# ALAS2023-2026-3197: Security update for 18 packages

ALAS2023-2026-3197, released November 7, 2026, fixes 202 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2026-3197
- Platform: Linux
- Released: Nov 7, 2026
- Priority: Urgent (Closes CVE-2026-99999, rated Critical)
- CVEs: 202, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-3197.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-livepatch-6.1.188-233.385](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.188-233.385.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-99999](https://patchblox.com/security/data/cve/CVE-2026-99999.md) | Urgent | ipv4: validate checksum_start before completing checksum | 9.3 | 0.0079 |  |
| [CVE-2026-89783](https://patchblox.com/security/data/cve/CVE-2026-89783.md) | Urgent | xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full | 9.8 | 0.0071 |  |
| [CVE-2026-89778](https://patchblox.com/security/data/cve/CVE-2026-89778.md) | Urgent | isofs: fix out-of-bounds page array access on empty zisofs block | 9.8 | 0.0070 |  |
| [CVE-2026-89542](https://patchblox.com/security/data/cve/CVE-2026-89542.md) | Urgent | SUNRPC: harden gss_krb5_unwrap_v2 against short tokens | 9.8 | 0.0051 |  |
| [CVE-2026-89551](https://patchblox.com/security/data/cve/CVE-2026-89551.md) | Urgent | SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow | 9.8 | 0.0051 |  |
| [CVE-2026-89653](https://patchblox.com/security/data/cve/CVE-2026-89653.md) | Urgent | ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode | 9.8 | 0.0050 |  |
| [CVE-2026-89479](https://patchblox.com/security/data/cve/CVE-2026-89479.md) | Urgent | sctp: stop processing a packet once its association is deleted | 9.8 | 0.0050 |  |
| [CVE-2026-64025](https://patchblox.com/security/data/cve/CVE-2026-64025.md) | Urgent | kernel-64kb: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117). | 9.8 | 0.0037 |  |
| [CVE-2026-80671](https://patchblox.com/security/data/cve/CVE-2026-80671.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  perf sched: Fix register_pid() overflow, strcpy,... | 9.3 | 0.0016 |  |
| [CVE-2026-64078](https://patchblox.com/security/data/cve/CVE-2026-64078.md) | Urgent | netfilter: x_tables: add and use xtables_unregister_table_exit | 9.8 | 0.0013 |  |
| [CVE-2026-64079](https://patchblox.com/security/data/cve/CVE-2026-64079.md) | Urgent | netfilter: x_tables: allocate hook ops while under mutex | 9.8 | 0.0012 |  |
| [CVE-2026-90011](https://patchblox.com/security/data/cve/CVE-2026-90011.md) | High | scsi: target: iscsi: Reserve a terminator byte for the login payload | 9.8 | 0.0084 |  |
| [CVE-2026-89696](https://patchblox.com/security/data/cve/CVE-2026-89696.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0075 |  |
| [CVE-2026-90151](https://patchblox.com/security/data/cve/CVE-2026-90151.md) | High | kernel-uek64k-modules-core: NFSv4: remove callback IDR entry on client allocation failure (Ruoyu Wang) [Orabug: 40041662] | 9.8 | 0.0075 |  |
| [CVE-2026-72323](https://patchblox.com/security/data/cve/CVE-2026-72323.md) | High | bpftool: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (Eric Dumazet) [Orabug: 39885781] | 9.8 | 0.0072 |  |
| [CVE-2026-68476](https://patchblox.com/security/data/cve/CVE-2026-68476.md) | High | bpftool: ipvs: reload ip header after head reallocation (Florian Westphal) [Orabug: 39884703] | 9.8 | 0.0071 |  |
| [CVE-2026-74268](https://patchblox.com/security/data/cve/CVE-2026-74268.md) | High | tcp: clear sock_ops cb flags before force-closing a child socket | 9.8 | 0.0071 |  |
| [CVE-2026-80976](https://patchblox.com/security/data/cve/CVE-2026-80976.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-89482](https://patchblox.com/security/data/cve/CVE-2026-89482.md) | High | nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone | 9.8 | 0.0071 |  |
| [CVE-2026-89485](https://patchblox.com/security/data/cve/CVE-2026-89485.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-89538](https://patchblox.com/security/data/cve/CVE-2026-89538.md) | High | SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field | 9.8 | 0.0071 |  |
| [CVE-2026-89643](https://patchblox.com/security/data/cve/CVE-2026-89643.md) | High | audit: avoid dropping live tree ref on fsnotify rule autoremove | 9.8 | 0.0071 |  |
| [CVE-2026-89655](https://patchblox.com/security/data/cve/CVE-2026-89655.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-89712](https://patchblox.com/security/data/cve/CVE-2026-89712.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 |  |
| [CVE-2026-89549](https://patchblox.com/security/data/cve/CVE-2026-89549.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.1 | 0.0071 |  |
| [CVE-2026-89779](https://patchblox.com/security/data/cve/CVE-2026-89779.md) | High | fs/ntfs3: validate ef->size covers the record's name and value | 9.1 | 0.0070 |  |
| [CVE-2026-89786](https://patchblox.com/security/data/cve/CVE-2026-89786.md) | High | ext4: fix out-of-bounds read in ext4_read_inline_dir() | 9.1 | 0.0070 |  |
| [CVE-2026-89476](https://patchblox.com/security/data/cve/CVE-2026-89476.md) | High | sctp: fix stream->outcnt underflow on duplicate RECONF responses | 7.8 | 0.0070 |  |
| [CVE-2026-90102](https://patchblox.com/security/data/cve/CVE-2026-90102.md) | High | NFSv4/pnfs: key the data server cache on the NFS version | 7.5 | 0.0070 |  |
| [CVE-2026-90103](https://patchblox.com/security/data/cve/CVE-2026-90103.md) | High | kernel-uek64k-modules-core: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion (Junrui Luo) [Orabug: 40041485] | 7.5 | 0.0070 |  |
| [CVE-2026-97557](https://patchblox.com/security/data/cve/CVE-2026-97557.md) | High | smb: client: avoid leaking refcount in cifs_queue_oplock_break() | 7.5 | 0.0070 |  |
| [CVE-2026-89555](https://patchblox.com/security/data/cve/CVE-2026-89555.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0069 |  |
| [CVE-2026-89662](https://patchblox.com/security/data/cve/CVE-2026-89662.md) | High | NFSD: Prevent lock owner use-after-free during client teardown | 9.8 | 0.0069 |  |
| [CVE-2026-89669](https://patchblox.com/security/data/cve/CVE-2026-89669.md) | High | nfsd: initialize copy-notify stateid before publishing it | 9.8 | 0.0069 |  |
| [CVE-2026-89634](https://patchblox.com/security/data/cve/CVE-2026-89634.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0069 |  |
| [CVE-2026-90067](https://patchblox.com/security/data/cve/CVE-2026-90067.md) | High | libceph: validate banner payload length | 7.5 | 0.0068 |  |
| [CVE-2026-89649](https://patchblox.com/security/data/cve/CVE-2026-89649.md) | High | ceph: bound xattr value length in __build_xattrs() | 9.1 | 0.0068 |  |
| [CVE-2026-89636](https://patchblox.com/security/data/cve/CVE-2026-89636.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0066 |  |
| [CVE-2026-89973](https://patchblox.com/security/data/cve/CVE-2026-89973.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0062 |  |
| [CVE-2026-89586](https://patchblox.com/security/data/cve/CVE-2026-89586.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.2 | 0.0062 |  |
| [CVE-2026-90110](https://patchblox.com/security/data/cve/CVE-2026-90110.md) | High | kernel-uek64k-modules-core: inetpeer: randomize RB-tree node comparison using SipHash (Eric Dumazet) [Orabug: 40041529] | 9.4 | 0.0061 |  |
| [CVE-2026-89554](https://patchblox.com/security/data/cve/CVE-2026-89554.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0060 |  |
| [CVE-2026-89483](https://patchblox.com/security/data/cve/CVE-2026-89483.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0057 |  |
| [CVE-2026-89706](https://patchblox.com/security/data/cve/CVE-2026-89706.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.2 | 0.0053 |  |
| [CVE-2026-89704](https://patchblox.com/security/data/cve/CVE-2026-89704.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0053 |  |
| [CVE-2026-81002](https://patchblox.com/security/data/cve/CVE-2026-81002.md) | High | xdp: fix zero-copy frame layout | 9.8 | 0.0051 |  |
| [CVE-2026-89478](https://patchblox.com/security/data/cve/CVE-2026-89478.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 |  |
| [CVE-2026-89541](https://patchblox.com/security/data/cve/CVE-2026-89541.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 |  |
| [CVE-2026-89656](https://patchblox.com/security/data/cve/CVE-2026-89656.md) | High | libceph: reject buckets with mismatched CRUSH ids | 9.8 | 0.0051 |  |
| [CVE-2026-89650](https://patchblox.com/security/data/cve/CVE-2026-89650.md) | High | ceph: bound num_export_targets array for mds info v2/v3 | 9.1 | 0.0051 |  |
| [CVE-2026-89684](https://patchblox.com/security/data/cve/CVE-2026-89684.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0050 |  |
| [CVE-2026-89477](https://patchblox.com/security/data/cve/CVE-2026-89477.md) | High | sctp: fix NULL deref on untransmitted RECONF completion | 7.5 | 0.0050 |  |
| [CVE-2026-89699](https://patchblox.com/security/data/cve/CVE-2026-89699.md) | High | nfsd: validate symlink target length in NFSv4 CREATE | 7.5 | 0.0050 |  |
| [CVE-2026-74474](https://patchblox.com/security/data/cve/CVE-2026-74474.md) | High | vxlan: use pskb_network_may_pull() for transmit path header pulls | 9.8 | 0.0049 |  |
| [CVE-2026-89663](https://patchblox.com/security/data/cve/CVE-2026-89663.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0046 |  |
| [CVE-2026-90141](https://patchblox.com/security/data/cve/CVE-2026-90141.md) | High | ipvs: fix integer overflow in ftp helper port/address parsing | 9.8 | 0.0045 |  |
| [CVE-2026-89711](https://patchblox.com/security/data/cve/CVE-2026-89711.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.2 | 0.0044 |  |
| [CVE-2026-89481](https://patchblox.com/security/data/cve/CVE-2026-89481.md) | High | nvme-tcp: fix host memory disclosure on R2T for a read command | 8.8 | 0.0043 |  |
| [CVE-2026-89480](https://patchblox.com/security/data/cve/CVE-2026-89480.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0043 |  |
| [CVE-2026-89616](https://patchblox.com/security/data/cve/CVE-2026-89616.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: fix info-leak on partial LZNT decompre... | 7.5 | 0.0042 |  |
| [CVE-2026-64210](https://patchblox.com/security/data/cve/CVE-2026-64210.md) | High | net/mlx5e: xsk: Fix unlocked writing to ICOSQ | 7.5 | 0.0037 |  |
| [CVE-2026-90329](https://patchblox.com/security/data/cve/CVE-2026-90329.md) | High | HID: synchronize input before cleaning up a failed probe | 8.8 | 0.0034 |  |
| [CVE-2026-93189](https://patchblox.com/security/data/cve/CVE-2026-93189.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0032 |  |
| [CVE-2026-89694](https://patchblox.com/security/data/cve/CVE-2026-89694.md) | High | nfsd: check client ownership when cancelling a copy-notify stateid | 8.8 | 0.0022 |  |
| [CVE-2026-90073](https://patchblox.com/security/data/cve/CVE-2026-90073.md) | High | net/sched: hhf: clamp quantum before hhf_change() to avoid overflow | 7.8 | 0.0022 |  |
| [CVE-2026-90081](https://patchblox.com/security/data/cve/CVE-2026-90081.md) | High | net/rds: use wq_has_sleeper() in rds_cong_map_updated() | 7.8 | 0.0022 |  |
| [CVE-2026-90284](https://patchblox.com/security/data/cve/CVE-2026-90284.md) | High | firmware_loader: do not queue completed sysfs fallback requests | 7.8 | 0.0022 |  |
| [CVE-2026-90334](https://patchblox.com/security/data/cve/CVE-2026-90334.md) | High | tty: clear cdev pointer after cdev_add() failure | 7.8 | 0.0022 |  |
| [CVE-2026-89984](https://patchblox.com/security/data/cve/CVE-2026-89984.md) | High | perf/x86/intel: Fix kernel address leakages in LBR stack | 7.1 | 0.0022 |  |
| [CVE-2026-90318](https://patchblox.com/security/data/cve/CVE-2026-90318.md) | High | fat: release buffer head after rebuilding parent | 7.1 | 0.0022 |  |
| [CVE-2026-90063](https://patchblox.com/security/data/cve/CVE-2026-90063.md) | High | kernel-uek64k-modules-core: virtio-net: Ensure that TCP packets don't overflow gso_segs (Alice Mikityanska) [Orabug: 40041355] | 7.8 | 0.0021 |  |
| [CVE-2026-90140](https://patchblox.com/security/data/cve/CVE-2026-90140.md) | High | cuse: wait for pending RCU callbacks on module exit | 7.8 | 0.0021 |  |
| [CVE-2026-90248](https://patchblox.com/security/data/cve/CVE-2026-90248.md) | High | kernel-uek64k-modules-core: net/sched: cls_api: fix teardown of an adopted proto on insert-race loss (Victor Nogueira) [Orabug: 40042004] | 7.8 | 0.0021 |  |
| [CVE-2026-93109](https://patchblox.com/security/data/cve/CVE-2026-93109.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0021 |  |
| [CVE-2026-89785](https://patchblox.com/security/data/cve/CVE-2026-89785.md) | High | fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init | 7.1 | 0.0021 |  |
| [CVE-2026-89983](https://patchblox.com/security/data/cve/CVE-2026-89983.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.0 | 0.0021 |  |
| [CVE-2026-90184](https://patchblox.com/security/data/cve/CVE-2026-90184.md) | High | null_blk: serialize configfs attribute updates with device setup | 7.8 | 0.0021 |  |
| [CVE-2026-90188](https://patchblox.com/security/data/cve/CVE-2026-90188.md) | High | null_blk: free global tag_set on init error path | 7.8 | 0.0021 |  |
| [CVE-2026-93182](https://patchblox.com/security/data/cve/CVE-2026-93182.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0021 |  |
| [CVE-2026-80840](https://patchblox.com/security/data/cve/CVE-2026-80840.md) | High | ipv6: seg6: clear IPv4 control block on IPIP decapsulation | 7.8 | 0.0021 |  |
| [CVE-2026-93117](https://patchblox.com/security/data/cve/CVE-2026-93117.md) | High | usb: fix UAF when probe runs concurrent to dyn ID removal | 7.8 | 0.0021 |  |
| [CVE-2026-80824](https://patchblox.com/security/data/cve/CVE-2026-80824.md) | High | usb: usbfs: fix use-after-free of usb_device in usbdev_release() | 8.8 | 0.0020 |  |
| [CVE-2026-89930](https://patchblox.com/security/data/cve/CVE-2026-89930.md) | High | KVM: nVMX: Service local TLB flushes on failed nested VM-Enter | 9.3 | 0.0019 |  |
| [CVE-2026-89781](https://patchblox.com/security/data/cve/CVE-2026-89781.md) | High | fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() | 8.4 | 0.0019 |  |
| [CVE-2026-80852](https://patchblox.com/security/data/cve/CVE-2026-80852.md) | High | tls: device: fix out-of-bounds write in tls_append_frag() | 7.8 | 0.0018 |  |
| [CVE-2026-89782](https://patchblox.com/security/data/cve/CVE-2026-89782.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: reject restart table growth beyond U16... | 8.4 | 0.0018 |  |
| [CVE-2026-89992](https://patchblox.com/security/data/cve/CVE-2026-89992.md) | High | cpuidle: dt_idle_genpd: kfree() the original name allocation | 8.4 | 0.0018 |  |
| [CVE-2026-89927](https://patchblox.com/security/data/cve/CVE-2026-89927.md) | High | KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock | 7.8 | 0.0018 |  |
| [CVE-2026-93073](https://patchblox.com/security/data/cve/CVE-2026-93073.md) | High | dax: read holder_ops once in dax_holder_notify_failure() | 7.1 | 0.0018 |  |
| [CVE-2026-80842](https://patchblox.com/security/data/cve/CVE-2026-80842.md) | High | net: bridge: mcast: fix use-after-free of a master VLAN's multicast context | 7.8 | 0.0018 |  |
| [CVE-2026-93055](https://patchblox.com/security/data/cve/CVE-2026-93055.md) | High | UDF symlink pathComponent header OOB read | 7.1 | 0.0018 |  |
| [CVE-2026-92521](https://patchblox.com/security/data/cve/CVE-2026-92521.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.0 | 0.0018 |  |
| [CVE-2026-93138](https://patchblox.com/security/data/cve/CVE-2026-93138.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 |  |
| [CVE-2026-90189](https://patchblox.com/security/data/cve/CVE-2026-90189.md) | High | null_blk: register configfs subsystem after creating default devices | 7.8 | 0.0017 |  |
| [CVE-2026-92509](https://patchblox.com/security/data/cve/CVE-2026-92509.md) | High | RDMA/core: Fix potential use after free in counter_release() | 7.8 | 0.0017 |  |
| [CVE-2026-92512](https://patchblox.com/security/data/cve/CVE-2026-92512.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-89710](https://patchblox.com/security/data/cve/CVE-2026-89710.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0017 |  |
| [CVE-2026-90049](https://patchblox.com/security/data/cve/CVE-2026-90049.md) | High | net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() | 9.3 | 0.0017 |  |
| [CVE-2026-80994](https://patchblox.com/security/data/cve/CVE-2026-80994.md) | High | net: openvswitch: fix flow mask use-after-free on flow deletion | 7.8 | 0.0017 |  |
| [CVE-2026-90203](https://patchblox.com/security/data/cve/CVE-2026-90203.md) | High | kernel-uek64k-modules-core: Squashfs: check block offset is not negative (Phillip Lougher) [Orabug: 40041834] | 7.1 | 0.0017 |  |
| [CVE-2026-89932](https://patchblox.com/security/data/cve/CVE-2026-89932.md) | High | KVM: nVMX: Always flush vpid02 on first use | 9.8 | 0.0017 |  |
| [CVE-2026-89557](https://patchblox.com/security/data/cve/CVE-2026-89557.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-89559](https://patchblox.com/security/data/cve/CVE-2026-89559.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-89741](https://patchblox.com/security/data/cve/CVE-2026-89741.md) | High | Revert "media: v4l2-dev: fix error handling in __video_register_device()" | 7.8 | 0.0017 |  |
| [CVE-2026-89823](https://patchblox.com/security/data/cve/CVE-2026-89823.md) | High | drm: fix race between partial drm_dev_register() failure and ioctl | 7.8 | 0.0017 |  |
| [CVE-2026-89965](https://patchblox.com/security/data/cve/CVE-2026-89965.md) | High | nvdimm/btt: reject an arena whose nfree is below the lane count | 7.8 | 0.0017 |  |
| [CVE-2026-89988](https://patchblox.com/security/data/cve/CVE-2026-89988.md) | High | kprobes: Protect kprobe_blacklist with RCU | 7.8 | 0.0017 |  |
| [CVE-2026-89998](https://patchblox.com/security/data/cve/CVE-2026-89998.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-90388](https://patchblox.com/security/data/cve/CVE-2026-90388.md) | High | iommu/dma: Check atomic pool allocation result directly | 7.8 | 0.0017 |  |
| [CVE-2026-89579](https://patchblox.com/security/data/cve/CVE-2026-89579.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-89777](https://patchblox.com/security/data/cve/CVE-2026-89777.md) | High | vfio/pci: clear vdev->msi_perm after freeing it on init failure | 8.8 | 0.0016 |  |
| [CVE-2026-89997](https://patchblox.com/security/data/cve/CVE-2026-89997.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 |  |
| [CVE-2026-90071](https://patchblox.com/security/data/cve/CVE-2026-90071.md) | High | net/sched: sch_teql: restore skb->dev on the slave failure path | 7.8 | 0.0016 |  |
| [CVE-2026-92507](https://patchblox.com/security/data/cve/CVE-2026-92507.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 |  |
| [CVE-2026-92508](https://patchblox.com/security/data/cve/CVE-2026-92508.md) | High | RDMA/core: Fix potential use after free in ib_free_cq() | 7.8 | 0.0016 |  |
| [CVE-2026-90062](https://patchblox.com/security/data/cve/CVE-2026-90062.md) | High | netfilter: nf_tables: move hardware offload step after building the chain blob | 7.1 | 0.0016 |  |
| [CVE-2026-93137](https://patchblox.com/security/data/cve/CVE-2026-93137.md) | High | bpf: Fix use-after-free on mm_struct in bpf_find_vma() | 7.8 | 0.0016 |  |
| [CVE-2026-93262](https://patchblox.com/security/data/cve/CVE-2026-93262.md) | High | md/raid5-ppl: fix use-after-free in ppl_do_flush() | 8.8 | 0.0015 |  |
| [CVE-2026-89615](https://patchblox.com/security/data/cve/CVE-2026-89615.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: bound page_lcns[] index by the log rec... | 8.4 | 0.0015 |  |
| [CVE-2026-93046](https://patchblox.com/security/data/cve/CVE-2026-93046.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.0 | 0.0015 |  |
| [CVE-2026-93054](https://patchblox.com/security/data/cve/CVE-2026-93054.md) | High | uio: Fix stale info pointer in failed registration path | 7.0 | 0.0015 |  |
| [CVE-2026-89744](https://patchblox.com/security/data/cve/CVE-2026-89744.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | 0.0014 |  |
| [CVE-2026-89563](https://patchblox.com/security/data/cve/CVE-2026-89563.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0014 |  |
| [CVE-2026-89617](https://patchblox.com/security/data/cve/CVE-2026-89617.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: validate dirty page table on log repla... | 7.8 | 0.0014 |  |
| [CVE-2026-80932](https://patchblox.com/security/data/cve/CVE-2026-80932.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | 0.0014 |  |
| [CVE-2026-92522](https://patchblox.com/security/data/cve/CVE-2026-92522.md) | High | ACPI: processor: validate MADT IOAPIC entry bounds | 7.3 | 0.0014 |  |
| [CVE-2026-74334](https://patchblox.com/security/data/cve/CVE-2026-74334.md) | High | RDMA/nldev: Fix locking when accessing mr->pd | 7.8 | 0.0013 |  |
| [CVE-2026-80977](https://patchblox.com/security/data/cve/CVE-2026-80977.md) | High | net: skbuff: don't touch shared zerocopy state in skb_tx_error() | 7.8 | 0.0013 |  |
| [CVE-2026-80978](https://patchblox.com/security/data/cve/CVE-2026-80978.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-89487](https://patchblox.com/security/data/cve/CVE-2026-89487.md) | High | openvswitch: only skb_tx_error() a packet we are about to drop | 7.8 | 0.0013 |  |
| [CVE-2026-89540](https://patchblox.com/security/data/cve/CVE-2026-89540.md) | High | sunrpc: init gssp_lock before publishing proc entry | 7.8 | 0.0013 |  |
| [CVE-2026-89562](https://patchblox.com/security/data/cve/CVE-2026-89562.md) | High | ip6_gre: fix hardware header length for NBMA tunnels | 7.8 | 0.0013 |  |
| [CVE-2026-89573](https://patchblox.com/security/data/cve/CVE-2026-89573.md) | High | dm array: reject an array block whose value size is not the caller's | 7.8 | 0.0013 |  |
| [CVE-2026-90435](https://patchblox.com/security/data/cve/CVE-2026-90435.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-89488](https://patchblox.com/security/data/cve/CVE-2026-89488.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0013 |  |
| [CVE-2026-89560](https://patchblox.com/security/data/cve/CVE-2026-89560.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | 0.0013 |  |
| [CVE-2026-89508](https://patchblox.com/security/data/cve/CVE-2026-89508.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-89548](https://patchblox.com/security/data/cve/CVE-2026-89548.md) | High | SUNRPC: always drain cache_cleaner before destroying a cache_detail | 7.8 | 0.0013 |  |
| [CVE-2026-92510](https://patchblox.com/security/data/cve/CVE-2026-92510.md) | High | RDMA/core: Fix potential use after free in ib_destroy_srq_user() | 7.8 | 0.0013 |  |
| [CVE-2026-92511](https://patchblox.com/security/data/cve/CVE-2026-92511.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 |  |
| [CVE-2026-89640](https://patchblox.com/security/data/cve/CVE-2026-89640.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0013 |  |
| [CVE-2026-63858](https://patchblox.com/security/data/cve/CVE-2026-63858.md) | High | netfilter: nf_tables: add hook transactions for device deletions | 7.8 | 0.0010 |  |
| [CVE-2026-89603](https://patchblox.com/security/data/cve/CVE-2026-89603.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | n/a |  |
| [CVE-2026-89575](https://patchblox.com/security/data/cve/CVE-2026-89575.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 6.7 | 0.0023 |  |
| [CVE-2026-90393](https://patchblox.com/security/data/cve/CVE-2026-90393.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 6.7 | 0.0023 |  |
| [CVE-2026-90283](https://patchblox.com/security/data/cve/CVE-2026-90283.md) | Routine | kernel-uek64k-modules-core: hugetlbfs: release subpool on fill_super failure (Chenyichong) [Orabug: 40042090] | 6.7 | 0.0023 |  |
| [CVE-2026-90157](https://patchblox.com/security/data/cve/CVE-2026-90157.md) | Routine | kernel-uek64k-modules-core: bpf: Reject negative optlen in cgroup getsockopt hook (Junseo Lim) [Orabug: 40041687] | 6.7 | 0.0022 |  |
| [CVE-2026-90015](https://patchblox.com/security/data/cve/CVE-2026-90015.md) | Routine | xhci: fix lost bounce buffers on TDs spanning several ring segments | 6.5 | 0.0022 |  |
| [CVE-2026-90202](https://patchblox.com/security/data/cve/CVE-2026-90202.md) | Routine | scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers | 6.4 | 0.0022 |  |
| [CVE-2026-89784](https://patchblox.com/security/data/cve/CVE-2026-89784.md) | Routine | SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 | 5.5 | 0.0022 |  |
| [CVE-2026-89816](https://patchblox.com/security/data/cve/CVE-2026-89816.md) | Routine | drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used | 5.5 | 0.0022 |  |
| [CVE-2026-90072](https://patchblox.com/security/data/cve/CVE-2026-90072.md) | Routine | kernel-uek64k-modules-core: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup (Jamal Hadi Salim) [Orabug: 40041381] | 5.5 | 0.0022 |  |
| [CVE-2026-90075](https://patchblox.com/security/data/cve/CVE-2026-90075.md) | Routine | net/sched: fq_codel: clamp default quantum and mtu | 5.5 | 0.0022 |  |
| [CVE-2026-90218](https://patchblox.com/security/data/cve/CVE-2026-90218.md) | Routine | RDMA/cma: Fix WARNING in res_to_rt | 5.5 | 0.0022 |  |
| [CVE-2026-93140](https://patchblox.com/security/data/cve/CVE-2026-93140.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2026-90114](https://patchblox.com/security/data/cve/CVE-2026-90114.md) | Routine | kernel-uek64k-modules-core: net: bridge: Reject descending VLAN tunnel ranges (Ruoyu Wang) [Orabug: 40041548] | 5.3 | 0.0022 |  |
| [CVE-2026-92524](https://patchblox.com/security/data/cve/CVE-2026-92524.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.2 | 0.0022 |  |
| [CVE-2026-90054](https://patchblox.com/security/data/cve/CVE-2026-90054.md) | Routine | kernel-uek64k-modules-core: tcp: fix corruption of urgent data on multi-segment retransmit (Jiayuan Chen) [Orabug: 40041301] | 4.4 | 0.0022 |  |
| [CVE-2026-90434](https://patchblox.com/security/data/cve/CVE-2026-90434.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 4.4 | 0.0022 |  |
| [CVE-2026-93256](https://patchblox.com/security/data/cve/CVE-2026-93256.md) | Routine | arm64: hibernate: mask DAIF before restoring hibernated kernel | 4.1 | 0.0022 |  |
| [CVE-2026-89595](https://patchblox.com/security/data/cve/CVE-2026-89595.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 3.3 | 0.0022 |  |
| [CVE-2026-90058](https://patchblox.com/security/data/cve/CVE-2026-90058.md) | Routine | kernel-uek64k-modules-core: net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup (Jamal Hadi Salim) [Orabug: 40041330] | 3.3 | 0.0022 |  |
| [CVE-2026-90416](https://patchblox.com/security/data/cve/CVE-2026-90416.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 3.3 | 0.0022 |  |
| [CVE-2026-90290](https://patchblox.com/security/data/cve/CVE-2026-90290.md) | Routine | kernel-uek64k-modules-core: arm64: hibernate: Restore DAIF state on error (Vladimir Murzin) [Orabug: 40042116] | 3.0 | 0.0022 |  |
| [CVE-2026-90160](https://patchblox.com/security/data/cve/CVE-2026-90160.md) | Routine | kernel-uek64k-modules-core: lwt_bpf: Restore reserved headroom after xmit program (Junseo Lim) [Orabug: 40041696] | 2.3 | 0.0022 |  |
| [CVE-2026-89604](https://patchblox.com/security/data/cve/CVE-2026-89604.md) | Routine | efivarfs: Rate limit statfs() handler | 5.5 | 0.0021 |  |
| [CVE-2026-89822](https://patchblox.com/security/data/cve/CVE-2026-89822.md) | Routine | drm/i915: Guard against NULL driver_data in i915_pci_probe() | 5.5 | 0.0021 |  |
| [CVE-2026-89989](https://patchblox.com/security/data/cve/CVE-2026-89989.md) | Routine | ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() | 5.5 | 0.0021 |  |
| [CVE-2026-90053](https://patchblox.com/security/data/cve/CVE-2026-90053.md) | Routine | kernel-uek64k-modules-core: net/sched: sch_htb: limit htb_classify inner-class filter hops (Jamal Hadi Salim) [Orabug: 40041293] | 5.5 | 0.0021 |  |
| [CVE-2026-92494](https://patchblox.com/security/data/cve/CVE-2026-92494.md) | Routine | ext4: fix buffer_head leak in ext4_init_orphan_info | 5.5 | 0.0021 |  |
| [CVE-2026-89776](https://patchblox.com/security/data/cve/CVE-2026-89776.md) | Routine | kernel-uek64k-modules-core: vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes (Xiang Mei) [Orabug: 40033013] | 3.3 | 0.0021 |  |
| [CVE-2026-90185](https://patchblox.com/security/data/cve/CVE-2026-90185.md) | Routine | kernel-uek64k-modules-core: null_blk: serialize configfs attribute stores with the lock (Zizhi Wo) [Orabug: 40041774] | 6.7 | 0.0021 |  |
| [CVE-2026-90186](https://patchblox.com/security/data/cve/CVE-2026-90186.md) | Routine | kernel-uek64k-modules-core: null_blk: reject per-device queue resize for shared tag set (Zizhi Wo) [Orabug: 40041778] | 5.5 | 0.0021 |  |
| [CVE-2026-90190](https://patchblox.com/security/data/cve/CVE-2026-90190.md) | Routine | kernel-uek64k-modules-core: null_blk: use DEFINE_MUTEX for the file-scope mutex (Zizhi Wo) [Orabug: 40041796] | 4.7 | 0.0021 |  |
| [CVE-2026-90194](https://patchblox.com/security/data/cve/CVE-2026-90194.md) | Routine | kernel-uek64k-modules-core: ACPI: scan: fix bus ID cleanup on device_add() failures (Hongyan Xu) [Orabug: 40041803] | 4.5 | 0.0021 |  |
| [CVE-2026-93268](https://patchblox.com/security/data/cve/CVE-2026-93268.md) | Routine | ext4: skip extra isize expansion during mount to prevent deadlock | 6.4 | 0.0020 |  |
| [CVE-2026-89756](https://patchblox.com/security/data/cve/CVE-2026-89756.md) | Routine | mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch() | 4.7 | 0.0020 |  |
| [CVE-2026-80830](https://patchblox.com/security/data/cve/CVE-2026-80830.md) | Routine | usb: core: Add lock to usb_wakeup_notification() | 6.6 | 0.0020 |  |
| [CVE-2026-80843](https://patchblox.com/security/data/cve/CVE-2026-80843.md) | Routine | xfrm: fix xfrm_state_construct() auth-trunc leak | 4.4 | 0.0020 |  |
| [CVE-2026-93206](https://patchblox.com/security/data/cve/CVE-2026-93206.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 3.4 | 0.0019 |  |
| [CVE-2026-89525](https://patchblox.com/security/data/cve/CVE-2026-89525.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 6.7 | 0.0018 |  |
| [CVE-2026-80855](https://patchblox.com/security/data/cve/CVE-2026-80855.md) | Routine | fuse: fix invalidate lock leak on open O_TRUNC DAX failure | 4.7 | 0.0018 |  |
| [CVE-2026-80856](https://patchblox.com/security/data/cve/CVE-2026-80856.md) | Routine | fuse: fix invalidate lock leak on setattr writeback failure | 4.7 | 0.0018 |  |
| [CVE-2026-93110](https://patchblox.com/security/data/cve/CVE-2026-93110.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 6.4 | 0.0018 |  |
| [CVE-2026-80963](https://patchblox.com/security/data/cve/CVE-2026-80963.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0018 |  |
| [CVE-2026-81005](https://patchblox.com/security/data/cve/CVE-2026-81005.md) | Routine | ipmi: si: Fix NULL pointer dereference after failed registration | 5.5 | 0.0018 |  |
| [CVE-2026-92501](https://patchblox.com/security/data/cve/CVE-2026-92501.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.3 | 0.0018 |  |
| [CVE-2026-89753](https://patchblox.com/security/data/cve/CVE-2026-89753.md) | Routine | mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() | 4.7 | 0.0018 |  |
| [CVE-2026-89726](https://patchblox.com/security/data/cve/CVE-2026-89726.md) | Routine | lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() | 4.4 | 0.0018 |  |
| [CVE-2026-93222](https://patchblox.com/security/data/cve/CVE-2026-93222.md) | Routine | signal: avoid shared siginfo namespace rewrites | 4.4 | 0.0018 |  |
| [CVE-2026-93226](https://patchblox.com/security/data/cve/CVE-2026-93226.md) | Routine | ipv6: use RCU iterator to dump route exceptions | 4.2 | 0.0018 |  |
| [CVE-2026-89752](https://patchblox.com/security/data/cve/CVE-2026-89752.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 3.4 | 0.0018 |  |
| [CVE-2026-89515](https://patchblox.com/security/data/cve/CVE-2026-89515.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 3.3 | 0.0018 |  |
| [CVE-2026-93213](https://patchblox.com/security/data/cve/CVE-2026-93213.md) | Routine | of: fix out-of-bounds read in of_alias_scan() stem parser | 3.0 | 0.0018 |  |
| [CVE-2026-80806](https://patchblox.com/security/data/cve/CVE-2026-80806.md) | Routine | ext4: don't enable DAX on new encrypted files | 5.5 | 0.0017 |  |
| [CVE-2026-92523](https://patchblox.com/security/data/cve/CVE-2026-92523.md) | Routine | RDMA/nldev: validate dynamic counter attribute length | 5.5 | 0.0017 |  |
| [CVE-2026-93210](https://patchblox.com/security/data/cve/CVE-2026-93210.md) | Routine | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0017 |  |
| [CVE-2026-80784](https://patchblox.com/security/data/cve/CVE-2026-80784.md) | Routine | mptcp: pm: fix memory leak from alloc-during-teardown race | 4.4 | 0.0017 |  |
| [CVE-2026-89565](https://patchblox.com/security/data/cve/CVE-2026-89565.md) | Routine | ipip: fix skb leak in collect_md mode when metadata_dst allocation fails | 3.7 | 0.0017 |  |
| [CVE-2026-80912](https://patchblox.com/security/data/cve/CVE-2026-80912.md) | Routine | selinux: reject an unclaimed class value in security_get_classes() | 4.4 | 0.0017 |  |
| [CVE-2026-98164](https://patchblox.com/security/data/cve/CVE-2026-98164.md) | Routine | KVM: x86/mmu: Check write tracking in all address spaces | 5.5 | 0.0015 |  |
| [CVE-2026-100070](https://patchblox.com/security/data/cve/CVE-2026-100070.md) | Routine | netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet | 6.5 | 0.0012 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.