{ "fix": "OPENSUSE-SU-2026:21388-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21388-1", "summary": "OPENSUSE-SU-2026:21388-1, released July 21, 2026, fixes 252 CVEs across 13 products. 2 of them are being exploited (CVE-2026-53266); 2 on CISA KEV. Patch Radar priority: Patch now.", "platform": "linux", "type": "advisory", "title": "Security update for 13 packages", "released": "2026-07-21T08:27:32Z", "priority": "Patch now", "priorityTier": 1, "priorityReason": "Closes CVE-2026-53266, exploited (CISA KEV)", "supported": true, "cveCount": 252, "exploitedCveCount": 2, "kevCveCount": 2, "ransomwareCveCount": 0, "maxEpss": 0.94194, "maxCvss": 9.8, "vendorAdvisory": "https://osv.dev/vulnerability/openSUSE-SU-2026:21388-1", "appliesTo": [ { "product": "dtb-aarch64", "productUrl": "https://patchblox.com/security/product/linux/dtb-aarch64", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1", "supported": true }, { "product": "kernel-64kb", "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1", "supported": true }, { "product": "kernel-azure", "productUrl": "https://patchblox.com/security/product/linux/kernel-azure", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1", "supported": true }, { "product": "kernel-default", "productUrl": "https://patchblox.com/security/product/linux/kernel-default", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1", "supported": true }, { "product": "kernel-default-base", "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1.160000.2.17", "supported": true }, { "product": "kernel-docs", "productUrl": "https://patchblox.com/security/product/linux/kernel-docs", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1", "supported": true }, { "product": "kernel-kvmsmall", "productUrl": "https://patchblox.com/security/product/linux/kernel-kvmsmall", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1", "supported": true }, { "product": "kernel-obs-build", "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1", "supported": true }, { "product": "kernel-obs-qa", "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-qa", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1", "supported": true }, { "product": "kernel-rt", "productUrl": "https://patchblox.com/security/product/linux/kernel-rt", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1", "supported": true }, { "product": "kernel-source", "productUrl": "https://patchblox.com/security/product/linux/kernel-source", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1", "supported": true }, { "product": "kernel-syms", "productUrl": "https://patchblox.com/security/product/linux/kernel-syms", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1", "supported": true }, { "product": "kernel-zfcpdump", "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.36.1", "supported": true } ], "cves": [ { "cveId": "CVE-2026-53266", "url": "https://patchblox.com/security/cve/CVE-2026-53266", "title": "netfilter: bridge: make ebt_snat ARP rewrite writable", "priority": "Patch now", "severity": "Moderate", "cvss": 8.8, "epss": 0.00934, "kev": true, "ransomware": false, "exploited": true, "disclosed": false }, { "cveId": "CVE-2026-53362", "url": "https://patchblox.com/security/cve/CVE-2026-53362", "title": "ipv6: account for fraggap on the paged allocation path", "priority": "Patch now", "severity": "Important", "cvss": 7.8, "epss": 0.00709, "kev": true, "ransomware": false, "exploited": true, "disclosed": false }, { "cveId": "CVE-2025-10263", "url": "https://patchblox.com/security/cve/CVE-2025-10263", "title": "ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]", "priority": "Urgent", "severity": "Critical", "cvss": 9.3, "epss": 0.00544, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43465", "url": "https://patchblox.com/security/cve/CVE-2026-43465", "title": "kernel-64kb: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997).", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46266", "url": "https://patchblox.com/security/cve/CVE-2026-46266", "title": "kernel-default: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00465, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43384", "url": "https://patchblox.com/security/cve/CVE-2026-43384", "title": "kernel-64kb: net/tcp-ao: Fix MAC comparison to be constant-time (bsc#1265097).", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52993", "url": "https://patchblox.com/security/cve/CVE-2026-52993", "title": "tipc: fix double-free in tipc_buf_append()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00404, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52955", "url": "https://patchblox.com/security/cve/CVE-2026-52955", "title": "kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.0038, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53086", "url": "https://patchblox.com/security/cve/CVE-2026-53086", "title": "net: bcmgenet: fix racing timeout handler", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00304, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53075", "url": "https://patchblox.com/security/cve/CVE-2026-53075", "title": "ppp: require CAP_NET_ADMIN in target netns for unattached ioctls", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00273, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45899", "url": "https://patchblox.com/security/cve/CVE-2026-45899", "title": "ext4: drop extent cache when splitting extent fails", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53036", "url": "https://patchblox.com/security/cve/CVE-2026-53036", "title": "bpf, arm64: Fix off-by-one in check_imm signed range check", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53053", "url": "https://patchblox.com/security/cve/CVE-2026-53053", "title": "iommu/amd: Fix clone_alias() to use the original device\u0027s devid", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52919", "url": "https://patchblox.com/security/cve/CVE-2026-52919", "title": "batman-adv: fix tp_meter counter underflow during shutdown", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43284", "url": "https://patchblox.com/security/cve/CVE-2026-43284", "title": "xfrm: esp: avoid in-place decrypt on shared skb frags", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.94194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46242", "url": "https://patchblox.com/security/cve/CVE-2026-46242", "title": "kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.04576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53176", "url": "https://patchblox.com/security/cve/CVE-2026-53176", "title": "IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00761, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52924", "url": "https://patchblox.com/security/cve/CVE-2026-52924", "title": "sctp: purge outqueue on stale COOKIE-ECHO handling", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00659, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43407", "url": "https://patchblox.com/security/cve/CVE-2026-43407", "title": "kernel-64kb: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (bsc#1265020).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.1, "epss": 0.00656, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46331", "url": "https://patchblox.com/security/cve/CVE-2026-46331", "title": "net/sched: fix pedit partial COW leading to page cache corruption", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00639, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43406", "url": "https://patchblox.com/security/cve/CVE-2026-43406", "title": "kernel-64kb: libceph: prevent potential out-of-bounds reads in process_message_header() (bsc#1265073).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.1, "epss": 0.00613, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43083", "url": "https://patchblox.com/security/cve/CVE-2026-43083", "title": "net: ioam6: fix OOB and missing lock", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.006, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43405", "url": "https://patchblox.com/security/cve/CVE-2026-43405", "title": "kernel-64kb: libceph: Use u32 for non-negative values in ceph_monmap_decode() (bsc#1264741).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00598, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43101", "url": "https://patchblox.com/security/cve/CVE-2026-43101", "title": "ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00585, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31414", "url": "https://patchblox.com/security/cve/CVE-2026-31414", "title": "netfilter: nf_conntrack_expect: use expect-\u003Ehelper", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00581, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43383", "url": "https://patchblox.com/security/cve/CVE-2026-43383", "title": "kernel-64kb: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.4, "epss": 0.00541, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43452", "url": "https://patchblox.com/security/cve/CVE-2026-43452", "title": "kernel-64kb: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.2, "epss": 0.00541, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43194", "url": "https://patchblox.com/security/cve/CVE-2026-43194", "title": "kernel-64kb: net: consume xmit errors of GSO frames (bsc#1264304).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00533, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46119", "url": "https://patchblox.com/security/cve/CVE-2026-46119", "title": "libceph: Fix slab-out-of-bounds access in auth message processing", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46185", "url": "https://patchblox.com/security/cve/CVE-2026-46185", "title": "smb/client: fix out-of-bounds read in symlink_data()", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43226", "url": "https://patchblox.com/security/cve/CVE-2026-43226", "title": "kernel-64kb: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52954", "url": "https://patchblox.com/security/cve/CVE-2026-52954", "title": "libceph: handle rbtree insertion error in decode_choose_args()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52957", "url": "https://patchblox.com/security/cve/CVE-2026-52957", "title": "libceph: Fix potential null-ptr-deref in decode_choose_args()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46037", "url": "https://patchblox.com/security/cve/CVE-2026-46037", "title": "ipv4: icmp: validate reply type before using icmp_pointers", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53215", "url": "https://patchblox.com/security/cve/CVE-2026-53215", "title": "kernel-64kb: net: mvpp2: refill RX buffers before XDP or skb use (bsc#1269680).", "priority": "High", "severity": "N/A", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53216", "url": "https://patchblox.com/security/cve/CVE-2026-53216", "title": "kernel-64kb: net: mvpp2: limit XDP frame size to the RX buffer (bsc#1269587).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43373", "url": "https://patchblox.com/security/cve/CVE-2026-43373", "title": "kernel-64kb: net: ncsi: fix skb leak in error paths (bsc#1265079).", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46024", "url": "https://patchblox.com/security/cve/CVE-2026-46024", "title": "libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43074", "url": "https://patchblox.com/security/cve/CVE-2026-43074", "title": "kernel-source: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263).", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00482, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53229", "url": "https://patchblox.com/security/cve/CVE-2026-53229", "title": "kernel-64kb: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure (bsc#1269691).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46124", "url": "https://patchblox.com/security/cve/CVE-2026-46124", "title": "kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847).", "priority": "High", "severity": "N/A", "cvss": 7.5, "epss": 0.00476, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43158", "url": "https://patchblox.com/security/cve/CVE-2026-43158", "title": "kernel-64kb: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43187", "url": "https://patchblox.com/security/cve/CVE-2026-43187", "title": "kernel-64kb: xfs: delete attr leaf freemap entries when empty (bsc#1264603).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43233", "url": "https://patchblox.com/security/cve/CVE-2026-43233", "title": "kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46289", "url": "https://patchblox.com/security/cve/CVE-2026-46289", "title": "lib/scatterlist: fix length calculations in extract_kvec_to_sg", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43057", "url": "https://patchblox.com/security/cve/CVE-2026-43057", "title": "kernel-64kb: net: mpls: error out if inner headers are not set (bsc#1264056).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00437, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43336", "url": "https://patchblox.com/security/cve/CVE-2026-43336", "title": "kernel-64kb: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46244", "url": "https://patchblox.com/security/cve/CVE-2026-46244", "title": "netfilter: nft_inner: Fix IPv6 inner_thoff desync", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00418, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43199", "url": "https://patchblox.com/security/cve/CVE-2026-43199", "title": "net/mlx5e: Fix \u0022scheduling while atomic\u0022 in IPsec MAC address query", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31450", "url": "https://patchblox.com/security/cve/CVE-2026-31450", "title": "ext4: publish jinode after initialization", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43466", "url": "https://patchblox.com/security/cve/CVE-2026-43466", "title": "kernel-64kb: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.2, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53178", "url": "https://patchblox.com/security/cve/CVE-2026-53178", "title": "staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43469", "url": "https://patchblox.com/security/cve/CVE-2026-43469", "title": "kernel-64kb: xprtrdma: Decrement re_receiving on the early exit paths (bsc#1265143).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53049", "url": "https://patchblox.com/security/cve/CVE-2026-53049", "title": "kernel: kernel: gfs2: add some missing log locking", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00388, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53217", "url": "https://patchblox.com/security/cve/CVE-2026-53217", "title": "net: mvpp2: sync RX data at the hardware packet offset", "priority": "High", "severity": "Moderate", "cvss": 8.6, "epss": 0.00384, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43139", "url": "https://patchblox.com/security/cve/CVE-2026-43139", "title": "kernel-64kb: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.6, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43345", "url": "https://patchblox.com/security/cve/CVE-2026-43345", "title": "kernel-64kb: net: ipa: fix event ring index not programmed for IPA v5.0\u002B (bsc#1265103).", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00353, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39894", "url": "https://patchblox.com/security/cve/CVE-2025-39894", "title": "kernel-64kb: netfilter: br_netfilter: do not check confirmed bit", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00332, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43502", "url": "https://patchblox.com/security/cve/CVE-2026-43502", "title": "net/rds: handle zerocopy send cleanup before the message is queued", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00324, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31771", "url": "https://patchblox.com/security/cve/CVE-2026-31771", "title": "Bluetooth: hci_event: move wake reason storage into validated event handlers", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.0032, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52943", "url": "https://patchblox.com/security/cve/CVE-2026-52943", "title": "net: skbuff: fix missing zerocopy reference in pskb_carve helpers", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00302, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43198", "url": "https://patchblox.com/security/cve/CVE-2026-43198", "title": "tcp: fix potential race in tcp_v6_syn_recv_sock()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00298, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46099", "url": "https://patchblox.com/security/cve/CVE-2026-46099", "title": "net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00288, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43213", "url": "https://patchblox.com/security/cve/CVE-2026-43213", "title": "wifi: rtw89: pci: validate sequence number of TX release report", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00283, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46320", "url": "https://patchblox.com/security/cve/CVE-2026-46320", "title": "tap: free page on error paths in tap_get_user_xdp()", "priority": "High", "severity": "Important", "cvss": 7.4, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31663", "url": "https://patchblox.com/security/cve/CVE-2026-31663", "title": "xfrm: hold dev ref until after transport_finish NF_HOOK", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00224, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52923", "url": "https://patchblox.com/security/cve/CVE-2026-52923", "title": "ipc: limit next_id allocation to the valid ID range", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45933", "url": "https://patchblox.com/security/cve/CVE-2026-45933", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43456", "url": "https://patchblox.com/security/cve/CVE-2026-43456", "title": "kernel-64kb: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00188, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45861", "url": "https://patchblox.com/security/cve/CVE-2026-45861", "title": "gfs2: Fix slab-use-after-free in qd_put", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45940", "url": "https://patchblox.com/security/cve/CVE-2026-45940", "title": "net: stmmac: fix oops when split header is enabled", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53081", "url": "https://patchblox.com/security/cve/CVE-2026-53081", "title": "kernel-64kb: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars (bsc#1269708).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43303", "url": "https://patchblox.com/security/cve/CVE-2026-43303", "title": "mm/page_alloc: clear page-\u003Eprivate in free_pages_prepare()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46253", "url": "https://patchblox.com/security/cve/CVE-2026-46253", "title": "kernel-default: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31693", "url": "https://patchblox.com/security/cve/CVE-2026-31693", "title": "kernel-64kb: cifs: some missing initializations on replay (bsc#1267744).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31674", "url": "https://patchblox.com/security/cve/CVE-2026-31674", "title": "netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43248", "url": "https://patchblox.com/security/cve/CVE-2026-43248", "title": "vhost: move vdpa group bound check to vhost_vdpa", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31680", "url": "https://patchblox.com/security/cve/CVE-2026-31680", "title": "net: ipv6: flowlabel: defer exclusive option free until RCU teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53306", "url": "https://patchblox.com/security/cve/CVE-2026-53306", "title": "tty: hvc_iucv: fix off-by-one in number of supported devices", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43374", "url": "https://patchblox.com/security/cve/CVE-2026-43374", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46111", "url": "https://patchblox.com/security/cve/CVE-2026-46111", "title": "Bluetooth: hci_conn: fix potential UAF in create_big_sync", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43339", "url": "https://patchblox.com/security/cve/CVE-2026-43339", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv6: prevent possible UaF in addrconf_permanent_...", "priority": "High", "severity": "moderate", "cvss": 8.1, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43298", "url": "https://patchblox.com/security/cve/CVE-2026-43298", "title": "drm/amdgpu: Skip vcn poison irq release on VF", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43491", "url": "https://patchblox.com/security/cve/CVE-2026-43491", "title": "net: qrtr: ns: Limit the maximum server registration per node", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52933", "url": "https://patchblox.com/security/cve/CVE-2026-52933", "title": "io_uring/poll: fix signed comparison in io_poll_get_ownership()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53194", "url": "https://patchblox.com/security/cve/CVE-2026-53194", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45920", "url": "https://patchblox.com/security/cve/CVE-2026-45920", "title": "kernel-64kb: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46069", "url": "https://patchblox.com/security/cve/CVE-2026-46069", "title": "kernel-uek64k-modules-extra: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Daniel Hodges) [Orabug: 39452344]", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46076", "url": "https://patchblox.com/security/cve/CVE-2026-46076", "title": "KVM: nSVM: Raise #UD if unhandled VMMCALL isn\u0027t intercepted by L1", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53090", "url": "https://patchblox.com/security/cve/CVE-2026-53090", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix ld_{abs,ind} failure path analysis in s...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43128", "url": "https://patchblox.com/security/cve/CVE-2026-43128", "title": "kernel-64kb: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43205", "url": "https://patchblox.com/security/cve/CVE-2026-43205", "title": "kernel-64kb: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52962", "url": "https://patchblox.com/security/cve/CVE-2026-52962", "title": "ceph: fix a buffer leak in __ceph_setxattr()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43260", "url": "https://patchblox.com/security/cve/CVE-2026-43260", "title": "kernel-64kb: bnxt_en: Fix RSS context delete logic (bsc#1264429).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46162", "url": "https://patchblox.com/security/cve/CVE-2026-46162", "title": "kernel-64kb: ice: fix double free in ice_sf_eth_activate() error path (bsc#1266840).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53281", "url": "https://patchblox.com/security/cve/CVE-2026-53281", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\niommu/vt-d: Avoid NULL pointer dereference or ref...", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31452", "url": "https://patchblox.com/security/cve/CVE-2026-31452", "title": "ext4: convert inline data to extents when truncate exceeds inline size", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31469", "url": "https://patchblox.com/security/cve/CVE-2026-31469", "title": "virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43093", "url": "https://patchblox.com/security/cve/CVE-2026-43093", "title": "kernel-64kb: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46322", "url": "https://patchblox.com/security/cve/CVE-2026-46322", "title": "tun: free page on build_skb failure in tun_xdp_one()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46172", "url": "https://patchblox.com/security/cve/CVE-2026-46172", "title": "kernel-64kb: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (bsc#1266903).", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43450", "url": "https://patchblox.com/security/cve/CVE-2026-43450", "title": "kernel-rt-64k-modules-core: kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46173", "url": "https://patchblox.com/security/cve/CVE-2026-46173", "title": "exit: prevent preemption of oopsing TASK_DEAD task", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43028", "url": "https://patchblox.com/security/cve/CVE-2026-43028", "title": "kernel-64kb: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46078", "url": "https://patchblox.com/security/cve/CVE-2026-46078", "title": "erofs: fix the out-of-bounds nameoff handling for trailing dirents", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45840", "url": "https://patchblox.com/security/cve/CVE-2026-45840", "title": "kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479]", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45894", "url": "https://patchblox.com/security/cve/CVE-2026-45894", "title": "iommu/vt-d: Clear Present bit before tearing down PASID entry", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23248", "url": "https://patchblox.com/security/cve/CVE-2026-23248", "title": "perf/core: Fix refcount bug and potential UAF in perf_mmap", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31580", "url": "https://patchblox.com/security/cve/CVE-2026-31580", "title": "bcache: fix cached_dev.sb_bio use-after-free and crash", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45862", "url": "https://patchblox.com/security/cve/CVE-2026-45862", "title": "kernel-64kb: iommu/vt-d: Flush cache for PASID table before using it (bsc#1266705).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45999", "url": "https://patchblox.com/security/cve/CVE-2026-45999", "title": "erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46116", "url": "https://patchblox.com/security/cve/CVE-2026-46116", "title": "xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31502", "url": "https://patchblox.com/security/cve/CVE-2026-31502", "title": "team: fix header_ops type confusion with non-Ethernet ports", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31673", "url": "https://patchblox.com/security/cve/CVE-2026-31673", "title": "af_unix: read UNIX_DIAG_VFS data under unix_state_lock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45891", "url": "https://patchblox.com/security/cve/CVE-2026-45891", "title": "kernel-64kb: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46065", "url": "https://patchblox.com/security/cve/CVE-2026-46065", "title": "fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46150", "url": "https://patchblox.com/security/cve/CVE-2026-46150", "title": "fanotify: fix false positive on permission events", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46178", "url": "https://patchblox.com/security/cve/CVE-2026-46178", "title": "kernel-uek64k: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (Jason Gunthorpe) [Orabug: 39460496]", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53133", "url": "https://patchblox.com/security/cve/CVE-2026-53133", "title": "RDMA/umem: Fix truncation for block sizes \u003E= 4G", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31479", "url": "https://patchblox.com/security/cve/CVE-2026-31479", "title": "kernel-64kb: drm/xe: always keep track of remap prev/next (bsc#1262765).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43403", "url": "https://patchblox.com/security/cve/CVE-2026-43403", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31743", "url": "https://patchblox.com/security/cve/CVE-2026-31743", "title": "kernel-64kb: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46053", "url": "https://patchblox.com/security/cve/CVE-2026-46053", "title": "net: rds: fix MR cleanup on copy error", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46093", "url": "https://patchblox.com/security/cve/CVE-2026-46093", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker de...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31555", "url": "https://patchblox.com/security/cve/CVE-2026-31555", "title": "futex: Clear stale exiting pointer in futex_lock_pi() retry path", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53167", "url": "https://patchblox.com/security/cve/CVE-2026-53167", "title": "fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53249", "url": "https://patchblox.com/security/cve/CVE-2026-53249", "title": "ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46120", "url": "https://patchblox.com/security/cve/CVE-2026-46120", "title": "kernel: kernel: ip6_gre: Use cached t-\u003Enet in ip6erspan_changelink()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46160", "url": "https://patchblox.com/security/cve/CVE-2026-46160", "title": "btrfs: fix missing last_unlink_trans update when removing a directory", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43015", "url": "https://patchblox.com/security/cve/CVE-2026-43015", "title": "kernel-64kb: CVE-2026-43014, net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43016", "url": "https://patchblox.com/security/cve/CVE-2026-43016", "title": "kernel-64kb: bpf: sockmap: Fix use-after-free of sk-\u003Esk_socket in sk_psock_verdict_data_ready() (bsc#1264007).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53286", "url": "https://patchblox.com/security/cve/CVE-2026-53286", "title": "kernel-64kb: idpf: fix double free and use-after-free in aux device error paths (bsc#1269531).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43386", "url": "https://patchblox.com/security/cve/CVE-2026-43386", "title": "kernel-64kb: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740).", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43449", "url": "https://patchblox.com/security/cve/CVE-2026-43449", "title": "kernel-64kb: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53041", "url": "https://patchblox.com/security/cve/CVE-2026-53041", "title": "ocfs2: fix listxattr handling when the buffer is full", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53156", "url": "https://patchblox.com/security/cve/CVE-2026-53156", "title": "nvmem: core: fix use-after-free bugs in error paths", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53168", "url": "https://patchblox.com/security/cve/CVE-2026-53168", "title": "fuse: reject fuse_notify() pagecache ops on directories", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31665", "url": "https://patchblox.com/security/cve/CVE-2026-31665", "title": "netfilter: nft_ct: fix use-after-free in timeout object destroy", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31492", "url": "https://patchblox.com/security/cve/CVE-2026-31492", "title": "RDMA/irdma: Initialize free_qp completion before using it", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45912", "url": "https://patchblox.com/security/cve/CVE-2026-45912", "title": "ext4: don\u0027t cache extent during splitting extent", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45983", "url": "https://patchblox.com/security/cve/CVE-2026-45983", "title": "kernel-64kb: nfsd: never defer requests during idmap lookup (bsc#1266697).", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45985", "url": "https://patchblox.com/security/cve/CVE-2026-45985", "title": "kernel-64kb: ext4: don\u0027t set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53021", "url": "https://patchblox.com/security/cve/CVE-2026-53021", "title": "scsi: target: core: Fix integer overflow in UNMAP bounds check", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53040", "url": "https://patchblox.com/security/cve/CVE-2026-53040", "title": "bpftool: ocfs2: validate bg_bits during freefrag scan (Zhengyuan Huang) [Orabug: 39621868]", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46259", "url": "https://patchblox.com/security/cve/CVE-2026-46259", "title": "kernel-64kb: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (bsc#1267685).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.4, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53078", "url": "https://patchblox.com/security/cve/CVE-2026-53078", "title": "bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43283", "url": "https://patchblox.com/security/cve/CVE-2026-43283", "title": "kernel-64kb: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295).", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53262", "url": "https://patchblox.com/security/cve/CVE-2026-53262", "title": "l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52908", "url": "https://patchblox.com/security/cve/CVE-2026-52908", "title": "RDMA: During rereg_mr ensure that REREG_ACCESS is compatible", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43458", "url": "https://patchblox.com/security/cve/CVE-2026-43458", "title": "kernel-64kb: serial: caif: hold tty-\u003Elink reference in ldisc_open and ser_release (bsc#1265005).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53272", "url": "https://patchblox.com/security/cve/CVE-2026-53272", "title": "kernel-64kb: erofs: fix use-after-free on sbi-\u003Esync_decompress (bsc#1269809).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45837", "url": "https://patchblox.com/security/cve/CVE-2026-45837", "title": "kernel-64kb: Require (reasonably) normal mappings for MADV_DOFORK (bsc#1266398).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00116, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46328", "url": "https://patchblox.com/security/cve/CVE-2026-46328", "title": "kernel-64kb: apparmor: fix rlimit for posix cpu timers (bsc#1268037).", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52909", "url": "https://patchblox.com/security/cve/CVE-2026-52909", "title": "ip6_vti: set netns_immutable on the fallback device.", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00113, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52975", "url": "https://patchblox.com/security/cve/CVE-2026-52975", "title": "bonding: 3ad: implement proper RCU rules for port-\u003Eaggregator", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46319", "url": "https://patchblox.com/security/cve/CVE-2026-46319", "title": "net/sched: act_ct: Only release RCU read lock after ct_ft", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46227", "url": "https://patchblox.com/security/cve/CVE-2026-46227", "title": "sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53050", "url": "https://patchblox.com/security/cve/CVE-2026-53050", "title": "quota: Fix race of dquot_scan_active() with quota deactivation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46112", "url": "https://patchblox.com/security/cve/CVE-2026-46112", "title": "RDMA/hns: Fix unlocked call to hns_roce_qp_remove()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23451", "url": "https://patchblox.com/security/cve/CVE-2026-23451", "title": "kernel-default: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).", "priority": "Routine", "epss": 0.00458, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31429", "url": "https://patchblox.com/security/cve/CVE-2026-31429", "title": "net: skb: fix cross-cache free of KFENCE-allocated skb head", "priority": "Routine", "severity": "Moderate", "cvss": 6.6, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40341", "url": "https://patchblox.com/security/cve/CVE-2025-40341", "title": "futex: Don\u0027t leak robust_list pointer on exec race", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00246, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45901", "url": "https://patchblox.com/security/cve/CVE-2026-45901", "title": "netfilter: nf_tables: revert commit_mutex usage in reset path", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45961", "url": "https://patchblox.com/security/cve/CVE-2026-45961", "title": "kernel-64kb: gfs2: fix memory leaks in gfs2_fill_super error path (bsc#1266933).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43191", "url": "https://patchblox.com/security/cve/CVE-2026-43191", "title": "drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52980", "url": "https://patchblox.com/security/cve/CVE-2026-52980", "title": "kernel-64kb: sched/fair: Clear rel_deadline when initializing forked entities (bsc#1269252).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53039", "url": "https://patchblox.com/security/cve/CVE-2026-53039", "title": "kernel-uek: ocfs2: validate group add input before caching (Zhengyuan Huang) [Orabug: 39621864]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53258", "url": "https://patchblox.com/security/cve/CVE-2026-53258", "title": "wifi: fix leak if split 6 GHz scanning fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45848", "url": "https://patchblox.com/security/cve/CVE-2026-45848", "title": "kernel-64kb: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45857", "url": "https://patchblox.com/security/cve/CVE-2026-45857", "title": "kernel-64kb: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45858", "url": "https://patchblox.com/security/cve/CVE-2026-45858", "title": "ext4: don\u0027t zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45870", "url": "https://patchblox.com/security/cve/CVE-2026-45870", "title": "kernel-64kb: SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (bsc#1266704).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45884", "url": "https://patchblox.com/security/cve/CVE-2026-45884", "title": "kernel-64kb: apparmor: avoid per-cpu hold underflow in aa_get_buffer (bsc#1266718).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45888", "url": "https://patchblox.com/security/cve/CVE-2026-45888", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45922", "url": "https://patchblox.com/security/cve/CVE-2026-45922", "title": "kernel-64kb: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45948", "url": "https://patchblox.com/security/cve/CVE-2026-45948", "title": "kernel-64kb: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45964", "url": "https://patchblox.com/security/cve/CVE-2026-45964", "title": "kernel-64kb: SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (bsc#1266698).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45965", "url": "https://patchblox.com/security/cve/CVE-2026-45965", "title": "kernel-64kb: apparmor: fix invalid deref of rawdata when export_binary is unset (bsc#1267208).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31560", "url": "https://patchblox.com/security/cve/CVE-2026-31560", "title": "spi: spi-dw-dma: fix print error log when wait finish transaction", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43022", "url": "https://patchblox.com/security/cve/CVE-2026-43022", "title": "Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43036", "url": "https://patchblox.com/security/cve/CVE-2026-43036", "title": "net: use skb_header_pointer() for TCPv4 GSO frag_off check", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43107", "url": "https://patchblox.com/security/cve/CVE-2026-43107", "title": "xfrm: account XFRMA_IF_ID in aevent size calculation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43492", "url": "https://patchblox.com/security/cve/CVE-2026-43492", "title": "lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46254", "url": "https://patchblox.com/security/cve/CVE-2026-46254", "title": "AppArmor: Allow apparmor to handle unaligned dfa tables", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43034", "url": "https://patchblox.com/security/cve/CVE-2026-43034", "title": "kernel-64kb: bnxt_en: set backing store type from query type (bsc#1263998).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46079", "url": "https://patchblox.com/security/cve/CVE-2026-46079", "title": "rbd: fix null-ptr-deref when device_add_disk() fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31596", "url": "https://patchblox.com/security/cve/CVE-2026-31596", "title": "ocfs2: handle invalid dinode in ocfs2_group_extend", "priority": "Routine", "severity": "Moderate", "cvss": 6.6, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45841", "url": "https://patchblox.com/security/cve/CVE-2026-45841", "title": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43089", "url": "https://patchblox.com/security/cve/CVE-2026-43089", "title": "kernel-64kb: xfrm_user: fix info leak in build_mapping() (bsc#1264261).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46161", "url": "https://patchblox.com/security/cve/CVE-2026-46161", "title": "bpftool: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46214", "url": "https://patchblox.com/security/cve/CVE-2026-46214", "title": "kernel-uek-debug-modules-extra: vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31495", "url": "https://patchblox.com/security/cve/CVE-2026-31495", "title": "netfilter: ctnetlink: use netlink policy range checks", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31752", "url": "https://patchblox.com/security/cve/CVE-2026-31752", "title": "kernel-64kb: bridge: br_nd_send: validate ND option lengths (bsc#1264045).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43024", "url": "https://patchblox.com/security/cve/CVE-2026-43024", "title": "kernel-64kb: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43035", "url": "https://patchblox.com/security/cve/CVE-2026-43035", "title": "kernel-64kb: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43085", "url": "https://patchblox.com/security/cve/CVE-2026-43085", "title": "kernel-64kb: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45838", "url": "https://patchblox.com/security/cve/CVE-2026-45838", "title": "bpf: fix end-of-list detection in cgroup_storage_get_next_key()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46046", "url": "https://patchblox.com/security/cve/CVE-2026-46046", "title": "ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46101", "url": "https://patchblox.com/security/cve/CVE-2026-46101", "title": "bpftool: netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452465]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43124", "url": "https://patchblox.com/security/cve/CVE-2026-43124", "title": "kernel-64kb: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43132", "url": "https://patchblox.com/security/cve/CVE-2026-43132", "title": "kernel-64kb: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43157", "url": "https://patchblox.com/security/cve/CVE-2026-43157", "title": "kernel-64kb: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43238", "url": "https://patchblox.com/security/cve/CVE-2026-43238", "title": "kernel-64kb: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45974", "url": "https://patchblox.com/security/cve/CVE-2026-45974", "title": "kernel-64kb: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found (bsc#1266922).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46005", "url": "https://patchblox.com/security/cve/CVE-2026-46005", "title": "xfs: fix a resource leak in xfs_alloc_buftarg()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53060", "url": "https://patchblox.com/security/cve/CVE-2026-53060", "title": "dm cache metadata: fix memory leak on metadata abort retry", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43175", "url": "https://patchblox.com/security/cve/CVE-2026-43175", "title": "kernel-64kb: clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 (bsc#1264372).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43080", "url": "https://patchblox.com/security/cve/CVE-2026-43080", "title": "kernel-64kb: l2tp: Drop large packets with UDP encap (bsc#1264236).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53103", "url": "https://patchblox.com/security/cve/CVE-2026-53103", "title": "kernel-64kb: wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync (bsc#1269416).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53122", "url": "https://patchblox.com/security/cve/CVE-2026-53122", "title": "btrfs: fix deadlock between reflink and transaction commit when using flushoncommit", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43010", "url": "https://patchblox.com/security/cve/CVE-2026-43010", "title": "bpf: Reject sleepable kprobe_multi programs at attach time", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43014", "url": "https://patchblox.com/security/cve/CVE-2026-43014", "title": "kernel-64kb: CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43094", "url": "https://patchblox.com/security/cve/CVE-2026-43094", "title": "kernel-64kb: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43130", "url": "https://patchblox.com/security/cve/CVE-2026-43130", "title": "kernel-64kb: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43145", "url": "https://patchblox.com/security/cve/CVE-2026-43145", "title": "kernel-64kb: remoteproc: imx_rproc: Fix invalid loaded resource table detection (bsc#1265091).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43167", "url": "https://patchblox.com/security/cve/CVE-2026-43167", "title": "kernel-64kb: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43171", "url": "https://patchblox.com/security/cve/CVE-2026-43171", "title": "kernel-64kb: EFI/CPER: do not dump the entire memory region (bsc#1264549).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45997", "url": "https://patchblox.com/security/cve/CVE-2026-45997", "title": "kernel-64kb: scsi: sd: fix missing put_disk() when device_add(\u0026disk_dev) fails (bsc#1266740).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46071", "url": "https://patchblox.com/security/cve/CVE-2026-46071", "title": "KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46291", "url": "https://patchblox.com/security/cve/CVE-2026-46291", "title": "crypto: caam - guard HMAC key hex dumps in hash_digest_key", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53015", "url": "https://patchblox.com/security/cve/CVE-2026-53015", "title": "erofs: unify lcn as u64 for 32-bit platforms", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53139", "url": "https://patchblox.com/security/cve/CVE-2026-53139", "title": "drm/v3d: Skip CSD when it has zeroed workgroups", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53287", "url": "https://patchblox.com/security/cve/CVE-2026-53287", "title": "audit: fix incorrect inheritable capability in CAPSET records", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31438", "url": "https://patchblox.com/security/cve/CVE-2026-31438", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31646", "url": "https://patchblox.com/security/cve/CVE-2026-31646", "title": "net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31647", "url": "https://patchblox.com/security/cve/CVE-2026-31647", "title": "kernel-64kb: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43081", "url": "https://patchblox.com/security/cve/CVE-2026-43081", "title": "kernel-64kb: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0\u002B (bsc#1264241).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43086", "url": "https://patchblox.com/security/cve/CVE-2026-43086", "title": "kernel-64kb: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43090", "url": "https://patchblox.com/security/cve/CVE-2026-43090", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43092", "url": "https://patchblox.com/security/cve/CVE-2026-43092", "title": "kernel-64kb: xsk: validate MTU against usable frame size on bind (bsc#1264270).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43161", "url": "https://patchblox.com/security/cve/CVE-2026-43161", "title": "iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53285", "url": "https://patchblox.com/security/cve/CVE-2026-53285", "title": "kernel-64kb: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (bsc#1269527).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43351", "url": "https://patchblox.com/security/cve/CVE-2026-43351", "title": "kernel-64kb: KVM: arm64: gic: Set vgic_model before initing private IRQs (bsc#1265082).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53274", "url": "https://patchblox.com/security/cve/CVE-2026-53274", "title": "net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31664", "url": "https://patchblox.com/security/cve/CVE-2026-31664", "title": "xfrm: clear trailing padding in build_polexpire()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31670", "url": "https://patchblox.com/security/cve/CVE-2026-31670", "title": "net: rfkill: prevent unlimited numbers of rfkill events from being created", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43053", "url": "https://patchblox.com/security/cve/CVE-2026-43053", "title": "xfs: close crash window in attr dabtree inactivation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53263", "url": "https://patchblox.com/security/cve/CVE-2026-53263", "title": "6lowpan: fix off-by-one in multicast context address compression", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43470", "url": "https://patchblox.com/security/cve/CVE-2026-43470", "title": "kernel-64kb: nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (bsc#1265128).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00116, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46314", "url": "https://patchblox.com/security/cve/CVE-2026-46314", "title": "drm/v3d: Reject empty multisync extension to prevent infinite loop", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43119", "url": "https://patchblox.com/security/cve/CVE-2026-43119", "title": "Bluetooth: hci_sync: annotate data-races around hdev-\u003Ereq_status", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43337", "url": "https://patchblox.com/security/cve/CVE-2026-43337", "title": "kernel-64kb: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() (bsc#1265112).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43457", "url": "https://patchblox.com/security/cve/CVE-2026-43457", "title": "kernel-64kb: mctp: i2c: fix skb memory leak in receive path (bsc#1265000).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43471", "url": "https://patchblox.com/security/cve/CVE-2026-43471", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46051", "url": "https://patchblox.com/security/cve/CVE-2026-46051", "title": "md/raid5: fix soft lockup in retry_aligned_read()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23394", "url": "https://patchblox.com/security/cve/CVE-2026-23394", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Give up GC if MSG_PEEK intervened", "priority": "Routine", "severity": "medium", "cvss": 4.7, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46050", "url": "https://patchblox.com/security/cve/CVE-2026-46050", "title": "md/raid10: fix deadlock with check operation and nowait requests", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31466", "url": "https://patchblox.com/security/cve/CVE-2026-31466", "title": "kernel-64kb: mm/huge_memory: fix folio isn\u0027t locked in softleaf_to_folio() (bsc#1267825).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00094, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31499", "url": "https://patchblox.com/security/cve/CVE-2026-31499", "title": "kernel-64kb: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00094, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46063", "url": "https://patchblox.com/security/cve/CVE-2026-46063", "title": "x86/shstk: Prevent deadlock during shstk sigreturn", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00094, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43468", "url": "https://patchblox.com/security/cve/CVE-2026-43468", "title": "kernel-64kb: net/mlx5: Fix deadlock between devlink lock and esw-\u003Ewq (bsc#1264978).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00091, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43415", "url": "https://patchblox.com/security/cve/CVE-2026-43415", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00089, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-11T19:49:26Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }