# OPENSUSE-SU-2026:21910-1: Security update for 13 packages OPENSUSE-SU-2026:21910-1, released September 22, 2026, fixes 885 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-21910-1 - Platform: Linux - Released: Sep 22, 2026 - Priority: Urgent (Closes CVE-2026-72296, rated Critical) - CVEs: 885, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:21910-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1 | | [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1 | | [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1 | | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1.160000.2.22 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1 | | [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1 | | [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1 | | [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1 | | [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 16.0 | 6.12.0-160000.38.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-72296](https://patchblox.com/security/data/cve/CVE-2026-72296.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife... | 9.1 | 0.0074 | | | [CVE-2026-72399](https://patchblox.com/security/data/cve/CVE-2026-72399.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for x... | 9.8 | 0.0068 | | | [CVE-2026-72366](https://patchblox.com/security/data/cve/CVE-2026-72366.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle as... | 9.8 | 0.0066 | | | [CVE-2026-64541](https://patchblox.com/security/data/cve/CVE-2026-64541.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pinn... | 9.8 | 0.0057 | | | [CVE-2026-64319](https://patchblox.com/security/data/cve/CVE-2026-64319.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bound... | 9.1 | 0.0056 | | | [CVE-2026-64056](https://patchblox.com/security/data/cve/CVE-2026-64056.md) | Urgent | kernel-64kb: CVE-2026-64055, net: ethernet: cortina: Make RX SKB per-port (bsc#1272502 bsc#1272893). | 9.8 | 0.0055 | | | [CVE-2026-64089](https://patchblox.com/security/data/cve/CVE-2026-64089.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0055 | | | [CVE-2026-64125](https://patchblox.com/security/data/cve/CVE-2026-64125.md) | Urgent | kernel-64kb: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346). | 9.8 | 0.0055 | | | [CVE-2026-64535](https://patchblox.com/security/data/cve/CVE-2026-64535.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch... | 9.8 | 0.0055 | | | [CVE-2026-68127](https://patchblox.com/security/data/cve/CVE-2026-68127.md) | Urgent | ila: reload IPv6 header after pskb_may_pull in checksum adjust | 9.8 | 0.0054 | | | [CVE-2026-68144](https://patchblox.com/security/data/cve/CVE-2026-68144.md) | Urgent | phonet: pep: fix use-after-free in pep_get_sb() | 9.8 | 0.0054 | | | [CVE-2026-72494](https://patchblox.com/security/data/cve/CVE-2026-72494.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with comp... | 9.8 | 0.0053 | | | [CVE-2026-64047](https://patchblox.com/security/data/cve/CVE-2026-64047.md) | Urgent | kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060). | 9.8 | 0.0051 | | | [CVE-2026-64055](https://patchblox.com/security/data/cve/CVE-2026-64055.md) | Urgent | kernel-64kb: CVE-2026-64056: net: ethernet: cortina: Make RX SKB per-port (bsc#1272502 bsc#1272893). | 9.8 | 0.0051 | | | [CVE-2026-64551](https://patchblox.com/security/data/cve/CVE-2026-64551.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before... | 9.1 | 0.0051 | | | [CVE-2026-80681](https://patchblox.com/security/data/cve/CVE-2026-80681.md) | Urgent | vxlan: re-fetch eth header after route_shortcircuit() | 9.8 | 0.0050 | | | [CVE-2026-64033](https://patchblox.com/security/data/cve/CVE-2026-64033.md) | Urgent | kernel-64kb: RDMA/rtrs: Fix use-after-free in path file creation cleanup (bsc#1273134). | 9.8 | 0.0049 | | | [CVE-2026-74345](https://patchblox.com/security/data/cve/CVE-2026-74345.md) | Urgent | RDMA/siw: Fix endpoint/socket association handling | 9.8 | 0.0048 | | | [CVE-2026-74545](https://patchblox.com/security/data/cve/CVE-2026-74545.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: rtase: fix double free of multi-frag skb on DMA... | 9.8 | 0.0046 | | | [CVE-2026-64232](https://patchblox.com/security/data/cve/CVE-2026-64232.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_in... | 9.8 | 0.0043 | | | [CVE-2026-53309](https://patchblox.com/security/data/cve/CVE-2026-53309.md) | Urgent | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison | 9.8 | 0.0040 | | | [CVE-2026-80721](https://patchblox.com/security/data/cve/CVE-2026-80721.md) | Urgent | Bluetooth: ISO: ensure no dangling hcon references in iso_conn | 9.8 | 0.0038 | | | [CVE-2026-68121](https://patchblox.com/security/data/cve/CVE-2026-68121.md) | Urgent | pppoe: reload header pointer after dev_hard_header() | 9.8 | 0.0037 | | | [CVE-2026-64534](https://patchblox.com/security/data/cve/CVE-2026-64534.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_un... | 9.8 | 0.0032 | | | [CVE-2026-68354](https://patchblox.com/security/data/cve/CVE-2026-68354.md) | Urgent | firewire: net: Fix fragmented datagram reassembly | 9.8 | 0.0028 | | | [CVE-2026-68198](https://patchblox.com/security/data/cve/CVE-2026-68198.md) | Urgent | wifi: ath6kl: fix use-after-free in aggr_reset_state() | 9.8 | 0.0028 | | | [CVE-2026-68402](https://patchblox.com/security/data/cve/CVE-2026-68402.md) | Urgent | wifi: cfg80211: bound element ID read when checking non-inheritance | 9.8 | 0.0027 | | | [CVE-2026-68360](https://patchblox.com/security/data/cve/CVE-2026-68360.md) | Urgent | hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop | 9.8 | 0.0024 | | | [CVE-2026-68359](https://patchblox.com/security/data/cve/CVE-2026-68359.md) | Urgent | hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop | 9.8 | 0.0023 | | | [CVE-2026-68212](https://patchblox.com/security/data/cve/CVE-2026-68212.md) | Urgent | media: saa7134: Fix a possible memory leak in saa7134_video_init1 | 9.8 | 0.0022 | | | [CVE-2026-68214](https://patchblox.com/security/data/cve/CVE-2026-68214.md) | Urgent | media: rtl2832: fix use-after-free in rtl2832_remove() | 9.8 | 0.0022 | | | [CVE-2026-68218](https://patchblox.com/security/data/cve/CVE-2026-68218.md) | Urgent | media: pci: dm1105: Free allocated workqueue | 9.8 | 0.0022 | | | [CVE-2026-68180](https://patchblox.com/security/data/cve/CVE-2026-68180.md) | Urgent | intel_th: fix MSC output device reference leak | 9.8 | 0.0022 | | | [CVE-2026-68395](https://patchblox.com/security/data/cve/CVE-2026-68395.md) | Urgent | ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered | 9.8 | 0.0022 | | | [CVE-2026-68207](https://patchblox.com/security/data/cve/CVE-2026-68207.md) | Urgent | media: ti: vpe: unwind v4l2 device registration on probe error | 9.8 | 0.0022 | | | [CVE-2026-68166](https://patchblox.com/security/data/cve/CVE-2026-68166.md) | Urgent | userfaultfd: prevent registration of special VMAs | 9.8 | 0.0021 | | | [CVE-2026-68349](https://patchblox.com/security/data/cve/CVE-2026-68349.md) | Urgent | wifi: carl9170: fix buffer overflow in rx_stream failover path | 9.8 | 0.0020 | | | [CVE-2026-72288](https://patchblox.com/security/data/cve/CVE-2026-72288.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt... | 9.3 | 0.0019 | | | [CVE-2026-64565](https://patchblox.com/security/data/cve/CVE-2026-64565.md) | Urgent | Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() | 9.8 | 0.0018 | | | [CVE-2026-68132](https://patchblox.com/security/data/cve/CVE-2026-68132.md) | Urgent | super: fix emergency thaw deadlock on frozen block devices | 9.8 | 0.0018 | | | [CVE-2026-68325](https://patchblox.com/security/data/cve/CVE-2026-68325.md) | Urgent | iommu/amd: Bound the early ACPI HID map | 9.8 | 0.0018 | | | [CVE-2026-68406](https://patchblox.com/security/data/cve/CVE-2026-68406.md) | Urgent | wifi: cfg80211: validate PMSR FTM preamble range | 9.8 | 0.0018 | | | [CVE-2026-68357](https://patchblox.com/security/data/cve/CVE-2026-68357.md) | Urgent | watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() | 9.8 | 0.0018 | | | [CVE-2026-68210](https://patchblox.com/security/data/cve/CVE-2026-68210.md) | Urgent | media: stm32: dcmi: unregister notifier on probe failure | 9.8 | 0.0018 | | | [CVE-2026-68310](https://patchblox.com/security/data/cve/CVE-2026-68310.md) | Urgent | wifi: mt76: mt7915: guard HE capability lookups | 9.8 | 0.0017 | | | [CVE-2026-68407](https://patchblox.com/security/data/cve/CVE-2026-68407.md) | Urgent | wifi: nl80211: free RNR data on MBSSID mismatch | 9.8 | 0.0017 | | | [CVE-2026-68399](https://patchblox.com/security/data/cve/CVE-2026-68399.md) | Urgent | bpf: Fix UAF in sock clone early bailouts | 9.8 | 0.0017 | | | [CVE-2026-63828](https://patchblox.com/security/data/cve/CVE-2026-63828.md) | Urgent | apparmor: mediate the implicit connect of TCP fast open sendmsg | 9.8 | 0.0017 | | | [CVE-2026-64562](https://patchblox.com/security/data/cve/CVE-2026-64562.md) | Urgent | KVM: nVMX: Hide shadow VMCS right after VMCLEAR | 9.8 | 0.0016 | | | [CVE-2026-68340](https://patchblox.com/security/data/cve/CVE-2026-68340.md) | Urgent | hwmon: occ: validate poll response sensor blocks | 9.8 | 0.0015 | | | [CVE-2026-52991](https://patchblox.com/security/data/cve/CVE-2026-52991.md) | Urgent | sched/psi: fix race between file release and pressure write | 9.8 | 0.0015 | | | [CVE-2026-80693](https://patchblox.com/security/data/cve/CVE-2026-80693.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to th... | 9.3 | 0.0014 | | | [CVE-2026-68391](https://patchblox.com/security/data/cve/CVE-2026-68391.md) | Urgent | Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds | 9.8 | 0.0013 | | | [CVE-2026-68377](https://patchblox.com/security/data/cve/CVE-2026-68377.md) | Urgent | net/sched: act_tunnel_key: Defer dst_release to RCU callback | 9.8 | 0.0013 | | | [CVE-2026-64017](https://patchblox.com/security/data/cve/CVE-2026-64017.md) | Urgent | blk-mq: pop cached request if it is usable | 9.8 | 0.0013 | | | [CVE-2026-68153](https://patchblox.com/security/data/cve/CVE-2026-68153.md) | Urgent | libceph: remove debugfs files before client teardown | 9.8 | 0.0013 | | | [CVE-2026-68236](https://patchblox.com/security/data/cve/CVE-2026-68236.md) | Urgent | drm/amd/display: set new_stream to NULL after release | 9.8 | 0.0013 | | | [CVE-2026-68142](https://patchblox.com/security/data/cve/CVE-2026-68142.md) | Urgent | geneve: require CAP_NET_ADMIN in the device netns for changelink | 9.8 | 0.0012 | | | [CVE-2026-63999](https://patchblox.com/security/data/cve/CVE-2026-63999.md) | Urgent | ethtool: rss: fix indir_table and hkey leak on get_rxfh failure | 9.8 | 0.0012 | | | [CVE-2026-53077](https://patchblox.com/security/data/cve/CVE-2026-53077.md) | Urgent | net/rds: Restrict use of RDS/IB to the initial network namespace | 9.8 | 0.0012 | | | [CVE-2026-68143](https://patchblox.com/security/data/cve/CVE-2026-68143.md) | Urgent | net: slip: serialize receive against buffer reallocation | 9.8 | 0.0011 | | | [CVE-2026-52929](https://patchblox.com/security/data/cve/CVE-2026-52929.md) | High | sctp: stream: fully roll back denied add-stream state | 9.8 | 0.0087 | | | [CVE-2026-72398](https://patchblox.com/security/data/cve/CVE-2026-72398.md) | High | sctp: add INIT verification after cookie unpacking | 9.8 | 0.0080 | | | [CVE-2026-64320](https://patchblox.com/security/data/cve/CVE-2026-64320.md) | High | nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page | 9.1 | 0.0080 | | | [CVE-2026-63887](https://patchblox.com/security/data/cve/CVE-2026-63887.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_outp... | 9.8 | 0.0078 | | | [CVE-2026-63888](https://patchblox.com/security/data/cve/CVE-2026-63888.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-... | 9.8 | 0.0078 | | | [CVE-2026-68159](https://patchblox.com/security/data/cve/CVE-2026-68159.md) | High | libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE | 9.8 | 0.0075 | | | [CVE-2026-72084](https://patchblox.com/security/data/cve/CVE-2026-72084.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 | | | [CVE-2026-72339](https://patchblox.com/security/data/cve/CVE-2026-72339.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 | | | [CVE-2026-45860](https://patchblox.com/security/data/cve/CVE-2026-45860.md) | High | kernel-64kb: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710). | 7.5 | 0.0075 | | | [CVE-2026-72466](https://patchblox.com/security/data/cve/CVE-2026-72466.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0074 | | | [CVE-2026-80609](https://patchblox.com/security/data/cve/CVE-2026-80609.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0074 | | | [CVE-2026-72234](https://patchblox.com/security/data/cve/CVE-2026-72234.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0073 | | | [CVE-2026-72069](https://patchblox.com/security/data/cve/CVE-2026-72069.md) | High | kernel: locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() (Waiman Long) [RHEL-242684] | 9.8 | 0.0073 | | | [CVE-2026-72083](https://patchblox.com/security/data/cve/CVE-2026-72083.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0072 | | | [CVE-2026-72323](https://patchblox.com/security/data/cve/CVE-2026-72323.md) | High | bpftool: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (Eric Dumazet) [Orabug: 39885781] | 9.8 | 0.0072 | | | [CVE-2026-72473](https://patchblox.com/security/data/cve/CVE-2026-72473.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0072 | | | [CVE-2026-72502](https://patchblox.com/security/data/cve/CVE-2026-72502.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0072 | | | [CVE-2026-74321](https://patchblox.com/security/data/cve/CVE-2026-74321.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0072 | | | [CVE-2026-80646](https://patchblox.com/security/data/cve/CVE-2026-80646.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0072 | | | [CVE-2026-63922](https://patchblox.com/security/data/cve/CVE-2026-63922.md) | High | kernel: kernel: ipv6: exthdrs: refresh nh after handling HAO option | 9.8 | 0.0071 | | | [CVE-2026-63924](https://patchblox.com/security/data/cve/CVE-2026-63924.md) | High | kernel: kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() | 9.8 | 0.0071 | | | [CVE-2026-64268](https://patchblox.com/security/data/cve/CVE-2026-64268.md) | High | RDMA/siw: bound Read Response placement to the RREAD length | 9.8 | 0.0071 | | | [CVE-2026-68154](https://patchblox.com/security/data/cve/CVE-2026-68154.md) | High | libceph: reject zero bucket types in crush_decode | 9.8 | 0.0071 | | | [CVE-2026-68158](https://patchblox.com/security/data/cve/CVE-2026-68158.md) | High | libceph: Fix multiplication overflow in decode_new_up_state_weight() | 9.8 | 0.0071 | | | [CVE-2026-72020](https://patchblox.com/security/data/cve/CVE-2026-72020.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | | | [CVE-2026-72251](https://patchblox.com/security/data/cve/CVE-2026-72251.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | | | [CVE-2026-64269](https://patchblox.com/security/data/cve/CVE-2026-64269.md) | High | RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg | 9.1 | 0.0071 | | | [CVE-2026-72137](https://patchblox.com/security/data/cve/CVE-2026-72137.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0071 | | | [CVE-2026-68155](https://patchblox.com/security/data/cve/CVE-2026-68155.md) | High | libceph: Reject monmaps advertising zero monitors | 8.8 | 0.0070 | | | [CVE-2026-72242](https://patchblox.com/security/data/cve/CVE-2026-72242.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0070 | | | [CVE-2026-68157](https://patchblox.com/security/data/cve/CVE-2026-68157.md) | High | libceph: guard missing CRUSH type name lookup | 7.8 | 0.0070 | | | [CVE-2026-74282](https://patchblox.com/security/data/cve/CVE-2026-74282.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0070 | | | [CVE-2026-64303](https://patchblox.com/security/data/cve/CVE-2026-64303.md) | High | spi: fsl-lpspi: terminate the RX channel on TX prepare failure path | 9.8 | 0.0069 | | | [CVE-2026-68156](https://patchblox.com/security/data/cve/CVE-2026-68156.md) | High | libceph: refresh auth->authorizer_buf{,_len} after authorizer update | 9.8 | 0.0069 | | | [CVE-2026-68161](https://patchblox.com/security/data/cve/CVE-2026-68161.md) | High | sctp: close UDP tunnel sockets during netns teardown | 9.8 | 0.0068 | | | [CVE-2026-46195](https://patchblox.com/security/data/cve/CVE-2026-46195.md) | High | smb: client: validate dacloffset before building DACL pointers | 9.8 | 0.0068 | | | [CVE-2026-72464](https://patchblox.com/security/data/cve/CVE-2026-72464.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0068 | | | [CVE-2026-72254](https://patchblox.com/security/data/cve/CVE-2026-72254.md) | High | kernel-uek64k-modules-core: netfilter: nft_fib: reject fib expression on the netdev egress hook (Theodor Arsenij Larionov-Trichkine) | 7.5 | 0.0067 | | | [CVE-2026-72107](https://patchblox.com/security/data/cve/CVE-2026-72107.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0065 | | | [CVE-2026-72317](https://patchblox.com/security/data/cve/CVE-2026-72317.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 | | | [CVE-2026-72046](https://patchblox.com/security/data/cve/CVE-2026-72046.md) | High | kernel-uek64k-modules-core: gve: fix header buffer corruption with header-split and HW-GRO (Ankit Garg) | 9.8 | 0.0064 | | | [CVE-2026-72217](https://patchblox.com/security/data/cve/CVE-2026-72217.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 | | | [CVE-2026-72221](https://patchblox.com/security/data/cve/CVE-2026-72221.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 | | | [CVE-2026-72222](https://patchblox.com/security/data/cve/CVE-2026-72222.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 | | | [CVE-2026-74316](https://patchblox.com/security/data/cve/CVE-2026-74316.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0063 | | | [CVE-2026-72330](https://patchblox.com/security/data/cve/CVE-2026-72330.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0062 | | | [CVE-2026-80603](https://patchblox.com/security/data/cve/CVE-2026-80603.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.1 | 0.0060 | | | [CVE-2026-72035](https://patchblox.com/security/data/cve/CVE-2026-72035.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.2 | 0.0059 | | | [CVE-2026-68300](https://patchblox.com/security/data/cve/CVE-2026-68300.md) | High | sctp: auth: verify auth requirement when auth_chunk is NULL | 9.8 | 0.0058 | | | [CVE-2026-80590](https://patchblox.com/security/data/cve/CVE-2026-80590.md) | High | inet: frags: strip GSO state from fragments before reassembly | 8.8 | 0.0058 | | | [CVE-2026-64545](https://patchblox.com/security/data/cve/CVE-2026-64545.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_re... | 7.5 | 0.0058 | | | [CVE-2026-53228](https://patchblox.com/security/data/cve/CVE-2026-53228.md) | High | ipv6: sit: reload inner IPv6 header after GSO offloads | 9.8 | 0.0058 | | | [CVE-2026-64577](https://patchblox.com/security/data/cve/CVE-2026-64577.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: gtp: check skb_pull_data() return in gtp1u_send_... | 7.5 | 0.0058 | | | [CVE-2026-46133](https://patchblox.com/security/data/cve/CVE-2026-46133.md) | High | RDMA/rxe: Reject unknown opcodes before ICRC processing | 8.8 | 0.0057 | | | [CVE-2026-72421](https://patchblox.com/security/data/cve/CVE-2026-72421.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 10.0 | 0.0057 | | | [CVE-2026-68123](https://patchblox.com/security/data/cve/CVE-2026-68123.md) | High | openvswitch: fix GSO userspace truncation underflow | 9.8 | 0.0055 | | | [CVE-2026-74737](https://patchblox.com/security/data/cve/CVE-2026-74737.md) | High | net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG | 9.8 | 0.0055 | | | [CVE-2026-74394](https://patchblox.com/security/data/cve/CVE-2026-74394.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0054 | | | [CVE-2026-68136](https://patchblox.com/security/data/cve/CVE-2026-68136.md) | High | net: gro: fix double aggregation of flush-marked skbs | 9.8 | 0.0054 | | | [CVE-2026-43125](https://patchblox.com/security/data/cve/CVE-2026-43125.md) | High | dlm: validate length in dlm_search_rsb_tree | 9.8 | 0.0054 | | | [CVE-2026-64450](https://patchblox.com/security/data/cve/CVE-2026-64450.md) | High | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 9.1 | 0.0054 | | | [CVE-2026-68137](https://patchblox.com/security/data/cve/CVE-2026-68137.md) | High | net/x25: fix use-after-free in x25_kill_by_neigh() | 9.8 | 0.0054 | | | [CVE-2026-74743](https://patchblox.com/security/data/cve/CVE-2026-74743.md) | High | macvlan: inherit needed_headroom and needed_tailroom from lowerdev | 9.8 | 0.0054 | | | [CVE-2026-68096](https://patchblox.com/security/data/cve/CVE-2026-68096.md) | High | audit: fix recursive locking deadlock in audit_dupe_exe() | 7.5 | 0.0053 | | | [CVE-2026-63808](https://patchblox.com/security/data/cve/CVE-2026-63808.md) | High | kernel-rt-64k: kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() | 9.8 | 0.0053 | | | [CVE-2026-64113](https://patchblox.com/security/data/cve/CVE-2026-64113.md) | High | perf: kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning | 9.8 | 0.0053 | | | [CVE-2026-68117](https://patchblox.com/security/data/cve/CVE-2026-68117.md) | High | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 9.8 | 0.0053 | | | [CVE-2026-80557](https://patchblox.com/security/data/cve/CVE-2026-80557.md) | High | bpftool: libceph: fix OOB read in decode_watchers() via missing bounds check (Pavitra Jha) [Orabug: 39972906] | 9.8 | 0.0053 | | | [CVE-2026-68141](https://patchblox.com/security/data/cve/CVE-2026-68141.md) | High | net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() | 7.5 | 0.0052 | | | [CVE-2026-63984](https://patchblox.com/security/data/cve/CVE-2026-63984.md) | High | kernel-default: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865). | 9.8 | 0.0051 | | | [CVE-2026-63993](https://patchblox.com/security/data/cve/CVE-2026-63993.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after s... | 9.8 | 0.0051 | | | [CVE-2026-64007](https://patchblox.com/security/data/cve/CVE-2026-64007.md) | High | kernel-default: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105). | 9.8 | 0.0051 | | | [CVE-2026-74406](https://patchblox.com/security/data/cve/CVE-2026-74406.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0051 | | | [CVE-2026-74495](https://patchblox.com/security/data/cve/CVE-2026-74495.md) | High | igbvf: Fix leak in TX DMA error cleanup | 9.8 | 0.0051 | | | [CVE-2026-74669](https://patchblox.com/security/data/cve/CVE-2026-74669.md) | High | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 9.8 | 0.0051 | | | [CVE-2026-80558](https://patchblox.com/security/data/cve/CVE-2026-80558.md) | High | libceph: Avoid using invalid osd indices from primary_temp | 9.8 | 0.0051 | | | [CVE-2026-80561](https://patchblox.com/security/data/cve/CVE-2026-80561.md) | High | libceph: fix multiple unsafe decodes in decode_locker() | 9.8 | 0.0051 | | | [CVE-2026-63992](https://patchblox.com/security/data/cve/CVE-2026-63992.md) | High | kernel-default: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868). | 9.1 | 0.0051 | | | [CVE-2026-64355](https://patchblox.com/security/data/cve/CVE-2026-64355.md) | High | bpf: Reject fragmented frames in devmap | 9.8 | 0.0051 | | | [CVE-2026-74616](https://patchblox.com/security/data/cve/CVE-2026-74616.md) | High | xdp: reject clones that overrun skb_shared_info tailroom | 9.8 | 0.0051 | | | [CVE-2026-63801](https://patchblox.com/security/data/cve/CVE-2026-63801.md) | High | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 8.8 | 0.0051 | | | [CVE-2026-74744](https://patchblox.com/security/data/cve/CVE-2026-74744.md) | High | ipvlan: inherit needed_headroom and needed_tailroom from phy_dev | 9.8 | 0.0051 | | | [CVE-2026-68315](https://patchblox.com/security/data/cve/CVE-2026-68315.md) | High | sctp: validate stream count in sctp_process_strreset_inreq() | 8.8 | 0.0051 | | | [CVE-2026-68129](https://patchblox.com/security/data/cve/CVE-2026-68129.md) | High | gve: fix Rx queue stall on alloc failure | 7.5 | 0.0051 | | | [CVE-2026-74730](https://patchblox.com/security/data/cve/CVE-2026-74730.md) | High | NFS: Pin the 'struct nfs_server' during a FREE_STATEID call | 9.8 | 0.0051 | | | [CVE-2026-68299](https://patchblox.com/security/data/cve/CVE-2026-68299.md) | High | vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets | 8.8 | 0.0050 | | | [CVE-2026-64048](https://patchblox.com/security/data/cve/CVE-2026-64048.md) | High | kernel-default: net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (bsc#1273484). | 7.8 | 0.0050 | | | [CVE-2026-64312](https://patchblox.com/security/data/cve/CVE-2026-64312.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall... | 7.5 | 0.0050 | | | [CVE-2026-74523](https://patchblox.com/security/data/cve/CVE-2026-74523.md) | High | qede: sync udp_tunnel ports outside qede_lock in the recovery path | 7.5 | 0.0050 | | | [CVE-2026-74717](https://patchblox.com/security/data/cve/CVE-2026-74717.md) | High | net/mlx5: fw_tracer, return NULL on create error | 7.5 | 0.0050 | | | [CVE-2026-74705](https://patchblox.com/security/data/cve/CVE-2026-74705.md) | High | udp: fix potential use-after-free in tunnel segmentation | 10.0 | 0.0050 | | | [CVE-2026-64102](https://patchblox.com/security/data/cve/CVE-2026-64102.md) | High | kernel-64kb: RDMA/siw: Reject MPA FPDU length underflow before signed receive math (bsc#1272516). | 9.8 | 0.0050 | | | [CVE-2026-74255](https://patchblox.com/security/data/cve/CVE-2026-74255.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0050 | | | [CVE-2026-72438](https://patchblox.com/security/data/cve/CVE-2026-72438.md) | High | md/raid10: fix writes_pending and barrier reference leaks on discard failures | 7.5 | 0.0050 | | | [CVE-2026-68082](https://patchblox.com/security/data/cve/CVE-2026-68082.md) | High | libceph: fix two unsafe bare decodes in decode_lockers() | 9.8 | 0.0050 | | | [CVE-2026-68426](https://patchblox.com/security/data/cve/CVE-2026-68426.md) | High | xfrm: fix stale skb->prev after async crypto steals a GSO segment | 9.8 | 0.0050 | | | [CVE-2026-72440](https://patchblox.com/security/data/cve/CVE-2026-72440.md) | High | md/raid1: fix writes_pending and barrier reference leaks on write failures | 7.1 | 0.0050 | | | [CVE-2026-74612](https://patchblox.com/security/data/cve/CVE-2026-74612.md) | High | veth: fix skb length accounting after XDP frag adjustment | 10.0 | 0.0049 | | | [CVE-2026-46115](https://patchblox.com/security/data/cve/CVE-2026-46115.md) | High | block: add pgmap check to biovec_phys_mergeable | 9.8 | 0.0049 | | | [CVE-2026-64000](https://patchblox.com/security/data/cve/CVE-2026-64000.md) | High | kernel-default: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030). | 9.8 | 0.0049 | | | [CVE-2026-74269](https://patchblox.com/security/data/cve/CVE-2026-74269.md) | High | bnxt: fix head underflow on XDP head-grow | 9.8 | 0.0049 | | | [CVE-2026-74474](https://patchblox.com/security/data/cve/CVE-2026-74474.md) | High | vxlan: use pskb_network_may_pull() for transmit path header pulls | 9.8 | 0.0049 | | | [CVE-2026-74723](https://patchblox.com/security/data/cve/CVE-2026-74723.md) | High | btrfs: lzo: reject inline extents without valid headers | 9.8 | 0.0049 | | | [CVE-2026-74476](https://patchblox.com/security/data/cve/CVE-2026-74476.md) | High | veth: convert frag_list skbs before running XDP | 9.1 | 0.0049 | | | [CVE-2026-53264](https://patchblox.com/security/data/cve/CVE-2026-53264.md) | High | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 7.8 | 0.0049 | | | [CVE-2026-80714](https://patchblox.com/security/data/cve/CVE-2026-80714.md) | High | ipvs: do not propagate one-packet flag to synced conns | 9.8 | 0.0048 | | | [CVE-2026-53284](https://patchblox.com/security/data/cve/CVE-2026-53284.md) | High | btrfs: only release the dirty pages io tree after successful writes | 7.5 | 0.0048 | | | [CVE-2026-74550](https://patchblox.com/security/data/cve/CVE-2026-74550.md) | High | net: do not send ICMP/NDISC Redirects when peer allocation fails | 7.5 | 0.0048 | | | [CVE-2026-74695](https://patchblox.com/security/data/cve/CVE-2026-74695.md) | High | netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() | 7.5 | 0.0048 | | | [CVE-2026-68302](https://patchblox.com/security/data/cve/CVE-2026-68302.md) | High | amt: re-read skb header pointers after every pull | 9.8 | 0.0048 | | | [CVE-2026-64148](https://patchblox.com/security/data/cve/CVE-2026-64148.md) | High | kernel-64kb: pds_core: check health in devcmd wait (bsc#1273956). | 7.5 | 0.0047 | | | [CVE-2026-52946](https://patchblox.com/security/data/cve/CVE-2026-52946.md) | High | fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling | 7.5 | 0.0047 | | | [CVE-2026-72100](https://patchblox.com/security/data/cve/CVE-2026-72100.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0046 | | | [CVE-2026-64383](https://patchblox.com/security/data/cve/CVE-2026-64383.md) | High | smb: client: fix double-free in SMB2_flush() replay | 9.8 | 0.0046 | | | [CVE-2026-64384](https://patchblox.com/security/data/cve/CVE-2026-64384.md) | High | smb: client: fix change notify replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64385](https://patchblox.com/security/data/cve/CVE-2026-64385.md) | High | smb: client: fix double-free in SMB2_ioctl() replay | 9.8 | 0.0046 | | | [CVE-2026-64386](https://patchblox.com/security/data/cve/CVE-2026-64386.md) | High | smb: client: fix query_info() replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64387](https://patchblox.com/security/data/cve/CVE-2026-64387.md) | High | smb: client: fix query directory replay double-free | 9.8 | 0.0046 | | | [CVE-2026-74475](https://patchblox.com/security/data/cve/CVE-2026-74475.md) | High | vxlan: use neigh_ha_snapshot() in route_shortcircuit() | 10.0 | 0.0045 | | | [CVE-2026-64380](https://patchblox.com/security/data/cve/CVE-2026-64380.md) | High | smb: client: harden POSIX SID length parsing | 8.2 | 0.0044 | | | [CVE-2026-64003](https://patchblox.com/security/data/cve/CVE-2026-64003.md) | High | kernel-64kb: scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (bsc#1273782). | 7.5 | 0.0044 | | | [CVE-2026-68120](https://patchblox.com/security/data/cve/CVE-2026-68120.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware... | 7.5 | 0.0044 | | | [CVE-2026-64162](https://patchblox.com/security/data/cve/CVE-2026-64162.md) | High | kernel-zfcpdump-modules-core: kernel: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() | 9.8 | 0.0044 | | | [CVE-2026-74598](https://patchblox.com/security/data/cve/CVE-2026-74598.md) | High | ipv6: fix Route Information option length validation | 7.5 | 0.0043 | | | [CVE-2026-74581](https://patchblox.com/security/data/cve/CVE-2026-74581.md) | High | net: ipv6: clear suppressed fib6 rule result | 9.8 | 0.0042 | | | [CVE-2026-64368](https://patchblox.com/security/data/cve/CVE-2026-64368.md) | High | mm/slab: do not limit zeroing to orig_size when only red zoning is enabled | 8.1 | 0.0042 | | | [CVE-2026-68352](https://patchblox.com/security/data/cve/CVE-2026-68352.md) | High | wifi: ath6kl: fix OOB read from firmware IE lengths in connect event | 8.3 | 0.0042 | | | [CVE-2026-68196](https://patchblox.com/security/data/cve/CVE-2026-68196.md) | High | wifi: wilc1000: validate assoc response length before subtracting header | 8.3 | 0.0041 | | | [CVE-2026-68192](https://patchblox.com/security/data/cve/CVE-2026-68192.md) | High | wifi: brcmfmac: make release_scratchbuffers idempotent | 8.8 | 0.0041 | | | [CVE-2026-74556](https://patchblox.com/security/data/cve/CVE-2026-74556.md) | High | scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer | 9.8 | 0.0040 | | | [CVE-2026-80586](https://patchblox.com/security/data/cve/CVE-2026-80586.md) | High | mptcp: options: reset DSS fields in case of unexpected size | 9.8 | 0.0040 | | | [CVE-2026-72469](https://patchblox.com/security/data/cve/CVE-2026-72469.md) | High | xprtrdma: Fix ep kref imbalance on ADDR_CHANGE | 8.8 | 0.0040 | | | [CVE-2026-46135](https://patchblox.com/security/data/cve/CVE-2026-46135.md) | High | nvmet-tcp: fix race between ICReq handling and queue teardown | 9.8 | 0.0040 | | | [CVE-2026-68199](https://patchblox.com/security/data/cve/CVE-2026-68199.md) | High | wifi: ath6kl: fix OOB access from firmware ADDBA window size | 8.8 | 0.0038 | | | [CVE-2026-74665](https://patchblox.com/security/data/cve/CVE-2026-74665.md) | High | kernel-uek64k-modules-core: net: fix skb length accounting after generic XDP frag adjustment (Sun Jian) | 9.1 | 0.0037 | | | [CVE-2026-80589](https://patchblox.com/security/data/cve/CVE-2026-80589.md) | High | block: stop the timeout timer when releasing a never added disk | 9.8 | 0.0037 | | | [CVE-2026-64210](https://patchblox.com/security/data/cve/CVE-2026-64210.md) | High | net/mlx5e: xsk: Fix unlocked writing to ICOSQ | 7.5 | 0.0037 | | | [CVE-2026-68433](https://patchblox.com/security/data/cve/CVE-2026-68433.md) | High | libceph: bound get_version reply decode to front len | 8.6 | 0.0036 | | | [CVE-2026-63889](https://patchblox.com/security/data/cve/CVE-2026-63889.md) | High | kernel-rt-modules-core: kernel: scsi: scsi_transport_fc: Widen FPIN pname walker counter to u32 | 8.8 | 0.0036 | | | [CVE-2026-64313](https://patchblox.com/security/data/cve/CVE-2026-64313.md) | High | crypto: ecc - Fix carry overflow in vli multiplication | 8.8 | 0.0036 | | | [CVE-2026-64364](https://patchblox.com/security/data/cve/CVE-2026-64364.md) | High | HID: multitouch: fix out-of-bounds bit access on mt_io_flags | 8.8 | 0.0036 | | | [CVE-2026-64382](https://patchblox.com/security/data/cve/CVE-2026-64382.md) | High | smb: client: fix double-free in SMB2_open() replay | 8.8 | 0.0035 | | | [CVE-2026-46304](https://patchblox.com/security/data/cve/CVE-2026-46304.md) | High | nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free | 7.5 | 0.0035 | | | [CVE-2026-63925](https://patchblox.com/security/data/cve/CVE-2026-63925.md) | High | kernel-64kb: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008). | 8.1 | 0.0035 | | | [CVE-2026-64093](https://patchblox.com/security/data/cve/CVE-2026-64093.md) | High | kernel-uek64k-modules: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0035 | | | [CVE-2026-68124](https://patchblox.com/security/data/cve/CVE-2026-68124.md) | High | mctp: serial: handle zero-length frames to prevent rx buffer overflow | 9.6 | 0.0034 | | | [CVE-2026-53180](https://patchblox.com/security/data/cve/CVE-2026-53180.md) | High | kernel-64kb: timers/migration: Fix livelock in tmigr_handle_remote_up() (bsc#1269888). | 7.5 | 0.0034 | | | [CVE-2026-74557](https://patchblox.com/security/data/cve/CVE-2026-74557.md) | High | scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer | 7.5 | 0.0033 | | | [CVE-2026-64445](https://patchblox.com/security/data/cve/CVE-2026-64445.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and... | 8.8 | 0.0032 | | | [CVE-2026-68125](https://patchblox.com/security/data/cve/CVE-2026-68125.md) | High | mac802154: llsec: reject frames shorter than the authentication tag | 8.8 | 0.0032 | | | [CVE-2026-64024](https://patchblox.com/security/data/cve/CVE-2026-64024.md) | High | kernel-debug-modules: kernel: tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction | 9.4 | 0.0031 | | | [CVE-2026-68470](https://patchblox.com/security/data/cve/CVE-2026-68470.md) | High | wifi: mac80211: validate extension-frame layout before RX | 8.8 | 0.0031 | | | [CVE-2026-64178](https://patchblox.com/security/data/cve/CVE-2026-64178.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0030 | | | [CVE-2026-52920](https://patchblox.com/security/data/cve/CVE-2026-52920.md) | High | netfilter: xt_policy: fix strict mode inbound policy matching | 8.3 | 0.0030 | | | [CVE-2026-43239](https://patchblox.com/security/data/cve/CVE-2026-43239.md) | High | kernel-64kb: smb: client: prevent races in ->query_interfaces() (bsc#1264444). | 8.8 | 0.0029 | | | [CVE-2026-64442](https://patchblox.com/security/data/cve/CVE-2026-64442.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in... | 8.1 | 0.0029 | | | [CVE-2026-64444](https://patchblox.com/security/data/cve/CVE-2026-64444.md) | High | staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop | 8.1 | 0.0029 | | | [CVE-2026-68353](https://patchblox.com/security/data/cve/CVE-2026-68353.md) | High | wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler | 8.1 | 0.0029 | | | [CVE-2026-64547](https://patchblox.com/security/data/cve/CVE-2026-64547.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packet_len before pa... | 8.1 | 0.0028 | | | [CVE-2026-64088](https://patchblox.com/security/data/cve/CVE-2026-64088.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0028 | | | [CVE-2026-64443](https://patchblox.com/security/data/cve/CVE-2026-64443.md) | High | staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop | 8.1 | 0.0028 | | | [CVE-2026-64540](https://patchblox.com/security/data/cve/CVE-2026-64540.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in geneli... | 8.1 | 0.0028 | | | [CVE-2026-68373](https://patchblox.com/security/data/cve/CVE-2026-68373.md) | High | wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() | 8.1 | 0.0028 | | | [CVE-2026-64406](https://patchblox.com/security/data/cve/CVE-2026-64406.md) | High | Bluetooth: fix UAF in bt_accept_dequeue() | 8.0 | 0.0028 | | | [CVE-2026-63891](https://patchblox.com/security/data/cve/CVE-2026-63891.md) | High | kernel-64kb: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641). | 7.0 | 0.0028 | | | [CVE-2026-64561](https://patchblox.com/security/data/cve/CVE-2026-64561.md) | High | KVM: x86: Check for invalid/obsolete root *after* making MMU pages available | 8.8 | 0.0027 | | | [CVE-2026-64440](https://patchblox.com/security/data/cve/CVE-2026-64440.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HT_caps_han... | 8.1 | 0.0027 | | | [CVE-2026-64403](https://patchblox.com/security/data/cve/CVE-2026-64403.md) | High | Bluetooth: L2CAP: validate option length before reading conf opt value | 7.1 | 0.0027 | | | [CVE-2026-64408](https://patchblox.com/security/data/cve/CVE-2026-64408.md) | High | Bluetooth: bnep: pin L2CAP connection during netdev registration | 8.8 | 0.0026 | | | [CVE-2026-68091](https://patchblox.com/security/data/cve/CVE-2026-68091.md) | High | HID: wacom: stop hardware after post-start probe failures | 8.8 | 0.0026 | | | [CVE-2026-68326](https://patchblox.com/security/data/cve/CVE-2026-68326.md) | High | wifi: mwifiex: bound uAP association event IEs to the event buffer | 8.8 | 0.0026 | | | [CVE-2026-68397](https://patchblox.com/security/data/cve/CVE-2026-68397.md) | High | net/iucv: take a reference on the socket found in afiucv_hs_rcv() | 8.8 | 0.0026 | | | [CVE-2026-68425](https://patchblox.com/security/data/cve/CVE-2026-68425.md) | High | IB/mad: Drop unmatched RMPP responses before reassembly | 7.1 | 0.0026 | | | [CVE-2026-64536](https://patchblox.com/security/data/cve/CVE-2026-64536.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tk... | 8.1 | 0.0026 | | | [CVE-2026-74537](https://patchblox.com/security/data/cve/CVE-2026-74537.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_conn_rea... | 8.8 | 0.0026 | | | [CVE-2026-72108](https://patchblox.com/security/data/cve/CVE-2026-72108.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 | | | [CVE-2026-64434](https://patchblox.com/security/data/cve/CVE-2026-64434.md) | High | Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref | 8.8 | 0.0026 | | | [CVE-2026-64554](https://patchblox.com/security/data/cve/CVE-2026-64554.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in... | 8.8 | 0.0026 | | | [CVE-2026-68389](https://patchblox.com/security/data/cve/CVE-2026-68389.md) | High | Bluetooth: hci_qca: Clear memdump state on invalid dump size | 8.8 | 0.0025 | | | [CVE-2026-64586](https://patchblox.com/security/data/cve/CVE-2026-64586.md) | High | wifi: brcmfmac: drain bus_reset work on device removal | 8.8 | 0.0025 | | | [CVE-2026-68393](https://patchblox.com/security/data/cve/CVE-2026-68393.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: extend conn_hash lookup cri... | 8.8 | 0.0025 | | | [CVE-2026-74534](https://patchblox.com/security/data/cve/CVE-2026-74534.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix refcounting of iso_conn iso... | 8.8 | 0.0024 | | | [CVE-2026-74535](https://patchblox.com/security/data/cve/CVE-2026-74535.md) | High | kernel-uek64k-modules-core: Bluetooth: ISO: avoid deadlocks in iso_sock_timeout (Pauli Virtanen) | 8.8 | 0.0024 | | | [CVE-2026-74533](https://patchblox.com/security/data/cve/CVE-2026-74533.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix race of kfree vs kref_get_un... | 8.8 | 0.0024 | | | [CVE-2026-68278](https://patchblox.com/security/data/cve/CVE-2026-68278.md) | High | drm/dp/mst: fix buffer overflows in sideband chunk accumulation | 8.1 | 0.0024 | | | [CVE-2026-64515](https://patchblox.com/security/data/cve/CVE-2026-64515.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If eith... | 8.3 | 0.0024 | | | [CVE-2026-68480](https://patchblox.com/security/data/cve/CVE-2026-68480.md) | High | x86/bugs: Make Safe-RET robust against interrupt injection | 8.8 | 0.0023 | | | [CVE-2026-68398](https://patchblox.com/security/data/cve/CVE-2026-68398.md) | High | ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF | 9.8 | 0.0023 | | | [CVE-2026-64507](https://patchblox.com/security/data/cve/CVE-2026-64507.md) | High | x86/bugs: Enable IBPB flush on BPF JIT allocation | 7.8 | 0.0023 | | | [CVE-2026-68414](https://patchblox.com/security/data/cve/CVE-2026-68414.md) | High | wifi: cfg80211: cancel sched scan results work on unregister | 7.5 | 0.0023 | | | [CVE-2026-68138](https://patchblox.com/security/data/cve/CVE-2026-68138.md) | High | net/sched: serialize qdisc_rtab_list against concurrent get/put | 8.8 | 0.0022 | | | [CVE-2026-64452](https://patchblox.com/security/data/cve/CVE-2026-64452.md) | High | 6lowpan: fix NHC entry use-after-free on error path | 7.1 | 0.0022 | | | [CVE-2026-68351](https://patchblox.com/security/data/cve/CVE-2026-68351.md) | High | wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read | 7.1 | 0.0022 | | | [CVE-2026-68188](https://patchblox.com/security/data/cve/CVE-2026-68188.md) | High | Bluetooth: RFCOMM: Fix session UAF in set_termios | 8.8 | 0.0022 | | | [CVE-2026-68368](https://patchblox.com/security/data/cve/CVE-2026-68368.md) | High | usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() | 7.1 | 0.0022 | | | [CVE-2026-72306](https://patchblox.com/security/data/cve/CVE-2026-72306.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | n/a | 0.0022 | | | [CVE-2026-68169](https://patchblox.com/security/data/cve/CVE-2026-68169.md) | High | mptcp: pm: userspace: fix use-after-free in get_local_id | 9.8 | 0.0021 | | | [CVE-2026-68181](https://patchblox.com/security/data/cve/CVE-2026-68181.md) | High | mei: bus: access mei_device under device_lock on cleanup | 7.8 | 0.0021 | | | [CVE-2026-68165](https://patchblox.com/security/data/cve/CVE-2026-68165.md) | High | mm/damon/core: validate ranges in damon_set_regions() | 7.1 | 0.0021 | | | [CVE-2026-68182](https://patchblox.com/security/data/cve/CVE-2026-68182.md) | High | comedi: comedi_parport: deal with premature interrupt | 7.1 | 0.0021 | | | [CVE-2026-68286](https://patchblox.com/security/data/cve/CVE-2026-68286.md) | High | drop_monitor: perform u64_stats updates under IRQ-disabled section | 7.1 | 0.0021 | | | [CVE-2026-80667](https://patchblox.com/security/data/cve/CVE-2026-80667.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete() on... | n/a | 0.0021 | | | [CVE-2026-63810](https://patchblox.com/security/data/cve/CVE-2026-63810.md) | High | block: Avoid mounting the bdev pseudo-filesystem in userspace | 7.1 | 0.0021 | | | [CVE-2026-68193](https://patchblox.com/security/data/cve/CVE-2026-68193.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio... | 8.1 | 0.0021 | | | [CVE-2026-64572](https://patchblox.com/security/data/cve/CVE-2026-64572.md) | High | ipv4: fib: free fib_alias with kfree_rcu() on insert error path | 8.8 | 0.0020 | | | [CVE-2026-53365](https://patchblox.com/security/data/cve/CVE-2026-53365.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-... | 8.8 | 0.0020 | | | [CVE-2026-64010](https://patchblox.com/security/data/cve/CVE-2026-64010.md) | High | kernel-default: nfc: llcp: Fix use-after-free race in nfc_llcp_recv_cc() (bsc#1273882). | 8.8 | 0.0020 | | | [CVE-2026-72342](https://patchblox.com/security/data/cve/CVE-2026-72342.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | 0.0020 | | | [CVE-2026-72343](https://patchblox.com/security/data/cve/CVE-2026-72343.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.4 | 0.0020 | | | [CVE-2026-68085](https://patchblox.com/security/data/cve/CVE-2026-68085.md) | High | Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled | 8.0 | 0.0020 | | | [CVE-2026-64490](https://patchblox.com/security/data/cve/CVE-2026-64490.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the... | 8.8 | 0.0019 | | | [CVE-2026-64367](https://patchblox.com/security/data/cve/CVE-2026-64367.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to pre... | 7.8 | 0.0019 | | | [CVE-2026-68255](https://patchblox.com/security/data/cve/CVE-2026-68255.md) | High | drm/virtio: bound EDID block reads to the response buffer | 7.7 | 0.0019 | | | [CVE-2026-63926](https://patchblox.com/security/data/cve/CVE-2026-63926.md) | High | kernel-64kb: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019). | 8.4 | 0.0019 | | | [CVE-2026-72280](https://patchblox.com/security/data/cve/CVE-2026-72280.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0019 | | | [CVE-2026-68093](https://patchblox.com/security/data/cve/CVE-2026-68093.md) | High | KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug | 7.0 | 0.0019 | | | [CVE-2026-72289](https://patchblox.com/security/data/cve/CVE-2026-72289.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.3 | 0.0019 | | | [CVE-2026-72495](https://patchblox.com/security/data/cve/CVE-2026-72495.md) | High | RDMA/bnxt_re: Avoid repeated requests to allocate WC pages | 9.3 | 0.0019 | | | [CVE-2026-64039](https://patchblox.com/security/data/cve/CVE-2026-64039.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.7 | 0.0019 | | | [CVE-2026-72487](https://patchblox.com/security/data/cve/CVE-2026-72487.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.7 | 0.0019 | | | [CVE-2026-64484](https://patchblox.com/security/data/cve/CVE-2026-64484.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_new1() return value... | n/a | 0.0019 | | | [CVE-2026-68363](https://patchblox.com/security/data/cve/CVE-2026-68363.md) | High | wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request | 8.8 | 0.0018 | | | [CVE-2026-68366](https://patchblox.com/security/data/cve/CVE-2026-68366.md) | High | usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer | 8.1 | 0.0018 | | | [CVE-2026-64470](https://patchblox.com/security/data/cve/CVE-2026-64470.md) | High | Bluetooth: btusb: fix use-after-free on marvell probe failure | 7.1 | 0.0018 | | | [CVE-2026-64471](https://patchblox.com/security/data/cve/CVE-2026-64471.md) | High | Bluetooth: btusb: fix use-after-free on registration failure | 7.1 | 0.0018 | | | [CVE-2026-68135](https://patchblox.com/security/data/cve/CVE-2026-68135.md) | High | net: hip04: fix RX buffer leak on build_skb failure | 7.1 | 0.0018 | | | [CVE-2026-68350](https://patchblox.com/security/data/cve/CVE-2026-68350.md) | High | wifi: carl9170: fix OOB read from off-by-two in TX status handler | 7.1 | 0.0018 | | | [CVE-2026-68365](https://patchblox.com/security/data/cve/CVE-2026-68365.md) | High | USB: serial: io_edgeport: cap received transmit credits | 7.1 | 0.0018 | | | [CVE-2026-64483](https://patchblox.com/security/data/cve/CVE-2026-64483.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: bound the sample count t... | 7.0 | 0.0018 | | | [CVE-2026-64570](https://patchblox.com/security/data/cve/CVE-2026-64570.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix fils_discovery double free o... | 7.8 | 0.0018 | | | [CVE-2026-72425](https://patchblox.com/security/data/cve/CVE-2026-72425.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0018 | | | [CVE-2026-68371](https://patchblox.com/security/data/cve/CVE-2026-68371.md) | High | usb: musb: omap2430: Do not put borrowed of_node in probe | 8.4 | 0.0018 | | | [CVE-2026-64300](https://patchblox.com/security/data/cve/CVE-2026-64300.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in map_range() map_range... | 7.8 | 0.0018 | | | [CVE-2026-74584](https://patchblox.com/security/data/cve/CVE-2026-74584.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0018 | | | [CVE-2026-63860](https://patchblox.com/security/data/cve/CVE-2026-63860.md) | High | kernel-64kb: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429). | 8.4 | 0.0018 | | | [CVE-2026-68179](https://patchblox.com/security/data/cve/CVE-2026-68179.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock erro... | 8.4 | 0.0018 | | | [CVE-2026-68289](https://patchblox.com/security/data/cve/CVE-2026-68289.md) | High | tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() | 7.0 | 0.0018 | | | [CVE-2026-64513](https://patchblox.com/security/data/cve/CVE-2026-64513.md) | High | KVM: x86: Unconditionally recompute CR8 intercept on PPR update | 8.4 | 0.0018 | | | [CVE-2026-68202](https://patchblox.com/security/data/cve/CVE-2026-68202.md) | High | ALSA: seq: close a re-opened queue timer in the destructor | 7.8 | 0.0018 | | | [CVE-2026-68206](https://patchblox.com/security/data/cve/CVE-2026-68206.md) | High | media: v4l2-ctrls: validate HEVC active reference counts | 7.8 | 0.0018 | | | [CVE-2026-68213](https://patchblox.com/security/data/cve/CVE-2026-68213.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on sta... | 7.8 | 0.0018 | | | [CVE-2026-68216](https://patchblox.com/security/data/cve/CVE-2026-68216.md) | High | media: pwc: Return queued buffers on start_streaming() failure | 7.8 | 0.0018 | | | [CVE-2026-68088](https://patchblox.com/security/data/cve/CVE-2026-68088.md) | High | usb: gadget: function: rndis: add length check to response query | 7.1 | 0.0018 | | | [CVE-2026-64503](https://patchblox.com/security/data/cve/CVE-2026-64503.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on w... | n/a | 0.0018 | | | [CVE-2026-63970](https://patchblox.com/security/data/cve/CVE-2026-63970.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy... | 8.8 | 0.0018 | | | [CVE-2026-64286](https://patchblox.com/security/data/cve/CVE-2026-64286.md) | High | KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU | 8.2 | 0.0018 | | | [CVE-2026-64287](https://patchblox.com/security/data/cve/CVE-2026-64287.md) | High | KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU | 8.2 | 0.0018 | | | [CVE-2026-63898](https://patchblox.com/security/data/cve/CVE-2026-63898.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63901](https://patchblox.com/security/data/cve/CVE-2026-63901.md) | High | kernel-64kb: USB: serial: digi_acceleport: fix memory corruption with small endpoints (bsc#1272501). | 7.8 | 0.0018 | | | [CVE-2026-64481](https://patchblox.com/security/data/cve/CVE-2026-64481.md) | High | ALSA: hda/cs35l41: Fix firmware load work teardown | 7.8 | 0.0018 | | | [CVE-2026-68204](https://patchblox.com/security/data/cve/CVE-2026-68204.md) | High | media: vivid: check for vb2_is_busy() when toggling caps | 7.8 | 0.0018 | | | [CVE-2026-68209](https://patchblox.com/security/data/cve/CVE-2026-68209.md) | High | media: sun4i-csi: Return queued buffers on start_streaming() failure | 7.8 | 0.0018 | | | [CVE-2026-72282](https://patchblox.com/security/data/cve/CVE-2026-72282.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | | | [CVE-2026-72350](https://patchblox.com/security/data/cve/CVE-2026-72350.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | | | [CVE-2026-74296](https://patchblox.com/security/data/cve/CVE-2026-74296.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | | | [CVE-2026-74297](https://patchblox.com/security/data/cve/CVE-2026-74297.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | | | [CVE-2026-63906](https://patchblox.com/security/data/cve/CVE-2026-63906.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.4 | 0.0018 | | | [CVE-2026-68219](https://patchblox.com/security/data/cve/CVE-2026-68219.md) | High | media: nxp: imx8-isi: Fix potential out-of-bounds issues | 7.8 | 0.0018 | | | [CVE-2026-72034](https://patchblox.com/security/data/cve/CVE-2026-72034.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | | | [CVE-2026-72347](https://patchblox.com/security/data/cve/CVE-2026-72347.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.3 | 0.0017 | | | [CVE-2026-72345](https://patchblox.com/security/data/cve/CVE-2026-72345.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB erro... | 7.8 | 0.0017 | | | [CVE-2026-72019](https://patchblox.com/security/data/cve/CVE-2026-72019.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.3 | 0.0017 | | | [CVE-2026-74346](https://patchblox.com/security/data/cve/CVE-2026-74346.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | n/a | 0.0017 | | | [CVE-2026-63920](https://patchblox.com/security/data/cve/CVE-2026-63920.md) | High | kernel-default: ipv6: validate extension header length before copying to cmsg (bsc#1272877). | 8.1 | 0.0017 | | | [CVE-2026-64265](https://patchblox.com/security/data/cve/CVE-2026-64265.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_r... | 7.8 | 0.0017 | | | [CVE-2026-72072](https://patchblox.com/security/data/cve/CVE-2026-72072.md) | High | kernel: net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete (Mohammad Heib) [RHEL-242927] | 7.8 | 0.0017 | | | [CVE-2026-64317](https://patchblox.com/security/data/cve/CVE-2026-64317.md) | High | isofs: bound Rock Ridge symlink components to the SL record | 7.1 | 0.0017 | | | [CVE-2026-64604](https://patchblox.com/security/data/cve/CVE-2026-64604.md) | High | KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode | 8.4 | 0.0017 | | | [CVE-2026-68201](https://patchblox.com/security/data/cve/CVE-2026-68201.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its... | 8.3 | 0.0017 | | | [CVE-2026-63917](https://patchblox.com/security/data/cve/CVE-2026-63917.md) | High | kernel-default: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904). | 8.8 | 0.0017 | | | [CVE-2026-64276](https://patchblox.com/security/data/cve/CVE-2026-64276.md) | High | Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count | 8.8 | 0.0017 | | | [CVE-2026-64277](https://patchblox.com/security/data/cve/CVE-2026-64277.md) | High | Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count | 8.8 | 0.0017 | | | [CVE-2026-64304](https://patchblox.com/security/data/cve/CVE-2026-64304.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths... | 8.8 | 0.0017 | | | [CVE-2026-72136](https://patchblox.com/security/data/cve/CVE-2026-72136.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0017 | | | [CVE-2026-64104](https://patchblox.com/security/data/cve/CVE-2026-64104.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.7 | 0.0017 | | | [CVE-2026-63928](https://patchblox.com/security/data/cve/CVE-2026-63928.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 | | | [CVE-2026-64270](https://patchblox.com/security/data/cve/CVE-2026-64270.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packe... | 7.8 | 0.0017 | | | [CVE-2026-64271](https://patchblox.com/security/data/cve/CVE-2026-64271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on ever... | 7.8 | 0.0017 | | | [CVE-2026-64272](https://patchblox.com/security/data/cve/CVE-2026-64272.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S a... | 7.8 | 0.0017 | | | [CVE-2026-64273](https://patchblox.com/security/data/cve/CVE-2026-64273.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-... | 7.8 | 0.0017 | | | [CVE-2026-64274](https://patchblox.com/security/data/cve/CVE-2026-64274.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contac... | 7.8 | 0.0017 | | | [CVE-2026-64296](https://patchblox.com/security/data/cve/CVE-2026-64296.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_e... | 7.8 | 0.0017 | | | [CVE-2026-64322](https://patchblox.com/security/data/cve/CVE-2026-64322.md) | High | udf: validate sparing table length as an entry count, not a byte count | 7.8 | 0.0017 | | | [CVE-2026-64333](https://patchblox.com/security/data/cve/CVE-2026-64333.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer c... | 7.8 | 0.0017 | | | [CVE-2026-72036](https://patchblox.com/security/data/cve/CVE-2026-72036.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-72164](https://patchblox.com/security/data/cve/CVE-2026-72164.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-72450](https://patchblox.com/security/data/cve/CVE-2026-72450.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-72488](https://patchblox.com/security/data/cve/CVE-2026-72488.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_coun... | 7.8 | 0.0017 | | | [CVE-2026-64582](https://patchblox.com/security/data/cve/CVE-2026-64582.md) | High | RDMA/rxe: Fix a use-after-free problem in rxe_mmap | 8.8 | 0.0017 | | | [CVE-2026-68307](https://patchblox.com/security/data/cve/CVE-2026-68307.md) | High | kernel-uek64k-modules-core: wifi: mt76: mt7925: fix crash in reset link replay (Sean Wang) | 8.1 | 0.0017 | | | [CVE-2026-68267](https://patchblox.com/security/data/cve/CVE-2026-68267.md) | High | kernel: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists (CKI Backport Bot) [RHEL-237964] | 7.8 | 0.0017 | | | [CVE-2026-72485](https://patchblox.com/security/data/cve/CVE-2026-72485.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: coresight: platform: defer connection counter in... | 7.8 | 0.0017 | | | [CVE-2026-80838](https://patchblox.com/security/data/cve/CVE-2026-80838.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-68306](https://patchblox.com/security/data/cve/CVE-2026-68306.md) | High | wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() | 7.1 | 0.0017 | | | [CVE-2026-64518](https://patchblox.com/security/data/cve/CVE-2026-64518.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao... | n/a | 0.0017 | | | [CVE-2026-64519](https://patchblox.com/security/data/cve/CVE-2026-64519.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocati... | n/a | 0.0017 | | | [CVE-2026-74286](https://patchblox.com/security/data/cve/CVE-2026-74286.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: pfcp: allocate per-cpu tstats for PFCP netd... | n/a | 0.0017 | | | [CVE-2026-64563](https://patchblox.com/security/data/cve/CVE-2026-64563.md) | High | rhashtable: clear stale iter->p on table restart | 8.1 | 0.0017 | | | [CVE-2026-72243](https://patchblox.com/security/data/cve/CVE-2026-72243.md) | High | kernel: selinux: check connect-related permissions on TCP Fast Open (CKI Backport Bot) [RHEL-258014] | 8.8 | 0.0017 | | | [CVE-2026-64219](https://patchblox.com/security/data/cve/CVE-2026-64219.md) | High | drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async | 7.8 | 0.0017 | | | [CVE-2026-64593](https://patchblox.com/security/data/cve/CVE-2026-64593.md) | High | btrfs: do not trim a device which is not writeable | 9.8 | 0.0017 | | | [CVE-2026-64323](https://patchblox.com/security/data/cve/CVE-2026-64323.md) | High | udf: validate VAT header length against the VAT inode size | 7.1 | 0.0017 | | | [CVE-2026-64504](https://patchblox.com/security/data/cve/CVE-2026-64504.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FI... | n/a | 0.0017 | | | [CVE-2026-64346](https://patchblox.com/security/data/cve/CVE-2026-64346.md) | High | usb: gadget: udc: Fix use-after-free in gadget_match_driver | 7.8 | 0.0016 | | | [CVE-2026-68178](https://patchblox.com/security/data/cve/CVE-2026-68178.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is op... | 7.8 | 0.0016 | | | [CVE-2026-72389](https://patchblox.com/security/data/cve/CVE-2026-72389.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 | | | [CVE-2026-72103](https://patchblox.com/security/data/cve/CVE-2026-72103.md) | High | kernel-uek64k-modules-core: dm: avoid leaking the caller's thread keyring via the table device file (Ingo Blechschmidt) | 7.3 | 0.0016 | | | [CVE-2026-72297](https://patchblox.com/security/data/cve/CVE-2026-72297.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0016 | | | [CVE-2026-72500](https://patchblox.com/security/data/cve/CVE-2026-72500.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmwar... | 8.8 | 0.0016 | | | [CVE-2026-63918](https://patchblox.com/security/data/cve/CVE-2026-63918.md) | High | kernel-uek64k-modules-usb: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 | | | [CVE-2026-68228](https://patchblox.com/security/data/cve/CVE-2026-68228.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move src_buf Removal... | 7.8 | 0.0016 | | | [CVE-2026-68260](https://patchblox.com/security/data/cve/CVE-2026-68260.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vm_ctx->lock before map... | 7.8 | 0.0016 | | | [CVE-2026-64556](https://patchblox.com/security/data/cve/CVE-2026-64556.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_... | 8.8 | 0.0016 | | | [CVE-2026-63823](https://patchblox.com/security/data/cve/CVE-2026-63823.md) | High | keys: Pin request_key_auth payload in instantiate paths | 8.8 | 0.0016 | | | [CVE-2026-68416](https://patchblox.com/security/data/cve/CVE-2026-68416.md) | High | mtd: fix double free and WARN_ON in add_mtd_device() error paths | 7.8 | 0.0016 | | | [CVE-2026-68448](https://patchblox.com/security/data/cve/CVE-2026-68448.md) | High | ovl: check access to copy_file_range source with src mounter creds | 7.8 | 0.0016 | | | [CVE-2026-64527](https://patchblox.com/security/data/cve/CVE-2026-64527.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receiv... | 7.0 | 0.0016 | | | [CVE-2026-64243](https://patchblox.com/security/data/cve/CVE-2026-64243.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bound... | 7.1 | 0.0016 | | | [CVE-2026-64294](https://patchblox.com/security/data/cve/CVE-2026-64294.md) | High | mm: do file ownership checks with the proper mount idmap | 7.1 | 0.0016 | | | [CVE-2026-68229](https://patchblox.com/security/data/cve/CVE-2026-68229.md) | High | media: cedrus: skip invalid H.264 reference list entries | 7.1 | 0.0016 | | | [CVE-2026-64306](https://patchblox.com/security/data/cve/CVE-2026-64306.md) | High | crypto: drbg - Fix returning success on failure in CTR_DRBG | 7.0 | 0.0016 | | | [CVE-2026-31530](https://patchblox.com/security/data/cve/CVE-2026-31530.md) | High | cxl/port: Fix use after free of parent_port in cxl_detach_ep() | 7.8 | 0.0016 | | | [CVE-2026-63921](https://patchblox.com/security/data/cve/CVE-2026-63921.md) | High | kernel-default: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918). | 8.8 | 0.0016 | | | [CVE-2026-72061](https://patchblox.com/security/data/cve/CVE-2026-72061.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0016 | | | [CVE-2026-52912](https://patchblox.com/security/data/cve/CVE-2026-52912.md) | High | netfilter: nf_queue: hold bridge skb->dev while queued | 7.8 | 0.0016 | | | [CVE-2026-64574](https://patchblox.com/security/data/cve/CVE-2026-64574.md) | High | wifi: mac80211: tear down new links on vif update error path | 7.8 | 0.0016 | | | [CVE-2026-64589](https://patchblox.com/security/data/cve/CVE-2026-64589.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registratio... | n/a | 0.0016 | | | [CVE-2026-64603](https://patchblox.com/security/data/cve/CVE-2026-64603.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify han... | n/a | 0.0016 | | | [CVE-2026-64247](https://patchblox.com/security/data/cve/CVE-2026-64247.md) | High | KVM: x86: hyper-v: Bound the bank index when querying sparse banks | 8.4 | 0.0016 | | | [CVE-2026-64015](https://patchblox.com/security/data/cve/CVE-2026-64015.md) | High | kernel-default: security/keys: fix missed RCU read section on lookup (bsc#1273762). | 8.1 | 0.0016 | | | [CVE-2026-64526](https://patchblox.com/security/data/cve/CVE-2026-64526.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnl_ops_complet... | n/a | 0.0016 | | | [CVE-2025-71075](https://patchblox.com/security/data/cve/CVE-2025-71075.md) | High | scsi: aic94xx: fix use-after-free in device removal path | 7.8 | 0.0015 | | | [CVE-2026-64118](https://patchblox.com/security/data/cve/CVE-2026-64118.md) | High | kernel-64kb: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749). | 8.4 | 0.0015 | | | [CVE-2026-68442](https://patchblox.com/security/data/cve/CVE-2026-68442.md) | High | kernel-uek64k-modules-core: btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps (Leo Martins) | 7.8 | 0.0015 | | | [CVE-2026-68294](https://patchblox.com/security/data/cve/CVE-2026-68294.md) | High | net: qrtr: restrict socket creation to the initial network namespace | 8.8 | 0.0015 | | | [CVE-2026-72045](https://patchblox.com/security/data/cve/CVE-2026-72045.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 | | | [CVE-2026-72051](https://patchblox.com/security/data/cve/CVE-2026-72051.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 | | | [CVE-2026-72052](https://patchblox.com/security/data/cve/CVE-2026-72052.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 | | | [CVE-2026-72053](https://patchblox.com/security/data/cve/CVE-2026-72053.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 | | | [CVE-2026-72054](https://patchblox.com/security/data/cve/CVE-2026-72054.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 | | | [CVE-2026-72055](https://patchblox.com/security/data/cve/CVE-2026-72055.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0015 | | | [CVE-2026-68086](https://patchblox.com/security/data/cve/CVE-2026-68086.md) | High | mm/khugepaged: write all dirty file folios when collapsing | 8.8 | 0.0015 | | | [CVE-2026-63941](https://patchblox.com/security/data/cve/CVE-2026-63941.md) | High | kernel-64kb: KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor (bsc#1272869). | 8.8 | 0.0015 | | | [CVE-2026-64456](https://patchblox.com/security/data/cve/CVE-2026-64456.md) | High | hwrng: virtio: clamp device-reported used.len at copy_data() | 8.4 | 0.0015 | | | [CVE-2026-64283](https://patchblox.com/security/data/cve/CVE-2026-64283.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding offset+s... | 7.0 | 0.0015 | | | [CVE-2026-64315](https://patchblox.com/security/data/cve/CVE-2026-64315.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard... | 7.0 | 0.0015 | | | [CVE-2026-64298](https://patchblox.com/security/data/cve/CVE-2026-64298.md) | High | NFSv4: include MAY_WRITE in open permission mask for O_TRUNC | 8.8 | 0.0015 | | | [CVE-2026-68432](https://patchblox.com/security/data/cve/CVE-2026-68432.md) | High | vxlan: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 | | | [CVE-2026-64446](https://patchblox.com/security/data/cve/CVE-2026-64446.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in... | 7.8 | 0.0015 | | | [CVE-2026-68253](https://patchblox.com/security/data/cve/CVE-2026-68253.md) | High | drm/i915/hdcp: check streams[] bounds before overflow | 7.8 | 0.0014 | | | [CVE-2026-74378](https://patchblox.com/security/data/cve/CVE-2026-74378.md) | High | bpftool: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe (Bjoern Doebel) [Orabug: 40035390] | 7.8 | 0.0014 | | | [CVE-2026-74712](https://patchblox.com/security/data/cve/CVE-2026-74712.md) | High | kernel-uek64k-modules-core: vdpa/mlx5: Fix buffer length in create_direct_keys() (Christian Borntraeger) | 9.3 | 0.0014 | | | [CVE-2026-64548](https://patchblox.com/security/data/cve/CVE-2026-64548.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in b... | 8.4 | 0.0014 | | | [CVE-2026-64552](https://patchblox.com/security/data/cve/CVE-2026-64552.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() rece... | 8.4 | 0.0014 | | | [CVE-2026-63879](https://patchblox.com/security/data/cve/CVE-2026-63879.md) | High | drm/amdgpu: fix amdgpu_hmm_range_get_pages | 7.8 | 0.0014 | | | [CVE-2026-80731](https://patchblox.com/security/data/cve/CVE-2026-80731.md) | High | net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header | 7.8 | 0.0014 | | | [CVE-2026-64524](https://patchblox.com/security/data/cve/CVE-2026-64524.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WI... | 7.7 | 0.0014 | | | [CVE-2026-53059](https://patchblox.com/security/data/cve/CVE-2026-53059.md) | High | dm log: fix out-of-bounds write due to region_count overflow | 7.8 | 0.0014 | | | [CVE-2026-74510](https://patchblox.com/security/data/cve/CVE-2026-74510.md) | High | Bluetooth: mgmt: fix UAF in pair command cancellation | 9.8 | 0.0014 | | | [CVE-2026-68293](https://patchblox.com/security/data/cve/CVE-2026-68293.md) | High | net/mlx5: Fix MCIA register buffer overflow on 32 dword reads | 8.8 | 0.0014 | | | [CVE-2026-53091](https://patchblox.com/security/data/cve/CVE-2026-53091.md) | High | net: pull headers in qdisc_pkt_len_segs_init() | 8.4 | 0.0014 | | | [CVE-2026-64084](https://patchblox.com/security/data/cve/CVE-2026-64084.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-64085](https://patchblox.com/security/data/cve/CVE-2026-64085.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-64086](https://patchblox.com/security/data/cve/CVE-2026-64086.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-64463](https://patchblox.com/security/data/cve/CVE-2026-64463.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci_rt1711h: unregister TCPCI port... | 7.8 | 0.0014 | | | [CVE-2026-68222](https://patchblox.com/security/data/cve/CVE-2026-68222.md) | High | media: msi2500: Return queued buffers on start_streaming() failure | 7.8 | 0.0014 | | | [CVE-2026-72459](https://patchblox.com/security/data/cve/CVE-2026-72459.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on al... | 7.8 | 0.0014 | | | [CVE-2026-74517](https://patchblox.com/security/data/cve/CVE-2026-74517.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.3 | 0.0014 | | | [CVE-2026-68128](https://patchblox.com/security/data/cve/CVE-2026-68128.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_pro... | 8.8 | 0.0014 | | | [CVE-2026-68145](https://patchblox.com/security/data/cve/CVE-2026-68145.md) | High | iomap: fix out-of-bounds bitmap_set() with zero-length range | 8.8 | 0.0014 | | | [CVE-2026-68257](https://patchblox.com/security/data/cve/CVE-2026-68257.md) | High | drm/amdkfd: fix 32-bit overflow in CWSR total size calculation | 7.8 | 0.0014 | | | [CVE-2026-68370](https://patchblox.com/security/data/cve/CVE-2026-68370.md) | High | usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback | 7.8 | 0.0014 | | | [CVE-2026-64114](https://patchblox.com/security/data/cve/CVE-2026-64114.md) | High | kernel-default: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742). | 8.8 | 0.0014 | | | [CVE-2026-68108](https://patchblox.com/security/data/cve/CVE-2026-68108.md) | High | drm/amdgpu/vce: fix integer overflow in image size | 8.8 | 0.0014 | | | [CVE-2026-68338](https://patchblox.com/security/data/cve/CVE-2026-68338.md) | High | net/packet: avoid fanout hook re-registration after unregister | 8.8 | 0.0014 | | | [CVE-2026-68149](https://patchblox.com/security/data/cve/CVE-2026-68149.md) | High | fs: preserve ACL_DONT_CACHE state in forget_cached_acl() | 8.4 | 0.0014 | | | [CVE-2026-53223](https://patchblox.com/security/data/cve/CVE-2026-53223.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue sk... | 8.1 | 0.0014 | | | [CVE-2026-64111](https://patchblox.com/security/data/cve/CVE-2026-64111.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr(... | 8.8 | 0.0014 | | | [CVE-2026-64115](https://patchblox.com/security/data/cve/CVE-2026-64115.md) | High | kernel-default: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). | 8.8 | 0.0014 | | | [CVE-2026-53033](https://patchblox.com/security/data/cve/CVE-2026-53033.md) | High | kernel-64kb: bpf, sockmap: Take state lock for af_unix iter (bsc#1269388). | 7.8 | 0.0014 | | | [CVE-2026-68284](https://patchblox.com/security/data/cve/CVE-2026-68284.md) | High | bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() | 7.8 | 0.0014 | | | [CVE-2026-68335](https://patchblox.com/security/data/cve/CVE-2026-68335.md) | High | rds: drop incoming messages that cross network namespace boundaries | 7.8 | 0.0014 | | | [CVE-2026-64126](https://patchblox.com/security/data/cve/CVE-2026-64126.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.3 | 0.0014 | | | [CVE-2026-64099](https://patchblox.com/security/data/cve/CVE-2026-64099.md) | High | kernel-64kb: drm/v3d: Fix use-after-free of CPU job query arrays on error path (bsc#1273465). | 7.8 | 0.0013 | | | [CVE-2026-68152](https://patchblox.com/security/data/cve/CVE-2026-68152.md) | High | amt: fix use-after-free in AMT delayed works | 7.8 | 0.0013 | | | [CVE-2026-53388](https://patchblox.com/security/data/cve/CVE-2026-53388.md) | High | fuse: re-lock request before replacing page cache folio | 8.8 | 0.0013 | | | [CVE-2026-63803](https://patchblox.com/security/data/cve/CVE-2026-63803.md) | High | hdlc_ppp: sync per-proto timers before freeing hdlc state | 8.4 | 0.0013 | | | [CVE-2026-23306](https://patchblox.com/security/data/cve/CVE-2026-23306.md) | High | scsi: pm8001: Fix use-after-free in pm8001_queue_command() | 7.8 | 0.0013 | | | [CVE-2026-64071](https://patchblox.com/security/data/cve/CVE-2026-64071.md) | High | kernel-64kb: nvme-pci: fix use-after-free in nvme_free_host_mem() (bsc#1273486). | 7.8 | 0.0013 | | | [CVE-2026-64073](https://patchblox.com/security/data/cve/CVE-2026-64073.md) | High | kernel-64kb: irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT (bsc#1273490). | 7.8 | 0.0013 | | | [CVE-2026-64279](https://patchblox.com/security/data/cve/CVE-2026-64279.md) | High | i2c: core: fix adapter deregistration race | 7.8 | 0.0013 | | | [CVE-2026-80530](https://patchblox.com/security/data/cve/CVE-2026-80530.md) | High | kernel-uek64k-modules-core: xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN (Lin Jiapeng) [Orabug: 39972815,40078696] ,CVE-... | 7.8 | 0.0013 | | | [CVE-2026-53330](https://patchblox.com/security/data/cve/CVE-2026-53330.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_ge... | 7.1 | 0.0013 | | | [CVE-2026-68200](https://patchblox.com/security/data/cve/CVE-2026-68200.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback... | 8.8 | 0.0013 | | | [CVE-2026-68273](https://patchblox.com/security/data/cve/CVE-2026-68273.md) | High | drm/amdgpu: Fix context pstate override handling | 8.8 | 0.0013 | | | [CVE-2026-53092](https://patchblox.com/security/data/cve/CVE-2026-53092.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg... | 7.8 | 0.0013 | | | [CVE-2026-63804](https://patchblox.com/security/data/cve/CVE-2026-63804.md) | High | kernel-64kb: gfs2: fix use-after-free in gfs2_qd_dealloc (bsc#1272287). | 7.8 | 0.0013 | | | [CVE-2026-64423](https://patchblox.com/security/data/cve/CVE-2026-64423.md) | High | ipv4: igmp: remove multicast group from hash table on device destruction | 7.8 | 0.0013 | | | [CVE-2026-74481](https://patchblox.com/security/data/cve/CVE-2026-74481.md) | High | mm/page_reporting: use system_freezable_wq to fix UAF during suspend | 7.8 | 0.0013 | | | [CVE-2026-64411](https://patchblox.com/security/data/cve/CVE-2026-64411.md) | High | netfilter: ebtables: terminate table name before find_table_lock() | 7.1 | 0.0013 | | | [CVE-2026-64412](https://patchblox.com/security/data/cve/CVE-2026-64412.md) | High | netfilter: ebtables: module names must be null-terminated | 7.1 | 0.0013 | | | [CVE-2026-68258](https://patchblox.com/security/data/cve/CVE-2026-68258.md) | High | drm/amdkfd: Check bounds on CRIU restore queue type and mqd size | 7.1 | 0.0013 | | | [CVE-2026-68262](https://patchblox.com/security/data/cve/CVE-2026-68262.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvr_se... | 7.1 | 0.0013 | | | [CVE-2026-68348](https://patchblox.com/security/data/cve/CVE-2026-68348.md) | High | ASoC: tas2781: bound firmware description string parsing | 7.1 | 0.0013 | | | [CVE-2026-64002](https://patchblox.com/security/data/cve/CVE-2026-64002.md) | High | kernel-default: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774). | 8.8 | 0.0013 | | | [CVE-2026-74527](https://patchblox.com/security/data/cve/CVE-2026-74527.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special... | 8.8 | 0.0013 | | | [CVE-2026-63985](https://patchblox.com/security/data/cve/CVE-2026-63985.md) | High | kernel-64kb: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963). | 7.8 | 0.0013 | | | [CVE-2026-64097](https://patchblox.com/security/data/cve/CVE-2026-64097.md) | High | drm/amd/display: Validate GPIO pin LUT table size before iterating | 7.8 | 0.0013 | | | [CVE-2026-64133](https://patchblox.com/security/data/cve/CVE-2026-64133.md) | High | ALSA: asihpi: Fix potential OOB array access at reading cache | 7.8 | 0.0013 | | | [CVE-2026-68104](https://patchblox.com/security/data/cve/CVE-2026-68104.md) | High | drm/amdgpu: invoke pm_genpd_remove() before freeing genpd | 7.8 | 0.0013 | | | [CVE-2026-68106](https://patchblox.com/security/data/cve/CVE-2026-68106.md) | High | drm/amdgpu: fix division by zero with invalid uvd dimensions | 7.8 | 0.0013 | | | [CVE-2026-68245](https://patchblox.com/security/data/cve/CVE-2026-68245.md) | High | drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() | 7.8 | 0.0013 | | | [CVE-2026-68297](https://patchblox.com/security/data/cve/CVE-2026-68297.md) | High | tipc: fix u16 MTU truncation in media and bearer MTU validation | 7.8 | 0.0013 | | | [CVE-2026-74390](https://patchblox.com/security/data/cve/CVE-2026-74390.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74397](https://patchblox.com/security/data/cve/CVE-2026-74397.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-64546](https://patchblox.com/security/data/cve/CVE-2026-64546.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block(... | 7.1 | 0.0013 | | | [CVE-2026-64109](https://patchblox.com/security/data/cve/CVE-2026-64109.md) | High | kernel-default: af_unix: Peek the queue synchronized (bsc#1273748). | 8.8 | 0.0013 | | | [CVE-2026-64555](https://patchblox.com/security/data/cve/CVE-2026-64555.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_... | 8.8 | 0.0013 | | | [CVE-2026-72497](https://patchblox.com/security/data/cve/CVE-2026-72497.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The v... | 8.8 | 0.0013 | | | [CVE-2026-72499](https://patchblox.com/security/data/cve/CVE-2026-72499.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware... | 8.8 | 0.0013 | | | [CVE-2026-64053](https://patchblox.com/security/data/cve/CVE-2026-64053.md) | High | kernel-64k-debug-core: kernel: block: don't overwrite bip_vcnt in bio_integrity_copy_user() | 8.3 | 0.0013 | | | [CVE-2026-64051](https://patchblox.com/security/data/cve/CVE-2026-64051.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Add overflow check to remap_pfn_range... | 8.1 | 0.0013 | | | [CVE-2026-53031](https://patchblox.com/security/data/cve/CVE-2026-53031.md) | High | kernel-64kb: bpf: Validate node_id in arena_alloc_pages() (bsc#1269380). | 7.8 | 0.0013 | | | [CVE-2026-53094](https://patchblox.com/security/data/cve/CVE-2026-53094.md) | High | bpf: Fix stale offload->prog pointer after constant blinding | 7.8 | 0.0013 | | | [CVE-2026-53109](https://patchblox.com/security/data/cve/CVE-2026-53109.md) | High | powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy | 7.8 | 0.0013 | | | [CVE-2026-63987](https://patchblox.com/security/data/cve/CVE-2026-63987.md) | High | kernel-64kb: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971). | 7.8 | 0.0013 | | | [CVE-2026-63995](https://patchblox.com/security/data/cve/CVE-2026-63995.md) | High | kernel-64kb: ethtool: cmis: validate start_cmd_payload_size from module (bsc#1273033). | 7.8 | 0.0013 | | | [CVE-2026-63996](https://patchblox.com/security/data/cve/CVE-2026-63996.md) | High | kernel-64kb: ethtool: cmis: require exact CDB reply length (bsc#1273032). | 7.8 | 0.0013 | | | [CVE-2026-64001](https://patchblox.com/security/data/cve/CVE-2026-64001.md) | High | ALSA: pcm: oss: Fix setup list UAF on proc write error | 7.8 | 0.0013 | | | [CVE-2026-64134](https://patchblox.com/security/data/cve/CVE-2026-64134.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-64137](https://patchblox.com/security/data/cve/CVE-2026-64137.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-64217](https://patchblox.com/security/data/cve/CVE-2026-64217.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_i... | 7.8 | 0.0013 | | | [CVE-2026-64225](https://patchblox.com/security/data/cve/CVE-2026-64225.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed... | 7.8 | 0.0013 | | | [CVE-2026-64348](https://patchblox.com/security/data/cve/CVE-2026-64348.md) | High | usb: free iso schedules on failed submit | 7.8 | 0.0013 | | | [CVE-2026-64354](https://patchblox.com/security/data/cve/CVE-2026-64354.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before e... | 7.8 | 0.0013 | | | [CVE-2026-64365](https://patchblox.com/security/data/cve/CVE-2026-64365.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: letsketch: fix UAF on inrange_timer at driv... | 7.8 | 0.0013 | | | [CVE-2026-64381](https://patchblox.com/security/data/cve/CVE-2026-64381.md) | High | smb: client: Fix next buffer leak in receive_encrypted_standard() | 7.8 | 0.0013 | | | [CVE-2026-68374](https://patchblox.com/security/data/cve/CVE-2026-68374.md) | High | usb: core: sysfs: add lock to bos_descriptors_read() | 7.8 | 0.0013 | | | [CVE-2026-68392](https://patchblox.com/security/data/cve/CVE-2026-68392.md) | High | Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync | 7.8 | 0.0013 | | Showing 500 of 885 CVEs; the web page lists them all. --- Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.