{
  "fix": "ALAS2023-2026-1894",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
  "summary": "ALAS2023-2026-1894, released June 22, 2026, fixes 150 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 18 packages",
  "released": "2026-06-22T09:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-64047, rated Critical",
  "supported": true,
  "cveCount": 150,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00735,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1894.html",
  "appliesTo": [
    {
      "product": "bpftool6.12",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.12.92-122.166",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.92-122.166",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-64046",
      "url": "https://patchblox.com/security/cve/CVE-2026-64046",
      "title": "kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64047",
      "url": "https://patchblox.com/security/cve/CVE-2026-64047",
      "title": "kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64061",
      "url": "https://patchblox.com/security/cve/CVE-2026-64061",
      "title": "kernel-64kb: netfs: Fix early put of sink folio in netfs_read_gaps() (bsc#1272505).",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00469,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64232",
      "url": "https://patchblox.com/security/cve/CVE-2026-64232",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  block: recompute nr_integrity_segments in blk_in...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00431,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52993",
      "url": "https://patchblox.com/security/cve/CVE-2026-52993",
      "title": "tipc: fix double-free in tipc_buf_append()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52955",
      "url": "https://patchblox.com/security/cve/CVE-2026-52955",
      "title": "kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64025",
      "url": "https://patchblox.com/security/cve/CVE-2026-64025",
      "title": "kernel-64kb: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00369,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53002",
      "url": "https://patchblox.com/security/cve/CVE-2026-53002",
      "title": "netfilter: conntrack: remove sprintf usage",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53075",
      "url": "https://patchblox.com/security/cve/CVE-2026-53075",
      "title": "ppp: require CAP_NET_ADMIN in target netns for unattached ioctls",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53009",
      "url": "https://patchblox.com/security/cve/CVE-2026-53009",
      "title": "ice: fix double-free of tx_buf skb",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64106",
      "url": "https://patchblox.com/security/cve/CVE-2026-64106",
      "title": "kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53036",
      "url": "https://patchblox.com/security/cve/CVE-2026-53036",
      "title": "bpf, arm64: Fix off-by-one in check_imm signed range check",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53053",
      "url": "https://patchblox.com/security/cve/CVE-2026-53053",
      "title": "iommu/amd: Fix clone_alias() to use the original device\u0027s devid",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53077",
      "url": "https://patchblox.com/security/cve/CVE-2026-53077",
      "title": "net/rds: Restrict use of RDS/IB to the initial network namespace",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53062",
      "url": "https://patchblox.com/security/cve/CVE-2026-53062",
      "title": "dm cache policy smq: fix missing locks in invalidating cache blocks",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52958",
      "url": "https://patchblox.com/security/cve/CVE-2026-52958",
      "title": "libceph: Fix potential out-of-bounds access in osdmap_decode()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00735,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53003",
      "url": "https://patchblox.com/security/cve/CVE-2026-53003",
      "title": "pppoe: drop PFC frames",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00716,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52986",
      "url": "https://patchblox.com/security/cve/CVE-2026-52986",
      "title": "netfilter: nf_conntrack_sip: don\u0027t use simple_strtoul",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00634,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43083",
      "url": "https://patchblox.com/security/cve/CVE-2026-43083",
      "title": "net: ioam6: fix OOB and missing lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.006,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52999",
      "url": "https://patchblox.com/security/cve/CVE-2026-52999",
      "title": "netfilter: nfnetlink_osf: fix out-of-bounds read on option matching",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00591,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52998",
      "url": "https://patchblox.com/security/cve/CVE-2026-52998",
      "title": "netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00579,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52981",
      "url": "https://patchblox.com/security/cve/CVE-2026-52981",
      "title": "kernel-64kb: neigh: let neigh_xmit take skb ownership (bsc#1269254).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00532,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64113",
      "url": "https://patchblox.com/security/cve/CVE-2026-64113",
      "title": "perf: kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00527,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52954",
      "url": "https://patchblox.com/security/cve/CVE-2026-52954",
      "title": "libceph: handle rbtree insertion error in decode_choose_args()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52957",
      "url": "https://patchblox.com/security/cve/CVE-2026-52957",
      "title": "libceph: Fix potential null-ptr-deref in decode_choose_args()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64116",
      "url": "https://patchblox.com/security/cve/CVE-2026-64116",
      "title": "kernel-64kb: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.00511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52974",
      "url": "https://patchblox.com/security/cve/CVE-2026-52974",
      "title": "net: tls: fix strparser anchor skb leak on offload RX setup failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64132",
      "url": "https://patchblox.com/security/cve/CVE-2026-64132",
      "title": "kernel-rt-debug-modules-extra: kernel: ipv6: ioam: refresh hdr pointer before ioam6_event()",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46137",
      "url": "https://patchblox.com/security/cve/CVE-2026-46137",
      "title": "mptcp: pm: ADD_ADDR rtx: fix potential data-race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00477,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43245",
      "url": "https://patchblox.com/security/cve/CVE-2026-43245",
      "title": "ntfs: -\u003Ed_compare() must not block",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46244",
      "url": "https://patchblox.com/security/cve/CVE-2026-46244",
      "title": "netfilter: nft_inner: Fix IPv6 inner_thoff desync",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.1,
      "epss": 0.00418,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64136",
      "url": "https://patchblox.com/security/cve/CVE-2026-64136",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nsmb: client: protect tc_count increment in smb2_f...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 9.8,
      "epss": 0.00407,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45843",
      "url": "https://patchblox.com/security/cve/CVE-2026-45843",
      "title": "slip: bound decode() reads against the compressed packet length",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53006",
      "url": "https://patchblox.com/security/cve/CVE-2026-53006",
      "title": "ipv6: fix possible UAF in icmpv6_rcv()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00394,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52967",
      "url": "https://patchblox.com/security/cve/CVE-2026-52967",
      "title": "kernel-default: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00393,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31613",
      "url": "https://patchblox.com/security/cve/CVE-2026-31613",
      "title": "smb: client: fix OOB reads parsing symlink error response",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00387,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53069",
      "url": "https://patchblox.com/security/cve/CVE-2026-53069",
      "title": "kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46316",
      "url": "https://patchblox.com/security/cve/CVE-2026-46316",
      "title": "kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969]",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.3,
      "epss": 0.00337,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52920",
      "url": "https://patchblox.com/security/cve/CVE-2026-52920",
      "title": "netfilter: xt_policy: fix strict mode inbound policy matching",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.3,
      "epss": 0.00299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71289",
      "url": "https://patchblox.com/security/cve/CVE-2025-71289",
      "title": "fs/ntfs3: handle attr_set_size() errors when truncating files",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31663",
      "url": "https://patchblox.com/security/cve/CVE-2026-31663",
      "title": "xfrm: hold dev ref until after transport_finish NF_HOOK",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00224,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52969",
      "url": "https://patchblox.com/security/cve/CVE-2026-52969",
      "title": "KVM: Reject wrapped offset in kvm_reset_dirty_gfn()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63860",
      "url": "https://patchblox.com/security/cve/CVE-2026-63860",
      "title": "kernel-64kb: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23272",
      "url": "https://patchblox.com/security/cve/CVE-2026-23272",
      "title": "netfilter: nf_tables: unconditionally bump set-\u003Enelems before insertion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53081",
      "url": "https://patchblox.com/security/cve/CVE-2026-53081",
      "title": "kernel-64kb: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars (bsc#1269708).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53085",
      "url": "https://patchblox.com/security/cve/CVE-2026-53085",
      "title": "kernel-64kb: bpf: fix mm lifecycle in open-coded task_vma iterator (bsc#1269879).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53119",
      "url": "https://patchblox.com/security/cve/CVE-2026-53119",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  platform/wmi: use generic driver_override infras...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53120",
      "url": "https://patchblox.com/security/cve/CVE-2026-53120",
      "title": "PCI: use generic driver_override infrastructure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64226",
      "url": "https://patchblox.com/security/cve/CVE-2026-64226",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Avoid UAF in scx_root_enable_workfn()...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64518",
      "url": "https://patchblox.com/security/cve/CVE-2026-64518",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: Fix out-of-bounds access for twsk in tcp_ao...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64519",
      "url": "https://patchblox.com/security/cve/CVE-2026-64519",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  NFSD: Fix infinite loop in layout state revocati...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53023",
      "url": "https://patchblox.com/security/cve/CVE-2026-53023",
      "title": "fs/ntfs3: terminate the cached volume label after UTF-8 conversion",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52912",
      "url": "https://patchblox.com/security/cve/CVE-2026-52912",
      "title": "netfilter: nf_queue: hold bridge skb-\u003Edev while queued",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64015",
      "url": "https://patchblox.com/security/cve/CVE-2026-64015",
      "title": "kernel-default: security/keys: fix missed RCU read section on lookup (bsc#1273762).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52972",
      "url": "https://patchblox.com/security/cve/CVE-2026-52972",
      "title": "crypto: af_alg - Cap AEAD AD length to 0x80000000",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53059",
      "url": "https://patchblox.com/security/cve/CVE-2026-53059",
      "title": "dm log: fix out-of-bounds write due to region_count overflow",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64153",
      "url": "https://patchblox.com/security/cve/CVE-2026-64153",
      "title": "bpftool: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (Mikko Perttunen) [Orabug: 39754904]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52962",
      "url": "https://patchblox.com/security/cve/CVE-2026-52962",
      "title": "ceph: fix a buffer leak in __ceph_setxattr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46274",
      "url": "https://patchblox.com/security/cve/CVE-2026-46274",
      "title": "io-wq: check that the predecessor is hashed in io_wq_remove_pending()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64114",
      "url": "https://patchblox.com/security/cve/CVE-2026-64114",
      "title": "kernel-default: ipv4: raw: reject IP_HDRINCL packets with ihl \u003C 5 (bsc#1273742).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45839",
      "url": "https://patchblox.com/security/cve/CVE-2026-45839",
      "title": "bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64111",
      "url": "https://patchblox.com/security/cve/CVE-2026-64111",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nlsm: hold cred_guard_mutex for lsm_set_self_attr(...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64115",
      "url": "https://patchblox.com/security/cve/CVE-2026-64115",
      "title": "kernel-default: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53033",
      "url": "https://patchblox.com/security/cve/CVE-2026-53033",
      "title": "kernel-64kb: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52970",
      "url": "https://patchblox.com/security/cve/CVE-2026-52970",
      "title": "netfilter: nft_ct: fix missing expect put in obj eval",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64032",
      "url": "https://patchblox.com/security/cve/CVE-2026-64032",
      "title": "kernel-rt-64k-debug-devel: kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64073",
      "url": "https://patchblox.com/security/cve/CVE-2026-64073",
      "title": "kernel-64kb: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45840",
      "url": "https://patchblox.com/security/cve/CVE-2026-45840",
      "title": "kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64109",
      "url": "https://patchblox.com/security/cve/CVE-2026-64109",
      "title": "kernel-default: af_unix: Peek the queue synchronized (bsc#1273748).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64053",
      "url": "https://patchblox.com/security/cve/CVE-2026-64053",
      "title": "kernel-64k-debug-core: kernel: block: don\u0027t overwrite bip_vcnt in bio_integrity_copy_user()",
      "priority": "High",
      "severity": "important",
      "cvss": 8.3,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53004",
      "url": "https://patchblox.com/security/cve/CVE-2026-53004",
      "title": "kernel-uek-modules-extra: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53031",
      "url": "https://patchblox.com/security/cve/CVE-2026-53031",
      "title": "kernel-64kb: bpf: Validate node_id in arena_alloc_pages() (bsc#1269380).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53094",
      "url": "https://patchblox.com/security/cve/CVE-2026-53094",
      "title": "bpf: Fix stale offload-\u003Eprog pointer after constant blinding",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64063",
      "url": "https://patchblox.com/security/cve/CVE-2026-64063",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix streaming write being overwritten  In...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64108",
      "url": "https://patchblox.com/security/cve/CVE-2026-64108",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: Fix busy dentry used after unmounting  Sin...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64217",
      "url": "https://patchblox.com/security/cve/CVE-2026-64217",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix overrun check in netfs_extract_user_i...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53063",
      "url": "https://patchblox.com/security/cve/CVE-2026-53063",
      "title": "dm cache: fix write hang in passthrough mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46158",
      "url": "https://patchblox.com/security/cve/CVE-2026-46158",
      "title": "mptcp: pm: ADD_ADDR rtx: always decrease sk refcount",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46160",
      "url": "https://patchblox.com/security/cve/CVE-2026-46160",
      "title": "btrfs: fix missing last_unlink_trans update when removing a directory",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46170",
      "url": "https://patchblox.com/security/cve/CVE-2026-46170",
      "title": "mptcp: pm: ADD_ADDR rtx: free sk if last",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53034",
      "url": "https://patchblox.com/security/cve/CVE-2026-53034",
      "title": "bpf, sockmap: Fix af_unix null-ptr-deref in proto update",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63865",
      "url": "https://patchblox.com/security/cve/CVE-2026-63865",
      "title": "kernel-64kb: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52915",
      "url": "https://patchblox.com/security/cve/CVE-2026-52915",
      "title": "netfilter: ip6t_hbh: reject oversized option lists",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64121",
      "url": "https://patchblox.com/security/cve/CVE-2026-64121",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: ifb: report ethtool stats over num_tx_queue...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53064",
      "url": "https://patchblox.com/security/cve/CVE-2026-53064",
      "title": "dm cache: fix null-deref with concurrent writes in passthrough mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53021",
      "url": "https://patchblox.com/security/cve/CVE-2026-53021",
      "title": "scsi: target: core: Fix integer overflow in UNMAP bounds check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31692",
      "url": "https://patchblox.com/security/cve/CVE-2026-31692",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nrtnetlink: add missing netlink_ns_capable() check...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53129",
      "url": "https://patchblox.com/security/cve/CVE-2026-53129",
      "title": "fs/mbcache: cancel shrink work before destroying the cache",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53076",
      "url": "https://patchblox.com/security/cve/CVE-2026-53076",
      "title": "kernel-64kb: bpf: Fix OOB in pcpu_init_value (bsc#1269695).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64098",
      "url": "https://patchblox.com/security/cve/CVE-2026-64098",
      "title": "kernel-default: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488).",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00113,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53050",
      "url": "https://patchblox.com/security/cve/CVE-2026-53050",
      "title": "quota: Fix race of dquot_scan_active() with quota deactivation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53096",
      "url": "https://patchblox.com/security/cve/CVE-2026-53096",
      "title": "bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43116",
      "url": "https://patchblox.com/security/cve/CVE-2026-43116",
      "title": "netfilter: ctnetlink: ensure safe access to master conntrack",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00101,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64112",
      "url": "https://patchblox.com/security/cve/CVE-2026-64112",
      "title": "rbd: eliminate a race in lock_dwork draining on unmap",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64158",
      "url": "https://patchblox.com/security/cve/CVE-2026-64158",
      "title": "kernel-64kb: netfs: Fix write streaming disablement if fd open O_RDWR (bsc#1272524).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.3,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52980",
      "url": "https://patchblox.com/security/cve/CVE-2026-52980",
      "title": "kernel-64kb: sched/fair: Clear rel_deadline when initializing forked entities (bsc#1269252).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53014",
      "url": "https://patchblox.com/security/cve/CVE-2026-53014",
      "title": "kernel-64kb: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53038",
      "url": "https://patchblox.com/security/cve/CVE-2026-53038",
      "title": "kernel-64kb: ima_fs: Correctly create securityfs files for unsupported hash algos (bsc#1269391).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53083",
      "url": "https://patchblox.com/security/cve/CVE-2026-53083",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix RCU stall in bpf_fd_array_map_clear()...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53084",
      "url": "https://patchblox.com/security/cve/CVE-2026-53084",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: return VMA snapshot from task_vma iterator...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53128",
      "url": "https://patchblox.com/security/cve/CVE-2026-53128",
      "title": "drbd: Balance RCU calls in drbd_adm_dump_devices()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53288",
      "url": "https://patchblox.com/security/cve/CVE-2026-53288",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: Reserve an extra page for early kernel ma...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64059",
      "url": "https://patchblox.com/security/cve/CVE-2026-64059",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix folio-\u003Eprivate handling in netfs_perf...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64065",
      "url": "https://patchblox.com/security/cve/CVE-2026-64065",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: fix VM_BUG_ON_FOLIO() issue in netfs_writ...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64105",
      "url": "https://patchblox.com/security/cve/CVE-2026-64105",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64157",
      "url": "https://patchblox.com/security/cve/CVE-2026-64157",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix partial invalidation of streaming-wri...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52961",
      "url": "https://patchblox.com/security/cve/CVE-2026-52961",
      "title": "cephfs: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size (bsc#1269129).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53012",
      "url": "https://patchblox.com/security/cve/CVE-2026-53012",
      "title": "nexthop: fix IPv6 route referencing IPv4 nexthop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53295",
      "url": "https://patchblox.com/security/cve/CVE-2026-53295",
      "title": "mailbox: add sanity check for channel array",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45841",
      "url": "https://patchblox.com/security/cve/CVE-2026-45841",
      "title": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45838",
      "url": "https://patchblox.com/security/cve/CVE-2026-45838",
      "title": "bpf: fix end-of-list detection in cgroup_storage_get_next_key()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45842",
      "url": "https://patchblox.com/security/cve/CVE-2026-45842",
      "title": "slip: reject VJ receive packets on instances with no rstate array",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53001",
      "url": "https://patchblox.com/security/cve/CVE-2026-53001",
      "title": "kernel-uek: netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621740]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52984",
      "url": "https://patchblox.com/security/cve/CVE-2026-52984",
      "title": "kernel-uek-container: net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52990",
      "url": "https://patchblox.com/security/cve/CVE-2026-52990",
      "title": "kernel-64kb: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53060",
      "url": "https://patchblox.com/security/cve/CVE-2026-53060",
      "title": "dm cache metadata: fix memory leak on metadata abort retry",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53122",
      "url": "https://patchblox.com/security/cve/CVE-2026-53122",
      "title": "btrfs: fix deadlock between reflink and transaction commit when using flushoncommit",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52977",
      "url": "https://patchblox.com/security/cve/CVE-2026-52977",
      "title": "futex: Prevent lockup in requeue-PI during signal/ timeout wakeup",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52985",
      "url": "https://patchblox.com/security/cve/CVE-2026-52985",
      "title": "kernel-uek-debug-devel: netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52995",
      "url": "https://patchblox.com/security/cve/CVE-2026-52995",
      "title": "kernel-64kb: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53015",
      "url": "https://patchblox.com/security/cve/CVE-2026-53015",
      "title": "erofs: unify lcn as u64 for 32-bit platforms",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53061",
      "url": "https://patchblox.com/security/cve/CVE-2026-53061",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dm cache: fix dirty mapping checking in passthro...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53287",
      "url": "https://patchblox.com/security/cve/CVE-2026-53287",
      "title": "audit: fix incorrect inheritable capability in CAPSET records",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53289",
      "url": "https://patchblox.com/security/cve/CVE-2026-53289",
      "title": "ice: fix NULL pointer dereference in ice_reset_all_vfs()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64220",
      "url": "https://patchblox.com/security/cve/CVE-2026-64220",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  device property: set fwnode-\u003Esecondary to NULL i...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53013",
      "url": "https://patchblox.com/security/cve/CVE-2026-53013",
      "title": "macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53032",
      "url": "https://patchblox.com/security/cve/CVE-2026-53032",
      "title": "bpf: Fix NULL deref in map_kptr_match_type for scalar regs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64052",
      "url": "https://patchblox.com/security/cve/CVE-2026-64052",
      "title": "kernel-64kb: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64064",
      "url": "https://patchblox.com/security/cve/CVE-2026-64064",
      "title": "kernel-64kb: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53111",
      "url": "https://patchblox.com/security/cve/CVE-2026-53111",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: test_run: Fix the null pointer dereference...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64163",
      "url": "https://patchblox.com/security/cve/CVE-2026-64163",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  test_kprobes: clear kprobes between test runs  R...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64166",
      "url": "https://patchblox.com/security/cve/CVE-2026-64166",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  firmware: arm_ffa: Check for NULL FF-A ID table...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64183",
      "url": "https://patchblox.com/security/cve/CVE-2026-64183",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  efi: Allocate runtime workqueue before ACPI init...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53314",
      "url": "https://patchblox.com/security/cve/CVE-2026-53314",
      "title": "padata: Put CPU offline callback in ONLINE section to allow failure",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64185",
      "url": "https://patchblox.com/security/cve/CVE-2026-64185",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sysfs: don\u0027t remove existing directory on update...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53123",
      "url": "https://patchblox.com/security/cve/CVE-2026-53123",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  md: wake raid456 reshape waiters before suspend...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53074",
      "url": "https://patchblox.com/security/cve/CVE-2026-53074",
      "title": "bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.4,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46315",
      "url": "https://patchblox.com/security/cve/CVE-2026-46315",
      "title": "kernel-64kb: io_uring/waitid: clear waitid info before copying it to userspace (bsc#1267953).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52921",
      "url": "https://patchblox.com/security/cve/CVE-2026-52921",
      "title": "netfilter: ipset: stop hash:* range iteration at end",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52925",
      "url": "https://patchblox.com/security/cve/CVE-2026-52925",
      "title": "vrf: Fix a potential NPD when removing a port from a VRF",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52936",
      "url": "https://patchblox.com/security/cve/CVE-2026-52936",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53126",
      "url": "https://patchblox.com/security/cve/CVE-2026-53126",
      "title": "blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64164",
      "url": "https://patchblox.com/security/cve/CVE-2026-64164",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: tracepoints: fix sleep while in atomic co...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64180",
      "url": "https://patchblox.com/security/cve/CVE-2026-64180",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/memory_hotplug: fix memory block reference le...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64182",
      "url": "https://patchblox.com/security/cve/CVE-2026-64182",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drivers/base/memory: fix memory block reference...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64184",
      "url": "https://patchblox.com/security/cve/CVE-2026-64184",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/sysfs-schemes: call missing mem_cgroup_...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53304",
      "url": "https://patchblox.com/security/cve/CVE-2026-53304",
      "title": "scsi: sg: Resolve soft lockup issue when opening /dev/sgX",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00101,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53035",
      "url": "https://patchblox.com/security/cve/CVE-2026-53035",
      "title": "bpf, sockmap: Fix af_unix iter deadlock",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53037",
      "url": "https://patchblox.com/security/cve/CVE-2026-53037",
      "title": "HID: usbhid: fix deadlock in hid_post_reset()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64062",
      "url": "https://patchblox.com/security/cve/CVE-2026-64062",
      "title": "kernel-64kb: netfs: Fix potential deadlock in write-through mode (bsc#1272952).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T19:49:26Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}