{ "fix": "SUSE-SU-2026:23237-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-23237-1", "summary": "SUSE-SU-2026:23237-1, released August 11, 2026, fixes 891 CVEs in kernel-default (version 6.12.0-160000.37.1). 2 of them are being exploited (CVE-2026-31431); 2 on CISA KEV. Patch Radar priority: Patch now.", "platform": "linux", "type": "advisory", "title": "kernel-default security update", "released": "2026-08-11T21:34:22Z", "priority": "Patch now", "priorityTier": 1, "priorityReason": "Closes CVE-2026-31431, exploited (CISA KEV)", "supported": true, "cveCount": 891, "exploitedCveCount": 2, "kevCveCount": 2, "ransomwareCveCount": 0, "maxEpss": 0.98114, "maxCvss": 10, "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:23237-1", "appliesTo": [ { "product": "kernel-default", "productUrl": "https://patchblox.com/security/product/linux/kernel-default", "release": "sles 16.0", "fixedVersion": "6.12.0-160000.37.1", "supported": true } ], "cves": [ { "cveId": "CVE-2026-31431", "url": "https://patchblox.com/security/cve/CVE-2026-31431", "title": "crypto: algif_aead - Revert to operating out-of-place", "priority": "Patch now", "severity": "Moderate", "cvss": 8.1, "epss": 0.98114, "kev": true, "ransomware": false, "exploited": true, "disclosed": false }, { "cveId": "CVE-2025-39964", "url": "https://patchblox.com/security/cve/CVE-2025-39964", "title": "crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg", "priority": "Patch now", "severity": "Moderate", "cvss": 8.8, "epss": 0.01607, "kev": true, "ransomware": false, "exploited": true, "disclosed": false }, { "cveId": "CVE-2026-64564", "url": "https://patchblox.com/security/cve/CVE-2026-64564", "title": "sctp: don\u0027t free the ASCONF\u0027s own transport in DEL-IP processing", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.01432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43011", "url": "https://patchblox.com/security/cve/CVE-2026-43011", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00591, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53224", "url": "https://patchblox.com/security/cve/CVE-2026-53224", "title": "kernel-default: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997).", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00574, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52982", "url": "https://patchblox.com/security/cve/CVE-2026-52982", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53045", "url": "https://patchblox.com/security/cve/CVE-2026-53045", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64061", "url": "https://patchblox.com/security/cve/CVE-2026-64061", "title": "kernel-64kb: netfs: Fix early put of sink folio in netfs_read_gaps() (bsc#1272505).", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52922", "url": "https://patchblox.com/security/cve/CVE-2026-52922", "title": "batman-adv: dat: handle forward allocation error", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00389, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64025", "url": "https://patchblox.com/security/cve/CVE-2026-64025", "title": "kernel-64kb: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00369, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53002", "url": "https://patchblox.com/security/cve/CVE-2026-53002", "title": "netfilter: conntrack: remove sprintf usage", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00368, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52989", "url": "https://patchblox.com/security/cve/CVE-2026-52989", "title": "nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00356, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63974", "url": "https://patchblox.com/security/cve/CVE-2026-63974", "title": "Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53260", "url": "https://patchblox.com/security/cve/CVE-2026-53260", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in re...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52934", "url": "https://patchblox.com/security/cve/CVE-2026-52934", "title": "batman-adv: tvlv: reject oversized TVLV packets", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00244, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63882", "url": "https://patchblox.com/security/cve/CVE-2026-63882", "title": "drm/amdkfd: fix NULL pointer bug in svm_range_set_attr", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53009", "url": "https://patchblox.com/security/cve/CVE-2026-53009", "title": "ice: fix double-free of tx_buf skb", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63824", "url": "https://patchblox.com/security/cve/CVE-2026-63824", "title": "KEYS: fix overflow in keyctl_pkey_params_get_2()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53376", "url": "https://patchblox.com/security/cve/CVE-2026-53376", "title": "drm/amdkfd: Add upper bound check for num_of_nodes", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71305", "url": "https://patchblox.com/security/cve/CVE-2025-71305", "title": "drm/display/dp_mst: Add protection against 0 vcpi", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63959", "url": "https://patchblox.com/security/cve/CVE-2026-63959", "title": "usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64106", "url": "https://patchblox.com/security/cve/CVE-2026-64106", "title": "kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).", "priority": "Urgent", "severity": "critical", "cvss": 9, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53403", "url": "https://patchblox.com/security/cve/CVE-2026-53403", "title": "fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53374", "url": "https://patchblox.com/security/cve/CVE-2026-53374", "title": "drm/amdgpu: zero-initialize GART table on allocation", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63827", "url": "https://patchblox.com/security/cve/CVE-2026-63827", "title": "apparmor: fix use-after-free in rawdata dedup loop", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52913", "url": "https://patchblox.com/security/cve/CVE-2026-52913", "title": "batman-adv: v: stop OGMv2 on disabled interface", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52947", "url": "https://patchblox.com/security/cve/CVE-2026-52947", "title": "net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00106, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53062", "url": "https://patchblox.com/security/cve/CVE-2026-53062", "title": "dm cache policy smq: fix missing locks in invalidating cache blocks", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53359", "url": "https://patchblox.com/security/cve/CVE-2026-53359", "title": "kpatch-patch: A flaw was found in the Linux kernel\u0027s Kernel-based Virtual Machine (KVM) x86 shadow paging mechanism", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.01368, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52958", "url": "https://patchblox.com/security/cve/CVE-2026-52958", "title": "libceph: Fix potential out-of-bounds access in osdmap_decode()", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00735, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43501", "url": "https://patchblox.com/security/cve/CVE-2026-43501", "title": "ipv6: rpl: reserve mac_len headroom when recompressed SRH grows", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00732, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53003", "url": "https://patchblox.com/security/cve/CVE-2026-53003", "title": "pppoe: drop PFC frames", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63912", "url": "https://patchblox.com/security/cve/CVE-2026-63912", "title": "kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836).", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45859", "url": "https://patchblox.com/security/cve/CVE-2026-45859", "title": "netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00712, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63886", "url": "https://patchblox.com/security/cve/CVE-2026-63886", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00711, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53247", "url": "https://patchblox.com/security/cve/CVE-2026-53247", "title": "net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00685, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43493", "url": "https://patchblox.com/security/cve/CVE-2026-43493", "title": "crypto: pcrypt - Fix handling of MAY_BACKLOG requests", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00681, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63968", "url": "https://patchblox.com/security/cve/CVE-2026-63968", "title": "kernel-default: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00665, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53399", "url": "https://patchblox.com/security/cve/CVE-2026-53399", "title": "nfsd: release layout stid on setlease failure", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00663, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64530", "url": "https://patchblox.com/security/cve/CVE-2026-64530", "title": "net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00655, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63919", "url": "https://patchblox.com/security/cve/CVE-2026-63919", "title": "kernel-default: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.0065, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52986", "url": "https://patchblox.com/security/cve/CVE-2026-52986", "title": "netfilter: nf_conntrack_sip: don\u0027t use simple_strtoul", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00634, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53394", "url": "https://patchblox.com/security/cve/CVE-2026-53394", "title": "kernel-uek64k-modules-usb: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.0063, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63795", "url": "https://patchblox.com/security/cve/CVE-2026-63795", "title": "9p: avoid putting oldfid in p9_client_walk() error path", "priority": "High", "severity": "Moderate", "cvss": 10, "epss": 0.00615, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43304", "url": "https://patchblox.com/security/cve/CVE-2026-43304", "title": "kernel-64kb: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00613, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52956", "url": "https://patchblox.com/security/cve/CVE-2026-52956", "title": "kernel-default: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172).", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00611, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63972", "url": "https://patchblox.com/security/cve/CVE-2026-63972", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00592, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52999", "url": "https://patchblox.com/security/cve/CVE-2026-52999", "title": "netfilter: nfnetlink_osf: fix out-of-bounds read on option matching", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00591, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52998", "url": "https://patchblox.com/security/cve/CVE-2026-52998", "title": "netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00579, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53221", "url": "https://patchblox.com/security/cve/CVE-2026-53221", "title": "ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53225", "url": "https://patchblox.com/security/cve/CVE-2026-53225", "title": "sctp: fix uninit-value in __sctp_rcv_asconf_lookup()", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63976", "url": "https://patchblox.com/security/cve/CVE-2026-63976", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00569, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46102", "url": "https://patchblox.com/security/cve/CVE-2026-46102", "title": "net: strparser: fix skb_head leak in strp_abort_strp()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00564, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46177", "url": "https://patchblox.com/security/cve/CVE-2026-46177", "title": "kernel-uek64k: ipmi: Add limits to event and receive message requests (Corey Minyard) [Orabug: 39460490]", "priority": "High", "severity": "N/A", "cvss": 7.5, "epss": 0.00564, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53398", "url": "https://patchblox.com/security/cve/CVE-2026-53398", "title": "NFSD: Fix SECINFO_NO_NAME decode error cleanup", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00543, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52981", "url": "https://patchblox.com/security/cve/CVE-2026-52981", "title": "kernel-64kb: neigh: let neigh_xmit take skb ownership (bsc#1269254).", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00532, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53392", "url": "https://patchblox.com/security/cve/CVE-2026-53392", "title": "NFSv4/flexfiles: reject zero filehandle version count", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00529, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53397", "url": "https://patchblox.com/security/cve/CVE-2026-53397", "title": "nfsd: fix posix_acl leak on SETACL decode failure", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00529, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53268", "url": "https://patchblox.com/security/cve/CVE-2026-53268", "title": "netfilter: conntrack_irc: fix possible out-of-bounds read", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43230", "url": "https://patchblox.com/security/cve/CVE-2026-43230", "title": "kernel-64kb: net/rds: Clear reconnect pending bit (bsc#1264539).", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53391", "url": "https://patchblox.com/security/cve/CVE-2026-53391", "title": "NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00517, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63994", "url": "https://patchblox.com/security/cve/CVE-2026-63994", "title": "kernel-default: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53186", "url": "https://patchblox.com/security/cve/CVE-2026-53186", "title": "RDMA/srp: bound SRP_RSP sense copy by the received length", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64560", "url": "https://patchblox.com/security/cve/CVE-2026-64560", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-lead...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00503, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31552", "url": "https://patchblox.com/security/cve/CVE-2026-31552", "title": "wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46027", "url": "https://patchblox.com/security/cve/CVE-2026-46027", "title": "net/smc: avoid early lgr access in smc_clc_wait_msg", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53199", "url": "https://patchblox.com/security/cve/CVE-2026-53199", "title": "hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52974", "url": "https://patchblox.com/security/cve/CVE-2026-52974", "title": "net: tls: fix strparser anchor skb leak on offload RX setup failure", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53183", "url": "https://patchblox.com/security/cve/CVE-2026-53183", "title": "mptcp: allow subflow rcv wnd to shrink", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53184", "url": "https://patchblox.com/security/cve/CVE-2026-53184", "title": "udp: clear skb-\u003Edev before running a sockmap verdict", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46137", "url": "https://patchblox.com/security/cve/CVE-2026-46137", "title": "mptcp: pm: ADD_ADDR rtx: fix potential data-race", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00477, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64600", "url": "https://patchblox.com/security/cve/CVE-2026-64600", "title": "xfs: resample the data fork mapping after cycling ILOCK", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43117", "url": "https://patchblox.com/security/cve/CVE-2026-43117", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 9.1, "epss": 0.00458, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31436", "url": "https://patchblox.com/security/cve/CVE-2026-31436", "title": "kernel-64kb: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31557", "url": "https://patchblox.com/security/cve/CVE-2026-31557", "title": "nvmet: move async event work off nvmet-wq", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00451, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46306", "url": "https://patchblox.com/security/cve/CVE-2026-46306", "title": "flow_dissector: do not dissect PPPoE PFC frames", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00449, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53246", "url": "https://patchblox.com/security/cve/CVE-2026-53246", "title": "sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00442, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53235", "url": "https://patchblox.com/security/cve/CVE-2026-53235", "title": "kernel-uek64k-modules-usb: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53131", "url": "https://patchblox.com/security/cve/CVE-2026-53131", "title": "netfilter: require Ethernet MAC header before using eth_hdr()", "priority": "High", "severity": "Moderate", "cvss": 9.4, "epss": 0.00435, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31598", "url": "https://patchblox.com/security/cve/CVE-2026-31598", "title": "ocfs2: fix possible deadlock between unlink and dio_end_io_write", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00435, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53071", "url": "https://patchblox.com/security/cve/CVE-2026-53071", "title": "Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00429, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64091", "url": "https://patchblox.com/security/cve/CVE-2026-64091", "title": "kernel-uek64k-modules-extra: batman-adv: tt: fix TOCTOU race for reported vlans (Sven Eckelmann) [Orabug: 39754748]", "priority": "High", "severity": "N/A", "cvss": 9.8, "epss": 0.00426, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31659", "url": "https://patchblox.com/security/cve/CVE-2026-31659", "title": "batman-adv: reject oversized global TT response buffers", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00421, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53355", "url": "https://patchblox.com/security/cve/CVE-2026-53355", "title": "net: rds: clear i_sends on setup unwind", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00421, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31739", "url": "https://patchblox.com/security/cve/CVE-2026-31739", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43203", "url": "https://patchblox.com/security/cve/CVE-2026-43203", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.004, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31657", "url": "https://patchblox.com/security/cve/CVE-2026-31657", "title": "batman-adv: hold claim backbone gateways by reference", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53088", "url": "https://patchblox.com/security/cve/CVE-2026-53088", "title": "net: bcmgenet: fix off-by-one in bcmgenet_put_txcb", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53006", "url": "https://patchblox.com/security/cve/CVE-2026-53006", "title": "ipv6: fix possible UAF in icmpv6_rcv()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00394, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52967", "url": "https://patchblox.com/security/cve/CVE-2026-52967", "title": "kernel-default: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00393, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46273", "url": "https://patchblox.com/security/cve/CVE-2026-46273", "title": "ibmveth: Disable GSO for packets with small MSS", "priority": "High", "severity": "Moderate", "cvss": 8.6, "epss": 0.00389, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46265", "url": "https://patchblox.com/security/cve/CVE-2026-46265", "title": "kernel-64kb: RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1267662).", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00389, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43232", "url": "https://patchblox.com/security/cve/CVE-2026-43232", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63893", "url": "https://patchblox.com/security/cve/CVE-2026-63893", "title": "kernel-default: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).", "priority": "High", "severity": "N/A", "cvss": 8.1, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43296", "url": "https://patchblox.com/security/cve/CVE-2026-43296", "title": "kernel-64kb: octeontx2-af: Workaround SQM/PSE stalls by disabling sticky (bsc#1264805).", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64223", "url": "https://patchblox.com/security/cve/CVE-2026-64223", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00385, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53069", "url": "https://patchblox.com/security/cve/CVE-2026-53069", "title": "kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).", "priority": "High", "severity": "N/A", "cvss": 7.5, "epss": 0.0038, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31467", "url": "https://patchblox.com/security/cve/CVE-2026-31467", "title": "erofs: add GFP_NOIO in the bio completion if needed", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00378, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43114", "url": "https://patchblox.com/security/cve/CVE-2026-43114", "title": "kernel-rt-64k-modules-core: kernel: netfilter: nft_set_pipapo_avx2: don\u0027t return non-matching entry on expiry", "priority": "High", "severity": "Important", "cvss": 9.4, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43253", "url": "https://patchblox.com/security/cve/CVE-2026-43253", "title": "kernel-64kb: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63916", "url": "https://patchblox.com/security/cve/CVE-2026-63916", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63915", "url": "https://patchblox.com/security/cve/CVE-2026-63915", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63947", "url": "https://patchblox.com/security/cve/CVE-2026-63947", "title": "kernel-64k-modules-core: kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report()", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63944", "url": "https://patchblox.com/security/cve/CVE-2026-63944", "title": "kernel-default: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662).", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00334, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53357", "url": "https://patchblox.com/security/cve/CVE-2026-53357", "title": "Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00332, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43172", "url": "https://patchblox.com/security/cve/CVE-2026-43172", "title": "wifi: iwlwifi: fix 22000 series SMEM parsing", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00325, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43495", "url": "https://patchblox.com/security/cve/CVE-2026-43495", "title": "net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00318, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43249", "url": "https://patchblox.com/security/cve/CVE-2026-43249", "title": "9p/xen: protect xen_9pfs_front_free against concurrent calls", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00317, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53175", "url": "https://patchblox.com/security/cve/CVE-2026-53175", "title": "kernel-64kb: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00313, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31607", "url": "https://patchblox.com/security/cve/CVE-2026-31607", "title": "usbip: validate number_of_packets in usbip_pack_ret_submit()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00311, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63831", "url": "https://patchblox.com/security/cve/CVE-2026-63831", "title": "mac802154: llsec: add skb_cow_data() before in-place crypto", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00307, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46125", "url": "https://patchblox.com/security/cve/CVE-2026-46125", "title": "wifi: mac80211: remove station if connection prep fails", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00303, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53360", "url": "https://patchblox.com/security/cve/CVE-2026-53360", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nKVM: SEV: Require in-GHCB scratch area if GHCB v2...", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00297, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53070", "url": "https://patchblox.com/security/cve/CVE-2026-53070", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00296, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31622", "url": "https://patchblox.com/security/cve/CVE-2026-31622", "title": "NFC: digital: Bounds check NFC-A cascade depth in SDD response handler", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00289, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31626", "url": "https://patchblox.com/security/cve/CVE-2026-31626", "title": "staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00288, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-54518", "url": "https://patchblox.com/security/cve/CVE-2025-54518", "title": "AMD: CVE-2025-54518 CPU OP Cache Corruption", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46056", "url": "https://patchblox.com/security/cve/CVE-2026-46056", "title": "Bluetooth: hci_event: fix potential UAF in SSP passkey handlers", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00282, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46198", "url": "https://patchblox.com/security/cve/CVE-2026-46198", "title": "bpftool: batman-adv: fix integer overflow on buff_pos (Lyes Bourennani) [Orabug: 39460580]", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00281, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53358", "url": "https://patchblox.com/security/cve/CVE-2026-53358", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00281, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31773", "url": "https://patchblox.com/security/cve/CVE-2026-31773", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00279, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43334", "url": "https://patchblox.com/security/cve/CVE-2026-43334", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: SMP: force responder MITM requirements...", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46138", "url": "https://patchblox.com/security/cve/CVE-2026-46138", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53254", "url": "https://patchblox.com/security/cve/CVE-2026-53254", "title": "Bluetooth: RFCOMM: validate skb length in MCC handlers", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46212", "url": "https://patchblox.com/security/cve/CVE-2026-46212", "title": "batman-adv: bla: prevent use-after-free when deleting claims", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00274, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63975", "url": "https://patchblox.com/security/cve/CVE-2026-63975", "title": "kernel-default: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00274, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31779", "url": "https://patchblox.com/security/cve/CVE-2026-31779", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00272, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53196", "url": "https://patchblox.com/security/cve/CVE-2026-53196", "title": "USB: serial: io_ti: fix heap overflow in get_manuf_info()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00271, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43110", "url": "https://patchblox.com/security/cve/CVE-2026-43110", "title": "kernel-default: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.0027, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43291", "url": "https://patchblox.com/security/cve/CVE-2026-43291", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 8.3, "epss": 0.00269, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53147", "url": "https://patchblox.com/security/cve/CVE-2026-53147", "title": "thunderbolt: Validate XDomain request packet size before type cast", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00269, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53253", "url": "https://patchblox.com/security/cve/CVE-2026-53253", "title": "Bluetooth: bnep: reject short frames before parsing", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53256", "url": "https://patchblox.com/security/cve/CVE-2026-53256", "title": "kernel-rt-devel: kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00264, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31570", "url": "https://patchblox.com/security/cve/CVE-2026-31570", "title": "can: gw: fix OOB heap access in cgw_csum_crc8_rel()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46238", "url": "https://patchblox.com/security/cve/CVE-2026-46238", "title": "batman-adv: stop caching unowned originator pointers in BAT IV", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00262, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53275", "url": "https://patchblox.com/security/cve/CVE-2026-53275", "title": "ipv6: mcast: Fix use-after-free when processing MLD queries", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00262, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63946", "url": "https://patchblox.com/security/cve/CVE-2026-63946", "title": "kernel-default: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53146", "url": "https://patchblox.com/security/cve/CVE-2026-53146", "title": "thunderbolt: Limit XDomain response copy to actual frame size", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0026, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46232", "url": "https://patchblox.com/security/cve/CVE-2026-46232", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00258, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43018", "url": "https://patchblox.com/security/cve/CVE-2026-43018", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43051", "url": "https://patchblox.com/security/cve/CVE-2026-43051", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63869", "url": "https://patchblox.com/security/cve/CVE-2026-63869", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nwifi: mac80211: limit injected antenna index in i...", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00255, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53157", "url": "https://patchblox.com/security/cve/CVE-2026-53157", "title": "net: phonet: free phonet_device after RCU grace period", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31513", "url": "https://patchblox.com/security/cve/CVE-2026-31513", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00253, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31629", "url": "https://patchblox.com/security/cve/CVE-2026-31629", "title": "nfc: llcp: add missing return after LLCP_CLOSED checks", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43113", "url": "https://patchblox.com/security/cve/CVE-2026-43113", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00244, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40022", "url": "https://patchblox.com/security/cve/CVE-2025-40022", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46307", "url": "https://patchblox.com/security/cve/CVE-2026-46307", "title": "wifi: ath5k: do not access array OOB", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46275", "url": "https://patchblox.com/security/cve/CVE-2026-46275", "title": "Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00226, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52918", "url": "https://patchblox.com/security/cve/CVE-2026-52918", "title": "Bluetooth: serialize accept_q access", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00218, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43062", "url": "https://patchblox.com/security/cve/CVE-2026-43062", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63896", "url": "https://patchblox.com/security/cve/CVE-2026-63896", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "important", "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45878", "url": "https://patchblox.com/security/cve/CVE-2026-45878", "title": "kernel-debug-devel: kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46166", "url": "https://patchblox.com/security/cve/CVE-2026-46166", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63939", "url": "https://patchblox.com/security/cve/CVE-2026-63939", "title": "kernel-64kb: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272691).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.3, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63938", "url": "https://patchblox.com/security/cve/CVE-2026-63938", "title": "kernel-64kb: KVM: SEV: Check PSC request indices against the actual size of the buffer (bsc#1272620).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.3, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53072", "url": "https://patchblox.com/security/cve/CVE-2026-53072", "title": "Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46113", "url": "https://patchblox.com/security/cve/CVE-2026-46113", "title": "kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52969", "url": "https://patchblox.com/security/cve/CVE-2026-52969", "title": "KVM: Reject wrapped offset in kvm_reset_dirty_gfn()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53212", "url": "https://patchblox.com/security/cve/CVE-2026-53212", "title": "netfilter: nft_tunnel: fix use-after-free on object destroy", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53369", "url": "https://patchblox.com/security/cve/CVE-2026-53369", "title": "kernel-64kb: udf: reject descriptors with oversized CRC length (bsc#1271818).", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63940", "url": "https://patchblox.com/security/cve/CVE-2026-63940", "title": "KVM: SEV: Ignore Port I/O requests of length \u00270\u0027", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52976", "url": "https://patchblox.com/security/cve/CVE-2026-52976", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ndrm/xe: Fix error cleanup in xe_exec_queue_create...", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53000", "url": "https://patchblox.com/security/cve/CVE-2026-53000", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: nat: use kfree_rcu to release ops\nFlor...", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38250", "url": "https://patchblox.com/security/cve/CVE-2025-38250", "title": "Bluetooth: hci_core: Fix use-after-free in vhci_flush()", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52951", "url": "https://patchblox.com/security/cve/CVE-2026-52951", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53375", "url": "https://patchblox.com/security/cve/CVE-2026-53375", "title": "drm/amdgpu/vce: Prevent partial address patches", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63875", "url": "https://patchblox.com/security/cve/CVE-2026-63875", "title": "kernel-modules: kernel: arm64: tlb: Flush walk cache when unsharing PMD tables", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63899", "url": "https://patchblox.com/security/cve/CVE-2026-63899", "title": "kernel: kernel: USB: serial: mxuport: fix memory corruption with small endpoint", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63845", "url": "https://patchblox.com/security/cve/CVE-2026-63845", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63846", "url": "https://patchblox.com/security/cve/CVE-2026-63846", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63847", "url": "https://patchblox.com/security/cve/CVE-2026-63847", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63848", "url": "https://patchblox.com/security/cve/CVE-2026-63848", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63853", "url": "https://patchblox.com/security/cve/CVE-2026-63853", "title": "drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63854", "url": "https://patchblox.com/security/cve/CVE-2026-63854", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63855", "url": "https://patchblox.com/security/cve/CVE-2026-63855", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63856", "url": "https://patchblox.com/security/cve/CVE-2026-63856", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63884", "url": "https://patchblox.com/security/cve/CVE-2026-63884", "title": "kernel-zfcpdump: kernel: drm/i915: Fix potential UAF in TTM object purge", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53085", "url": "https://patchblox.com/security/cve/CVE-2026-53085", "title": "kernel-64kb: bpf: fix mm lifecycle in open-coded task_vma iterator (bsc#1269879).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53191", "url": "https://patchblox.com/security/cve/CVE-2026-53191", "title": "kernel-uek64k-modules-wireless: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53233", "url": "https://patchblox.com/security/cve/CVE-2026-53233", "title": "kernel-uek64k-modules-usb: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53386", "url": "https://patchblox.com/security/cve/CVE-2026-53386", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63842", "url": "https://patchblox.com/security/cve/CVE-2026-63842", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63843", "url": "https://patchblox.com/security/cve/CVE-2026-63843", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63844", "url": "https://patchblox.com/security/cve/CVE-2026-63844", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63850", "url": "https://patchblox.com/security/cve/CVE-2026-63850", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63851", "url": "https://patchblox.com/security/cve/CVE-2026-63851", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63852", "url": "https://patchblox.com/security/cve/CVE-2026-63852", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63836", "url": "https://patchblox.com/security/cve/CVE-2026-63836", "title": "batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63807", "url": "https://patchblox.com/security/cve/CVE-2026-63807", "title": "KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63923", "url": "https://patchblox.com/security/cve/CVE-2026-63923", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nocteontx2-af: validate body pcifunc in rvu_mbox_h...", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23227", "url": "https://patchblox.com/security/cve/CVE-2026-23227", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53366", "url": "https://patchblox.com/security/cve/CVE-2026-53366", "title": "ipv4: account for fraggap on the paged allocation path", "priority": "High", "severity": "Important", "cvss": 8.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53098", "url": "https://patchblox.com/security/cve/CVE-2026-53098", "title": "wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53112", "url": "https://patchblox.com/security/cve/CVE-2026-53112", "title": "wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63883", "url": "https://patchblox.com/security/cve/CVE-2026-63883", "title": "kernel-64kb: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572).", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53402", "url": "https://patchblox.com/security/cve/CVE-2026-53402", "title": "fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63902", "url": "https://patchblox.com/security/cve/CVE-2026-63902", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63903", "url": "https://patchblox.com/security/cve/CVE-2026-63903", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63904", "url": "https://patchblox.com/security/cve/CVE-2026-63904", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53097", "url": "https://patchblox.com/security/cve/CVE-2026-53097", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix use-after-free bugs in m...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63894", "url": "https://patchblox.com/security/cve/CVE-2026-63894", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63826", "url": "https://patchblox.com/security/cve/CVE-2026-63826", "title": "fbdev: fix use-after-free in store_modes()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63957", "url": "https://patchblox.com/security/cve/CVE-2026-63957", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46152", "url": "https://patchblox.com/security/cve/CVE-2026-46152", "title": "wifi: mac80211: drop stray \u0027static\u0027 from fast-RX rx_result", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64528", "url": "https://patchblox.com/security/cve/CVE-2026-64528", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53068", "url": "https://patchblox.com/security/cve/CVE-2026-53068", "title": "drm/komeda: fix integer overflow in AFBC framebuffer size check", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63905", "url": "https://patchblox.com/security/cve/CVE-2026-63905", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64191", "url": "https://patchblox.com/security/cve/CVE-2026-64191", "title": "i2c: stub: Reject I2C block transfers with invalid length", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31532", "url": "https://patchblox.com/security/cve/CVE-2026-31532", "title": "can: raw: fix ro-\u003Euniq use-after-free in raw_rcv()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43059", "url": "https://patchblox.com/security/cve/CVE-2026-43059", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43126", "url": "https://patchblox.com/security/cve/CVE-2026-43126", "title": "ALSA: mixer: oss: Add card disconnect checkpoints", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43250", "url": "https://patchblox.com/security/cve/CVE-2026-43250", "title": "usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43352", "url": "https://patchblox.com/security/cve/CVE-2026-43352", "title": "i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45853", "url": "https://patchblox.com/security/cve/CVE-2026-45853", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45866", "url": "https://patchblox.com/security/cve/CVE-2026-45866", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45867", "url": "https://patchblox.com/security/cve/CVE-2026-45867", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45879", "url": "https://patchblox.com/security/cve/CVE-2026-45879", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45902", "url": "https://patchblox.com/security/cve/CVE-2026-45902", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45916", "url": "https://patchblox.com/security/cve/CVE-2026-45916", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63927", "url": "https://patchblox.com/security/cve/CVE-2026-63927", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63967", "url": "https://patchblox.com/security/cve/CVE-2026-63967", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45851", "url": "https://patchblox.com/security/cve/CVE-2026-45851", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43368", "url": "https://patchblox.com/security/cve/CVE-2026-43368", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53022", "url": "https://patchblox.com/security/cve/CVE-2026-53022", "title": "platform/x86: dell-wmi-sysman: bound enumeration string aggregation", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63962", "url": "https://patchblox.com/security/cve/CVE-2026-63962", "title": "usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45885", "url": "https://patchblox.com/security/cve/CVE-2026-45885", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45946", "url": "https://patchblox.com/security/cve/CVE-2026-45946", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63930", "url": "https://patchblox.com/security/cve/CVE-2026-63930", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63934", "url": "https://patchblox.com/security/cve/CVE-2026-63934", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63961", "url": "https://patchblox.com/security/cve/CVE-2026-63961", "title": "usb: typec: altmodes/displayport: validate count before reading Status Update VDO", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63963", "url": "https://patchblox.com/security/cve/CVE-2026-63963", "title": "usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63958", "url": "https://patchblox.com/security/cve/CVE-2026-63958", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43437", "url": "https://patchblox.com/security/cve/CVE-2026-43437", "title": "kernel-default: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265126).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45882", "url": "https://patchblox.com/security/cve/CVE-2026-45882", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63943", "url": "https://patchblox.com/security/cve/CVE-2026-63943", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53270", "url": "https://patchblox.com/security/cve/CVE-2026-53270", "title": "ipvs: clear the svc scheduler ptr early on edit", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53202", "url": "https://patchblox.com/security/cve/CVE-2026-53202", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\naccel/ivpu: Fix signed integer truncation in IPC...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63806", "url": "https://patchblox.com/security/cve/CVE-2026-63806", "title": "KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68179", "url": "https://patchblox.com/security/cve/CVE-2025-68179", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63809", "url": "https://patchblox.com/security/cve/CVE-2026-63809", "title": "bpf: use kvfree() for replaced sysctl write buffer", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46174", "url": "https://patchblox.com/security/cve/CVE-2026-46174", "title": "x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53143", "url": "https://patchblox.com/security/cve/CVE-2026-53143", "title": "drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40216", "url": "https://patchblox.com/security/cve/CVE-2025-40216", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don\u0027t rely on user vaddr alignmen...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43049", "url": "https://patchblox.com/security/cve/CVE-2026-43049", "title": "HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53273", "url": "https://patchblox.com/security/cve/CVE-2026-53273", "title": "kernel-64kb: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40199", "url": "https://patchblox.com/security/cve/CVE-2025-40199", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix PP_MAGIC_MASK to avoid crashing o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63829", "url": "https://patchblox.com/security/cve/CVE-2026-63829", "title": "net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46145", "url": "https://patchblox.com/security/cve/CVE-2026-46145", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53329", "url": "https://patchblox.com/security/cve/CVE-2026-53329", "title": "drm/amd/display: Use krealloc_array() in dal_vector_reserve()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43459", "url": "https://patchblox.com/security/cve/CVE-2026-43459", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.3, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46294", "url": "https://patchblox.com/security/cve/CVE-2026-46294", "title": "kernel-uek: dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585]", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52972", "url": "https://patchblox.com/security/cve/CVE-2026-52972", "title": "crypto: af_alg - Cap AEAD AD length to 0x80000000", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31447", "url": "https://patchblox.com/security/cve/CVE-2026-31447", "title": "ext4: reject mount if bigalloc with s_first_data_block != 0", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31780", "url": "https://patchblox.com/security/cve/CVE-2026-31780", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46006", "url": "https://patchblox.com/security/cve/CVE-2026-46006", "title": "drm/nouveau: fix u32 overflow in pushbuf reloc bounds check", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46189", "url": "https://patchblox.com/security/cve/CVE-2026-46189", "title": "kernel-uek-modules-extra: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [Orabug: 39460540]", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52910", "url": "https://patchblox.com/security/cve/CVE-2026-52910", "title": "bpf: Free reuseport cBPF prog after RCU grace period.", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53137", "url": "https://patchblox.com/security/cve/CVE-2026-53137", "title": "drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53195", "url": "https://patchblox.com/security/cve/CVE-2026-53195", "title": "USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53203", "url": "https://patchblox.com/security/cve/CVE-2026-53203", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43380", "url": "https://patchblox.com/security/cve/CVE-2026-43380", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64018", "url": "https://patchblox.com/security/cve/CVE-2026-64018", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "important", "cvss": 9.3, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46149", "url": "https://patchblox.com/security/cve/CVE-2026-46149", "title": "scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63794", "url": "https://patchblox.com/security/cve/CVE-2026-63794", "title": "KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46209", "url": "https://patchblox.com/security/cve/CVE-2026-46209", "title": "kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460...", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46123", "url": "https://patchblox.com/security/cve/CVE-2026-46123", "title": "kernel-default: Bluetooth: virtio_bt: clamp rx length before skb_put (bsc#1267621).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31772", "url": "https://patchblox.com/security/cve/CVE-2026-31772", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46064", "url": "https://patchblox.com/security/cve/CVE-2026-46064", "title": "ibmasm: fix heap over-read in ibmasm_send_i2o_message()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53193", "url": "https://patchblox.com/security/cve/CVE-2026-53193", "title": "perf: kernel: ALSA: timer: Forcibly close timer instances at closing", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46180", "url": "https://patchblox.com/security/cve/CVE-2026-46180", "title": "wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46205", "url": "https://patchblox.com/security/cve/CVE-2026-46205", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53016", "url": "https://patchblox.com/security/cve/CVE-2026-53016", "title": "crypto: ccp - copy IV using skcipher ivsize", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31488", "url": "https://patchblox.com/security/cve/CVE-2026-31488", "title": "drm/amd/display: Do not skip unrelated mode changes in DSC validation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53381", "url": "https://patchblox.com/security/cve/CVE-2026-53381", "title": "virtiofs: fix UAF on submount umount", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43196", "url": "https://patchblox.com/security/cve/CVE-2026-43196", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43206", "url": "https://patchblox.com/security/cve/CVE-2026-43206", "title": "kernel-core: kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43207", "url": "https://patchblox.com/security/cve/CVE-2026-43207", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45996", "url": "https://patchblox.com/security/cve/CVE-2026-45996", "title": "spi: imx: fix use-after-free on unbind", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46036", "url": "https://patchblox.com/security/cve/CVE-2026-46036", "title": "kernel-64kb: vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex (bsc#1267470).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46197", "url": "https://patchblox.com/security/cve/CVE-2026-46197", "title": "drm/amdkfd: validate SVM ioctl nattr against buffer size", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46206", "url": "https://patchblox.com/security/cve/CVE-2026-46206", "title": "batman-adv: reject new tp_meter sessions during teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45994", "url": "https://patchblox.com/security/cve/CVE-2026-45994", "title": "ibmasm: fix OOB reads in command_file_write due to missing size checks", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53132", "url": "https://patchblox.com/security/cve/CVE-2026-53132", "title": "vsock/virtio: fix potential unbounded skb queue", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43222", "url": "https://patchblox.com/security/cve/CVE-2026-43222", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46117", "url": "https://patchblox.com/security/cve/CVE-2026-46117", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46201", "url": "https://patchblox.com/security/cve/CVE-2026-46201", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46274", "url": "https://patchblox.com/security/cve/CVE-2026-46274", "title": "io-wq: check that the predecessor is hashed in io_wq_remove_pending()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46193", "url": "https://patchblox.com/security/cve/CVE-2026-46193", "title": "kernel-uek-debug-devel: xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460554]", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46323", "url": "https://patchblox.com/security/cve/CVE-2026-46323", "title": "net: gro: don\u0027t merge zcopy skbs", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46191", "url": "https://patchblox.com/security/cve/CVE-2026-46191", "title": "fbcon: Avoid OOB font access if console rotation fails", "priority": "High", "severity": "Important", "cvss": 7.7, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45839", "url": "https://patchblox.com/security/cve/CVE-2026-45839", "title": "bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53400", "url": "https://patchblox.com/security/cve/CVE-2026-53400", "title": "i2c: core: fix adapter registration race", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46033", "url": "https://patchblox.com/security/cve/CVE-2026-46033", "title": "crypto: authencesn - reject short ahash digests during instance creation", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46080", "url": "https://patchblox.com/security/cve/CVE-2026-46080", "title": "ocfs2: split transactions in dio completion to avoid credit exhaustion", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63937", "url": "https://patchblox.com/security/cve/CVE-2026-63937", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53005", "url": "https://patchblox.com/security/cve/CVE-2026-53005", "title": "af_unix: Drop all SCM attributes for SOCKMAP.", "priority": "High", "severity": "Important", "cvss": 8.3, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46015", "url": "https://patchblox.com/security/cve/CVE-2026-46015", "title": "tcp: call sk_data_ready() after listener migration", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43033", "url": "https://patchblox.com/security/cve/CVE-2026-43033", "title": "crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43236", "url": "https://patchblox.com/security/cve/CVE-2026-43236", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46219", "url": "https://patchblox.com/security/cve/CVE-2026-46219", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53148", "url": "https://patchblox.com/security/cve/CVE-2026-53148", "title": "thunderbolt: Clamp XDomain response data copy to allocation size", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46132", "url": "https://patchblox.com/security/cve/CVE-2026-46132", "title": "bpftool: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297]", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31617", "url": "https://patchblox.com/security/cve/CVE-2026-31617", "title": "usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43138", "url": "https://patchblox.com/security/cve/CVE-2026-43138", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53356", "url": "https://patchblox.com/security/cve/CVE-2026-53356", "title": "drm/i915/gem: Fix phys BO pread/pwrite with offset", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52953", "url": "https://patchblox.com/security/cve/CVE-2026-52953", "title": "iommu/vt-d: Fix oops due to out of scope access", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52970", "url": "https://patchblox.com/security/cve/CVE-2026-52970", "title": "netfilter: nft_ct: fix missing expect put in obj eval", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43133", "url": "https://patchblox.com/security/cve/CVE-2026-43133", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46321", "url": "https://patchblox.com/security/cve/CVE-2026-46321", "title": "tun: free page on short-frame rejection in tun_xdp_one()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46023", "url": "https://patchblox.com/security/cve/CVE-2026-46023", "title": "dm mirror: fix integer overflow in create_dirty_log()", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46199", "url": "https://patchblox.com/security/cve/CVE-2026-46199", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46204", "url": "https://patchblox.com/security/cve/CVE-2026-46204", "title": "drm/amdgpu/vcn4: Prevent OOB reads when parsing IB", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46326", "url": "https://patchblox.com/security/cve/CVE-2026-46326", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31697", "url": "https://patchblox.com/security/cve/CVE-2026-31697", "title": "crypto: ccp: Don\u0027t attempt to copy ID to userspace if PSP command failed", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31698", "url": "https://patchblox.com/security/cve/CVE-2026-31698", "title": "crypto: ccp: Don\u0027t attempt to copy PDH cert to userspace if PSP command failed", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31699", "url": "https://patchblox.com/security/cve/CVE-2026-31699", "title": "crypto: ccp: Don\u0027t attempt to copy CSR to userspace if PSP command failed", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43427", "url": "https://patchblox.com/security/cve/CVE-2026-43427", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52942", "url": "https://patchblox.com/security/cve/CVE-2026-52942", "title": "netfilter: nf_log: validate MAC header was set before dumping it", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53387", "url": "https://patchblox.com/security/cve/CVE-2026-53387", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63971", "url": "https://patchblox.com/security/cve/CVE-2026-63971", "title": "kernel-default: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31485", "url": "https://patchblox.com/security/cve/CVE-2026-31485", "title": "spi: spi-fsl-lpspi: fix teardown order issue (UAF)", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31583", "url": "https://patchblox.com/security/cve/CVE-2026-31583", "title": "media: em28xx: fix use-after-free in em28xx_v4l2_open()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31602", "url": "https://patchblox.com/security/cve/CVE-2026-31602", "title": "ALSA: ctxfi: Limit PTP to a single page", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31627", "url": "https://patchblox.com/security/cve/CVE-2026-31627", "title": "i2c: s3c24xx: check the size of the SMBUS message before using it", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31768", "url": "https://patchblox.com/security/cve/CVE-2026-31768", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46122", "url": "https://patchblox.com/security/cve/CVE-2026-46122", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46163", "url": "https://patchblox.com/security/cve/CVE-2026-46163", "title": "wifi: b43legacy: enforce bounds check on firmware key index in RX path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46234", "url": "https://patchblox.com/security/cve/CVE-2026-46234", "title": "vsock: fix buffer size clamping order", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63942", "url": "https://patchblox.com/security/cve/CVE-2026-63942", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43141", "url": "https://patchblox.com/security/cve/CVE-2026-43141", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46140", "url": "https://patchblox.com/security/cve/CVE-2026-46140", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46190", "url": "https://patchblox.com/security/cve/CVE-2026-46190", "title": "mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46218", "url": "https://patchblox.com/security/cve/CVE-2026-46218", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53011", "url": "https://patchblox.com/security/cve/CVE-2026-53011", "title": "net/sched: taprio: fix use-after-free in advance_sched() on schedule switch", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53189", "url": "https://patchblox.com/security/cve/CVE-2026-53189", "title": "bpftool: kernel: mm/huge_memory: update file PMD counter before folio_put()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53182", "url": "https://patchblox.com/security/cve/CVE-2026-53182", "title": "wifi: nl80211: reject oversized EMA RNR lists", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53209", "url": "https://patchblox.com/security/cve/CVE-2026-53209", "title": "Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23308", "url": "https://patchblox.com/security/cve/CVE-2026-23308", "title": "pinctrl: equilibrium: fix warning trace on load", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43091", "url": "https://patchblox.com/security/cve/CVE-2026-43091", "title": "kernel-64kb: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43324", "url": "https://patchblox.com/security/cve/CVE-2026-43324", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46270", "url": "https://patchblox.com/security/cve/CVE-2026-46270", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31489", "url": "https://patchblox.com/security/cve/CVE-2026-31489", "title": "spi: meson-spicc: Fix double-put in remove path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31511", "url": "https://patchblox.com/security/cve/CVE-2026-31511", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31720", "url": "https://patchblox.com/security/cve/CVE-2026-31720", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31730", "url": "https://patchblox.com/security/cve/CVE-2026-31730", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31747", "url": "https://patchblox.com/security/cve/CVE-2026-31747", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31748", "url": "https://patchblox.com/security/cve/CVE-2026-31748", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31759", "url": "https://patchblox.com/security/cve/CVE-2026-31759", "title": "kernel-default: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43007", "url": "https://patchblox.com/security/cve/CVE-2026-43007", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43020", "url": "https://patchblox.com/security/cve/CVE-2026-43020", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43256", "url": "https://patchblox.com/security/cve/CVE-2026-43256", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43307", "url": "https://patchblox.com/security/cve/CVE-2026-43307", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43330", "url": "https://patchblox.com/security/cve/CVE-2026-43330", "title": "kernel-64kb: crypto: caam - fix overflow on long hmac keys (bsc#1264801).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46001", "url": "https://patchblox.com/security/cve/CVE-2026-46001", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46004", "url": "https://patchblox.com/security/cve/CVE-2026-46004", "title": "ALSA: caiaq: Handle probe errors properly", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46068", "url": "https://patchblox.com/security/cve/CVE-2026-46068", "title": "kernel-64kb: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46075", "url": "https://patchblox.com/security/cve/CVE-2026-46075", "title": "crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46084", "url": "https://patchblox.com/security/cve/CVE-2026-46084", "title": "RDMA/mana_ib: Disable RX steering on RSS QP destroy", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46086", "url": "https://patchblox.com/security/cve/CVE-2026-46086", "title": "net: bridge: use a stable FDB dst snapshot in RCU readers", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46136", "url": "https://patchblox.com/security/cve/CVE-2026-46136", "title": "wifi: mt76: mt7921: fix a potential clc buffer length underflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53004", "url": "https://patchblox.com/security/cve/CVE-2026-53004", "title": "kernel-uek-modules-extra: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757]", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53136", "url": "https://patchblox.com/security/cve/CVE-2026-53136", "title": "bpftool: kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53159", "url": "https://patchblox.com/security/cve/CVE-2026-53159", "title": "misc: fastrpc: fix DMA address corruption due to find_vma misuse", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64330", "url": "https://patchblox.com/security/cve/CVE-2026-64330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdm_co...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31624", "url": "https://patchblox.com/security/cve/CVE-2026-31624", "title": "HID: core: clamp report_size in s32ton() to avoid undefined shift", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53218", "url": "https://patchblox.com/security/cve/CVE-2026-53218", "title": "netfilter: nft_exthdr: fix register tracking for F_PRESENT flag", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53393", "url": "https://patchblox.com/security/cve/CVE-2026-53393", "title": "nfsd: reset write verifier on deferred writeback errors", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31581", "url": "https://patchblox.com/security/cve/CVE-2026-31581", "title": "ALSA: 6fire: fix use-after-free on disconnect", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31442", "url": "https://patchblox.com/security/cve/CVE-2026-31442", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31576", "url": "https://patchblox.com/security/cve/CVE-2026-31576", "title": "media: hackrf: fix to not free memory after the device is registered in hackrf_probe()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31578", "url": "https://patchblox.com/security/cve/CVE-2026-31578", "title": "media: as102: fix to not free memory after the device is registered in as102_usb_probe()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53063", "url": "https://patchblox.com/security/cve/CVE-2026-53063", "title": "dm cache: fix write hang in passthrough mode", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53149", "url": "https://patchblox.com/security/cve/CVE-2026-53149", "title": "thunderbolt: Bound root directory content to block size", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46158", "url": "https://patchblox.com/security/cve/CVE-2026-46158", "title": "mptcp: pm: ADD_ADDR rtx: always decrease sk refcount", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46170", "url": "https://patchblox.com/security/cve/CVE-2026-46170", "title": "mptcp: pm: ADD_ADDR rtx: free sk if last", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63952", "url": "https://patchblox.com/security/cve/CVE-2026-63952", "title": "kernel-default: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).", "priority": "High", "severity": "important", "cvss": 8.4, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31721", "url": "https://patchblox.com/security/cve/CVE-2026-31721", "title": "usb: gadget: f_hid: move list and spinlock inits from bind to alloc", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43353", "url": "https://patchblox.com/security/cve/CVE-2026-43353", "title": "i3c: mipi-i3c-hci: Fix race in DMA ring dequeue", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63945", "url": "https://patchblox.com/security/cve/CVE-2026-63945", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31566", "url": "https://patchblox.com/security/cve/CVE-2026-31566", "title": "drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53230", "url": "https://patchblox.com/security/cve/CVE-2026-53230", "title": "net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64189", "url": "https://patchblox.com/security/cve/CVE-2026-64189", "title": "netfilter: ipset: fix race between dump and ip_set_list resize", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31500", "url": "https://patchblox.com/security/cve/CVE-2026-31500", "title": "Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31587", "url": "https://patchblox.com/security/cve/CVE-2026-31587", "title": "ASoC: qcom: q6apm: move component registration to unmanaged version", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31758", "url": "https://patchblox.com/security/cve/CVE-2026-31758", "title": "kernel-default-base: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43426", "url": "https://patchblox.com/security/cve/CVE-2026-43426", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45936", "url": "https://patchblox.com/security/cve/CVE-2026-45936", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45958", "url": "https://patchblox.com/security/cve/CVE-2026-45958", "title": "drm/exynos: vidi: fix to avoid directly dereferencing user pointer", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46241", "url": "https://patchblox.com/security/cve/CVE-2026-46241", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46285", "url": "https://patchblox.com/security/cve/CVE-2026-46285", "title": "mtd: docg3: fix use-after-free in docg3_release()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53160", "url": "https://patchblox.com/security/cve/CVE-2026-53160", "title": "misc: fastrpc: fix use-after-free race in fastrpc_map_create", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53161", "url": "https://patchblox.com/security/cve/CVE-2026-53161", "title": "misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64221", "url": "https://patchblox.com/security/cve/CVE-2026-64221", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31778", "url": "https://patchblox.com/security/cve/CVE-2026-31778", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43241", "url": "https://patchblox.com/security/cve/CVE-2026-43241", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46130", "url": "https://patchblox.com/security/cve/CVE-2026-46130", "title": "kernel-64kb: dm-verity-fec: fix reading parity bytes split across blocks (take 3) (bsc#1267629).", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52915", "url": "https://patchblox.com/security/cve/CVE-2026-52915", "title": "netfilter: ip6t_hbh: reject oversized option lists", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53138", "url": "https://patchblox.com/security/cve/CVE-2026-53138", "title": "drm/amd/display: Bound VBIOS record-chain walk loops", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53205", "url": "https://patchblox.com/security/cve/CVE-2026-53205", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63949", "url": "https://patchblox.com/security/cve/CVE-2026-63949", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53236", "url": "https://patchblox.com/security/cve/CVE-2026-53236", "title": "tcp: restrict SO_ATTACH_FILTER to priv users", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31582", "url": "https://patchblox.com/security/cve/CVE-2026-31582", "title": "hwmon: (powerz) Fix use-after-free on USB disconnect", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45938", "url": "https://patchblox.com/security/cve/CVE-2026-45938", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46011", "url": "https://patchblox.com/security/cve/CVE-2026-46011", "title": "media: mtk-jpeg: fix use-after-free in release path due to uncancelled work", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46121", "url": "https://patchblox.com/security/cve/CVE-2026-46121", "title": "mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46246", "url": "https://patchblox.com/security/cve/CVE-2026-46246", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46324", "url": "https://patchblox.com/security/cve/CVE-2026-46324", "title": "kernel-default: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31619", "url": "https://patchblox.com/security/cve/CVE-2026-31619", "title": "ALSA: fireworks: bound device-supplied status before string array lookup", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31616", "url": "https://patchblox.com/security/cve/CVE-2026-31616", "title": "usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31623", "url": "https://patchblox.com/security/cve/CVE-2026-31623", "title": "net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53150", "url": "https://patchblox.com/security/cve/CVE-2026-53150", "title": "thunderbolt: Reject zero-length property entries in validator", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53181", "url": "https://patchblox.com/security/cve/CVE-2026-53181", "title": "vsock/vmci: fix sk_ack_backlog leak on failed handshake", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53208", "url": "https://patchblox.com/security/cve/CVE-2026-53208", "title": "Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43440", "url": "https://patchblox.com/security/cve/CVE-2026-43440", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45944", "url": "https://patchblox.com/security/cve/CVE-2026-45944", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing dow...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43370", "url": "https://patchblox.com/security/cve/CVE-2026-43370", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46230", "url": "https://patchblox.com/security/cve/CVE-2026-46230", "title": "drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43077", "url": "https://patchblox.com/security/cve/CVE-2026-43077", "title": "kernel-default: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31483", "url": "https://patchblox.com/security/cve/CVE-2026-31483", "title": "s390/syscalls: Add spectre boundary for syscall dispatch table", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43120", "url": "https://patchblox.com/security/cve/CVE-2026-43120", "title": "kernel-default: RDMA/irdma: Fix double free related to rereg_user_mr.", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43279", "url": "https://patchblox.com/security/cve/CVE-2026-43279", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nALSA: usb-audio: Add sanity check for OOB writes...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46009", "url": "https://patchblox.com/security/cve/CVE-2026-46009", "title": "PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31512", "url": "https://patchblox.com/security/cve/CVE-2026-31512", "title": "Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43052", "url": "https://patchblox.com/security/cve/CVE-2026-43052", "title": "wifi: mac80211: check tdls flag in ieee80211_tdls_oper", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53064", "url": "https://patchblox.com/security/cve/CVE-2026-53064", "title": "dm cache: fix null-deref with concurrent writes in passthrough mode", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31498", "url": "https://patchblox.com/security/cve/CVE-2026-31498", "title": "Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31593", "url": "https://patchblox.com/security/cve/CVE-2026-31593", "title": "KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31482", "url": "https://patchblox.com/security/cve/CVE-2026-31482", "title": "s390/entry: Scrub r12 register on kernel entry", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31591", "url": "https://patchblox.com/security/cve/CVE-2026-31591", "title": "KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43306", "url": "https://patchblox.com/security/cve/CVE-2026-43306", "title": "bpf: crypto: Use the correct destructor kfunc type", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43047", "url": "https://patchblox.com/security/cve/CVE-2026-43047", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43476", "url": "https://patchblox.com/security/cve/CVE-2026-43476", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46267", "url": "https://patchblox.com/security/cve/CVE-2026-46267", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52927", "url": "https://patchblox.com/security/cve/CVE-2026-52927", "title": "netfilter: ebtables: fix OOB read in compat_mtw_from_user", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53267", "url": "https://patchblox.com/security/cve/CVE-2026-53267", "title": "netfilter: nft_ct: bail out on template ct in get eval", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64242", "url": "https://patchblox.com/security/cve/CVE-2026-64242", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe e...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43058", "url": "https://patchblox.com/security/cve/CVE-2026-43058", "title": "media: vidtv: fix pass-by-value structs causing MSAN warnings", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64174", "url": "https://patchblox.com/security/cve/CVE-2026-64174", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211_me...", "priority": "High", "severity": "medium", "cvss": 8.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31776", "url": "https://patchblox.com/security/cve/CVE-2026-31776", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43044", "url": "https://patchblox.com/security/cve/CVE-2026-43044", "title": "kernel-default: crypto: caam - fix DMA corruption on long hmac keys (bsc#1264087).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46263", "url": "https://patchblox.com/security/cve/CVE-2026-46263", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43481", "url": "https://patchblox.com/security/cve/CVE-2026-43481", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43281", "url": "https://patchblox.com/security/cve/CVE-2026-43281", "title": "kernel-64kb: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46226", "url": "https://patchblox.com/security/cve/CVE-2026-46226", "title": "spi: fsl: fix controller deregistration", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46231", "url": "https://patchblox.com/security/cve/CVE-2026-46231", "title": "batman-adv: bla: put backbone reference on failed claim hash insert", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46233", "url": "https://patchblox.com/security/cve/CVE-2026-46233", "title": "batman-adv: bla: only purge non-released claims", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53255", "url": "https://patchblox.com/security/cve/CVE-2026-53255", "title": "Bluetooth: MGMT: validate advertising TLV before type checks", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43276", "url": "https://patchblox.com/security/cve/CVE-2026-43276", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.4, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43056", "url": "https://patchblox.com/security/cve/CVE-2026-43056", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43134", "url": "https://patchblox.com/security/cve/CVE-2026-43134", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43278", "url": "https://patchblox.com/security/cve/CVE-2026-43278", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46301", "url": "https://patchblox.com/security/cve/CVE-2026-46301", "title": "spi: topcliff-pch: fix use-after-free on unbind", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64188", "url": "https://patchblox.com/security/cve/CVE-2026-64188", "title": "net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64034", "url": "https://patchblox.com/security/cve/CVE-2026-64034", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 9.3, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53073", "url": "https://patchblox.com/security/cve/CVE-2026-53073", "title": "Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52926", "url": "https://patchblox.com/security/cve/CVE-2026-52926", "title": "batman-adv: clear current gateway during teardown", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52959", "url": "https://patchblox.com/security/cve/CVE-2026-52959", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00113, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53185", "url": "https://patchblox.com/security/cve/CVE-2026-53185", "title": "kernel: kernel: zram: fix use-after-free in zram_bvec_write_partial()", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53277", "url": "https://patchblox.com/security/cve/CVE-2026-53277", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nKVM: arm64: Take the SRCU lock for page table wal...", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43211", "url": "https://patchblox.com/security/cve/CVE-2026-43211", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43214", "url": "https://patchblox.com/security/cve/CVE-2026-43214", "title": "kernel-default: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (bsc#1264651).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53250", "url": "https://patchblox.com/security/cve/CVE-2026-53250", "title": "kernel-default: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31474", "url": "https://patchblox.com/security/cve/CVE-2026-31474", "title": "can: isotp: fix tx.buf use-after-free in isotp_sendmsg()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31761", "url": "https://patchblox.com/security/cve/CVE-2026-31761", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53239", "url": "https://patchblox.com/security/cve/CVE-2026-53239", "title": "xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63802", "url": "https://patchblox.com/security/cve/CVE-2026-63802", "title": "blk-cgroup: fix UAF in __blkcg_rstat_flush()", "priority": "High", "severity": "Important", "cvss": 8.3, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53242", "url": "https://patchblox.com/security/cve/CVE-2026-53242", "title": "ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52988", "url": "https://patchblox.com/security/cve/CVE-2026-52988", "title": "netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31548", "url": "https://patchblox.com/security/cve/CVE-2026-31548", "title": "wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43019", "url": "https://patchblox.com/security/cve/CVE-2026-43019", "title": "Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43180", "url": "https://patchblox.com/security/cve/CVE-2026-43180", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46157", "url": "https://patchblox.com/security/cve/CVE-2026-46157", "title": "ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43111", "url": "https://patchblox.com/security/cve/CVE-2026-43111", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00098, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53265", "url": "https://patchblox.com/security/cve/CVE-2026-53265", "title": "dm cache policy smq: check allocation under invalidate lock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00098, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53192", "url": "https://patchblox.com/security/cve/CVE-2026-53192", "title": "ALSA: timer: Fix UAF at snd_timer_user_params()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31473", "url": "https://patchblox.com/security/cve/CVE-2026-31473", "title": "media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43023", "url": "https://patchblox.com/security/cve/CVE-2026-43023", "title": "kernel-default: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137).", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46058", "url": "https://patchblox.com/security/cve/CVE-2026-46058", "title": "media: amphion: Fix race between m2m job_abort and device_run", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31667", "url": "https://patchblox.com/security/cve/CVE-2026-31667", "title": "Input: uinput - fix circular locking dependency with ff-core", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00096, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46327", "url": "https://patchblox.com/security/cve/CVE-2026-46327", "title": "kernel-64kb: dm: fix unlocked test for dm_suspended_md (bsc#1268031).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00096, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31656", "url": "https://patchblox.com/security/cve/CVE-2026-31656", "title": "drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00094, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31523", "url": "https://patchblox.com/security/cve/CVE-2026-31523", "title": "nvme-pci: ensure we\u0027re polling a polled queue", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00089, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31430", "url": "https://patchblox.com/security/cve/CVE-2026-31430", "title": "X.509: Fix out-of-bounds access when parsing extensions", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00081, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64158", "url": "https://patchblox.com/security/cve/CVE-2026-64158", "title": "kernel-64kb: netfs: Fix write streaming disablement if fd open O_RDWR (bsc#1272524).", "priority": "High", "severity": "high", "cvss": 7.3, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-2058", "url": "https://patchblox.com/security/cve/CVE-2023-2058", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.00609, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63895", "url": "https://patchblox.com/security/cve/CVE-2026-63895", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63892", "url": "https://patchblox.com/security/cve/CVE-2026-63892", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23036", "url": "https://patchblox.com/security/cve/CVE-2026-23036", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68204", "url": "https://patchblox.com/security/cve/CVE-2025-68204", "title": "pmdomain: arm: scmi: Fix genpd leak on provider registration failure", "priority": "Routine", "severity": "Moderate", "cvss": 6.2, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38238", "url": "https://patchblox.com/security/cve/CVE-2025-38238", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23052", "url": "https://patchblox.com/security/cve/CVE-2026-23052", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40163", "url": "https://patchblox.com/security/cve/CVE-2025-40163", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45871", "url": "https://patchblox.com/security/cve/CVE-2026-45871", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64465", "url": "https://patchblox.com/security/cve/CVE-2026-64465", "title": "usb: xhci: Fix sleep in atomic context in xhci_free_streams()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23276", "url": "https://patchblox.com/security/cve/CVE-2026-23276", "title": "net: add xmit recursion limit to tunnel xmit functions", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45877", "url": "https://patchblox.com/security/cve/CVE-2026-45877", "title": "HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46018", "url": "https://patchblox.com/security/cve/CVE-2026-46018", "title": "ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38469", "url": "https://patchblox.com/security/cve/CVE-2025-38469", "title": "kernel-default: Security update for the Linux Kernel", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53047", "url": "https://patchblox.com/security/cve/CVE-2026-53047", "title": "efi/capsule-loader: fix incorrect sizeof in phys array reallocation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "cvesTruncated": true, "dataAsOf": "2026-11-11T13:47:35Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }