# ALAS2023-2026-1894: Security update for 18 packages ALAS2023-2026-1894, released June 22, 2026, fixes 150 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1894 - Platform: Linux - Released: Jun 22, 2026 - Priority: Urgent (Closes CVE-2026-64047, rated Critical) - CVEs: 150, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1894.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel-livepatch-6.12.92-122.166](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.92-122.166.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-64046](https://patchblox.com/security/data/cve/CVE-2026-64046.md) | Urgent | kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). | 9.8 | 0.0051 | | | [CVE-2026-64047](https://patchblox.com/security/data/cve/CVE-2026-64047.md) | Urgent | kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060). | 9.8 | 0.0051 | | | [CVE-2026-64061](https://patchblox.com/security/data/cve/CVE-2026-64061.md) | Urgent | kernel-64kb: netfs: Fix early put of sink folio in netfs_read_gaps() (bsc#1272505). | 9.8 | 0.0047 | | | [CVE-2026-64232](https://patchblox.com/security/data/cve/CVE-2026-64232.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_in... | 9.8 | 0.0043 | | | [CVE-2026-52993](https://patchblox.com/security/data/cve/CVE-2026-52993.md) | Urgent | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 | | | [CVE-2026-52955](https://patchblox.com/security/data/cve/CVE-2026-52955.md) | Urgent | kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159). | 9.8 | 0.0038 | | | [CVE-2026-64025](https://patchblox.com/security/data/cve/CVE-2026-64025.md) | Urgent | kernel-64kb: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117). | 9.8 | 0.0037 | | | [CVE-2026-53002](https://patchblox.com/security/data/cve/CVE-2026-53002.md) | Urgent | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 | | | [CVE-2026-53075](https://patchblox.com/security/data/cve/CVE-2026-53075.md) | Urgent | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 | | | [CVE-2026-53009](https://patchblox.com/security/data/cve/CVE-2026-53009.md) | Urgent | ice: fix double-free of tx_buf skb | 9.8 | 0.0018 | | | [CVE-2026-64106](https://patchblox.com/security/data/cve/CVE-2026-64106.md) | Urgent | kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242). | 9.0 | 0.0015 | | | [CVE-2026-53036](https://patchblox.com/security/data/cve/CVE-2026-53036.md) | Urgent | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 | | | [CVE-2026-53053](https://patchblox.com/security/data/cve/CVE-2026-53053.md) | Urgent | iommu/amd: Fix clone_alias() to use the original device's devid | 9.8 | 0.0013 | | | [CVE-2026-53077](https://patchblox.com/security/data/cve/CVE-2026-53077.md) | Urgent | net/rds: Restrict use of RDS/IB to the initial network namespace | 9.8 | 0.0012 | | | [CVE-2026-53062](https://patchblox.com/security/data/cve/CVE-2026-53062.md) | Urgent | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 | | | [CVE-2026-52958](https://patchblox.com/security/data/cve/CVE-2026-52958.md) | High | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 | | | [CVE-2026-53003](https://patchblox.com/security/data/cve/CVE-2026-53003.md) | High | pppoe: drop PFC frames | 7.5 | 0.0072 | | | [CVE-2026-52986](https://patchblox.com/security/data/cve/CVE-2026-52986.md) | High | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | | | [CVE-2026-43083](https://patchblox.com/security/data/cve/CVE-2026-43083.md) | High | net: ioam6: fix OOB and missing lock | 9.1 | 0.0060 | | | [CVE-2026-52999](https://patchblox.com/security/data/cve/CVE-2026-52999.md) | High | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 | | | [CVE-2026-52998](https://patchblox.com/security/data/cve/CVE-2026-52998.md) | High | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 | | | [CVE-2026-52981](https://patchblox.com/security/data/cve/CVE-2026-52981.md) | High | kernel-64kb: neigh: let neigh_xmit take skb ownership (bsc#1269254). | 7.5 | 0.0053 | | | [CVE-2026-64113](https://patchblox.com/security/data/cve/CVE-2026-64113.md) | High | perf: kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning | 9.8 | 0.0053 | | | [CVE-2026-52954](https://patchblox.com/security/data/cve/CVE-2026-52954.md) | High | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 | | | [CVE-2026-52957](https://patchblox.com/security/data/cve/CVE-2026-52957.md) | High | libceph: Fix potential null-ptr-deref in decode_choose_args() | 7.5 | 0.0052 | | | [CVE-2026-64116](https://patchblox.com/security/data/cve/CVE-2026-64116.md) | High | kernel-64kb: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). | 7.5 | 0.0051 | | | [CVE-2026-52974](https://patchblox.com/security/data/cve/CVE-2026-52974.md) | High | net: tls: fix strparser anchor skb leak on offload RX setup failure | 7.5 | 0.0050 | | | [CVE-2026-64132](https://patchblox.com/security/data/cve/CVE-2026-64132.md) | High | kernel-rt-debug-modules-extra: kernel: ipv6: ioam: refresh hdr pointer before ioam6_event() | 9.8 | 0.0049 | | | [CVE-2026-46137](https://patchblox.com/security/data/cve/CVE-2026-46137.md) | High | mptcp: pm: ADD_ADDR rtx: fix potential data-race | 9.8 | 0.0048 | | | [CVE-2026-43245](https://patchblox.com/security/data/cve/CVE-2026-43245.md) | High | ntfs: ->d_compare() must not block | 7.5 | 0.0044 | | | [CVE-2026-46244](https://patchblox.com/security/data/cve/CVE-2026-46244.md) | High | netfilter: nft_inner: Fix IPv6 inner_thoff desync | 9.1 | 0.0042 | | | [CVE-2026-64136](https://patchblox.com/security/data/cve/CVE-2026-64136.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_f... | 9.8 | 0.0041 | | | [CVE-2026-45843](https://patchblox.com/security/data/cve/CVE-2026-45843.md) | High | slip: bound decode() reads against the compressed packet length | 8.2 | 0.0040 | | | [CVE-2026-53006](https://patchblox.com/security/data/cve/CVE-2026-53006.md) | High | ipv6: fix possible UAF in icmpv6_rcv() | 9.8 | 0.0039 | | | [CVE-2026-52967](https://patchblox.com/security/data/cve/CVE-2026-52967.md) | High | kernel-default: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181). | 8.1 | 0.0039 | | | [CVE-2026-31613](https://patchblox.com/security/data/cve/CVE-2026-31613.md) | High | smb: client: fix OOB reads parsing symlink error response | 8.8 | 0.0039 | | | [CVE-2026-53069](https://patchblox.com/security/data/cve/CVE-2026-53069.md) | High | kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186). | 7.5 | 0.0038 | | | [CVE-2026-46316](https://patchblox.com/security/data/cve/CVE-2026-46316.md) | High | kernel: KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] | 9.3 | 0.0034 | | | [CVE-2026-52920](https://patchblox.com/security/data/cve/CVE-2026-52920.md) | High | netfilter: xt_policy: fix strict mode inbound policy matching | 8.3 | 0.0030 | | | [CVE-2025-71289](https://patchblox.com/security/data/cve/CVE-2025-71289.md) | High | fs/ntfs3: handle attr_set_size() errors when truncating files | 7.1 | 0.0026 | | | [CVE-2026-31663](https://patchblox.com/security/data/cve/CVE-2026-31663.md) | High | xfrm: hold dev ref until after transport_finish NF_HOOK | 8.8 | 0.0022 | | | [CVE-2026-52969](https://patchblox.com/security/data/cve/CVE-2026-52969.md) | High | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 | | | [CVE-2026-63860](https://patchblox.com/security/data/cve/CVE-2026-63860.md) | High | kernel-64kb: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429). | 8.4 | 0.0018 | | | [CVE-2026-23272](https://patchblox.com/security/data/cve/CVE-2026-23272.md) | High | netfilter: nf_tables: unconditionally bump set->nelems before insertion | 7.8 | 0.0018 | | | [CVE-2026-53081](https://patchblox.com/security/data/cve/CVE-2026-53081.md) | High | kernel-64kb: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars (bsc#1269708). | 7.8 | 0.0018 | | | [CVE-2026-53085](https://patchblox.com/security/data/cve/CVE-2026-53085.md) | High | kernel-64kb: bpf: fix mm lifecycle in open-coded task_vma iterator (bsc#1269879). | 7.8 | 0.0018 | | | [CVE-2026-53119](https://patchblox.com/security/data/cve/CVE-2026-53119.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: platform/wmi: use generic driver_override infras... | 7.8 | 0.0018 | | | [CVE-2026-53120](https://patchblox.com/security/data/cve/CVE-2026-53120.md) | High | PCI: use generic driver_override infrastructure | 7.8 | 0.0018 | | | [CVE-2026-64226](https://patchblox.com/security/data/cve/CVE-2026-64226.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn()... | 7.8 | 0.0018 | | | [CVE-2026-64518](https://patchblox.com/security/data/cve/CVE-2026-64518.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao... | n/a | 0.0017 | | | [CVE-2026-64519](https://patchblox.com/security/data/cve/CVE-2026-64519.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocati... | n/a | 0.0017 | | | [CVE-2026-53023](https://patchblox.com/security/data/cve/CVE-2026-53023.md) | High | fs/ntfs3: terminate the cached volume label after UTF-8 conversion | 7.1 | 0.0016 | | | [CVE-2026-52912](https://patchblox.com/security/data/cve/CVE-2026-52912.md) | High | netfilter: nf_queue: hold bridge skb->dev while queued | 7.8 | 0.0016 | | | [CVE-2026-64015](https://patchblox.com/security/data/cve/CVE-2026-64015.md) | High | kernel-default: security/keys: fix missed RCU read section on lookup (bsc#1273762). | 8.1 | 0.0016 | | | [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 | | | [CVE-2026-53059](https://patchblox.com/security/data/cve/CVE-2026-53059.md) | High | dm log: fix out-of-bounds write due to region_count overflow | 7.8 | 0.0014 | | | [CVE-2026-64153](https://patchblox.com/security/data/cve/CVE-2026-64153.md) | High | bpftool: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (Mikko Perttunen) [Orabug: 39754904] | 8.8 | 0.0014 | | | [CVE-2026-52962](https://patchblox.com/security/data/cve/CVE-2026-52962.md) | High | ceph: fix a buffer leak in __ceph_setxattr() | 7.8 | 0.0014 | | | [CVE-2026-46274](https://patchblox.com/security/data/cve/CVE-2026-46274.md) | High | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | 7.8 | 0.0014 | | | [CVE-2026-64114](https://patchblox.com/security/data/cve/CVE-2026-64114.md) | High | kernel-default: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742). | 8.8 | 0.0014 | | | [CVE-2026-45839](https://patchblox.com/security/data/cve/CVE-2026-45839.md) | High | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | 7.8 | 0.0014 | | | [CVE-2026-64111](https://patchblox.com/security/data/cve/CVE-2026-64111.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr(... | 8.8 | 0.0014 | | | [CVE-2026-64115](https://patchblox.com/security/data/cve/CVE-2026-64115.md) | High | kernel-default: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). | 8.8 | 0.0014 | | | [CVE-2026-53033](https://patchblox.com/security/data/cve/CVE-2026-53033.md) | High | kernel-64kb: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388). | 7.8 | 0.0014 | | | [CVE-2026-52970](https://patchblox.com/security/data/cve/CVE-2026-52970.md) | High | netfilter: nft_ct: fix missing expect put in obj eval | 7.0 | 0.0013 | | | [CVE-2026-64032](https://patchblox.com/security/data/cve/CVE-2026-64032.md) | High | kernel-rt-64k-debug-devel: kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port | 8.8 | 0.0013 | | | [CVE-2026-64073](https://patchblox.com/security/data/cve/CVE-2026-64073.md) | High | kernel-64kb: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490). | 7.8 | 0.0013 | | | [CVE-2026-45840](https://patchblox.com/security/data/cve/CVE-2026-45840.md) | High | kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479] | 7.0 | 0.0013 | | | [CVE-2026-64109](https://patchblox.com/security/data/cve/CVE-2026-64109.md) | High | kernel-default: af_unix: Peek the queue synchronized (bsc#1273748). | 8.8 | 0.0013 | | | [CVE-2026-64053](https://patchblox.com/security/data/cve/CVE-2026-64053.md) | High | kernel-64k-debug-core: kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() | 8.3 | 0.0013 | | | [CVE-2026-53004](https://patchblox.com/security/data/cve/CVE-2026-53004.md) | High | kernel-uek-modules-extra: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757] | 7.8 | 0.0013 | | | [CVE-2026-53031](https://patchblox.com/security/data/cve/CVE-2026-53031.md) | High | kernel-64kb: bpf: Validate node_id in arena_alloc_pages() (bsc#1269380). | 7.8 | 0.0013 | | | [CVE-2026-53094](https://patchblox.com/security/data/cve/CVE-2026-53094.md) | High | bpf: Fix stale offload->prog pointer after constant blinding | 7.8 | 0.0013 | | | [CVE-2026-64063](https://patchblox.com/security/data/cve/CVE-2026-64063.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In... | 7.8 | 0.0013 | | | [CVE-2026-64108](https://patchblox.com/security/data/cve/CVE-2026-64108.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Sin... | 7.8 | 0.0013 | | | [CVE-2026-64217](https://patchblox.com/security/data/cve/CVE-2026-64217.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_i... | 7.8 | 0.0013 | | | [CVE-2026-53063](https://patchblox.com/security/data/cve/CVE-2026-53063.md) | High | dm cache: fix write hang in passthrough mode | 7.1 | 0.0013 | | | [CVE-2026-46158](https://patchblox.com/security/data/cve/CVE-2026-46158.md) | High | mptcp: pm: ADD_ADDR rtx: always decrease sk refcount | 7.0 | 0.0013 | | | [CVE-2026-46160](https://patchblox.com/security/data/cve/CVE-2026-46160.md) | High | btrfs: fix missing last_unlink_trans update when removing a directory | 7.0 | 0.0013 | | | [CVE-2026-46170](https://patchblox.com/security/data/cve/CVE-2026-46170.md) | High | mptcp: pm: ADD_ADDR rtx: free sk if last | 7.0 | 0.0013 | | | [CVE-2026-53034](https://patchblox.com/security/data/cve/CVE-2026-53034.md) | High | bpf, sockmap: Fix af_unix null-ptr-deref in proto update | 7.0 | 0.0013 | | | [CVE-2026-63865](https://patchblox.com/security/data/cve/CVE-2026-63865.md) | High | kernel-64kb: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486). | 8.8 | 0.0013 | | | [CVE-2026-52915](https://patchblox.com/security/data/cve/CVE-2026-52915.md) | High | netfilter: ip6t_hbh: reject oversized option lists | 7.1 | 0.0013 | | | [CVE-2026-64121](https://patchblox.com/security/data/cve/CVE-2026-64121.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queue... | 7.1 | 0.0013 | | | [CVE-2026-53064](https://patchblox.com/security/data/cve/CVE-2026-53064.md) | High | dm cache: fix null-deref with concurrent writes in passthrough mode | 7.1 | 0.0012 | | | [CVE-2026-53021](https://patchblox.com/security/data/cve/CVE-2026-53021.md) | High | scsi: target: core: Fix integer overflow in UNMAP bounds check | 7.0 | 0.0012 | | | [CVE-2026-31692](https://patchblox.com/security/data/cve/CVE-2026-31692.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check... | 7.8 | 0.0012 | | | [CVE-2026-53129](https://patchblox.com/security/data/cve/CVE-2026-53129.md) | High | fs/mbcache: cancel shrink work before destroying the cache | 7.8 | 0.0012 | | | [CVE-2026-53076](https://patchblox.com/security/data/cve/CVE-2026-53076.md) | High | kernel-64kb: bpf: Fix OOB in pcpu_init_value (bsc#1269695). | 7.1 | 0.0012 | | | [CVE-2026-64098](https://patchblox.com/security/data/cve/CVE-2026-64098.md) | High | kernel-default: drm/virtio: use uninterruptible resv lock for plane updates (bsc#1273488). | 7.8 | 0.0011 | | | [CVE-2026-53050](https://patchblox.com/security/data/cve/CVE-2026-53050.md) | High | quota: Fix race of dquot_scan_active() with quota deactivation | 7.8 | 0.0010 | | | [CVE-2026-53096](https://patchblox.com/security/data/cve/CVE-2026-53096.md) | High | bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path | 7.8 | 0.0010 | | | [CVE-2026-43116](https://patchblox.com/security/data/cve/CVE-2026-43116.md) | High | netfilter: ctnetlink: ensure safe access to master conntrack | 8.8 | 0.0010 | | | [CVE-2026-64112](https://patchblox.com/security/data/cve/CVE-2026-64112.md) | High | rbd: eliminate a race in lock_dwork draining on unmap | 7.8 | 0.0010 | | | [CVE-2026-64158](https://patchblox.com/security/data/cve/CVE-2026-64158.md) | High | kernel-64kb: netfs: Fix write streaming disablement if fd open O_RDWR (bsc#1272524). | 7.3 | n/a | | | [CVE-2026-52980](https://patchblox.com/security/data/cve/CVE-2026-52980.md) | Routine | kernel-64kb: sched/fair: Clear rel_deadline when initializing forked entities (bsc#1269252). | 5.5 | 0.0016 | | | [CVE-2026-53014](https://patchblox.com/security/data/cve/CVE-2026-53014.md) | Routine | kernel-64kb: net/sched: act_mirred: fix wrong device for mac_header_xmit check in tcf_blockcast_redir | 5.5 | 0.0016 | | | [CVE-2026-53038](https://patchblox.com/security/data/cve/CVE-2026-53038.md) | Routine | kernel-64kb: ima_fs: Correctly create securityfs files for unsupported hash algos (bsc#1269391). | 5.5 | 0.0016 | | | [CVE-2026-53083](https://patchblox.com/security/data/cve/CVE-2026-53083.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix RCU stall in bpf_fd_array_map_clear()... | 5.5 | 0.0016 | | | [CVE-2026-53084](https://patchblox.com/security/data/cve/CVE-2026-53084.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: return VMA snapshot from task_vma iterator... | 5.5 | 0.0016 | | | [CVE-2026-53128](https://patchblox.com/security/data/cve/CVE-2026-53128.md) | Routine | drbd: Balance RCU calls in drbd_adm_dump_devices() | 5.5 | 0.0016 | | | [CVE-2026-53288](https://patchblox.com/security/data/cve/CVE-2026-53288.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: arm64: Reserve an extra page for early kernel ma... | 5.5 | 0.0016 | | | [CVE-2026-64059](https://patchblox.com/security/data/cve/CVE-2026-64059.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio->private handling in netfs_perf... | 5.5 | 0.0016 | | | [CVE-2026-64065](https://patchblox.com/security/data/cve/CVE-2026-64065.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_writ... | 5.5 | 0.0016 | | | [CVE-2026-64105](https://patchblox.com/security/data/cve/CVE-2026-64105.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 | | | [CVE-2026-64157](https://patchblox.com/security/data/cve/CVE-2026-64157.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-wri... | 5.5 | 0.0016 | | | [CVE-2026-52961](https://patchblox.com/security/data/cve/CVE-2026-52961.md) | Routine | cephfs: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size (bsc#1269129). | 5.5 | 0.0015 | | | [CVE-2026-53012](https://patchblox.com/security/data/cve/CVE-2026-53012.md) | Routine | nexthop: fix IPv6 route referencing IPv4 nexthop | 5.5 | 0.0014 | | | [CVE-2026-53295](https://patchblox.com/security/data/cve/CVE-2026-53295.md) | Routine | mailbox: add sanity check for channel array | 5.5 | 0.0013 | | | [CVE-2026-45841](https://patchblox.com/security/data/cve/CVE-2026-45841.md) | Routine | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 5.5 | 0.0013 | | | [CVE-2026-45838](https://patchblox.com/security/data/cve/CVE-2026-45838.md) | Routine | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 5.5 | 0.0013 | | | [CVE-2026-45842](https://patchblox.com/security/data/cve/CVE-2026-45842.md) | Routine | slip: reject VJ receive packets on instances with no rstate array | 5.5 | 0.0013 | | | [CVE-2026-53001](https://patchblox.com/security/data/cve/CVE-2026-53001.md) | Routine | kernel-uek: netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621740] | 5.5 | 0.0013 | | | [CVE-2026-52984](https://patchblox.com/security/data/cve/CVE-2026-52984.md) | Routine | kernel-uek-container: net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677] | 5.5 | 0.0013 | | | [CVE-2026-52990](https://patchblox.com/security/data/cve/CVE-2026-52990.md) | Routine | kernel-64kb: fsnotify: fix inode reference leak in fsnotify_recalc_mask() (bsc#1269108). | 5.5 | 0.0013 | | | [CVE-2026-53060](https://patchblox.com/security/data/cve/CVE-2026-53060.md) | Routine | dm cache metadata: fix memory leak on metadata abort retry | 5.5 | 0.0013 | | | [CVE-2026-53122](https://patchblox.com/security/data/cve/CVE-2026-53122.md) | Routine | btrfs: fix deadlock between reflink and transaction commit when using flushoncommit | 5.5 | 0.0013 | | | [CVE-2026-52977](https://patchblox.com/security/data/cve/CVE-2026-52977.md) | Routine | futex: Prevent lockup in requeue-PI during signal/ timeout wakeup | 5.5 | 0.0012 | | | [CVE-2026-52985](https://patchblox.com/security/data/cve/CVE-2026-52985.md) | Routine | kernel-uek-debug-devel: netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z | 5.5 | 0.0012 | | | [CVE-2026-52995](https://patchblox.com/security/data/cve/CVE-2026-52995.md) | Routine | kernel-64kb: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124). | 5.5 | 0.0012 | | | [CVE-2026-53015](https://patchblox.com/security/data/cve/CVE-2026-53015.md) | Routine | erofs: unify lcn as u64 for 32-bit platforms | 5.5 | 0.0012 | | | [CVE-2026-53061](https://patchblox.com/security/data/cve/CVE-2026-53061.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix dirty mapping checking in passthro... | 5.5 | 0.0012 | | | [CVE-2026-53287](https://patchblox.com/security/data/cve/CVE-2026-53287.md) | Routine | audit: fix incorrect inheritable capability in CAPSET records | 5.5 | 0.0012 | | | [CVE-2026-53289](https://patchblox.com/security/data/cve/CVE-2026-53289.md) | Routine | ice: fix NULL pointer dereference in ice_reset_all_vfs() | 5.5 | 0.0012 | | | [CVE-2026-64220](https://patchblox.com/security/data/cve/CVE-2026-64220.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL i... | 5.5 | 0.0012 | | | [CVE-2026-53013](https://patchblox.com/security/data/cve/CVE-2026-53013.md) | Routine | macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF | 5.5 | 0.0012 | | | [CVE-2026-53032](https://patchblox.com/security/data/cve/CVE-2026-53032.md) | Routine | bpf: Fix NULL deref in map_kptr_match_type for scalar regs | 5.5 | 0.0012 | | | [CVE-2026-64052](https://patchblox.com/security/data/cve/CVE-2026-64052.md) | Routine | kernel-64kb: block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() (bsc#1272983). | 5.5 | 0.0012 | | | [CVE-2026-64064](https://patchblox.com/security/data/cve/CVE-2026-64064.md) | Routine | kernel-64kb: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). | 5.5 | 0.0012 | | | [CVE-2026-53111](https://patchblox.com/security/data/cve/CVE-2026-53111.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: test_run: Fix the null pointer dereference... | 5.5 | 0.0012 | | | [CVE-2026-64163](https://patchblox.com/security/data/cve/CVE-2026-64163.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: test_kprobes: clear kprobes between test runs R... | 5.5 | 0.0012 | | | [CVE-2026-64166](https://patchblox.com/security/data/cve/CVE-2026-64166.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table... | 5.5 | 0.0012 | | | [CVE-2026-64183](https://patchblox.com/security/data/cve/CVE-2026-64183.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init... | 5.5 | 0.0012 | | | [CVE-2026-53314](https://patchblox.com/security/data/cve/CVE-2026-53314.md) | Routine | padata: Put CPU offline callback in ONLINE section to allow failure | 5.5 | 0.0012 | | | [CVE-2026-64185](https://patchblox.com/security/data/cve/CVE-2026-64185.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update... | 5.5 | 0.0012 | | | [CVE-2026-53123](https://patchblox.com/security/data/cve/CVE-2026-53123.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: md: wake raid456 reshape waiters before suspend... | 5.5 | 0.0012 | | | [CVE-2026-53074](https://patchblox.com/security/data/cve/CVE-2026-53074.md) | Routine | bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb | 6.4 | 0.0011 | | | [CVE-2026-46315](https://patchblox.com/security/data/cve/CVE-2026-46315.md) | Routine | kernel-64kb: io_uring/waitid: clear waitid info before copying it to userspace (bsc#1267953). | 5.5 | 0.0011 | | | [CVE-2026-52921](https://patchblox.com/security/data/cve/CVE-2026-52921.md) | Routine | netfilter: ipset: stop hash:* range iteration at end | 5.5 | 0.0011 | | | [CVE-2026-52925](https://patchblox.com/security/data/cve/CVE-2026-52925.md) | Routine | vrf: Fix a potential NPD when removing a port from a VRF | 5.5 | 0.0011 | | | [CVE-2026-52936](https://patchblox.com/security/data/cve/CVE-2026-52936.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 | | | [CVE-2026-53126](https://patchblox.com/security/data/cve/CVE-2026-53126.md) | Routine | blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() | 5.5 | 0.0011 | | | [CVE-2026-64164](https://patchblox.com/security/data/cve/CVE-2026-64164.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic co... | 5.5 | 0.0011 | | | [CVE-2026-64180](https://patchblox.com/security/data/cve/CVE-2026-64180.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference le... | 5.5 | 0.0011 | | | [CVE-2026-64182](https://patchblox.com/security/data/cve/CVE-2026-64182.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference... | 5.5 | 0.0011 | | | [CVE-2026-64184](https://patchblox.com/security/data/cve/CVE-2026-64184.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing mem_cgroup_... | 5.5 | 0.0011 | | | [CVE-2026-53304](https://patchblox.com/security/data/cve/CVE-2026-53304.md) | Routine | scsi: sg: Resolve soft lockup issue when opening /dev/sgX | 5.5 | 0.0010 | | | [CVE-2026-53035](https://patchblox.com/security/data/cve/CVE-2026-53035.md) | Routine | bpf, sockmap: Fix af_unix iter deadlock | 5.5 | 0.0010 | | | [CVE-2026-53037](https://patchblox.com/security/data/cve/CVE-2026-53037.md) | Routine | HID: usbhid: fix deadlock in hid_post_reset() | 5.5 | 0.0010 | | | [CVE-2026-64062](https://patchblox.com/security/data/cve/CVE-2026-64062.md) | Routine | kernel-64kb: netfs: Fix potential deadlock in write-through mode (bsc#1272952). | 5.5 | 0.0009 | | --- Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.