# OPENSUSE-SU-2026:22167-1: Security update for 13 packages OPENSUSE-SU-2026:22167-1, released November 7, 2026, fixes 129 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-22167-1 - Platform: Linux - Released: Nov 7, 2026 - Priority: Urgent (Closes CVE-2026-99999, rated Critical) - CVEs: 129, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:22167-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 | | [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 | | [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 | | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1.160000.2.29 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 | | [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 | | [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 | | [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 | | [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-99999](https://patchblox.com/security/data/cve/CVE-2026-99999.md) | Urgent | ipv4: validate checksum_start before completing checksum | 9.3 | 0.0079 | | | [CVE-2026-72041](https://patchblox.com/security/data/cve/CVE-2026-72041.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: espintcp: use sk_msg_free_partial to fix partial... | 9.8 | 0.0071 | | | [CVE-2026-89778](https://patchblox.com/security/data/cve/CVE-2026-89778.md) | Urgent | isofs: fix out-of-bounds page array access on empty zisofs block | 9.8 | 0.0070 | | | [CVE-2026-72355](https://patchblox.com/security/data/cve/CVE-2026-72355.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix barriering when walking subrequest li... | 9.8 | 0.0064 | | | [CVE-2026-98171](https://patchblox.com/security/data/cve/CVE-2026-98171.md) | Urgent | smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs | 9.8 | 0.0054 | | | [CVE-2026-98323](https://patchblox.com/security/data/cve/CVE-2026-98323.md) | Urgent | RDMA/siw: Bound fragmented header copies by the remaining length | 9.8 | 0.0051 | | | [CVE-2026-89631](https://patchblox.com/security/data/cve/CVE-2026-89631.md) | Urgent | smb: client: reject a tree connect response whose byte count is too small | 9.1 | 0.0049 | | | [CVE-2026-98365](https://patchblox.com/security/data/cve/CVE-2026-98365.md) | Urgent | RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access | 9.8 | 0.0038 | | | [CVE-2026-64068](https://patchblox.com/security/data/cve/CVE-2026-64068.md) | Urgent | kernel-64kb: netfs: Fix missing locking around retry adding new subreqs (bsc#1272509). | 9.8 | 0.0035 | | | [CVE-2026-98174](https://patchblox.com/security/data/cve/CVE-2026-98174.md) | Urgent | smb: client: fix rlist race and missing initialization | 9.8 | 0.0033 | | | [CVE-2026-98167](https://patchblox.com/security/data/cve/CVE-2026-98167.md) | Urgent | smb: client: fix server->total_read for compound encrypted PDUs | 9.8 | 0.0022 | | | [CVE-2026-98170](https://patchblox.com/security/data/cve/CVE-2026-98170.md) | Urgent | smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() | 9.8 | 0.0022 | | | [CVE-2026-98269](https://patchblox.com/security/data/cve/CVE-2026-98269.md) | Urgent | btrfs: abort transaction on failure to update inode for hole punching and reflinking | 9.8 | 0.0017 | | | [CVE-2026-98352](https://patchblox.com/security/data/cve/CVE-2026-98352.md) | Urgent | RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted | 9.8 | 0.0016 | | | [CVE-2026-98253](https://patchblox.com/security/data/cve/CVE-2026-98253.md) | Urgent | RDMA/ucma: Serialize join and leave on copy_to_user failure | 9.8 | 0.0013 | | | [CVE-2026-98252](https://patchblox.com/security/data/cve/CVE-2026-98252.md) | Urgent | RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() | 9.8 | 0.0012 | | | [CVE-2026-90011](https://patchblox.com/security/data/cve/CVE-2026-90011.md) | High | scsi: target: iscsi: Reserve a terminator byte for the login payload | 9.8 | 0.0084 | | | [CVE-2026-98432](https://patchblox.com/security/data/cve/CVE-2026-98432.md) | High | ipv4: free inet_opt and ireq_opt after an RCU grace period | 9.8 | 0.0076 | | | [CVE-2026-72319](https://patchblox.com/security/data/cve/CVE-2026-72319.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0075 | | | [CVE-2026-89528](https://patchblox.com/security/data/cve/CVE-2026-89528.md) | High | svcrdma: Reject Read lists that exceed the page budget | 7.5 | 0.0071 | | | [CVE-2026-72253](https://patchblox.com/security/data/cve/CVE-2026-72253.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0070 | | | [CVE-2026-89636](https://patchblox.com/security/data/cve/CVE-2026-89636.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0066 | | | [CVE-2026-89558](https://patchblox.com/security/data/cve/CVE-2026-89558.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 | | | [CVE-2026-97555](https://patchblox.com/security/data/cve/CVE-2026-97555.md) | High | smb: client: fix heap overflow in DACL owner/group rewrite | 9.8 | 0.0058 | | | [CVE-2026-64116](https://patchblox.com/security/data/cve/CVE-2026-64116.md) | High | kernel-64kb: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). | 7.5 | 0.0051 | | | [CVE-2026-74587](https://patchblox.com/security/data/cve/CVE-2026-74587.md) | High | sctp: fix use-after-free of cached ASCONF chunk | 9.8 | 0.0050 | | | [CVE-2026-74611](https://patchblox.com/security/data/cve/CVE-2026-74611.md) | High | tls: rx: restore msg_iter before TLS 1.3 optimistic retry | 9.8 | 0.0049 | | | [CVE-2026-74624](https://patchblox.com/security/data/cve/CVE-2026-74624.md) | High | netfilter: nf_conntrack: defer invalid log until after unlock | 7.5 | 0.0048 | | | [CVE-2026-98130](https://patchblox.com/security/data/cve/CVE-2026-98130.md) | High | sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START | 8.1 | 0.0045 | | | [CVE-2026-98169](https://patchblox.com/security/data/cve/CVE-2026-98169.md) | High | smb: client: fix potential OOB read in smb3_enum_snapshots() | 7.1 | 0.0045 | | | [CVE-2026-63830](https://patchblox.com/security/data/cve/CVE-2026-63830.md) | High | net: skmsg: preserve sg.copy across SG transforms | 9.4 | 0.0044 | | | [CVE-2026-97562](https://patchblox.com/security/data/cve/CVE-2026-97562.md) | High | smb: client: pin DFS superblock in iterator callback | 7.8 | 0.0041 | | | [CVE-2026-98261](https://patchblox.com/security/data/cve/CVE-2026-98261.md) | High | cifs: Fix server use-after-free in cifs_chan_skip_or_disable() | 8.1 | 0.0041 | | | [CVE-2026-72493](https://patchblox.com/security/data/cve/CVE-2026-72493.md) | High | net: serialize netif_running() check in enqueue_to_backlog() | 9.9 | 0.0040 | | | [CVE-2026-98357](https://patchblox.com/security/data/cve/CVE-2026-98357.md) | High | IB/isert: wait for deferred control PDU completions before releasing the connection | 8.1 | 0.0035 | | | [CVE-2026-98173](https://patchblox.com/security/data/cve/CVE-2026-98173.md) | High | smb: client: fix use-after-free of iface in cifs_try_adding_channels() | 7.5 | 0.0035 | | | [CVE-2026-93787](https://patchblox.com/security/data/cve/CVE-2026-93787.md) | High | smb: client: bound dirent name against end of SMB response in cifs_filldir | 9.8 | 0.0034 | | | [CVE-2026-64435](https://patchblox.com/security/data/cve/CVE-2026-64435.md) | High | audit: Fix data races of skb_queue_len() readers on audit_queue | 8.2 | 0.0033 | | | [CVE-2026-98175](https://patchblox.com/security/data/cve/CVE-2026-98175.md) | High | smb: client: cancel reconnect work in clean_demultiplex_info() | 8.1 | 0.0032 | | | [CVE-2026-93806](https://patchblox.com/security/data/cve/CVE-2026-93806.md) | High | wifi: cfg80211: validate assoc response length before status and IE access | 8.8 | 0.0025 | | | [CVE-2026-97558](https://patchblox.com/security/data/cve/CVE-2026-97558.md) | High | smb: client: fix cifsFileInfo reference leak in deferred close | 7.1 | 0.0023 | | | [CVE-2026-97564](https://patchblox.com/security/data/cve/CVE-2026-97564.md) | High | smb: client: reject userspace cifs.idmap descriptions | 7.8 | 0.0022 | | | [CVE-2026-97533](https://patchblox.com/security/data/cve/CVE-2026-97533.md) | High | x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF | n/a | 0.0022 | | | [CVE-2026-97559](https://patchblox.com/security/data/cve/CVE-2026-97559.md) | High | smb: client: fail DACL rewrite when the new DACL exceeds 64K | 7.8 | 0.0021 | | | [CVE-2026-97554](https://patchblox.com/security/data/cve/CVE-2026-97554.md) | High | smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() | 7.1 | 0.0021 | | | [CVE-2026-97556](https://patchblox.com/security/data/cve/CVE-2026-97556.md) | High | smb: client: avoid leaking refcount when cifs_sb_tlink() fails | 8.8 | 0.0021 | | | [CVE-2026-93134](https://patchblox.com/security/data/cve/CVE-2026-93134.md) | High | printk: Fix possible console use-after-free | 7.8 | 0.0021 | | | [CVE-2026-97942](https://patchblox.com/security/data/cve/CVE-2026-97942.md) | High | kernel-64kb: x86/alternatives: Exclude text poking against change_page_attr() (bsc#1283153). | n/a | 0.0020 | | | [CVE-2026-97943](https://patchblox.com/security/data/cve/CVE-2026-97943.md) | High | kernel-64kb: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF (bsc#1283158). | n/a | 0.0020 | | | [CVE-2026-97563](https://patchblox.com/security/data/cve/CVE-2026-97563.md) | High | smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() | 7.3 | 0.0020 | | | [CVE-2026-98260](https://patchblox.com/security/data/cve/CVE-2026-98260.md) | High | exec: Cleanup POSIX timers right after de_thread() | 8.8 | 0.0019 | | | [CVE-2026-64461](https://patchblox.com/security/data/cve/CVE-2026-64461.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fai... | n/a | 0.0018 | | | [CVE-2026-98015](https://patchblox.com/security/data/cve/CVE-2026-98015.md) | High | net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put | 7.8 | 0.0018 | | | [CVE-2026-89811](https://patchblox.com/security/data/cve/CVE-2026-89811.md) | High | drm/amdkfd: Add TLB flush after MES queue eviction/suspension | 8.8 | 0.0018 | | | [CVE-2026-98089](https://patchblox.com/security/data/cve/CVE-2026-98089.md) | High | bonding: alb: fix uninitialized transport header access in alb_determine_nd() | 8.1 | 0.0017 | | | [CVE-2026-93785](https://patchblox.com/security/data/cve/CVE-2026-93785.md) | High | cifs: validate idmap key payload length | 7.8 | 0.0017 | | | [CVE-2026-98016](https://patchblox.com/security/data/cve/CVE-2026-98016.md) | High | net/mlx5e: Fix use-after-free race in sample_restore_put() | 7.8 | 0.0017 | | | [CVE-2026-80893](https://patchblox.com/security/data/cve/CVE-2026-80893.md) | High | mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() | 7.0 | 0.0017 | | | [CVE-2026-64280](https://patchblox.com/security/data/cve/CVE-2026-64280.md) | High | fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() | 8.8 | 0.0017 | | | [CVE-2026-72110](https://patchblox.com/security/data/cve/CVE-2026-72110.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-72172](https://patchblox.com/security/data/cve/CVE-2026-72172.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-72250](https://patchblox.com/security/data/cve/CVE-2026-72250.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 | | | [CVE-2026-90289](https://patchblox.com/security/data/cve/CVE-2026-90289.md) | High | kernel-64kb: drm/amd/display: Resize MST HDCP per-connector arrays to 32 (bsc#1281726). | 7.8 | 0.0017 | | | [CVE-2026-93066](https://patchblox.com/security/data/cve/CVE-2026-93066.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Take cpa_lock around large-page coll... | n/a | 0.0017 | | | [CVE-2026-72213](https://patchblox.com/security/data/cve/CVE-2026-72213.md) | High | kernel-uek64k-modules-core: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch (Deepanshu Kartikey) | 7.1 | 0.0016 | | | [CVE-2026-89755](https://patchblox.com/security/data/cve/CVE-2026-89755.md) | High | mm/migrate_device: clear stale mapping after freeing swapcache | 7.8 | 0.0016 | | | [CVE-2026-98041](https://patchblox.com/security/data/cve/CVE-2026-98041.md) | High | bpf: Don't predict JMP32 pointer vs zero comparisons | 7.0 | 0.0015 | | | [CVE-2026-74578](https://patchblox.com/security/data/cve/CVE-2026-74578.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force synchronous proce... | 7.1 | 0.0015 | | | [CVE-2026-74614](https://patchblox.com/security/data/cve/CVE-2026-74614.md) | High | vsock/virtio: read virtqueues under worker locks | 8.4 | 0.0014 | | | [CVE-2026-89754](https://patchblox.com/security/data/cve/CVE-2026-89754.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk->action escaping wal... | 7.8 | 0.0014 | | | [CVE-2026-72405](https://patchblox.com/security/data/cve/CVE-2026-72405.md) | High | net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync | 7.8 | 0.0014 | | | [CVE-2026-97415](https://patchblox.com/security/data/cve/CVE-2026-97415.md) | High | btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF | 7.8 | 0.0013 | | | [CVE-2026-74544](https://patchblox.com/security/data/cve/CVE-2026-74544.md) | High | net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds | 7.8 | 0.0013 | | | [CVE-2026-98127](https://patchblox.com/security/data/cve/CVE-2026-98127.md) | High | smb/client: validate new EOF for insert range | 7.8 | 0.0013 | | | [CVE-2026-98360](https://patchblox.com/security/data/cve/CVE-2026-98360.md) | High | RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds | 7.1 | 0.0013 | | | [CVE-2026-64058](https://patchblox.com/security/data/cve/CVE-2026-64058.md) | High | kernel-64kb: netfs: Fix netfs_read_folio() to wait on writeback (bsc#1272898). | 7.8 | 0.0013 | | | [CVE-2026-64063](https://patchblox.com/security/data/cve/CVE-2026-64063.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In... | 7.8 | 0.0013 | | | [CVE-2026-74306](https://patchblox.com/security/data/cve/CVE-2026-74306.md) | High | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74312](https://patchblox.com/security/data/cve/CVE-2026-74312.md) | High | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-74715](https://patchblox.com/security/data/cve/CVE-2026-74715.md) | High | bpf: Fix netns reference imbalance in conntrack kfuncs | 7.8 | 0.0013 | | | [CVE-2026-80977](https://patchblox.com/security/data/cve/CVE-2026-80977.md) | High | net: skbuff: don't touch shared zerocopy state in skb_tx_error() | 7.8 | 0.0013 | | | [CVE-2026-93798](https://patchblox.com/security/data/cve/CVE-2026-93798.md) | High | btrfs: fix reloc root cleanup in merge_reloc_roots() | 7.8 | 0.0013 | | | [CVE-2026-89640](https://patchblox.com/security/data/cve/CVE-2026-89640.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0013 | | | [CVE-2026-64424](https://patchblox.com/security/data/cve/CVE-2026-64424.md) | High | netpoll: fix a use-after-free on shutdown path | 7.8 | 0.0013 | | | [CVE-2026-89593](https://patchblox.com/security/data/cve/CVE-2026-89593.md) | High | kernel-uek64k-modules-core: ELSA-2026-500374: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0013 | | | [CVE-2026-98216](https://patchblox.com/security/data/cve/CVE-2026-98216.md) | High | IB/hfi1: Fix the PIO_CRED credit-return mmap | 7.1 | 0.0013 | | | [CVE-2026-64428](https://patchblox.com/security/data/cve/CVE-2026-64428.md) | High | gpio: sch: use raw_spinlock_t in the irq startup path | 7.1 | 0.0012 | | | [CVE-2026-46028](https://patchblox.com/security/data/cve/CVE-2026-46028.md) | High | kernel-64kb: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430). | 7.0 | 0.0012 | | | [CVE-2026-98367](https://patchblox.com/security/data/cve/CVE-2026-98367.md) | High | RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept | 7.8 | 0.0012 | | | [CVE-2026-80572](https://patchblox.com/security/data/cve/CVE-2026-80572.md) | High | Input: byd - synchronize timer deletion before freeing private data | 7.8 | 0.0012 | | | [CVE-2026-74583](https://patchblox.com/security/data/cve/CVE-2026-74583.md) | High | net/sched: cls_route: fix fastmap use-after-free on filter | 8.8 | 0.0012 | | | [CVE-2026-98359](https://patchblox.com/security/data/cve/CVE-2026-98359.md) | High | RDMA/core: Reject unregistering netdevs in ib_get_eth_speed | 7.8 | 0.0012 | | | [CVE-2026-98366](https://patchblox.com/security/data/cve/CVE-2026-98366.md) | High | RDMA/rxe: validate access flags before swapping the MR's PD | 7.8 | 0.0012 | | | [CVE-2026-80579](https://patchblox.com/security/data/cve/CVE-2026-80579.md) | High | fbdev: clear fb_info->mode before deleting a videomode | 7.8 | 0.0011 | | | [CVE-2026-68323](https://patchblox.com/security/data/cve/CVE-2026-68323.md) | High | tipc: serialize udp bearer replicast list updates | 7.8 | 0.0010 | | | [CVE-2026-31731](https://patchblox.com/security/data/cve/CVE-2026-31731.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0010 | | | [CVE-2026-90283](https://patchblox.com/security/data/cve/CVE-2026-90283.md) | Routine | kernel-uek64k-modules-core: hugetlbfs: release subpool on fill_super failure (Chenyichong) [Orabug: 40042090] | 6.7 | 0.0023 | | | [CVE-2026-72236](https://patchblox.com/security/data/cve/CVE-2026-72236.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: s390/perf_cpum_cf: Add missing array_index_nospe... | n/a | 0.0023 | | | [CVE-2026-89987](https://patchblox.com/security/data/cve/CVE-2026-89987.md) | Routine | mm/huge_memory: transfer the pmd dirty bit to the folio on zap | 5.5 | 0.0022 | | | [CVE-2026-72015](https://patchblox.com/security/data/cve/CVE-2026-72015.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 | | | [CVE-2026-98077](https://patchblox.com/security/data/cve/CVE-2026-98077.md) | Routine | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | 5.5 | 0.0022 | | | [CVE-2026-93252](https://patchblox.com/security/data/cve/CVE-2026-93252.md) | Routine | ocfs2: fix circular locking dependency in ocfs2_init_acl() | 4.7 | 0.0022 | | | [CVE-2026-72081](https://patchblox.com/security/data/cve/CVE-2026-72081.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: elx: efct: Fix I/O leak on unsupported add... | n/a | 0.0022 | | | [CVE-2026-97561](https://patchblox.com/security/data/cve/CVE-2026-97561.md) | Routine | smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid | 6.5 | 0.0021 | | | [CVE-2026-68242](https://patchblox.com/security/data/cve/CVE-2026-68242.md) | Routine | drm/i915/gt: Fix NULL deref on sched_engine alloc failure | 5.5 | 0.0021 | | | [CVE-2026-72040](https://patchblox.com/security/data/cve/CVE-2026-72040.md) | Routine | kernel-uek64k-modules-core: ipmi: fix refcount leak in i_ipmi_request() (Wentao Liang) | 5.5 | 0.0021 | | | [CVE-2026-72305](https://patchblox.com/security/data/cve/CVE-2026-72305.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0021 | | | [CVE-2026-68241](https://patchblox.com/security/data/cve/CVE-2026-68241.md) | Routine | drm/i915/mst: limit DP MST ESI service loop | 4.6 | 0.0021 | | | [CVE-2026-97945](https://patchblox.com/security/data/cve/CVE-2026-97945.md) | Routine | x86/mm: Fix user-space data loss with MADV_FREE and THP | 6.1 | 0.0021 | | | [CVE-2026-72174](https://patchblox.com/security/data/cve/CVE-2026-72174.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0021 | | | [CVE-2026-72212](https://patchblox.com/security/data/cve/CVE-2026-72212.md) | Routine | kernel-uek: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0021 | | | [CVE-2026-98010](https://patchblox.com/security/data/cve/CVE-2026-98010.md) | Routine | net/sched: drr: clamp quantum in change class | 6.1 | 0.0018 | | | [CVE-2026-98347](https://patchblox.com/security/data/cve/CVE-2026-98347.md) | Routine | IB/IPoIB: Avoid restoring OPER_UP after multicast flush | 4.7 | 0.0018 | | | [CVE-2026-93222](https://patchblox.com/security/data/cve/CVE-2026-93222.md) | Routine | signal: avoid shared siginfo namespace rewrites | 4.4 | 0.0018 | | | [CVE-2026-97416](https://patchblox.com/security/data/cve/CVE-2026-97416.md) | Routine | btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() | 6.7 | 0.0017 | | | [CVE-2026-74379](https://patchblox.com/security/data/cve/CVE-2026-74379.md) | Routine | bpftool: ELSA-2026-500249: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0017 | | | [CVE-2026-68233](https://patchblox.com/security/data/cve/CVE-2026-68233.md) | Routine | drm/vc4: Shut down BO cache timer before teardown | 4.7 | 0.0017 | | | [CVE-2026-97491](https://patchblox.com/security/data/cve/CVE-2026-97491.md) | Routine | net/rds: Don't sleep inside rds_ib_conn_path_shutdown | 4.4 | 0.0017 | | | [CVE-2026-74368](https://patchblox.com/security/data/cve/CVE-2026-74368.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_wifi7_dp... | n/a | 0.0017 | | | [CVE-2026-98273](https://patchblox.com/security/data/cve/CVE-2026-98273.md) | Routine | x86/kprobes: Fix crash when probing CS CALL instructions | 5.5 | 0.0017 | | | [CVE-2026-98354](https://patchblox.com/security/data/cve/CVE-2026-98354.md) | Routine | RDMA/mad: Fix receive buffer leak when PKey enforcement fails | 5.5 | 0.0017 | | | [CVE-2026-98358](https://patchblox.com/security/data/cve/CVE-2026-98358.md) | Routine | IB/iser: reject a remote invalidation of an unregistered direction | 5.5 | 0.0017 | | | [CVE-2026-64012](https://patchblox.com/security/data/cve/CVE-2026-64012.md) | Routine | kernel-64kb: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). | 5.5 | 0.0012 | | | [CVE-2026-64060](https://patchblox.com/security/data/cve/CVE-2026-64060.md) | Routine | netfs: Fix leak of request in netfs_write_begin() error handling | 5.5 | 0.0012 | | | [CVE-2026-64064](https://patchblox.com/security/data/cve/CVE-2026-64064.md) | Routine | kernel-64kb: netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone (bsc#1272956). | 5.5 | 0.0012 | | | [CVE-2026-98126](https://patchblox.com/security/data/cve/CVE-2026-98126.md) | Routine | smb/client: validate new EOF for zero range | 5.5 | 0.0012 | | | [CVE-2026-98125](https://patchblox.com/security/data/cve/CVE-2026-98125.md) | Routine | smb/client: fix stale page cache in insert/collapse range | 5.5 | 0.0012 | | | [CVE-2026-64062](https://patchblox.com/security/data/cve/CVE-2026-64062.md) | Routine | kernel-64kb: netfs: Fix potential deadlock in write-through mode (bsc#1272952). | 5.5 | 0.0009 | | | [CVE-2026-53108](https://patchblox.com/security/data/cve/CVE-2026-53108.md) | Routine | powerpc/64s: Fix unmap race with PMD migration entries | 5.5 | 0.0009 | | --- Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.