{
  "fix": "ALAS2023-2026-1968",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1968",
  "summary": "ALAS2023-2026-1968, released July 20, 2026, fixes 125 CVEs across 18 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 18 packages",
  "released": "2026-07-20T09:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2026-53266, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 125,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.04576,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1968.html",
  "appliesTo": [
    {
      "product": "bpftool6.12",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.12.94-123.174",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.94-123.174",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-53266",
      "url": "https://patchblox.com/security/cve/CVE-2026-53266",
      "title": "netfilter: bridge: make ebt_snat ARP rewrite writable",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00934,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63983",
      "url": "https://patchblox.com/security/cve/CVE-2026-63983",
      "title": "net/sched: fix packet loop on netem when duplicate is on",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46242",
      "url": "https://patchblox.com/security/cve/CVE-2026-46242",
      "title": "kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.04576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63913",
      "url": "https://patchblox.com/security/cve/CVE-2026-63913",
      "title": "kernel-64k-modules-core: kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00971,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52929",
      "url": "https://patchblox.com/security/cve/CVE-2026-52929",
      "title": "sctp: stream: fully roll back denied add-stream state",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00873,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63887",
      "url": "https://patchblox.com/security/cve/CVE-2026-63887",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nscsi: target: iscsi: Bound iscsi_encode_text_outp...",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00778,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63888",
      "url": "https://patchblox.com/security/cve/CVE-2026-63888",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nscsi: target: iscsi: Fix CRC overread and double-...",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00778,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63912",
      "url": "https://patchblox.com/security/cve/CVE-2026-63912",
      "title": "kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836).",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63922",
      "url": "https://patchblox.com/security/cve/CVE-2026-63922",
      "title": "kernel: kernel: ipv6: exthdrs: refresh nh after handling HAO option",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63924",
      "url": "https://patchblox.com/security/cve/CVE-2026-63924",
      "title": "kernel: kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63886",
      "url": "https://patchblox.com/security/cve/CVE-2026-63886",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00711,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63968",
      "url": "https://patchblox.com/security/cve/CVE-2026-63968",
      "title": "kernel-default: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00665,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52924",
      "url": "https://patchblox.com/security/cve/CVE-2026-52924",
      "title": "sctp: purge outqueue on stale COOKIE-ECHO handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00659,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63919",
      "url": "https://patchblox.com/security/cve/CVE-2026-63919",
      "title": "kernel-default: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.0065,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46331",
      "url": "https://patchblox.com/security/cve/CVE-2026-46331",
      "title": "net/sched: fix pedit partial COW leading to page cache corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00639,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53221",
      "url": "https://patchblox.com/security/cve/CVE-2026-53221",
      "title": "ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53228",
      "url": "https://patchblox.com/security/cve/CVE-2026-53228",
      "title": "ipv6: sit: reload inner IPv6 header after GSO offloads",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53225",
      "url": "https://patchblox.com/security/cve/CVE-2026-53225",
      "title": "sctp: fix uninit-value in __sctp_rcv_asconf_lookup()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53268",
      "url": "https://patchblox.com/security/cve/CVE-2026-53268",
      "title": "netfilter: conntrack_irc: fix possible out-of-bounds read",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63984",
      "url": "https://patchblox.com/security/cve/CVE-2026-63984",
      "title": "kernel-default: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63993",
      "url": "https://patchblox.com/security/cve/CVE-2026-63993",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nvxlan: do not reuse cached ip_hdr() value after s...",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63994",
      "url": "https://patchblox.com/security/cve/CVE-2026-63994",
      "title": "kernel-default: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64007",
      "url": "https://patchblox.com/security/cve/CVE-2026-64007",
      "title": "kernel-default: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63992",
      "url": "https://patchblox.com/security/cve/CVE-2026-63992",
      "title": "kernel-default: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).",
      "priority": "High",
      "severity": "important",
      "cvss": 9.1,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53199",
      "url": "https://patchblox.com/security/cve/CVE-2026-53199",
      "title": "hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63978",
      "url": "https://patchblox.com/security/cve/CVE-2026-63978",
      "title": "net/handshake: Drain pending requests at net namespace exit",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53183",
      "url": "https://patchblox.com/security/cve/CVE-2026-53183",
      "title": "mptcp: allow subflow rcv wnd to shrink",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53184",
      "url": "https://patchblox.com/security/cve/CVE-2026-53184",
      "title": "udp: clear skb-\u003Edev before running a sockmap verdict",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53264",
      "url": "https://patchblox.com/security/cve/CVE-2026-53264",
      "title": "net/sched: act_api: use RCU with deferred freeing for action lifecycle",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00485,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53229",
      "url": "https://patchblox.com/security/cve/CVE-2026-53229",
      "title": "kernel-64kb: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure (bsc#1269691).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52946",
      "url": "https://patchblox.com/security/cve/CVE-2026-52946",
      "title": "fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64523",
      "url": "https://patchblox.com/security/cve/CVE-2026-64523",
      "title": "net/handshake: Take a long-lived file reference at submit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.0045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53235",
      "url": "https://patchblox.com/security/cve/CVE-2026-53235",
      "title": "kernel-uek64k-modules-usb: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64003",
      "url": "https://patchblox.com/security/cve/CVE-2026-64003",
      "title": "kernel-64kb: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53131",
      "url": "https://patchblox.com/security/cve/CVE-2026-53131",
      "title": "netfilter: require Ethernet MAC header before using eth_hdr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.4,
      "epss": 0.00435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63889",
      "url": "https://patchblox.com/security/cve/CVE-2026-63889",
      "title": "kernel-rt-modules-core: kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00359,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63925",
      "url": "https://patchblox.com/security/cve/CVE-2026-63925",
      "title": "kernel-64kb: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.00347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53180",
      "url": "https://patchblox.com/security/cve/CVE-2026-53180",
      "title": "kernel-64kb: timers/migration: Fix livelock in tmigr_handle_remote_up() (bsc#1269888).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.0034,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63980",
      "url": "https://patchblox.com/security/cve/CVE-2026-63980",
      "title": "kernel-64kb: net/handshake: Use spin_lock_bh for hn_lock (bsc#1273028).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.0034,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64235",
      "url": "https://patchblox.com/security/cve/CVE-2026-64235",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  x86/ftrace: Relocate %rip-relative percpu refs i...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00327,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52943",
      "url": "https://patchblox.com/security/cve/CVE-2026-52943",
      "title": "net: skbuff: fix missing zerocopy reference in pskb_carve helpers",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63867",
      "url": "https://patchblox.com/security/cve/CVE-2026-63867",
      "title": "kernel-uek64k: mptcp: close TOCTOU race while computing rcv_wnd (Paolo Abeni) [Orabug: 39754146]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.2,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53275",
      "url": "https://patchblox.com/security/cve/CVE-2026-53275",
      "title": "ipv6: mcast: Fix use-after-free when processing MLD queries",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53232",
      "url": "https://patchblox.com/security/cve/CVE-2026-53232",
      "title": "net: phy: clean the sfp upstream if phy probing fails",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00257,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46320",
      "url": "https://patchblox.com/security/cve/CVE-2026-46320",
      "title": "tap: free page on error paths in tap_get_user_xdp()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.4,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52923",
      "url": "https://patchblox.com/security/cve/CVE-2026-52923",
      "title": "ipc: limit next_id allocation to the valid ID range",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63896",
      "url": "https://patchblox.com/security/cve/CVE-2026-63896",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "important",
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63939",
      "url": "https://patchblox.com/security/cve/CVE-2026-63939",
      "title": "kernel-64kb: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272691).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.3,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63938",
      "url": "https://patchblox.com/security/cve/CVE-2026-63938",
      "title": "kernel-64kb: KVM: SEV: Check PSC request indices against the actual size of the buffer (bsc#1272620).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.3,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53212",
      "url": "https://patchblox.com/security/cve/CVE-2026-53212",
      "title": "netfilter: nft_tunnel: fix use-after-free on object destroy",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63926",
      "url": "https://patchblox.com/security/cve/CVE-2026-63926",
      "title": "kernel-64kb: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63875",
      "url": "https://patchblox.com/security/cve/CVE-2026-63875",
      "title": "kernel-modules: kernel: arm64: tlb: Flush walk cache when unsharing PMD tables",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63884",
      "url": "https://patchblox.com/security/cve/CVE-2026-63884",
      "title": "kernel-zfcpdump: kernel: drm/i915: Fix potential UAF in TTM object purge",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53191",
      "url": "https://patchblox.com/security/cve/CVE-2026-53191",
      "title": "kernel-uek64k-modules-wireless: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53233",
      "url": "https://patchblox.com/security/cve/CVE-2026-53233",
      "title": "kernel-uek64k-modules-usb: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63920",
      "url": "https://patchblox.com/security/cve/CVE-2026-63920",
      "title": "kernel-default: ipv6: validate extension header length before copying to cmsg (bsc#1272877).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43303",
      "url": "https://patchblox.com/security/cve/CVE-2026-43303",
      "title": "mm/page_alloc: clear page-\u003Eprivate in free_pages_prepare()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63917",
      "url": "https://patchblox.com/security/cve/CVE-2026-63917",
      "title": "kernel-default: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45850",
      "url": "https://patchblox.com/security/cve/CVE-2026-45850",
      "title": "ipvs: skip ipv6 extension headers for csum checks",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63962",
      "url": "https://patchblox.com/security/cve/CVE-2026-63962",
      "title": "usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63921",
      "url": "https://patchblox.com/security/cve/CVE-2026-63921",
      "title": "kernel-default: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53270",
      "url": "https://patchblox.com/security/cve/CVE-2026-53270",
      "title": "ipvs: clear the svc scheduler ptr early on edit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63914",
      "url": "https://patchblox.com/security/cve/CVE-2026-63914",
      "title": "bpftool: xfrm: route MIGRATE notifications to caller\u0027s netns (Maoyi Xie) [Orabug: 39754286]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.3,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64009",
      "url": "https://patchblox.com/security/cve/CVE-2026-64009",
      "title": "kernel-64kb: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52910",
      "url": "https://patchblox.com/security/cve/CVE-2026-52910",
      "title": "bpf: Free reuseport cBPF prog after RCU grace period.",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53132",
      "url": "https://patchblox.com/security/cve/CVE-2026-53132",
      "title": "vsock/virtio: fix potential unbounded skb queue",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53223",
      "url": "https://patchblox.com/security/cve/CVE-2026-53223",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnet: guard timestamp cmsgs to real error queue sk...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.1,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63937",
      "url": "https://patchblox.com/security/cve/CVE-2026-63937",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53356",
      "url": "https://patchblox.com/security/cve/CVE-2026-53356",
      "title": "drm/i915/gem: Fix phys BO pread/pwrite with offset",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46322",
      "url": "https://patchblox.com/security/cve/CVE-2026-46322",
      "title": "tun: free page on build_skb failure in tun_xdp_one()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46321",
      "url": "https://patchblox.com/security/cve/CVE-2026-46321",
      "title": "tun: free page on short-frame rejection in tun_xdp_one()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52942",
      "url": "https://patchblox.com/security/cve/CVE-2026-52942",
      "title": "netfilter: nf_log: validate MAC header was set before dumping it",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63971",
      "url": "https://patchblox.com/security/cve/CVE-2026-63971",
      "title": "kernel-default: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53189",
      "url": "https://patchblox.com/security/cve/CVE-2026-53189",
      "title": "bpftool: kernel: mm/huge_memory: update file PMD counter before folio_put()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64002",
      "url": "https://patchblox.com/security/cve/CVE-2026-64002",
      "title": "kernel-default: ipv4: free net-\u003Eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53133",
      "url": "https://patchblox.com/security/cve/CVE-2026-53133",
      "title": "RDMA/umem: Fix truncation for block sizes \u003E= 4G",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63985",
      "url": "https://patchblox.com/security/cve/CVE-2026-63985",
      "title": "kernel-64kb: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63987",
      "url": "https://patchblox.com/security/cve/CVE-2026-63987",
      "title": "kernel-64kb: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63995",
      "url": "https://patchblox.com/security/cve/CVE-2026-63995",
      "title": "kernel-64kb: ethtool: cmis: validate start_cmd_payload_size from module (bsc#1273033).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63996",
      "url": "https://patchblox.com/security/cve/CVE-2026-63996",
      "title": "kernel-64kb: ethtool: cmis: require exact CDB reply length (bsc#1273032).",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53218",
      "url": "https://patchblox.com/security/cve/CVE-2026-53218",
      "title": "netfilter: nft_exthdr: fix register tracking for F_PRESENT flag",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53249",
      "url": "https://patchblox.com/security/cve/CVE-2026-53249",
      "title": "ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63952",
      "url": "https://patchblox.com/security/cve/CVE-2026-63952",
      "title": "kernel-default: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.4,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53230",
      "url": "https://patchblox.com/security/cve/CVE-2026-53230",
      "title": "net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53236",
      "url": "https://patchblox.com/security/cve/CVE-2026-53236",
      "title": "tcp: restrict SO_ATTACH_FILTER to priv users",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53156",
      "url": "https://patchblox.com/security/cve/CVE-2026-53156",
      "title": "nvmem: core: fix use-after-free bugs in error paths",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53168",
      "url": "https://patchblox.com/security/cve/CVE-2026-53168",
      "title": "fuse: reject fuse_notify() pagecache ops on directories",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46054",
      "url": "https://patchblox.com/security/cve/CVE-2026-46054",
      "title": "selinux: fix overlayfs mmap() and mprotect() access checks",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52927",
      "url": "https://patchblox.com/security/cve/CVE-2026-52927",
      "title": "netfilter: ebtables: fix OOB read in compat_mtw_from_user",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53267",
      "url": "https://patchblox.com/security/cve/CVE-2026-53267",
      "title": "netfilter: nft_ct: bail out on template ct in get eval",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52908",
      "url": "https://patchblox.com/security/cve/CVE-2026-52908",
      "title": "RDMA: During rereg_mr ensure that REREG_ACCESS is compatible",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53272",
      "url": "https://patchblox.com/security/cve/CVE-2026-53272",
      "title": "kernel-64kb: erofs: fix use-after-free on sbi-\u003Esync_decompress (bsc#1269809).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64239",
      "url": "https://patchblox.com/security/cve/CVE-2026-64239",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/sysfs-schemes: delete tried region in r...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53354",
      "url": "https://patchblox.com/security/cve/CVE-2026-53354",
      "title": "arm64: errata: Mitigate TLBI errata on various Arm CPUs",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53239",
      "url": "https://patchblox.com/security/cve/CVE-2026-53239",
      "title": "xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64378",
      "url": "https://patchblox.com/security/cve/CVE-2026-64378",
      "title": "writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64005",
      "url": "https://patchblox.com/security/cve/CVE-2026-64005",
      "title": "kernel-64kb: net/smc: Do not re-initialize smc hashtables (bsc#1273831).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63969",
      "url": "https://patchblox.com/security/cve/CVE-2026-63969",
      "title": "kernel-64kb: ipv6: fix possible infinite loop in rt6_fill_node() (bsc#1272484).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63876",
      "url": "https://patchblox.com/security/cve/CVE-2026-63876",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  serial: zs: Convert to use a platform device  Pr...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63877",
      "url": "https://patchblox.com/security/cve/CVE-2026-63877",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  serial: dz: Convert to use a platform device  Pr...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53328",
      "url": "https://patchblox.com/security/cve/CVE-2026-53328",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Don\u0027t warn on NULL cgrp_moving_from i...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64525",
      "url": "https://patchblox.com/security/cve/CVE-2026-64525",
      "title": "xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53227",
      "url": "https://patchblox.com/security/cve/CVE-2026-53227",
      "title": "net: openvswitch: fix possible kfree_skb of ERR_PTR",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63990",
      "url": "https://patchblox.com/security/cve/CVE-2026-63990",
      "title": "kernel-64kb: bonding: refuse to enslave CAN devices (bsc#1273027).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53134",
      "url": "https://patchblox.com/security/cve/CVE-2026-53134",
      "title": "kernel-64kb: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53219",
      "url": "https://patchblox.com/security/cve/CVE-2026-53219",
      "title": "netfilter: x_tables: avoid leaking percpu counter pointers",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53245",
      "url": "https://patchblox.com/security/cve/CVE-2026-53245",
      "title": "net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53220",
      "url": "https://patchblox.com/security/cve/CVE-2026-53220",
      "title": "kernel-64kb: netfilter: revalidate bridge ports (bsc#1269381).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53238",
      "url": "https://patchblox.com/security/cve/CVE-2026-53238",
      "title": "netlabel: validate unlabeled address and mask attribute lengths",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53337",
      "url": "https://patchblox.com/security/cve/CVE-2026-53337",
      "title": "net: bonding: fix NULL pointer dereference in bond_do_ioctl()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64012",
      "url": "https://patchblox.com/security/cve/CVE-2026-64012",
      "title": "kernel-64kb: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64131",
      "url": "https://patchblox.com/security/cve/CVE-2026-64131",
      "title": "kernel-64kb: mm/memory: fix spurious warning when unmapping device-private/exclusive pages (bsc#1274063).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53154",
      "url": "https://patchblox.com/security/cve/CVE-2026-53154",
      "title": "mm/hugetlb: restore reservation on error in hugetlb folio copy paths",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53190",
      "url": "https://patchblox.com/security/cve/CVE-2026-53190",
      "title": "drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53214",
      "url": "https://patchblox.com/security/cve/CVE-2026-53214",
      "title": "ipv6: Fix a potential NPD in cleanup_prefix_route()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63997",
      "url": "https://patchblox.com/security/cve/CVE-2026-63997",
      "title": "kernel-64kb: ethtool: module: avoid leaking a netdev ref on module flash errors (bsc#1273036).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63868",
      "url": "https://patchblox.com/security/cve/CVE-2026-63868",
      "title": "kernel-64kb: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53345",
      "url": "https://patchblox.com/security/cve/CVE-2026-53345",
      "title": "KVM: Don\u0027t WARN if memory is dirtied without a vCPU when the VM is dying",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52930",
      "url": "https://patchblox.com/security/cve/CVE-2026-52930",
      "title": "ipc/shm: serialize orphan cleanup with shm_nattch updates",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53269",
      "url": "https://patchblox.com/security/cve/CVE-2026-53269",
      "title": "kernel-64kb: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53347",
      "url": "https://patchblox.com/security/cve/CVE-2026-53347",
      "title": "drm/virtio: Fix driver removal with disabled KMS",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53349",
      "url": "https://patchblox.com/security/cve/CVE-2026-53349",
      "title": "netfilter: nf_conntrack: destroy stale expectfn expectations on unregister",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53261",
      "url": "https://patchblox.com/security/cve/CVE-2026-53261",
      "title": "kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53207",
      "url": "https://patchblox.com/security/cve/CVE-2026-53207",
      "title": "mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53352",
      "url": "https://patchblox.com/security/cve/CVE-2026-53352",
      "title": "signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}