# ALAS2023-2026-2058: Security update for 18 packages

ALAS2023-2026-2058, released August 17, 2026, fixes 207 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2026-2058
- Platform: Linux
- Released: Aug 17, 2026
- Priority: Urgent (Closes CVE-2026-72194, rated Critical)
- CVEs: 207, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-2058.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [kernel-livepatch-6.1.180-225.360](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.180-225.360.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 1:6.1.180-225.360.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-72194](https://patchblox.com/security/data/cve/CVE-2026-72194.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: add depth limit to indx_find_buffer to... | 9.8 | 0.0080 |  |
| [CVE-2026-72192](https://patchblox.com/security/data/cve/CVE-2026-72192.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  ntfs3: bound to_move in indx_insert_into_root be... | 9.8 | 0.0074 |  |
| [CVE-2026-72296](https://patchblox.com/security/data/cve/CVE-2026-72296.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  net: ife: require ETH_HLEN to be pullable in ife... | 9.1 | 0.0074 |  |
| [CVE-2026-64551](https://patchblox.com/security/data/cve/CVE-2026-64551.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  sctp: validate STALE_COOKIE cause length before... | 9.1 | 0.0051 |  |
| [CVE-2026-80630](https://patchblox.com/security/data/cve/CVE-2026-80630.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0076 |  |
| [CVE-2026-72084](https://patchblox.com/security/data/cve/CVE-2026-72084.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 |  |
| [CVE-2026-72319](https://patchblox.com/security/data/cve/CVE-2026-72319.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 |  |
| [CVE-2026-72351](https://patchblox.com/security/data/cve/CVE-2026-72351.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 |  |
| [CVE-2026-72466](https://patchblox.com/security/data/cve/CVE-2026-72466.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0074 |  |
| [CVE-2026-72083](https://patchblox.com/security/data/cve/CVE-2026-72083.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0072 |  |
| [CVE-2026-72322](https://patchblox.com/security/data/cve/CVE-2026-72322.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0072 |  |
| [CVE-2026-72014](https://patchblox.com/security/data/cve/CVE-2026-72014.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0072 |  |
| [CVE-2026-72418](https://patchblox.com/security/data/cve/CVE-2026-72418.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0072 |  |
| [CVE-2026-72502](https://patchblox.com/security/data/cve/CVE-2026-72502.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0072 |  |
| [CVE-2026-74321](https://patchblox.com/security/data/cve/CVE-2026-74321.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0072 |  |
| [CVE-2026-80646](https://patchblox.com/security/data/cve/CVE-2026-80646.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0072 |  |
| [CVE-2026-68477](https://patchblox.com/security/data/cve/CVE-2026-68477.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-72020](https://patchblox.com/security/data/cve/CVE-2026-72020.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-72251](https://patchblox.com/security/data/cve/CVE-2026-72251.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-74267](https://patchblox.com/security/data/cve/CVE-2026-74267.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-72436](https://patchblox.com/security/data/cve/CVE-2026-72436.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-72247](https://patchblox.com/security/data/cve/CVE-2026-72247.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0070 |  |
| [CVE-2026-74282](https://patchblox.com/security/data/cve/CVE-2026-74282.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0070 |  |
| [CVE-2026-74281](https://patchblox.com/security/data/cve/CVE-2026-74281.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0068 |  |
| [CVE-2026-64530](https://patchblox.com/security/data/cve/CVE-2026-64530.md) | High | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle | 9.8 | 0.0066 |  |
| [CVE-2026-72310](https://patchblox.com/security/data/cve/CVE-2026-72310.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.1 | 0.0064 |  |
| [CVE-2026-72348](https://patchblox.com/security/data/cve/CVE-2026-72348.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.1 | 0.0063 |  |
| [CVE-2026-80603](https://patchblox.com/security/data/cve/CVE-2026-80603.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.1 | 0.0060 |  |
| [CVE-2026-72021](https://patchblox.com/security/data/cve/CVE-2026-72021.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.2 | 0.0059 |  |
| [CVE-2026-72318](https://patchblox.com/security/data/cve/CVE-2026-72318.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.4 | 0.0059 |  |
| [CVE-2026-64545](https://patchblox.com/security/data/cve/CVE-2026-64545.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net, bpf: check master for NULL in xdp_master_re... | 7.5 | 0.0058 |  |
| [CVE-2026-72421](https://patchblox.com/security/data/cve/CVE-2026-72421.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 10.0 | 0.0057 |  |
| [CVE-2026-64450](https://patchblox.com/security/data/cve/CVE-2026-64450.md) | High | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 9.1 | 0.0054 |  |
| [CVE-2026-53392](https://patchblox.com/security/data/cve/CVE-2026-53392.md) | High | NFSv4/flexfiles: reject zero filehandle version count | 8.8 | 0.0053 |  |
| [CVE-2026-74384](https://patchblox.com/security/data/cve/CVE-2026-74384.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 |  |
| [CVE-2026-74398](https://patchblox.com/security/data/cve/CVE-2026-74398.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 |  |
| [CVE-2026-74406](https://patchblox.com/security/data/cve/CVE-2026-74406.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 |  |
| [CVE-2026-74287](https://patchblox.com/security/data/cve/CVE-2026-74287.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.1 | 0.0051 |  |
| [CVE-2026-64355](https://patchblox.com/security/data/cve/CVE-2026-64355.md) | High | bpf: Reject fragmented frames in devmap | 9.8 | 0.0051 |  |
| [CVE-2026-64560](https://patchblox.com/security/data/cve/CVE-2026-64560.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  posix-cpu-timers: Prevent UAF caused by non-lead... | 7.8 | 0.0050 |  |
| [CVE-2026-74376](https://patchblox.com/security/data/cve/CVE-2026-74376.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0050 |  |
| [CVE-2026-64312](https://patchblox.com/security/data/cve/CVE-2026-64312.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: pcrypt - restore callback for non-parall... | 7.5 | 0.0050 |  |
| [CVE-2026-74255](https://patchblox.com/security/data/cve/CVE-2026-74255.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0050 |  |
| [CVE-2026-64448](https://patchblox.com/security/data/cve/CVE-2026-64448.md) | High | smb: client: restrict implied bcc[0] exemption to responses without data area | 8.2 | 0.0046 |  |
| [CVE-2026-64380](https://patchblox.com/security/data/cve/CVE-2026-64380.md) | High | smb: client: harden POSIX SID length parsing | 8.2 | 0.0044 |  |
| [CVE-2026-80604](https://patchblox.com/security/data/cve/CVE-2026-80604.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0041 |  |
| [CVE-2026-64374](https://patchblox.com/security/data/cve/CVE-2026-64374.md) | High | sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT | 7.5 | 0.0039 |  |
| [CVE-2026-64313](https://patchblox.com/security/data/cve/CVE-2026-64313.md) | High | crypto: ecc - Fix carry overflow in vli multiplication | 8.8 | 0.0036 |  |
| [CVE-2026-64364](https://patchblox.com/security/data/cve/CVE-2026-64364.md) | High | HID: multitouch: fix out-of-bounds bit access on mt_io_flags | 8.8 | 0.0036 |  |
| [CVE-2026-64435](https://patchblox.com/security/data/cve/CVE-2026-64435.md) | High | audit: Fix data races of skb_queue_len() readers on audit_queue | 8.2 | 0.0033 |  |
| [CVE-2026-64561](https://patchblox.com/security/data/cve/CVE-2026-64561.md) | High | KVM: x86: Check for invalid/obsolete root *after* making MMU pages available | 8.8 | 0.0027 |  |
| [CVE-2026-72108](https://patchblox.com/security/data/cve/CVE-2026-72108.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 |  |
| [CVE-2026-80867](https://patchblox.com/security/data/cve/CVE-2026-80867.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  alpha/PCI: Add security_locked_down() check to p... | n/a | 0.0022 |  |
| [CVE-2026-80875](https://patchblox.com/security/data/cve/CVE-2026-80875.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ipvs: use parsed transport offset in TCP state l... | n/a | 0.0022 |  |
| [CVE-2026-80876](https://patchblox.com/security/data/cve/CVE-2026-80876.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ring-buffer: Fix event length with forced 8-byte... | n/a | 0.0022 |  |
| [CVE-2026-72218](https://patchblox.com/security/data/cve/CVE-2026-72218.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.0 | 0.0022 |  |
| [CVE-2026-72219](https://patchblox.com/security/data/cve/CVE-2026-72219.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.0 | 0.0022 |  |
| [CVE-2026-74271](https://patchblox.com/security/data/cve/CVE-2026-74271.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.0 | 0.0022 |  |
| [CVE-2026-72097](https://patchblox.com/security/data/cve/CVE-2026-72097.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  dm-verity: fix a possible NULL pointer dereferen... | n/a | 0.0022 |  |
| [CVE-2026-72193](https://patchblox.com/security/data/cve/CVE-2026-72193.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ntfs3: cap RESTART_TABLE free-chain walker at rt... | n/a | 0.0022 |  |
| [CVE-2026-72274](https://patchblox.com/security/data/cve/CVE-2026-72274.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fbdev: hecubafb: fix potential memory leak in he... | n/a | 0.0022 |  |
| [CVE-2026-72275](https://patchblox.com/security/data/cve/CVE-2026-72275.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fbdev: broadsheetfb: fix potential memory leak i... | n/a | 0.0022 |  |
| [CVE-2026-72276](https://patchblox.com/security/data/cve/CVE-2026-72276.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fbdev: metronomefb: fix potential memory leak in... | n/a | 0.0022 |  |
| [CVE-2026-72290](https://patchblox.com/security/data/cve/CVE-2026-72290.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: s390: pci: Fix GISC refcount leak on AIF en... | n/a | 0.0022 |  |
| [CVE-2026-80620](https://patchblox.com/security/data/cve/CVE-2026-80620.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Revert "PCI/MSI: Unmap MSI-X region on error"  T... | n/a | 0.0022 |  |
| [CVE-2026-80669](https://patchblox.com/security/data/cve/CVE-2026-80669.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Disable xfrm_decode_session hook attachment... | n/a | 0.0022 |  |
| [CVE-2026-63810](https://patchblox.com/security/data/cve/CVE-2026-63810.md) | High | block: Avoid mounting the bdev pseudo-filesystem in userspace | 7.1 | 0.0021 |  |
| [CVE-2026-72342](https://patchblox.com/security/data/cve/CVE-2026-72342.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | 0.0020 |  |
| [CVE-2026-72343](https://patchblox.com/security/data/cve/CVE-2026-72343.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | 0.0020 |  |
| [CVE-2026-72478](https://patchblox.com/security/data/cve/CVE-2026-72478.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: add bounds check to run_get_highest_vc... | 8.4 | 0.0020 |  |
| [CVE-2026-72284](https://patchblox.com/security/data/cve/CVE-2026-72284.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0019 |  |
| [CVE-2026-72289](https://patchblox.com/security/data/cve/CVE-2026-72289.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.3 | 0.0019 |  |
| [CVE-2026-72196](https://patchblox.com/security/data/cve/CVE-2026-72196.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: bound copy_lcns dp->page_lcns[] index... | 8.4 | 0.0019 |  |
| [CVE-2026-72197](https://patchblox.com/security/data/cve/CVE-2026-72197.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: bound DeleteIndexEntryAllocation memmo... | 8.4 | 0.0019 |  |
| [CVE-2026-74256](https://patchblox.com/security/data/cve/CVE-2026-74256.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | 0.0019 |  |
| [CVE-2026-74262](https://patchblox.com/security/data/cve/CVE-2026-74262.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  kcm: use WRITE_ONCE() when changing lower socket... | 7.8 | 0.0019 |  |
| [CVE-2026-72487](https://patchblox.com/security/data/cve/CVE-2026-72487.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.7 | 0.0019 |  |
| [CVE-2026-72066](https://patchblox.com/security/data/cve/CVE-2026-72066.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-72067](https://patchblox.com/security/data/cve/CVE-2026-72067.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-72225](https://patchblox.com/security/data/cve/CVE-2026-72225.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-64514](https://patchblox.com/security/data/cve/CVE-2026-64514.md) | High | userfaultfd: gate must_wait writability check on pte_present() | 7.1 | 0.0018 |  |
| [CVE-2026-72255](https://patchblox.com/security/data/cve/CVE-2026-72255.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0018 |  |
| [CVE-2026-74380](https://patchblox.com/security/data/cve/CVE-2026-74380.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0018 |  |
| [CVE-2026-68461](https://patchblox.com/security/data/cve/CVE-2026-68461.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-72282](https://patchblox.com/security/data/cve/CVE-2026-72282.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-72350](https://patchblox.com/security/data/cve/CVE-2026-72350.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-72400](https://patchblox.com/security/data/cve/CVE-2026-72400.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-72419](https://patchblox.com/security/data/cve/CVE-2026-72419.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-74296](https://patchblox.com/security/data/cve/CVE-2026-74296.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-74297](https://patchblox.com/security/data/cve/CVE-2026-74297.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-74305](https://patchblox.com/security/data/cve/CVE-2026-74305.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-80598](https://patchblox.com/security/data/cve/CVE-2026-80598.md) | High | ntfs3: fix out-of-bounds read in decompress_lznt | 7.8 | 0.0018 |  |
| [CVE-2026-80677](https://patchblox.com/security/data/cve/CVE-2026-80677.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-72390](https://patchblox.com/security/data/cve/CVE-2026-72390.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-72347](https://patchblox.com/security/data/cve/CVE-2026-72347.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.3 | 0.0017 |  |
| [CVE-2026-74346](https://patchblox.com/security/data/cve/CVE-2026-74346.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | n/a | 0.0017 |  |
| [CVE-2026-72072](https://patchblox.com/security/data/cve/CVE-2026-72072.md) | High | kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] | 7.8 | 0.0017 |  |
| [CVE-2026-64317](https://patchblox.com/security/data/cve/CVE-2026-64317.md) | High | isofs: bound Rock Ridge symlink components to the SL record | 7.1 | 0.0017 |  |
| [CVE-2026-64604](https://patchblox.com/security/data/cve/CVE-2026-64604.md) | High | KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode | 8.4 | 0.0017 |  |
| [CVE-2026-72476](https://patchblox.com/security/data/cve/CVE-2026-72476.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-53402](https://patchblox.com/security/data/cve/CVE-2026-53402.md) | High | fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | 7.1 | 0.0017 |  |
| [CVE-2026-63826](https://patchblox.com/security/data/cve/CVE-2026-63826.md) | High | fbdev: fix use-after-free in store_modes() | 7.1 | 0.0017 |  |
| [CVE-2026-74283](https://patchblox.com/security/data/cve/CVE-2026-74283.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutato... | 9.8 | 0.0017 |  |
| [CVE-2026-72102](https://patchblox.com/security/data/cve/CVE-2026-72102.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0017 |  |
| [CVE-2026-72136](https://patchblox.com/security/data/cve/CVE-2026-72136.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0017 |  |
| [CVE-2026-64296](https://patchblox.com/security/data/cve/CVE-2026-64296.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  exfat: bound uniname advance in exfat_find_dir_e... | 7.8 | 0.0017 |  |
| [CVE-2026-64322](https://patchblox.com/security/data/cve/CVE-2026-64322.md) | High | udf: validate sparing table length as an entry count, not a byte count | 7.8 | 0.0017 |  |
| [CVE-2026-72036](https://patchblox.com/security/data/cve/CVE-2026-72036.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-72105](https://patchblox.com/security/data/cve/CVE-2026-72105.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-72120](https://patchblox.com/security/data/cve/CVE-2026-72120.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-72123](https://patchblox.com/security/data/cve/CVE-2026-72123.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-72135](https://patchblox.com/security/data/cve/CVE-2026-72135.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-72195](https://patchblox.com/security/data/cve/CVE-2026-72195.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: bound attr_off in UpdateResidentValue... | 7.8 | 0.0017 |  |
| [CVE-2026-72250](https://patchblox.com/security/data/cve/CVE-2026-72250.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-72435](https://patchblox.com/security/data/cve/CVE-2026-72435.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-72450](https://patchblox.com/security/data/cve/CVE-2026-72450.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-72243](https://patchblox.com/security/data/cve/CVE-2026-72243.md) | High | kernel: selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] | 8.8 | 0.0017 |  |
| [CVE-2026-64593](https://patchblox.com/security/data/cve/CVE-2026-64593.md) | High | btrfs: do not trim a device which is not writeable | 9.8 | 0.0017 |  |
| [CVE-2026-64299](https://patchblox.com/security/data/cve/CVE-2026-64299.md) | High | tracing: Prevent out-of-bounds read in glob matching | 7.1 | 0.0017 |  |
| [CVE-2026-64323](https://patchblox.com/security/data/cve/CVE-2026-64323.md) | High | udf: validate VAT header length against the VAT inode size | 7.1 | 0.0017 |  |
| [CVE-2026-72389](https://patchblox.com/security/data/cve/CVE-2026-72389.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 |  |
| [CVE-2026-72122](https://patchblox.com/security/data/cve/CVE-2026-72122.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.3 | 0.0016 |  |
| [CVE-2026-64324](https://patchblox.com/security/data/cve/CVE-2026-64324.md) | High | udf: validate free block extents against the partition length | 7.8 | 0.0016 |  |
| [CVE-2026-80865](https://patchblox.com/security/data/cve/CVE-2026-80865.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Add missing access_ok call to copy_user_sym... | n/a | 0.0016 |  |
| [CVE-2026-80880](https://patchblox.com/security/data/cve/CVE-2026-80880.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  IB/mlx5: Properly support implicit ODP rereg_mr... | n/a | 0.0016 |  |
| [CVE-2026-64306](https://patchblox.com/security/data/cve/CVE-2026-64306.md) | High | crypto: drbg - Fix returning success on failure in CTR_DRBG | 7.0 | 0.0016 |  |
| [CVE-2026-72061](https://patchblox.com/security/data/cve/CVE-2026-72061.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0016 |  |
| [CVE-2026-63806](https://patchblox.com/security/data/cve/CVE-2026-63806.md) | High | KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() | 7.3 | 0.0016 |  |
| [CVE-2026-72052](https://patchblox.com/security/data/cve/CVE-2026-72052.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 |  |
| [CVE-2026-72053](https://patchblox.com/security/data/cve/CVE-2026-72053.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 |  |
| [CVE-2026-72054](https://patchblox.com/security/data/cve/CVE-2026-72054.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 |  |
| [CVE-2026-72055](https://patchblox.com/security/data/cve/CVE-2026-72055.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 |  |
| [CVE-2026-64456](https://patchblox.com/security/data/cve/CVE-2026-64456.md) | High | hwrng: virtio: clamp device-reported used.len at copy_data() | 8.4 | 0.0015 |  |
| [CVE-2026-63829](https://patchblox.com/security/data/cve/CVE-2026-63829.md) | High | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 |  |
| [CVE-2026-64298](https://patchblox.com/security/data/cve/CVE-2026-64298.md) | High | NFSv4: include MAY_WRITE in open permission mask for O_TRUNC | 8.8 | 0.0015 |  |
| [CVE-2026-74578](https://patchblox.com/security/data/cve/CVE-2026-74578.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: algif_skcipher - force synchronous proce... | 7.1 | 0.0015 |  |
| [CVE-2026-64548](https://patchblox.com/security/data/cve/CVE-2026-64548.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf, sockmap: reject overflowing copy + len in b... | 8.4 | 0.0014 |  |
| [CVE-2026-64552](https://patchblox.com/security/data/cve/CVE-2026-64552.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  virtio-net: fix len check in receive_big()  rece... | 8.4 | 0.0014 |  |
| [CVE-2026-64533](https://patchblox.com/security/data/cve/CVE-2026-64533.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: validate lcns_follow in log_replay con... | 7.8 | 0.0014 |  |
| [CVE-2026-64475](https://patchblox.com/security/data/cve/CVE-2026-64475.md) | High | vfio/pci: Release the VGA arbiter client on register_device() failure | 8.8 | 0.0014 |  |
| [CVE-2026-74310](https://patchblox.com/security/data/cve/CVE-2026-74310.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.3 | 0.0014 |  |
| [CVE-2026-64422](https://patchblox.com/security/data/cve/CVE-2026-64422.md) | High | net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes | 7.1 | 0.0014 |  |
| [CVE-2026-53400](https://patchblox.com/security/data/cve/CVE-2026-53400.md) | High | i2c: core: fix adapter registration race | 7.8 | 0.0014 |  |
| [CVE-2026-64077](https://patchblox.com/security/data/cve/CVE-2026-64077.md) | High | netfilter: ebtables: move to two-stage removal scheme | 7.8 | 0.0014 |  |
| [CVE-2026-64432](https://patchblox.com/security/data/cve/CVE-2026-64432.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: validate Dirty Page Table capacity in... | 7.8 | 0.0014 |  |
| [CVE-2026-64279](https://patchblox.com/security/data/cve/CVE-2026-64279.md) | High | i2c: core: fix adapter deregistration race | 7.8 | 0.0013 |  |
| [CVE-2026-64532](https://patchblox.com/security/data/cve/CVE-2026-64532.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: bound NTFS_DE view.data_off in UpdateR... | 7.8 | 0.0013 |  |
| [CVE-2026-64423](https://patchblox.com/security/data/cve/CVE-2026-64423.md) | High | ipv4: igmp: remove multicast group from hash table on device destruction | 7.8 | 0.0013 |  |
| [CVE-2026-74365](https://patchblox.com/security/data/cve/CVE-2026-74365.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.3 | 0.0013 |  |
| [CVE-2026-64411](https://patchblox.com/security/data/cve/CVE-2026-64411.md) | High | netfilter: ebtables: terminate table name before find_table_lock() | 7.1 | 0.0013 |  |
| [CVE-2026-64412](https://patchblox.com/security/data/cve/CVE-2026-64412.md) | High | netfilter: ebtables: module names must be null-terminated | 7.1 | 0.0013 |  |
| [CVE-2026-64546](https://patchblox.com/security/data/cve/CVE-2026-64546.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/edid: fix OOB read in drm_parse_tiled_block(... | 7.1 | 0.0013 |  |
| [CVE-2026-64352](https://patchblox.com/security/data/cve/CVE-2026-64352.md) | High | bpf: Allow LPM map access from sleepable BPF programs | 7.8 | 0.0013 |  |
| [CVE-2026-64381](https://patchblox.com/security/data/cve/CVE-2026-64381.md) | High | smb: client: Fix next buffer leak in receive_encrypted_standard() | 7.8 | 0.0013 |  |
| [CVE-2026-72444](https://patchblox.com/security/data/cve/CVE-2026-72444.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-74288](https://patchblox.com/security/data/cve/CVE-2026-74288.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-74330](https://patchblox.com/security/data/cve/CVE-2026-74330.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-80613](https://patchblox.com/security/data/cve/CVE-2026-80613.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-53393](https://patchblox.com/security/data/cve/CVE-2026-53393.md) | High | nfsd: reset write verifier on deferred writeback errors | 7.0 | 0.0013 |  |
| [CVE-2026-64371](https://patchblox.com/security/data/cve/CVE-2026-64371.md) | High | proc: protect ptrace_may_access() with exec_update_lock (part 1) | 7.0 | 0.0013 |  |
| [CVE-2026-64436](https://patchblox.com/security/data/cve/CVE-2026-64436.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: af_key: initialize alg_key_len for IPComp s... | 7.1 | 0.0013 |  |
| [CVE-2026-64413](https://patchblox.com/security/data/cve/CVE-2026-64413.md) | High | netfilter: ebtables: zero chainstack array | 7.0 | 0.0013 |  |
| [CVE-2026-64266](https://patchblox.com/security/data/cve/CVE-2026-64266.md) | High | fuse: re-lock request before returning from fuse_ref_folio() | 7.8 | 0.0013 |  |
| [CVE-2026-80664](https://patchblox.com/security/data/cve/CVE-2026-80664.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.3 | 0.0013 |  |
| [CVE-2026-64189](https://patchblox.com/security/data/cve/CVE-2026-64189.md) | High | netfilter: ipset: fix race between dump and ip_set_list resize | 8.8 | 0.0013 |  |
| [CVE-2026-64372](https://patchblox.com/security/data/cve/CVE-2026-64372.md) | High | cpufreq: pcc: fix use-after-free and double free in _OSC evaluation | 7.8 | 0.0013 |  |
| [CVE-2026-74359](https://patchblox.com/security/data/cve/CVE-2026-74359.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-74363](https://patchblox.com/security/data/cve/CVE-2026-74363.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-64375](https://patchblox.com/security/data/cve/CVE-2026-64375.md) | High | proc: protect ptrace_may_access() with exec_update_lock (FD links) | 7.8 | 0.0011 |  |
| [CVE-2026-64378](https://patchblox.com/security/data/cve/CVE-2026-64378.md) | High | writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() | 8.8 | 0.0010 |  |
| [CVE-2026-74259](https://patchblox.com/security/data/cve/CVE-2026-74259.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | n/a |  |
| [CVE-2026-74331](https://patchblox.com/security/data/cve/CVE-2026-74331.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0024 |  |
| [CVE-2026-72010](https://patchblox.com/security/data/cve/CVE-2026-72010.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72068](https://patchblox.com/security/data/cve/CVE-2026-72068.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72223](https://patchblox.com/security/data/cve/CVE-2026-72223.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72224](https://patchblox.com/security/data/cve/CVE-2026-72224.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72326](https://patchblox.com/security/data/cve/CVE-2026-72326.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72349](https://patchblox.com/security/data/cve/CVE-2026-72349.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72447](https://patchblox.com/security/data/cve/CVE-2026-72447.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-74395](https://patchblox.com/security/data/cve/CVE-2026-74395.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72428](https://patchblox.com/security/data/cve/CVE-2026-72428.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72138](https://patchblox.com/security/data/cve/CVE-2026-72138.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72152](https://patchblox.com/security/data/cve/CVE-2026-72152.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72256](https://patchblox.com/security/data/cve/CVE-2026-72256.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72433](https://patchblox.com/security/data/cve/CVE-2026-72433.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-74284](https://patchblox.com/security/data/cve/CVE-2026-74284.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72177](https://patchblox.com/security/data/cve/CVE-2026-72177.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-72437](https://patchblox.com/security/data/cve/CVE-2026-72437.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-74327](https://patchblox.com/security/data/cve/CVE-2026-74327.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-74329](https://patchblox.com/security/data/cve/CVE-2026-74329.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-74399](https://patchblox.com/security/data/cve/CVE-2026-74399.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-64538](https://patchblox.com/security/data/cve/CVE-2026-64538.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() | 5.3 | 0.0020 |  |
| [CVE-2026-74382](https://patchblox.com/security/data/cve/CVE-2026-74382.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0020 |  |
| [CVE-2026-64465](https://patchblox.com/security/data/cve/CVE-2026-64465.md) | Routine | usb: xhci: Fix sleep in atomic context in xhci_free_streams() | 5.5 | 0.0018 |  |
| [CVE-2026-64472](https://patchblox.com/security/data/cve/CVE-2026-64472.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  vfio/mlx5: Fix racy bitfields and tighten struct... | 5.5 | 0.0018 |  |
| [CVE-2026-64458](https://patchblox.com/security/data/cve/CVE-2026-64458.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/ops-common: handle extreme intervals in... | 5.5 | 0.0018 |  |
| [CVE-2026-64476](https://patchblox.com/security/data/cve/CVE-2026-64476.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  vfio/pci: Latch disable_idle_d3 per device  When... | 5.5 | 0.0018 |  |
| [CVE-2026-64544](https://patchblox.com/security/data/cve/CVE-2026-64544.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: asymmetric_keys - fix OOB read in pefile... | 5.5 | 0.0018 |  |
| [CVE-2026-64553](https://patchblox.com/security/data/cve/CVE-2026-64553.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: psample: fix info leak in PSAMPLE_ATTR_DATA... | 5.5 | 0.0018 |  |
| [CVE-2026-64512](https://patchblox.com/security/data/cve/CVE-2026-64512.md) | Routine | ACPI: CPPC: Suppress UBSAN warning caused by field misuse | 5.5 | 0.0017 |  |
| [CVE-2026-74290](https://patchblox.com/security/data/cve/CVE-2026-74290.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0017 |  |
| [CVE-2026-74379](https://patchblox.com/security/data/cve/CVE-2026-74379.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0017 |  |
| [CVE-2026-74424](https://patchblox.com/security/data/cve/CVE-2026-74424.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0016 |  |
| [CVE-2026-64370](https://patchblox.com/security/data/cve/CVE-2026-64370.md) | Routine | posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path | 5.5 | 0.0013 |  |
| [CVE-2026-64425](https://patchblox.com/security/data/cve/CVE-2026-64425.md) | Routine | io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item | 5.5 | 0.0013 |  |
| [CVE-2026-64187](https://patchblox.com/security/data/cve/CVE-2026-64187.md) | Routine | xfs: fail recovery on a committed log item with no regions | 5.5 | 0.0011 |  |
| [CVE-2026-64373](https://patchblox.com/security/data/cve/CVE-2026-64373.md) | Routine | cpufreq: Fix hotplug-suspend race during reboot | 5.5 | 0.0009 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.