.com/security/data/cve/CVE-2026-64153.md) | High | bpftool: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (Mikko Perttunen) [Orabug: 39754904] | 8.8 | 0.0014 |  |
| [CVE-2026-46129](https://patchblox.com/security/data/cve/CVE-2026-46129.md) | High | btrfs: fix double free in create_space_info() error path | 7.8 | 0.0014 |  |
| [CVE-2026-52962](https://patchblox.com/security/data/cve/CVE-2026-52962.md) | High | ceph: fix a buffer leak in __ceph_setxattr() | 7.8 | 0.0014 |  |
| [CVE-2026-46274](https://patchblox.com/security/data/cve/CVE-2026-46274.md) | High | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | 7.8 | 0.0014 |  |
| [CVE-2026-64114](https://patchblox.com/security/data/cve/CVE-2026-64114.md) | High | kernel-default: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742). | 8.8 | 0.0014 |  |
| [CVE-2026-45839](https://patchblox.com/security/data/cve/CVE-2026-45839.md) | High | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | 7.8 | 0.0014 |  |
| [CVE-2026-46033](https://patchblox.com/security/data/cve/CVE-2026-46033.md) | High | crypto: authencesn - reject short ahash digests during instance creation | 7.3 | 0.0014 |  |
| [CVE-2026-64115](https://patchblox.com/security/data/cve/CVE-2026-64115.md) | High | kernel-default: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). | 8.8 | 0.0014 |  |
| [CVE-2026-46015](https://patchblox.com/security/data/cve/CVE-2026-46015.md) | High | tcp: call sk_data_ready() after listener migration | 8.1 | 0.0014 |  |
| [CVE-2026-43093](https://patchblox.com/security/data/cve/CVE-2026-43093.md) | High | kernel-64kb: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254). | 7.8 | 0.0014 |  |
| [CVE-2026-53033](https://patchblox.com/security/data/cve/CVE-2026-53033.md) | High | kernel-64kb: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388). | 7.8 | 0.0014 |  |
| [CVE-2026-46132](https://patchblox.com/security/data/cve/CVE-2026-46132.md) | High | bpftool: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297] | 7.0 | 0.0014 |  |
| [CVE-2026-31419](https://patchblox.com/security/data/cve/CVE-2026-31419.md) | High | net: bonding: fix use-after-free in bond_xmit_broadcast() | 8.8 | 0.0013 |  |
| [CVE-2026-23442](https://patchblox.com/security/data/cve/CVE-2026-23442.md) | High | ipv6: add NULL checks for idev in SRv6 paths | 7.8 | 0.0013 |  |
| [CVE-2026-46172](https://patchblox.com/security/data/cve/CVE-2026-46172.md) | High | kernel-64kb: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (bsc#1266903). | 7.0 | 0.0013 |  |
| [CVE-2026-52970](https://patchblox.com/security/data/cve/CVE-2026-52970.md) | High | netfilter: nft_ct: fix missing expect put in obj eval | 7.0 | 0.0013 |  |
| [CVE-2026-64032](https://patchblox.com/security/data/cve/CVE-2026-64032.md) | High | kernel-rt-64k-debug-devel: kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port | 8.8 | 0.0013 |  |
| [CVE-2026-64073](https://patchblox.com/security/data/cve/CVE-2026-64073.md) | High | kernel-64kb: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490). | 7.8 | 0.0013 |  |
| [CVE-2026-46023](https://patchblox.com/security/data/cve/CVE-2026-46023.md) | High | dm mirror: fix integer overflow in create_dirty_log() | 7.0 | 0.0013 |  |
| [CVE-2026-31586](https://patchblox.com/security/data/cve/CVE-2026-31586.md) | High | mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() | 7.8 | 0.0013 |  |
| [CVE-2026-46173](https://patchblox.com/security/data/cve/CVE-2026-46173.md) | High | exit: prevent preemption of oopsing TASK_DEAD task | 7.8 | 0.0013 |  |
| [CVE-2026-46078](https://patchblox.com/security/data/cve/CVE-2026-46078.md) | High | erofs: fix the out-of-bounds nameoff handling for trailing dirents | 7.1 | 0.0013 |  |
| [CVE-2026-45840](https://patchblox.com/security/data/cve/CVE-2026-45840.md) | High | kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479] | 7.0 | 0.0013 |  |
| [CVE-2026-31580](https://patchblox.com/security/data/cve/CVE-2026-31580.md) | High | bcache: fix cached_dev.sb_bio use-after-free and crash | 7.8 | 0.0013 |  |
| [CVE-2026-46234](https://patchblox.com/security/data/cve/CVE-2026-46234.md) | High | vsock: fix buffer size clamping order | 7.8 | 0.0013 |  |
| [CVE-2026-53011](https://patchblox.com/security/data/cve/CVE-2026-53011.md) | High | net/sched: taprio: fix use-after-free in advance_sched() on schedule switch | 8.8 | 0.0013 |  |
| [CVE-2026-31673](https://patchblox.com/security/data/cve/CVE-2026-31673.md) | High | af_unix: read UNIX_DIAG_VFS data under unix_state_lock | 7.8 | 0.0013 |  |
| [CVE-2026-46150](https://patchblox.com/security/data/cve/CVE-2026-46150.md) | High | fanotify: fix false positive on permission events | 7.8 | 0.0013 |  |
| [CVE-2026-46053](https://patchblox.com/security/data/cve/CVE-2026-46053.md) | High | net: rds: fix MR cleanup on copy error | 7.8 | 0.0013 |  |
| [CVE-2026-53004](https://patchblox.com/security/data/cve/CVE-2026-53004.md) | High | kernel-uek-modules-extra: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757] | 7.8 | 0.0013 |  |
| [CVE-2026-64108](https://patchblox.com/security/data/cve/CVE-2026-64108.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: Fix busy dentry used after unmounting  Sin... | 7.8 | 0.0013 |  |
| [CVE-2026-46120](https://patchblox.com/security/data/cve/CVE-2026-46120.md) | High | kernel: kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() | 8.8 | 0.0013 |  |
| [CVE-2026-31716](https://patchblox.com/security/data/cve/CVE-2026-31716.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: validate rec->used in journal-replay f... | 7.8 | 0.0013 |  |
| [CVE-2026-46070](https://patchblox.com/security/data/cve/CVE-2026-46070.md) | High | md/raid5: validate payload size before accessing journal metadata | 7.1 | 0.0013 |  |
| [CVE-2026-53063](https://patchblox.com/security/data/cve/CVE-2026-53063.md) | High | dm cache: fix write hang in passthrough mode | 7.1 | 0.0013 |  |
| [CVE-2026-53034](https://patchblox.com/security/data/cve/CVE-2026-53034.md) | High | bpf, sockmap: Fix af_unix null-ptr-deref in proto update | 7.0 | 0.0013 |  |
| [CVE-2026-63865](https://patchblox.com/security/data/cve/CVE-2026-63865.md) | High | kernel-64kb: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486). | 8.8 | 0.0013 |  |
| [CVE-2026-52915](https://patchblox.com/security/data/cve/CVE-2026-52915.md) | High | netfilter: ip6t_hbh: reject oversized option lists | 7.1 | 0.0013 |  |
| [CVE-2026-64121](https://patchblox.com/security/data/cve/CVE-2026-64121.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: ifb: report ethtool stats over num_tx_queue... | 7.1 | 0.0013 |  |
| [CVE-2026-46072](https://patchblox.com/security/data/cve/CVE-2026-46072.md) | High | ntfs3: add buffer boundary checks to run_unpack() | 7.1 | 0.0012 |  |
| [CVE-2026-53064](https://patchblox.com/security/data/cve/CVE-2026-53064.md) | High | dm cache: fix null-deref with concurrent writes in passthrough mode | 7.1 | 0.0012 |  |
| [CVE-2026-53021](https://patchblox.com/security/data/cve/CVE-2026-53021.md) | High | scsi: target: core: Fix integer overflow in UNMAP bounds check | 7.0 | 0.0012 |  |
| [CVE-2026-31692](https://patchblox.com/security/data/cve/CVE-2026-31692.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check... | 7.8 | 0.0012 |  |
| [CVE-2026-31684](https://patchblox.com/security/data/cve/CVE-2026-31684.md) | High | net: sched: act_csum: validate nested VLAN headers | 7.8 | 0.0012 |  |
| [CVE-2026-64098](https://patchblox.com/security/data/cve/CVE-2026-64098.md) | High | kernel-default: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488). | 7.8 | 0.0011 |  |
| [CVE-2026-31700](https://patchblox.com/security/data/cve/CVE-2026-31700.md) | High | net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() | 7.8 | 0.0011 |  |
| [CVE-2026-52975](https://patchblox.com/security/data/cve/CVE-2026-52975.md) | High | bonding: 3ad: implement proper RCU rules for port->aggregator | 7.8 | 0.0011 |  |
| [CVE-2026-46227](https://patchblox.com/security/data/cve/CVE-2026-46227.md) | High | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 |  |
| [CVE-2026-53050](https://patchblox.com/security/data/cve/CVE-2026-53050.md) | High | quota: Fix race of dquot_scan_active() with quota deactivation | 7.8 | 0.0010 |  |
| [CVE-2026-46107](https://patchblox.com/security/data/cve/CVE-2026-46107.md) | High | dm-thin: fix metadata refcount underflow | 7.8 | 0.0010 |  |
| [CVE-2026-53096](https://patchblox.com/security/data/cve/CVE-2026-53096.md) | High | bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path | 7.8 | 0.0010 |  |
| [CVE-2026-43116](https://patchblox.com/security/data/cve/CVE-2026-43116.md) | High | netfilter: ctnetlink: ensure safe access to master conntrack | 8.8 | 0.0010 |  |
| [CVE-2023-53989](https://patchblox.com/security/data/cve/CVE-2023-53989.md) | Routine | dtb-aarch64: Security update for the Linux Kernel | 5.5 | 0.0021 |  |
| [CVE-2026-53047](https://patchblox.com/security/data/cve/CVE-2026-53047.md) | Routine | efi/capsule-loader: fix incorrect sizeof in phys array reallocation | 5.5 | 0.0018 |  |
| [CVE-2026-53128](https://patchblox.com/security/data/cve/CVE-2026-53128.md) | Routine | drbd: Balance RCU calls in drbd_adm_dump_devices() | 5.5 | 0.0016 |  |
| [CVE-2026-46079](https://patchblox.com/security/data/cve/CVE-2026-46079.md) | Routine | rbd: fix null-ptr-deref when device_add_disk() fails | 5.5 | 0.0014 |  |
| [CVE-2026-53012](https://patchblox.com/security/data/cve/CVE-2026-53012.md) | Routine | nexthop: fix IPv6 route referencing IPv4 nexthop | 5.5 | 0.0014 |  |
| [CVE-2026-53295](https://patchblox.com/security/data/cve/CVE-2026-53295.md) | Routine | mailbox: add sanity check for channel array | 5.5 | 0.0013 |  |
| [CVE-2026-23399](https://patchblox.com/security/data/cve/CVE-2026-23399.md) | Routine | nf_tables: nft_dynset: fix possible stateful expression memleak in error path | 6.5 | 0.0013 |  |
| [CVE-2026-45841](https://patchblox.com/security/data/cve/CVE-2026-45841.md) | Routine | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 5.5 | 0.0013 |  |
| [CVE-2026-43089](https://patchblox.com/security/data/cve/CVE-2026-43089.md) | Routine | kernel-64kb: xfrm_user: fix info leak in build_mapping() (bsc#1264261). | 5.5 | 0.0013 |  |
| [CVE-2026-46161](https://patchblox.com/security/data/cve/CVE-2026-46161.md) | Routine | bpftool: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415] | 5.5 | 0.0013 |  |
| [CVE-2026-46214](https://patchblox.com/security/data/cve/CVE-2026-46214.md) | Routine | kernel-uek-debug-modules-extra: vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646] | 5.5 | 0.0013 |  |
| [CVE-2026-43085](https://patchblox.com/security/data/cve/CVE-2026-43085.md) | Routine | kernel-64kb: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230). | 5.5 | 0.0013 |  |
| [CVE-2026-45838](https://patchblox.com/security/data/cve/CVE-2026-45838.md) | Routine | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 5.5 | 0.0013 |  |
| [CVE-2026-45842](https://patchblox.com/security/data/cve/CVE-2026-45842.md) | Routine | slip: reject VJ receive packets on instances with no rstate array | 5.5 | 0.0013 |  |
| [CVE-2026-46040](https://patchblox.com/security/data/cve/CVE-2026-46040.md) | Routine | bpftool: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (Chia-Ming Chang) [Orabug: 39452251] | 5.5 | 0.0013 |  |
| [CVE-2026-46046](https://patchblox.com/security/data/cve/CVE-2026-46046.md) | Routine | ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() | 5.5 | 0.0013 |  |
| [CVE-2026-46101](https://patchblox.com/security/data/cve/CVE-2026-46101.md) | Routine | bpftool: netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452465] | 5.5 | 0.0013 |  |
| [CVE-2026-53001](https://patchblox.com/security/data/cve/CVE-2026-53001.md) | Routine | kernel-uek: netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621740] | 5.5 | 0.0013 |  |
| [CVE-2026-46168](https://patchblox.com/security/data/cve/CVE-2026-46168.md) | Routine | mptcp: fix scheduling with atomic in timestamp sockopt | 5.5 | 0.0013 |  |
| [CVE-2026-52984](https://patchblox.com/security/data/cve/CVE-2026-52984.md) | Routine | kernel-uek-container: net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677] | 5.5 | 0.0013 |  |
| [CVE-2026-53060](https://patchblox.com/security/data/cve/CVE-2026-53060.md) | Routine | dm cache metadata: fix memory leak on metadata abort retry | 5.5 | 0.0013 |  |
| [CVE-2026-31590](https://patchblox.com/security/data/cve/CVE-2026-31590.md) | Routine | KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION | 5.5 | 0.0013 |  |
| [CVE-2026-31681](https://patchblox.com/security/data/cve/CVE-2026-31681.md) | Routine | netfilter: xt_multiport: validate range encoding in checkentry | 6.1 | 0.0012 |  |
| [CVE-2026-43079](https://patchblox.com/security/data/cve/CVE-2026-43079.md) | Routine | kernel-64kb: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228). | 5.5 | 0.0012 |  |
| [CVE-2026-43094](https://patchblox.com/security/data/cve/CVE-2026-43094.md) | Routine | kernel-64kb: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231). | 5.5 | 0.0012 |  |
| [CVE-2026-45987](https://patchblox.com/security/data/cve/CVE-2026-45987.md) | Routine | KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 | 5.5 | 0.0012 |  |
| [CVE-2026-45997](https://patchblox.com/security/data/cve/CVE-2026-45997.md) | Routine | kernel-64kb: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (bsc#1266740). | 5.5 | 0.0012 |  |
| [CVE-2026-46082](https://patchblox.com/security/data/cve/CVE-2026-46082.md) | Routine | KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 | 5.5 | 0.0012 |  |
| [CVE-2026-52977](https://patchblox.com/security/data/cve/CVE-2026-52977.md) | Routine | futex: Prevent lockup in requeue-PI during signal/ timeout wakeup | 5.5 | 0.0012 |  |
| [CVE-2026-52985](https://patchblox.com/security/data/cve/CVE-2026-52985.md) | Routine | kernel-uek-debug-devel: netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z | 5.5 | 0.0012 |  |
| [CVE-2026-52995](https://patchblox.com/security/data/cve/CVE-2026-52995.md) | Routine | kernel-64kb: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124). | 5.5 | 0.0012 |  |
| [CVE-2026-53061](https://patchblox.com/security/data/cve/CVE-2026-53061.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dm cache: fix dirty mapping checking in passthro... | 5.5 | 0.0012 |  |
| [CVE-2026-53287](https://patchblox.com/security/data/cve/CVE-2026-53287.md) | Routine | audit: fix incorrect inheritable capability in CAPSET records | 5.5 | 0.0012 |  |
| [CVE-2026-64220](https://patchblox.com/security/data/cve/CVE-2026-64220.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  device property: set fwnode->secondary to NULL i... | 5.5 | 0.0012 |  |
| [CVE-2026-23255](https://patchblox.com/security/data/cve/CVE-2026-23255.md) | Routine | net: add proper RCU protection to /proc/net/ptype | 5.5 | 0.0012 |  |
| [CVE-2026-43496](https://patchblox.com/security/data/cve/CVE-2026-43496.md) | Routine | net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked | 5.5 | 0.0012 |  |
| [CVE-2026-53111](https://patchblox.com/security/data/cve/CVE-2026-53111.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: test_run: Fix the null pointer dereference... | 5.5 | 0.0012 |  |
| [CVE-2025-39961](https://patchblox.com/security/data/cve/CVE-2025-39961.md) | Routine | iommu/amd/pgtbl: Fix possible race while increase page table level | 5.8 | 0.0012 |  |
| [CVE-2026-53314](https://patchblox.com/security/data/cve/CVE-2026-53314.md) | Routine | padata: Put CPU offline callback in ONLINE section to allow failure | 5.5 | 0.0012 |  |
| [CVE-2026-64185](https://patchblox.com/security/data/cve/CVE-2026-64185.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  sysfs: don't remove existing directory on update... | 5.5 | 0.0012 |  |
| [CVE-2026-53074](https://patchblox.com/security/data/cve/CVE-2026-53074.md) | Routine | bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb | 6.4 | 0.0011 |  |
| [CVE-2026-52921](https://patchblox.com/security/data/cve/CVE-2026-52921.md) | Routine | netfilter: ipset: stop hash:* range iteration at end | 5.5 | 0.0011 |  |
| [CVE-2026-52925](https://patchblox.com/security/data/cve/CVE-2026-52925.md) | Routine | vrf: Fix a potential NPD when removing a port from a VRF | 5.5 | 0.0011 |  |
| [CVE-2026-53304](https://patchblox.com/security/data/cve/CVE-2026-53304.md) | Routine | scsi: sg: Resolve soft lockup issue when opening /dev/sgX | 5.5 | 0.0010 |  |
| [CVE-2026-46165](https://patchblox.com/security/data/cve/CVE-2026-46165.md) | Routine | openvswitch: vport: fix self-deadlock on release of tunnel ports | 5.5 | 0.0010 |  |
| [CVE-2026-46051](https://patchblox.com/security/data/cve/CVE-2026-46051.md) | Routine | md/raid5: fix soft lockup in retry_aligned_read() | 5.5 | 0.0010 |  |
| [CVE-2026-46050](https://patchblox.com/security/data/cve/CVE-2026-46050.md) | Routine | md/raid10: fix deadlock with check operation and nowait requests | 5.5 | 0.0010 |  |
| [CVE-2026-53035](https://patchblox.com/security/data/cve/CVE-2026-53035.md) | Routine | bpf, sockmap: Fix af_unix iter deadlock | 5.5 | 0.0010 |  |
| [CVE-2026-53037](https://patchblox.com/security/data/cve/CVE-2026-53037.md) | Routine | HID: usbhid: fix deadlock in hid_post_reset() | 5.5 | 0.0010 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.