# OPENSUSE-SU-2026:21388-1: Security update for 13 packages

OPENSUSE-SU-2026:21388-1, released July 21, 2026, fixes 252 CVEs across 13 products. 2 of them are being exploited (CVE-2026-53266); 2 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-21388-1
- Platform: Linux
- Released: Jul 21, 2026
- Priority: Patch now (Closes CVE-2026-53266, exploited (CISA KEV))
- CVEs: 252, exploited: 2, on CISA KEV: 2
- Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:21388-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1.160000.2.17 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-53266](https://patchblox.com/security/data/cve/CVE-2026-53266.md) | Patch now | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | CISA KEV |
| [CVE-2026-53362](https://patchblox.com/security/data/cve/CVE-2026-53362.md) | Patch now | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | CISA KEV |
| [CVE-2025-10263](https://patchblox.com/security/data/cve/CVE-2025-10263.md) | Urgent | ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] | 9.3 | 0.0054 |  |
| [CVE-2026-43465](https://patchblox.com/security/data/cve/CVE-2026-43465.md) | Urgent | kernel-64kb: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997). | 9.8 | 0.0054 |  |
| [CVE-2026-46266](https://patchblox.com/security/data/cve/CVE-2026-46266.md) | Urgent | kernel-default: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684). | 9.1 | 0.0047 |  |
| [CVE-2026-43384](https://patchblox.com/security/data/cve/CVE-2026-43384.md) | Urgent | kernel-64kb: net/tcp-ao: Fix MAC comparison to be constant-time (bsc#1265097). | 9.8 | 0.0046 |  |
| [CVE-2026-52993](https://patchblox.com/security/data/cve/CVE-2026-52993.md) | Urgent | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 |  |
| [CVE-2026-52955](https://patchblox.com/security/data/cve/CVE-2026-52955.md) | Urgent | kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159). | 9.8 | 0.0038 |  |
| [CVE-2026-53086](https://patchblox.com/security/data/cve/CVE-2026-53086.md) | Urgent | net: bcmgenet: fix racing timeout handler | 9.8 | 0.0030 |  |
| [CVE-2026-53075](https://patchblox.com/security/data/cve/CVE-2026-53075.md) | Urgent | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 |  |
| [CVE-2026-45899](https://patchblox.com/security/data/cve/CVE-2026-45899.md) | Urgent | ext4: drop extent cache when splitting extent fails | 9.8 | 0.0016 |  |
| [CVE-2026-53036](https://patchblox.com/security/data/cve/CVE-2026-53036.md) | Urgent | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 |  |
| [CVE-2026-53053](https://patchblox.com/security/data/cve/CVE-2026-53053.md) | Urgent | iommu/amd: Fix clone_alias() to use the original device's devid | 9.8 | 0.0013 |  |
| [CVE-2026-52919](https://patchblox.com/security/data/cve/CVE-2026-52919.md) | Urgent | batman-adv: fix tp_meter counter underflow during shutdown | 9.8 | 0.0012 |  |
| [CVE-2026-43284](https://patchblox.com/security/data/cve/CVE-2026-43284.md) | High | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 |  |
| [CVE-2026-46242](https://patchblox.com/security/data/cve/CVE-2026-46242.md) | High | kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618). | 7.8 | 0.0458 |  |
| [CVE-2026-53176](https://patchblox.com/security/data/cve/CVE-2026-53176.md) | High | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN | 9.8 | 0.0076 |  |
| [CVE-2026-52924](https://patchblox.com/security/data/cve/CVE-2026-52924.md) | High | sctp: purge outqueue on stale COOKIE-ECHO handling | 9.8 | 0.0066 |  |
| [CVE-2026-43407](https://patchblox.com/security/data/cve/CVE-2026-43407.md) | High | kernel-64kb: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (bsc#1265020). | 9.1 | 0.0066 |  |
| [CVE-2026-46331](https://patchblox.com/security/data/cve/CVE-2026-46331.md) | High | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 |  |
| [CVE-2026-43406](https://patchblox.com/security/data/cve/CVE-2026-43406.md) | High | kernel-64kb: libceph: prevent potential out-of-bounds reads in process_message_header() (bsc#1265073). | 9.1 | 0.0061 |  |
| [CVE-2026-43083](https://patchblox.com/security/data/cve/CVE-2026-43083.md) | High | net: ioam6: fix OOB and missing lock | 9.1 | 0.0060 |  |
| [CVE-2026-43405](https://patchblox.com/security/data/cve/CVE-2026-43405.md) | High | kernel-64kb: libceph: Use u32 for non-negative values in ceph_monmap_decode() (bsc#1264741). | 7.5 | 0.0060 |  |
| [CVE-2026-43101](https://patchblox.com/security/data/cve/CVE-2026-43101.md) | High | ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() | 7.5 | 0.0059 |  |
| [CVE-2026-31414](https://patchblox.com/security/data/cve/CVE-2026-31414.md) | High | netfilter: nf_conntrack_expect: use expect->helper | 9.8 | 0.0058 |  |
| [CVE-2026-43383](https://patchblox.com/security/data/cve/CVE-2026-43383.md) | High | kernel-64kb: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744). | 9.4 | 0.0054 |  |
| [CVE-2026-43452](https://patchblox.com/security/data/cve/CVE-2026-43452.md) | High | kernel-64kb: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142). | 8.2 | 0.0054 |  |
| [CVE-2026-43194](https://patchblox.com/security/data/cve/CVE-2026-43194.md) | High | kernel-64kb: net: consume xmit errors of GSO frames (bsc#1264304). | 7.5 | 0.0053 |  |
| [CVE-2026-46119](https://patchblox.com/security/data/cve/CVE-2026-46119.md) | High | libceph: Fix slab-out-of-bounds access in auth message processing | 9.1 | 0.0053 |  |
| [CVE-2026-46185](https://patchblox.com/security/data/cve/CVE-2026-46185.md) | High | smb/client: fix out-of-bounds read in symlink_data() | 9.1 | 0.0053 |  |
| [CVE-2026-43226](https://patchblox.com/security/data/cve/CVE-2026-43226.md) | High | kernel-64kb: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544). | 7.5 | 0.0052 |  |
| [CVE-2026-52954](https://patchblox.com/security/data/cve/CVE-2026-52954.md) | High | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 |  |
| [CVE-2026-52957](https://patchblox.com/security/data/cve/CVE-2026-52957.md) | High | libceph: Fix potential null-ptr-deref in decode_choose_args() | 7.5 | 0.0052 |  |
| [CVE-2026-46037](https://patchblox.com/security/data/cve/CVE-2026-46037.md) | High | ipv4: icmp: validate reply type before using icmp_pointers | 8.2 | 0.0051 |  |
| [CVE-2026-53215](https://patchblox.com/security/data/cve/CVE-2026-53215.md) | High | kernel-64kb: net: mvpp2: refill RX buffers before XDP or skb use (bsc#1269680). | 9.8 | 0.0050 |  |
| [CVE-2026-53216](https://patchblox.com/security/data/cve/CVE-2026-53216.md) | High | kernel-64kb: net: mvpp2: limit XDP frame size to the RX buffer (bsc#1269587). | 9.8 | 0.0050 |  |
| [CVE-2026-43373](https://patchblox.com/security/data/cve/CVE-2026-43373.md) | High | kernel-64kb: net: ncsi: fix skb leak in error paths (bsc#1265079). | 7.5 | 0.0050 |  |
| [CVE-2026-46024](https://patchblox.com/security/data/cve/CVE-2026-46024.md) | High | libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() | 7.5 | 0.0049 |  |
| [CVE-2026-43074](https://patchblox.com/security/data/cve/CVE-2026-43074.md) | High | kernel-source: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263). | 7.8 | 0.0048 |  |
| [CVE-2026-53229](https://patchblox.com/security/data/cve/CVE-2026-53229.md) | High | kernel-64kb: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure (bsc#1269691). | 7.5 | 0.0048 |  |
| [CVE-2026-46124](https://patchblox.com/security/data/cve/CVE-2026-46124.md) | High | kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847). | 7.5 | 0.0048 |  |
| [CVE-2026-43158](https://patchblox.com/security/data/cve/CVE-2026-43158.md) | High | kernel-64kb: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595). | 8.8 | 0.0047 |  |
| [CVE-2026-43187](https://patchblox.com/security/data/cve/CVE-2026-43187.md) | High | kernel-64kb: xfs: delete attr leaf freemap entries when empty (bsc#1264603). | 8.8 | 0.0047 |  |
| [CVE-2026-43233](https://patchblox.com/security/data/cve/CVE-2026-43233.md) | High | kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337). | 8.2 | 0.0046 |  |
| [CVE-2026-46289](https://patchblox.com/security/data/cve/CVE-2026-46289.md) | High | lib/scatterlist: fix length calculations in extract_kvec_to_sg | 9.8 | 0.0046 |  |
| [CVE-2026-43057](https://patchblox.com/security/data/cve/CVE-2026-43057.md) | High | kernel-64kb: net: mpls: error out if inner headers are not set (bsc#1264056). | 7.5 | 0.0044 |  |
| [CVE-2026-43336](https://patchblox.com/security/data/cve/CVE-2026-43336.md) | High | kernel-64kb: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113). | 7.5 | 0.0043 |  |
| [CVE-2026-46244](https://patchblox.com/security/data/cve/CVE-2026-46244.md) | High | netfilter: nft_inner: Fix IPv6 inner_thoff desync | 9.1 | 0.0042 |  |
| [CVE-2026-43199](https://patchblox.com/security/data/cve/CVE-2026-43199.md) | High | net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query | 7.5 | 0.0042 |  |
| [CVE-2026-31450](https://patchblox.com/security/data/cve/CVE-2026-31450.md) | High | ext4: publish jinode after initialization | 8.8 | 0.0041 |  |
| [CVE-2026-43466](https://patchblox.com/security/data/cve/CVE-2026-43466.md) | High | kernel-64kb: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790). | 8.2 | 0.0041 |  |
| [CVE-2026-53178](https://patchblox.com/security/data/cve/CVE-2026-53178.md) | High | staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction | 8.1 | 0.0041 |  |
| [CVE-2026-43469](https://patchblox.com/security/data/cve/CVE-2026-43469.md) | High | kernel-64kb: xprtrdma: Decrement re_receiving on the early exit paths (bsc#1265143). | 7.5 | 0.0040 |  |
| [CVE-2026-53049](https://patchblox.com/security/data/cve/CVE-2026-53049.md) | High | kernel: kernel: gfs2: add some missing log locking | 9.8 | 0.0039 |  |
| [CVE-2026-53217](https://patchblox.com/security/data/cve/CVE-2026-53217.md) | High | net: mvpp2: sync RX data at the hardware packet offset | 8.6 | 0.0038 |  |
| [CVE-2026-43139](https://patchblox.com/security/data/cve/CVE-2026-43139.md) | High | kernel-64kb: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294). | 8.6 | 0.0038 |  |
| [CVE-2026-43345](https://patchblox.com/security/data/cve/CVE-2026-43345.md) | High | kernel-64kb: net: ipa: fix event ring index not programmed for IPA v5.0+ (bsc#1265103). | 7.5 | 0.0035 |  |
| [CVE-2025-39894](https://patchblox.com/security/data/cve/CVE-2025-39894.md) | High | kernel-64kb: netfilter: br_netfilter: do not check confirmed bit | 7.0 | 0.0033 |  |
| [CVE-2026-43502](https://patchblox.com/security/data/cve/CVE-2026-43502.md) | High | net/rds: handle zerocopy send cleanup before the message is queued | 7.8 | 0.0032 |  |
| [CVE-2026-31771](https://patchblox.com/security/data/cve/CVE-2026-31771.md) | High | Bluetooth: hci_event: move wake reason storage into validated event handlers | 8.1 | 0.0032 |  |
| [CVE-2026-52943](https://patchblox.com/security/data/cve/CVE-2026-52943.md) | High | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 |  |
| [CVE-2026-43198](https://patchblox.com/security/data/cve/CVE-2026-43198.md) | High | tcp: fix potential race in tcp_v6_syn_recv_sock() | 9.8 | 0.0030 |  |
| [CVE-2026-46099](https://patchblox.com/security/data/cve/CVE-2026-46099.md) | High | net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels | 8.1 | 0.0029 |  |
| [CVE-2026-43213](https://patchblox.com/security/data/cve/CVE-2026-43213.md) | High | wifi: rtw89: pci: validate sequence number of TX release report | 7.5 | 0.0028 |  |
| [CVE-2026-46320](https://patchblox.com/security/data/cve/CVE-2026-46320.md) | High | tap: free page on error paths in tap_get_user_xdp() | 7.4 | 0.0025 |  |
| [CVE-2026-31663](https://patchblox.com/security/data/cve/CVE-2026-31663.md) | High | xfrm: hold dev ref until after transport_finish NF_HOOK | 8.8 | 0.0022 |  |
| [CVE-2026-52923](https://patchblox.com/security/data/cve/CVE-2026-52923.md) | High | ipc: limit next_id allocation to the valid ID range | 7.8 | 0.0022 |  |
| [CVE-2026-45933](https://patchblox.com/security/data/cve/CVE-2026-45933.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0020 |  |
| [CVE-2026-43456](https://patchblox.com/security/data/cve/CVE-2026-43456.md) | High | kernel-64kb: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734). | 7.8 | 0.0019 |  |
| [CVE-2026-45861](https://patchblox.com/security/data/cve/CVE-2026-45861.md) | High | gfs2: Fix slab-use-after-free in qd_put | 8.8 | 0.0019 |  |
| [CVE-2026-45940](https://patchblox.com/security/data/cve/CVE-2026-45940.md) | High | net: stmmac: fix oops when split header is enabled | 7.0 | 0.0018 |  |
| [CVE-2026-53081](https://patchblox.com/security/data/cve/CVE-2026-53081.md) | High | kernel-64kb: bpf: Enforce regsafe base id consistency for BPF_ADD_CONST scalars (bsc#1269708). | 7.8 | 0.0018 |  |
| [CVE-2026-43303](https://patchblox.com/security/data/cve/CVE-2026-43303.md) | High | mm/page_alloc: clear page->private in free_pages_prepare() | 7.8 | 0.0017 |  |
| [CVE-2026-46253](https://patchblox.com/security/data/cve/CVE-2026-46253.md) | High | kernel-default: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635). | 7.8 | 0.0017 |  |
| [CVE-2026-31693](https://patchblox.com/security/data/cve/CVE-2026-31693.md) | High | kernel-64kb: cifs: some missing initializations on replay (bsc#1267744). | 7.8 | 0.0017 |  |
| [CVE-2026-31674](https://patchblox.com/security/data/cve/CVE-2026-31674.md) | High | netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() | 7.1 | 0.0017 |  |
| [CVE-2026-43248](https://patchblox.com/security/data/cve/CVE-2026-43248.md) | High | vhost: move vdpa group bound check to vhost_vdpa | 8.8 | 0.0016 |  |
| [CVE-2026-31680](https://patchblox.com/security/data/cve/CVE-2026-31680.md) | High | net: ipv6: flowlabel: defer exclusive option free until RCU teardown | 7.8 | 0.0016 |  |
| [CVE-2026-53306](https://patchblox.com/security/data/cve/CVE-2026-53306.md) | High | tty: hvc_iucv: fix off-by-one in number of supported devices | 7.1 | 0.0016 |  |
| [CVE-2026-43374](https://patchblox.com/security/data/cve/CVE-2026-43374.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 |  |
| [CVE-2026-46111](https://patchblox.com/security/data/cve/CVE-2026-46111.md) | High | Bluetooth: hci_conn: fix potential UAF in create_big_sync | 7.8 | 0.0016 |  |
| [CVE-2026-43339](https://patchblox.com/security/data/cve/CVE-2026-43339.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... | 8.1 | 0.0016 |  |
| [CVE-2026-43298](https://patchblox.com/security/data/cve/CVE-2026-43298.md) | High | drm/amdgpu: Skip vcn poison irq release on VF | 7.8 | 0.0016 |  |
| [CVE-2026-43491](https://patchblox.com/security/data/cve/CVE-2026-43491.md) | High | net: qrtr: ns: Limit the maximum server registration per node | 7.0 | 0.0015 |  |
| [CVE-2026-52933](https://patchblox.com/security/data/cve/CVE-2026-52933.md) | High | io_uring/poll: fix signed comparison in io_poll_get_ownership() | 7.8 | 0.0015 |  |
| [CVE-2026-53194](https://patchblox.com/security/data/cve/CVE-2026-53194.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2026-45920](https://patchblox.com/security/data/cve/CVE-2026-45920.md) | High | kernel-64kb: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893). | 7.8 | 0.0015 |  |
| [CVE-2026-46069](https://patchblox.com/security/data/cve/CVE-2026-46069.md) | High | kernel-uek64k-modules-extra: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Daniel Hodges) [Orabug: 39452344] | 7.8 | 0.0014 |  |
| [CVE-2026-46076](https://patchblox.com/security/data/cve/CVE-2026-46076.md) | High | KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 | 8.8 | 0.0014 |  |
| [CVE-2026-53090](https://patchblox.com/security/data/cve/CVE-2026-53090.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix ld_{abs,ind} failure path analysis in s... | 7.8 | 0.0014 |  |
| [CVE-2026-43128](https://patchblox.com/security/data/cve/CVE-2026-43128.md) | High | kernel-64kb: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612). | 8.1 | 0.0014 |  |
| [CVE-2026-43205](https://patchblox.com/security/data/cve/CVE-2026-43205.md) | High | kernel-64kb: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328). | 7.8 | 0.0014 |  |
| [CVE-2026-52962](https://patchblox.com/security/data/cve/CVE-2026-52962.md) | High | ceph: fix a buffer leak in __ceph_setxattr() | 7.8 | 0.0014 |  |
| [CVE-2026-43260](https://patchblox.com/security/data/cve/CVE-2026-43260.md) | High | kernel-64kb: bnxt_en: Fix RSS context delete logic (bsc#1264429). | 7.8 | 0.0014 |  |
| [CVE-2026-46162](https://patchblox.com/security/data/cve/CVE-2026-46162.md) | High | kernel-64kb: ice: fix double free in ice_sf_eth_activate() error path (bsc#1266840). | 7.8 | 0.0014 |  |
| [CVE-2026-53281](https://patchblox.com/security/data/cve/CVE-2026-53281.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or ref... | 8.8 | 0.0014 |  |
| [CVE-2026-31452](https://patchblox.com/security/data/cve/CVE-2026-31452.md) | High | ext4: convert inline data to extents when truncate exceeds inline size | 7.8 | 0.0014 |  |
| [CVE-2026-31469](https://patchblox.com/security/data/cve/CVE-2026-31469.md) | High | virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false | 7.8 | 0.0014 |  |
| [CVE-2026-43093](https://patchblox.com/security/data/cve/CVE-2026-43093.md) | High | kernel-64kb: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254). | 7.8 | 0.0014 |  |
| [CVE-2026-46322](https://patchblox.com/security/data/cve/CVE-2026-46322.md) | High | tun: free page on build_skb failure in tun_xdp_one() | 7.1 | 0.0013 |  |
| [CVE-2026-46172](https://patchblox.com/security/data/cve/CVE-2026-46172.md) | High | kernel-64kb: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (bsc#1266903). | 7.0 | 0.0013 |  |
| [CVE-2026-43450](https://patchblox.com/security/data/cve/CVE-2026-43450.md) | High | kernel-rt-64k-modules-core: kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() | 8.8 | 0.0013 |  |
| [CVE-2026-46173](https://patchblox.com/security/data/cve/CVE-2026-46173.md) | High | exit: prevent preemption of oopsing TASK_DEAD task | 7.8 | 0.0013 |  |
| [CVE-2026-43028](https://patchblox.com/security/data/cve/CVE-2026-43028.md) | High | kernel-64kb: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934). | 7.1 | 0.0013 |  |
| [CVE-2026-46078](https://patchblox.com/security/data/cve/CVE-2026-46078.md) | High | erofs: fix the out-of-bounds nameoff handling for trailing dirents | 7.1 | 0.0013 |  |
| [CVE-2026-45840](https://patchblox.com/security/data/cve/CVE-2026-45840.md) | High | kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479] | 7.0 | 0.0013 |  |
| [CVE-2026-45894](https://patchblox.com/security/data/cve/CVE-2026-45894.md) | High | iommu/vt-d: Clear Present bit before tearing down PASID entry | 8.8 | 0.0013 |  |
| [CVE-2026-23248](https://patchblox.com/security/data/cve/CVE-2026-23248.md) | High | perf/core: Fix refcount bug and potential UAF in perf_mmap | 7.8 | 0.0013 |  |
| [CVE-2026-31580](https://patchblox.com/security/data/cve/CVE-2026-31580.md) | High | bcache: fix cached_dev.sb_bio use-after-free and crash | 7.8 | 0.0013 |  |
| [CVE-2026-45862](https://patchblox.com/security/data/cve/CVE-2026-45862.md) | High | kernel-64kb: iommu/vt-d: Flush cache for PASID table before using it (bsc#1266705). | 7.8 | 0.0013 |  |
| [CVE-2026-45999](https://patchblox.com/security/data/cve/CVE-2026-45999.md) | High | erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() | 7.1 | 0.0013 |  |
| [CVE-2026-46116](https://patchblox.com/security/data/cve/CVE-2026-46116.md) | High | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete | 8.4 | 0.0013 |  |
| [CVE-2026-31502](https://patchblox.com/security/data/cve/CVE-2026-31502.md) | High | team: fix header_ops type confusion with non-Ethernet ports | 7.8 | 0.0013 |  |
| [CVE-2026-31673](https://patchblox.com/security/data/cve/CVE-2026-31673.md) | High | af_unix: read UNIX_DIAG_VFS data under unix_state_lock | 7.8 | 0.0013 |  |
| [CVE-2026-45891](https://patchblox.com/security/data/cve/CVE-2026-45891.md) | High | kernel-64kb: net: hns3: fix double free issue for tx spare buffer (bsc#1266717). | 7.8 | 0.0013 |  |
| [CVE-2026-46065](https://patchblox.com/security/data/cve/CVE-2026-46065.md) | High | fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info | 7.8 | 0.0013 |  |
| [CVE-2026-46150](https://patchblox.com/security/data/cve/CVE-2026-46150.md) | High | fanotify: fix false positive on permission events | 7.8 | 0.0013 |  |
| [CVE-2026-46178](https://patchblox.com/security/data/cve/CVE-2026-46178.md) | High | kernel-uek64k: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (Jason Gunthorpe) [Orabug: 39460496] | 7.8 | 0.0013 |  |
| [CVE-2026-53133](https://patchblox.com/security/data/cve/CVE-2026-53133.md) | High | RDMA/umem: Fix truncation for block sizes >= 4G | 7.8 | 0.0013 |  |
| [CVE-2026-31479](https://patchblox.com/security/data/cve/CVE-2026-31479.md) | High | kernel-64kb: drm/xe: always keep track of remap prev/next (bsc#1262765). | 8.8 | 0.0013 |  |
| [CVE-2026-43403](https://patchblox.com/security/data/cve/CVE-2026-43403.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0013 |  |
| [CVE-2026-31743](https://patchblox.com/security/data/cve/CVE-2026-31743.md) | High | kernel-64kb: nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy (bsc#1264067). | 7.8 | 0.0013 |  |
| [CVE-2026-46053](https://patchblox.com/security/data/cve/CVE-2026-46053.md) | High | net: rds: fix MR cleanup on copy error | 7.8 | 0.0013 |  |
| [CVE-2026-46093](https://patchblox.com/security/data/cve/CVE-2026-46093.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/vmalloc: take vmap_purge_lock in shrinker  de... | 7.8 | 0.0013 |  |
| [CVE-2026-31555](https://patchblox.com/security/data/cve/CVE-2026-31555.md) | High | futex: Clear stale exiting pointer in futex_lock_pi() retry path | 7.0 | 0.0013 |  |
| [CVE-2026-53167](https://patchblox.com/security/data/cve/CVE-2026-53167.md) | High | fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios | 7.0 | 0.0013 |  |
| [CVE-2026-53249](https://patchblox.com/security/data/cve/CVE-2026-53249.md) | High | ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | 7.0 | 0.0013 |  |
| [CVE-2026-46120](https://patchblox.com/security/data/cve/CVE-2026-46120.md) | High | kernel: kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() | 8.8 | 0.0013 |  |
| [CVE-2026-46160](https://patchblox.com/security/data/cve/CVE-2026-46160.md) | High | btrfs: fix missing last_unlink_trans update when removing a directory | 7.0 | 0.0013 |  |
| [CVE-2026-43015](https://patchblox.com/security/data/cve/CVE-2026-43015.md) | High | kernel-64kb: CVE-2026-43014, net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012). | 7.8 | 0.0013 |  |
| [CVE-2026-43016](https://patchblox.com/security/data/cve/CVE-2026-43016.md) | High | kernel-64kb: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007). | 7.8 | 0.0013 |  |
| [CVE-2026-53286](https://patchblox.com/security/data/cve/CVE-2026-53286.md) | High | kernel-64kb: idpf: fix double free and use-after-free in aux device error paths (bsc#1269531). | 7.8 | 0.0013 |  |
| [CVE-2026-43386](https://patchblox.com/security/data/cve/CVE-2026-43386.md) | High | kernel-64kb: staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie (bsc#1264740). | 7.1 | 0.0013 |  |
| [CVE-2026-43449](https://patchblox.com/security/data/cve/CVE-2026-43449.md) | High | kernel-64kb: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023). | 7.1 | 0.0013 |  |
| [CVE-2026-53041](https://patchblox.com/security/data/cve/CVE-2026-53041.md) | High | ocfs2: fix listxattr handling when the buffer is full | 7.1 | 0.0013 |  |
| [CVE-2026-53156](https://patchblox.com/security/data/cve/CVE-2026-53156.md) | High | nvmem: core: fix use-after-free bugs in error paths | 7.8 | 0.0013 |  |
| [CVE-2026-53168](https://patchblox.com/security/data/cve/CVE-2026-53168.md) | High | fuse: reject fuse_notify() pagecache ops on directories | 7.0 | 0.0013 |  |
| [CVE-2026-31665](https://patchblox.com/security/data/cve/CVE-2026-31665.md) | High | netfilter: nft_ct: fix use-after-free in timeout object destroy | 7.8 | 0.0012 |  |
| [CVE-2026-31492](https://patchblox.com/security/data/cve/CVE-2026-31492.md) | High | RDMA/irdma: Initialize free_qp completion before using it | 7.1 | 0.0012 |  |
| [CVE-2026-45912](https://patchblox.com/security/data/cve/CVE-2026-45912.md) | High | ext4: don't cache extent during splitting extent | 7.1 | 0.0012 |  |
| [CVE-2026-45983](https://patchblox.com/security/data/cve/CVE-2026-45983.md) | High | kernel-64kb: nfsd: never defer requests during idmap lookup (bsc#1266697). | 7.0 | 0.0012 |  |
| [CVE-2026-45985](https://patchblox.com/security/data/cve/CVE-2026-45985.md) | High | kernel-64kb: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700). | 7.0 | 0.0012 |  |
| [CVE-2026-53021](https://patchblox.com/security/data/cve/CVE-2026-53021.md) | High | scsi: target: core: Fix integer overflow in UNMAP bounds check | 7.0 | 0.0012 |  |
| [CVE-2026-53040](https://patchblox.com/security/data/cve/CVE-2026-53040.md) | High | bpftool: ocfs2: validate bg_bits during freefrag scan (Zhengyuan Huang) [Orabug: 39621868] | 7.1 | 0.0012 |  |
| [CVE-2026-46259](https://patchblox.com/security/data/cve/CVE-2026-46259.md) | High | kernel-64kb: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (bsc#1267685). | 8.4 | 0.0012 |  |
| [CVE-2026-53078](https://patchblox.com/security/data/cve/CVE-2026-53078.md) | High | bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops | 7.8 | 0.0012 |  |
| [CVE-2026-43283](https://patchblox.com/security/data/cve/CVE-2026-43283.md) | High | kernel-64kb: net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle (bsc#1264295). | 8.8 | 0.0012 |  |
| [CVE-2026-53262](https://patchblox.com/security/data/cve/CVE-2026-53262.md) | High | l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() | 7.8 | 0.0012 |  |
| [CVE-2026-52908](https://patchblox.com/security/data/cve/CVE-2026-52908.md) | High | RDMA: During rereg_mr ensure that REREG_ACCESS is compatible | 7.8 | 0.0012 |  |
| [CVE-2026-43458](https://patchblox.com/security/data/cve/CVE-2026-43458.md) | High | kernel-64kb: serial: caif: hold tty->link reference in ldisc_open and ser_release (bsc#1265005). | 7.8 | 0.0012 |  |
| [CVE-2026-53272](https://patchblox.com/security/data/cve/CVE-2026-53272.md) | High | kernel-64kb: erofs: fix use-after-free on sbi->sync_decompress (bsc#1269809). | 7.8 | 0.0012 |  |
| [CVE-2026-45837](https://patchblox.com/security/data/cve/CVE-2026-45837.md) | High | kernel-64kb: Require (reasonably) normal mappings for MADV_DOFORK (bsc#1266398). | 7.8 | 0.0012 |  |
| [CVE-2026-46328](https://patchblox.com/security/data/cve/CVE-2026-46328.md) | High | kernel-64kb: apparmor: fix rlimit for posix cpu timers (bsc#1268037). | 7.3 | 0.0011 |  |
| [CVE-2026-52909](https://patchblox.com/security/data/cve/CVE-2026-52909.md) | High | ip6_vti: set netns_immutable on the fallback device. | 7.8 | 0.0011 |  |
| [CVE-2026-52975](https://patchblox.com/security/data/cve/CVE-2026-52975.md) | High | bonding: 3ad: implement proper RCU rules for port->aggregator | 7.8 | 0.0011 |  |
| [CVE-2026-46319](https://patchblox.com/security/data/cve/CVE-2026-46319.md) | High | net/sched: act_ct: Only release RCU read lock after ct_ft | 8.8 | 0.0011 |  |
| [CVE-2026-46227](https://patchblox.com/security/data/cve/CVE-2026-46227.md) | High | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 |  |
| [CVE-2026-53050](https://patchblox.com/security/data/cve/CVE-2026-53050.md) | High | quota: Fix race of dquot_scan_active() with quota deactivation | 7.8 | 0.0010 |  |
| [CVE-2026-46112](https://patchblox.com/security/data/cve/CVE-2026-46112.md) | High | RDMA/hns: Fix unlocked call to hns_roce_qp_remove() | 7.8 | 0.0010 |  |
| [CVE-2026-23451](https://patchblox.com/security/data/cve/CVE-2026-23451.md) | Routine | kernel-default: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604). | n/a | 0.0046 |  |
| [CVE-2026-31429](https://patchblox.com/security/data/cve/CVE-2026-31429.md) | Routine | net: skb: fix cross-cache free of KFENCE-allocated skb head | 6.6 | 0.0026 |  |
| [CVE-2025-40341](https://patchblox.com/security/data/cve/CVE-2025-40341.md) | Routine | futex: Don't leak robust_list pointer on exec race | 5.5 | 0.0025 |  |
| [CVE-2026-45901](https://patchblox.com/security/data/cve/CVE-2026-45901.md) | Routine | netfilter: nf_tables: revert commit_mutex usage in reset path | 5.5 | 0.0018 |  |
| [CVE-2026-45961](https://patchblox.com/security/data/cve/CVE-2026-45961.md) | Routine | kernel-64kb: gfs2: fix memory leaks in gfs2_fill_super error path (bsc#1266933). | 5.5 | 0.0016 |  |
| [CVE-2026-43191](https://patchblox.com/security/data/cve/CVE-2026-43191.md) | Routine | drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 | 5.5 | 0.0016 |  |
| [CVE-2026-52980](https://patchblox.com/security/data/cve/CVE-2026-52980.md) | Routine | kernel-64kb: sched/fair: Clear rel_deadline when initializing forked entities (bsc#1269252). | 5.5 | 0.0016 |  |
| [CVE-2026-53039](https://patchblox.com/security/data/cve/CVE-2026-53039.md) | Routine | kernel-uek: ocfs2: validate group add input before caching (Zhengyuan Huang) [Orabug: 39621864] | 5.5 | 0.0016 |  |
| [CVE-2026-53258](https://patchblox.com/security/data/cve/CVE-2026-53258.md) | Routine | wifi: fix leak if split 6 GHz scanning fails | 5.5 | 0.0016 |  |
| [CVE-2026-45848](https://patchblox.com/security/data/cve/CVE-2026-45848.md) | Routine | kernel-64kb: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734). | 5.5 | 0.0016 |  |
| [CVE-2026-45857](https://patchblox.com/security/data/cve/CVE-2026-45857.md) | Routine | kernel-64kb: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458). | 5.5 | 0.0016 |  |
| [CVE-2026-45858](https://patchblox.com/security/data/cve/CVE-2026-45858.md) | Routine | ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 | 5.5 | 0.0016 |  |
| [CVE-2026-45870](https://patchblox.com/security/data/cve/CVE-2026-45870.md) | Routine | kernel-64kb: SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (bsc#1266704). | 5.5 | 0.0016 |  |
| [CVE-2026-45884](https://patchblox.com/security/data/cve/CVE-2026-45884.md) | Routine | kernel-64kb: apparmor: avoid per-cpu hold underflow in aa_get_buffer (bsc#1266718). | 5.5 | 0.0016 |  |
| [CVE-2026-45888](https://patchblox.com/security/data/cve/CVE-2026-45888.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0016 |  |
| [CVE-2026-45922](https://patchblox.com/security/data/cve/CVE-2026-45922.md) | Routine | kernel-64kb: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805). | 5.5 | 0.0016 |  |
| [CVE-2026-45948](https://patchblox.com/security/data/cve/CVE-2026-45948.md) | Routine | kernel-64kb: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929). | 5.5 | 0.0016 |  |
| [CVE-2026-45964](https://patchblox.com/security/data/cve/CVE-2026-45964.md) | Routine | kernel-64kb: SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (bsc#1266698). | 5.5 | 0.0016 |  |
| [CVE-2026-45965](https://patchblox.com/security/data/cve/CVE-2026-45965.md) | Routine | kernel-64kb: apparmor: fix invalid deref of rawdata when export_binary is unset (bsc#1267208). | 5.5 | 0.0016 |  |
| [CVE-2026-31560](https://patchblox.com/security/data/cve/CVE-2026-31560.md) | Routine | spi: spi-dw-dma: fix print error log when wait finish transaction | 5.5 | 0.0016 |  |
| [CVE-2026-43022](https://patchblox.com/security/data/cve/CVE-2026-43022.md) | Routine | Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists | 5.5 | 0.0016 |  |
| [CVE-2026-43036](https://patchblox.com/security/data/cve/CVE-2026-43036.md) | Routine | net: use skb_header_pointer() for TCPv4 GSO frag_off check | 5.5 | 0.0016 |  |
| [CVE-2026-43107](https://patchblox.com/security/data/cve/CVE-2026-43107.md) | Routine | xfrm: account XFRMA_IF_ID in aevent size calculation | 5.5 | 0.0016 |  |
| [CVE-2026-43492](https://patchblox.com/security/data/cve/CVE-2026-43492.md) | Routine | lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() | 5.5 | 0.0016 |  |
| [CVE-2026-46254](https://patchblox.com/security/data/cve/CVE-2026-46254.md) | Routine | AppArmor: Allow apparmor to handle unaligned dfa tables | 5.5 | 0.0016 |  |
| [CVE-2026-43034](https://patchblox.com/security/data/cve/CVE-2026-43034.md) | Routine | kernel-64kb: bnxt_en: set backing store type from query type (bsc#1263998). | 5.5 | 0.0016 |  |
| [CVE-2026-46079](https://patchblox.com/security/data/cve/CVE-2026-46079.md) | Routine | rbd: fix null-ptr-deref when device_add_disk() fails | 5.5 | 0.0014 |  |
| [CVE-2026-31596](https://patchblox.com/security/data/cve/CVE-2026-31596.md) | Routine | ocfs2: handle invalid dinode in ocfs2_group_extend | 6.6 | 0.0013 |  |
| [CVE-2026-45841](https://patchblox.com/security/data/cve/CVE-2026-45841.md) | Routine | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 5.5 | 0.0013 |  |
| [CVE-2026-43089](https://patchblox.com/security/data/cve/CVE-2026-43089.md) | Routine | kernel-64kb: xfrm_user: fix info leak in build_mapping() (bsc#1264261). | 5.5 | 0.0013 |  |
| [CVE-2026-46161](https://patchblox.com/security/data/cve/CVE-2026-46161.md) | Routine | bpftool: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415] | 5.5 | 0.0013 |  |
| [CVE-2026-46214](https://patchblox.com/security/data/cve/CVE-2026-46214.md) | Routine | kernel-uek-debug-modules-extra: vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646] | 5.5 | 0.0013 |  |
| [CVE-2026-31495](https://patchblox.com/security/data/cve/CVE-2026-31495.md) | Routine | netfilter: ctnetlink: use netlink policy range checks | 5.5 | 0.0013 |  |
| [CVE-2026-31752](https://patchblox.com/security/data/cve/CVE-2026-31752.md) | Routine | kernel-64kb: bridge: br_nd_send: validate ND option lengths (bsc#1264045). | 5.5 | 0.0013 |  |
| [CVE-2026-43024](https://patchblox.com/security/data/cve/CVE-2026-43024.md) | Routine | kernel-64kb: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930). | 5.5 | 0.0013 |  |
| [CVE-2026-43035](https://patchblox.com/security/data/cve/CVE-2026-43035.md) | Routine | kernel-64kb: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996). | 5.5 | 0.0013 |  |
| [CVE-2026-43085](https://patchblox.com/security/data/cve/CVE-2026-43085.md) | Routine | kernel-64kb: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230). | 5.5 | 0.0013 |  |
| [CVE-2026-45838](https://patchblox.com/security/data/cve/CVE-2026-45838.md) | Routine | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 5.5 | 0.0013 |  |
| [CVE-2026-46046](https://patchblox.com/security/data/cve/CVE-2026-46046.md) | Routine | ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() | 5.5 | 0.0013 |  |
| [CVE-2026-46101](https://patchblox.com/security/data/cve/CVE-2026-46101.md) | Routine | bpftool: netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452465] | 5.5 | 0.0013 |  |
| [CVE-2026-43124](https://patchblox.com/security/data/cve/CVE-2026-43124.md) | Routine | kernel-64kb: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545). | 5.5 | 0.0013 |  |
| [CVE-2026-43132](https://patchblox.com/security/data/cve/CVE-2026-43132.md) | Routine | kernel-64kb: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614). | 5.5 | 0.0013 |  |
| [CVE-2026-43157](https://patchblox.com/security/data/cve/CVE-2026-43157.md) | Routine | kernel-64kb: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624). | 5.5 | 0.0013 |  |
| [CVE-2026-43238](https://patchblox.com/security/data/cve/CVE-2026-43238.md) | Routine | kernel-64kb: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320). | 5.5 | 0.0013 |  |
| [CVE-2026-45974](https://patchblox.com/security/data/cve/CVE-2026-45974.md) | Routine | kernel-64kb: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found (bsc#1266922). | 5.5 | 0.0013 |  |
| [CVE-2026-46005](https://patchblox.com/security/data/cve/CVE-2026-46005.md) | Routine | xfs: fix a resource leak in xfs_alloc_buftarg() | 5.5 | 0.0013 |  |
| [CVE-2026-53060](https://patchblox.com/security/data/cve/CVE-2026-53060.md) | Routine | dm cache metadata: fix memory leak on metadata abort retry | 5.5 | 0.0013 |  |
| [CVE-2026-43175](https://patchblox.com/security/data/cve/CVE-2026-43175.md) | Routine | kernel-64kb: clk: rs9: Reserve 8 struct clk_hw slots for for 9FGV0841 (bsc#1264372). | 5.5 | 0.0013 |  |
| [CVE-2026-43080](https://patchblox.com/security/data/cve/CVE-2026-43080.md) | Routine | kernel-64kb: l2tp: Drop large packets with UDP encap (bsc#1264236). | 5.5 | 0.0013 |  |
| [CVE-2026-53103](https://patchblox.com/security/data/cve/CVE-2026-53103.md) | Routine | kernel-64kb: wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync (bsc#1269416). | 5.5 | 0.0013 |  |
| [CVE-2026-53122](https://patchblox.com/security/data/cve/CVE-2026-53122.md) | Routine | btrfs: fix deadlock between reflink and transaction commit when using flushoncommit | 5.5 | 0.0013 |  |
| [CVE-2026-43010](https://patchblox.com/security/data/cve/CVE-2026-43010.md) | Routine | bpf: Reject sleepable kprobe_multi programs at attach time | 5.5 | 0.0012 |  |
| [CVE-2026-43014](https://patchblox.com/security/data/cve/CVE-2026-43014.md) | Routine | kernel-64kb: CVE-2026-43015: net: macb: fix clk handling on PCI glue driver removal (bsc#1264010 bsc#1264012). | 5.5 | 0.0012 |  |
| [CVE-2026-43094](https://patchblox.com/security/data/cve/CVE-2026-43094.md) | Routine | kernel-64kb: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231). | 5.5 | 0.0012 |  |
| [CVE-2026-43130](https://patchblox.com/security/data/cve/CVE-2026-43130.md) | Routine | kernel-64kb: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532). | 5.5 | 0.0012 |  |
| [CVE-2026-43145](https://patchblox.com/security/data/cve/CVE-2026-43145.md) | Routine | kernel-64kb: remoteproc: imx_rproc: Fix invalid loaded resource table detection (bsc#1265091). | 5.5 | 0.0012 |  |
| [CVE-2026-43167](https://patchblox.com/security/data/cve/CVE-2026-43167.md) | Routine | kernel-64kb: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580). | 5.5 | 0.0012 |  |
| [CVE-2026-43171](https://patchblox.com/security/data/cve/CVE-2026-43171.md) | Routine | kernel-64kb: EFI/CPER: do not dump the entire memory region (bsc#1264549). | 5.5 | 0.0012 |  |
| [CVE-2026-45997](https://patchblox.com/security/data/cve/CVE-2026-45997.md) | Routine | kernel-64kb: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (bsc#1266740). | 5.5 | 0.0012 |  |
| [CVE-2026-46071](https://patchblox.com/security/data/cve/CVE-2026-46071.md) | Routine | KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 | 5.5 | 0.0012 |  |
| [CVE-2026-46291](https://patchblox.com/security/data/cve/CVE-2026-46291.md) | Routine | crypto: caam - guard HMAC key hex dumps in hash_digest_key | 5.5 | 0.0012 |  |
| [CVE-2026-53015](https://patchblox.com/security/data/cve/CVE-2026-53015.md) | Routine | erofs: unify lcn as u64 for 32-bit platforms | 5.5 | 0.0012 |  |
| [CVE-2026-53139](https://patchblox.com/security/data/cve/CVE-2026-53139.md) | Routine | drm/v3d: Skip CSD when it has zeroed workgroups | 5.5 | 0.0012 |  |
| [CVE-2026-53287](https://patchblox.com/security/data/cve/CVE-2026-53287.md) | Routine | audit: fix incorrect inheritable capability in CAPSET records | 5.5 | 0.0012 |  |
| [CVE-2026-31438](https://patchblox.com/security/data/cve/CVE-2026-31438.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-31646](https://patchblox.com/security/data/cve/CVE-2026-31646.md) | Routine | net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() | 5.5 | 0.0012 |  |
| [CVE-2026-31647](https://patchblox.com/security/data/cve/CVE-2026-31647.md) | Routine | kernel-64kb: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581). | 5.5 | 0.0012 |  |
| [CVE-2026-43081](https://patchblox.com/security/data/cve/CVE-2026-43081.md) | Routine | kernel-64kb: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0+ (bsc#1264241). | 5.5 | 0.0012 |  |
| [CVE-2026-43086](https://patchblox.com/security/data/cve/CVE-2026-43086.md) | Routine | kernel-64kb: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286). | 5.5 | 0.0012 |  |
| [CVE-2026-43090](https://patchblox.com/security/data/cve/CVE-2026-43090.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 |  |
| [CVE-2026-43092](https://patchblox.com/security/data/cve/CVE-2026-43092.md) | Routine | kernel-64kb: xsk: validate MTU against usable frame size on bind (bsc#1264270). | 5.5 | 0.0012 |  |
| [CVE-2026-43161](https://patchblox.com/security/data/cve/CVE-2026-43161.md) | Routine | iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode | 5.5 | 0.0012 |  |
| [CVE-2026-53285](https://patchblox.com/security/data/cve/CVE-2026-53285.md) | Routine | kernel-64kb: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (bsc#1269527). | 5.5 | 0.0012 |  |
| [CVE-2026-43351](https://patchblox.com/security/data/cve/CVE-2026-43351.md) | Routine | kernel-64kb: KVM: arm64: gic: Set vgic_model before initing private IRQs (bsc#1265082). | 5.5 | 0.0012 |  |
| [CVE-2026-53274](https://patchblox.com/security/data/cve/CVE-2026-53274.md) | Routine | net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS | 5.5 | 0.0012 |  |
| [CVE-2026-31664](https://patchblox.com/security/data/cve/CVE-2026-31664.md) | Routine | xfrm: clear trailing padding in build_polexpire() | 5.5 | 0.0012 |  |
| [CVE-2026-31670](https://patchblox.com/security/data/cve/CVE-2026-31670.md) | Routine | net: rfkill: prevent unlimited numbers of rfkill events from being created | 5.5 | 0.0012 |  |
| [CVE-2026-43053](https://patchblox.com/security/data/cve/CVE-2026-43053.md) | Routine | xfs: close crash window in attr dabtree inactivation | 5.5 | 0.0012 |  |
| [CVE-2026-53263](https://patchblox.com/security/data/cve/CVE-2026-53263.md) | Routine | 6lowpan: fix off-by-one in multicast context address compression | 5.5 | 0.0012 |  |
| [CVE-2026-43470](https://patchblox.com/security/data/cve/CVE-2026-43470.md) | Routine | kernel-64kb: nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (bsc#1265128). | 5.5 | 0.0012 |  |
| [CVE-2026-46314](https://patchblox.com/security/data/cve/CVE-2026-46314.md) | Routine | drm/v3d: Reject empty multisync extension to prevent infinite loop | 5.5 | 0.0012 |  |
| [CVE-2026-43119](https://patchblox.com/security/data/cve/CVE-2026-43119.md) | Routine | Bluetooth: hci_sync: annotate data-races around hdev->req_status | 5.5 | 0.0011 |  |
| [CVE-2026-43337](https://patchblox.com/security/data/cve/CVE-2026-43337.md) | Routine | kernel-64kb: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() (bsc#1265112). | 5.5 | 0.0011 |  |
| [CVE-2026-43457](https://patchblox.com/security/data/cve/CVE-2026-43457.md) | Routine | kernel-64kb: mctp: i2c: fix skb memory leak in receive path (bsc#1265000). | 5.5 | 0.0011 |  |
| [CVE-2026-43471](https://patchblox.com/security/data/cve/CVE-2026-43471.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0011 |  |
| [CVE-2026-46051](https://patchblox.com/security/data/cve/CVE-2026-46051.md) | Routine | md/raid5: fix soft lockup in retry_aligned_read() | 5.5 | 0.0010 |  |
| [CVE-2026-23394](https://patchblox.com/security/data/cve/CVE-2026-23394.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  af_unix: Give up GC if MSG_PEEK intervened | 4.7 | 0.0010 |  |
| [CVE-2026-46050](https://patchblox.com/security/data/cve/CVE-2026-46050.md) | Routine | md/raid10: fix deadlock with check operation and nowait requests | 5.5 | 0.0010 |  |
| [CVE-2026-31466](https://patchblox.com/security/data/cve/CVE-2026-31466.md) | Routine | kernel-64kb: mm/huge_memory: fix folio isn't locked in softleaf_to_folio() (bsc#1267825). | 5.5 | 0.0009 |  |
| [CVE-2026-31499](https://patchblox.com/security/data/cve/CVE-2026-31499.md) | Routine | kernel-64kb: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674). | 5.5 | 0.0009 |  |
| [CVE-2026-46063](https://patchblox.com/security/data/cve/CVE-2026-46063.md) | Routine | x86/shstk: Prevent deadlock during shstk sigreturn | 5.5 | 0.0009 |  |
| [CVE-2026-43468](https://patchblox.com/security/data/cve/CVE-2026-43468.md) | Routine | kernel-64kb: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978). | 5.5 | 0.0009 |  |
| [CVE-2026-43415](https://patchblox.com/security/data/cve/CVE-2026-43415.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 4.7 | 0.0009 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.