{
  "fix": "SUSE-SU-2026:2195-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-2195-1",
  "summary": "SUSE-SU-2026:2195-1, released July 1, 2026, fixes 69 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 7 packages",
  "released": "2026-07-01T08:17:32Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-23450, rated Critical",
  "supported": true,
  "cveCount": 69,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.01219,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:2195-1",
  "appliesTo": [
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.112.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.112.1.150600.12.52.1",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.112.1",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP6_Update_26",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp6-update-26",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.3.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.112.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.112.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.112.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-23450",
      "url": "https://patchblox.com/security/cve/CVE-2026-23450",
      "title": "kernel-default: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00461,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31402",
      "url": "https://patchblox.com/security/cve/CVE-2026-31402",
      "title": "kernel-64kb: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.01219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46331",
      "url": "https://patchblox.com/security/cve/CVE-2026-46331",
      "title": "net/sched: fix pedit partial COW leading to page cache corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00639,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23240",
      "url": "https://patchblox.com/security/cve/CVE-2026-23240",
      "title": "tls: Fix race condition in tls_sw_cancel_work_tx()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00563,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43365",
      "url": "https://patchblox.com/security/cve/CVE-2026-43365",
      "title": "kernel-64kb: xfs: fix undersized l_iclog_roundoff values (bsc#1265119).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.2,
      "epss": 0.00506,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31685",
      "url": "https://patchblox.com/security/cve/CVE-2026-31685",
      "title": "netfilter: ip6t_eui64: reject invalid MAC header for all packets",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.4,
      "epss": 0.00485,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31669",
      "url": "https://patchblox.com/security/cve/CVE-2026-31669",
      "title": "mptcp: fix slab-use-after-free in __inet_lookup_established",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00471,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43190",
      "url": "https://patchblox.com/security/cve/CVE-2026-43190",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: xt_tcpmss: check remaining length befo...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.2,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31649",
      "url": "https://patchblox.com/security/cve/CVE-2026-31649",
      "title": "net: stmmac: fix integer underflow in chain mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00459,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31436",
      "url": "https://patchblox.com/security/cve/CVE-2026-31436",
      "title": "kernel-64kb: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43494",
      "url": "https://patchblox.com/security/cve/CVE-2026-43494",
      "title": "net/rds: reset op_nents when zerocopy page pin fails",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31533",
      "url": "https://patchblox.com/security/cve/CVE-2026-31533",
      "title": "kernel-default: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31662",
      "url": "https://patchblox.com/security/cve/CVE-2026-31662",
      "title": "tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00389,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31408",
      "url": "https://patchblox.com/security/cve/CVE-2026-31408",
      "title": "Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00322,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31607",
      "url": "https://patchblox.com/security/cve/CVE-2026-31607",
      "title": "usbip: validate number_of_packets in usbip_pack_ret_submit()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00311,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31622",
      "url": "https://patchblox.com/security/cve/CVE-2026-31622",
      "title": "NFC: digital: Bounds check NFC-A cascade depth in SDD response handler",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00289,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54518",
      "url": "https://patchblox.com/security/cve/CVE-2025-54518",
      "title": "AMD: CVE-2025-54518 CPU OP Cache Corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00287,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31694",
      "url": "https://patchblox.com/security/cve/CVE-2026-31694",
      "title": "fuse: reject oversized dirents in page cache",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00284,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43334",
      "url": "https://patchblox.com/security/cve/CVE-2026-43334",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: SMP: force responder MITM requirements...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23462",
      "url": "https://patchblox.com/security/cve/CVE-2026-23462",
      "title": "kernel-default: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00276,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43110",
      "url": "https://patchblox.com/security/cve/CVE-2026-43110",
      "title": "kernel-default: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0027,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31570",
      "url": "https://patchblox.com/security/cve/CVE-2026-31570",
      "title": "can: gw: fix OOB heap access in cgw_csum_crc8_rel()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00263,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43038",
      "url": "https://patchblox.com/security/cve/CVE-2026-43038",
      "title": "kpatch-patch-4_18_0-553_125_1: kernel: ipv6: icmp: clear skb2-\u003Ecb[] in ip6_err_gen_icmpv6_unreach()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00255,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23461",
      "url": "https://patchblox.com/security/cve/CVE-2026-23461",
      "title": "kernel-source: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31588",
      "url": "https://patchblox.com/security/cve/CVE-2026-31588",
      "title": "KVM: x86: Use scratch field in MMIO fragment to hold small write values",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23406",
      "url": "https://patchblox.com/security/cve/CVE-2026-23406",
      "title": "apparmor: fix side-effect bug in match_char() macro usage",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23407",
      "url": "https://patchblox.com/security/cve/CVE-2026-23407",
      "title": "apparmor: fix missing bounds check on DEFAULT table in verify_dfa()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23408",
      "url": "https://patchblox.com/security/cve/CVE-2026-23408",
      "title": "apparmor: Fix double free of ns_name in aa_replace_profiles()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23409",
      "url": "https://patchblox.com/security/cve/CVE-2026-23409",
      "title": "apparmor: fix differential encoding verification",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31787",
      "url": "https://patchblox.com/security/cve/CVE-2026-31787",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nxen/privcmd: fix double free via VMA splitting\npr...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43329",
      "url": "https://patchblox.com/security/cve/CVE-2026-43329",
      "title": "kernel-64kb: netfilter: flowtable: strictly check for maximum number of actions (bsc#1265085).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23209",
      "url": "https://patchblox.com/security/cve/CVE-2026-23209",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31505",
      "url": "https://patchblox.com/security/cve/CVE-2026-31505",
      "title": "iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43126",
      "url": "https://patchblox.com/security/cve/CVE-2026-43126",
      "title": "ALSA: mixer: oss: Add card disconnect checkpoints",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43437",
      "url": "https://patchblox.com/security/cve/CVE-2026-43437",
      "title": "kernel-default: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265126).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23268",
      "url": "https://patchblox.com/security/cve/CVE-2026-23268",
      "title": "apparmor: fix unprivileged local user can do privileged policy management",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23411",
      "url": "https://patchblox.com/security/cve/CVE-2026-23411",
      "title": "apparmor: fix race between freeing data and fs accessing it",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23410",
      "url": "https://patchblox.com/security/cve/CVE-2026-23410",
      "title": "apparmor: fix race on rawdata dereference",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23269",
      "url": "https://patchblox.com/security/cve/CVE-2026-23269",
      "title": "apparmor: validate DFA start states are in bounds in unpack_pdb",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23351",
      "url": "https://patchblox.com/security/cve/CVE-2026-23351",
      "title": "netfilter: nft_set_pipapo: split gc into unlink and reclaim phase",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23449",
      "url": "https://patchblox.com/security/cve/CVE-2026-23449",
      "title": "kernel-default: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23458",
      "url": "https://patchblox.com/security/cve/CVE-2026-23458",
      "title": "kernel-64kb: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23273",
      "url": "https://patchblox.com/security/cve/CVE-2026-23273",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23239",
      "url": "https://patchblox.com/security/cve/CVE-2026-23239",
      "title": "espintcp: Fix race condition in espintcp_close()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31507",
      "url": "https://patchblox.com/security/cve/CVE-2026-31507",
      "title": "net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31586",
      "url": "https://patchblox.com/security/cve/CVE-2026-31586",
      "title": "mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31403",
      "url": "https://patchblox.com/security/cve/CVE-2026-31403",
      "title": "kernel-64kb: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31602",
      "url": "https://patchblox.com/security/cve/CVE-2026-31602",
      "title": "ALSA: ctxfi: Limit PTP to a single page",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43027",
      "url": "https://patchblox.com/security/cve/CVE-2026-43027",
      "title": "kernel-default: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31528",
      "url": "https://patchblox.com/security/cve/CVE-2026-31528",
      "title": "perf: Make sure to use pmu_ctx-\u003Epmu for groups",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43330",
      "url": "https://patchblox.com/security/cve/CVE-2026-43330",
      "title": "kernel-64kb: crypto: caam - fix overflow on long hmac keys (bsc#1264801).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43025",
      "url": "https://patchblox.com/security/cve/CVE-2026-43025",
      "title": "kernel-default: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.3,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43366",
      "url": "https://patchblox.com/security/cve/CVE-2026-43366",
      "title": "kernel-docs: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265116).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31470",
      "url": "https://patchblox.com/security/cve/CVE-2026-31470",
      "title": "kernel-64kb: virt: tdx-guest: Fix handling of host controlled \u0027quote\u0027 buffer length (bsc#1262665).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43120",
      "url": "https://patchblox.com/security/cve/CVE-2026-43120",
      "title": "kernel-default: RDMA/irdma: Fix double free related to rereg_user_mr.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31512",
      "url": "https://patchblox.com/security/cve/CVE-2026-31512",
      "title": "Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43044",
      "url": "https://patchblox.com/security/cve/CVE-2026-43044",
      "title": "kernel-default: crypto: caam - fix DMA corruption on long hmac keys (bsc#1264087).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43050",
      "url": "https://patchblox.com/security/cve/CVE-2026-43050",
      "title": "kernel-default: atm: lec: fix use-after-free in sock_def_readable() (bsc#1264082).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23271",
      "url": "https://patchblox.com/security/cve/CVE-2026-23271",
      "title": "perf: Fix __perf_event_overflow() vs perf_remove_from_context() race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31700",
      "url": "https://patchblox.com/security/cve/CVE-2026-31700",
      "title": "net/packet: fix TOCTOU race on mmap\u0027d vnet_hdr in tpacket_snd()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43214",
      "url": "https://patchblox.com/security/cve/CVE-2026-43214",
      "title": "kernel-default: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (bsc#1264651).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31504",
      "url": "https://patchblox.com/security/cve/CVE-2026-31504",
      "title": "net: fix fanout UAF in packet_release() via NETDEV_UP race",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23393",
      "url": "https://patchblox.com/security/cve/CVE-2026-23393",
      "title": "bridge: cfm: Fix race condition in peer_mep deletion",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31656",
      "url": "https://patchblox.com/security/cve/CVE-2026-31656",
      "title": "drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-2058",
      "url": "https://patchblox.com/security/cve/CVE-2023-2058",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00609,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23405",
      "url": "https://patchblox.com/security/cve/CVE-2026-23405",
      "title": "apparmor: fix: limit the number of levels of policy namespaces",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23403",
      "url": "https://patchblox.com/security/cve/CVE-2026-23403",
      "title": "apparmor: fix memory leak in verify_header",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23404",
      "url": "https://patchblox.com/security/cve/CVE-2026-23404",
      "title": "apparmor: replace recursive profile removal with iterative approach",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31738",
      "url": "https://patchblox.com/security/cve/CVE-2026-31738",
      "title": "kernel-source: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T19:49:26Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}