# SUSE-SU-2026:23237-1: kernel-default security update SUSE-SU-2026:23237-1, released August 11, 2026, fixes 891 CVEs in kernel-default (version 6.12.0-160000.37.1). 2 of them are being exploited (CVE-2026-31431); 2 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/suse-su-2026-23237-1 - Platform: Linux - Released: Aug 11, 2026 - Priority: Patch now (Closes CVE-2026-31431, exploited (CISA KEV)) - CVEs: 891, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:23237-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 16.0 | 6.12.0-160000.37.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-31431](https://patchblox.com/security/data/cve/CVE-2026-31431.md) | Patch now | crypto: algif_aead - Revert to operating out-of-place | 8.1 | 0.9811 | CISA KEV | | [CVE-2025-39964](https://patchblox.com/security/data/cve/CVE-2025-39964.md) | Patch now | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | 8.8 | 0.0161 | CISA KEV | | [CVE-2026-64564](https://patchblox.com/security/data/cve/CVE-2026-64564.md) | Urgent | sctp: don't free the ASCONF's own transport in DEL-IP processing | 9.8 | 0.0143 | | | [CVE-2026-43011](https://patchblox.com/security/data/cve/CVE-2026-43011.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0059 | | | [CVE-2026-53224](https://patchblox.com/security/data/cve/CVE-2026-53224.md) | Urgent | kernel-default: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997). | 9.1 | 0.0057 | | | [CVE-2026-52982](https://patchblox.com/security/data/cve/CVE-2026-52982.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0054 | | | [CVE-2026-53045](https://patchblox.com/security/data/cve/CVE-2026-53045.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0051 | | | [CVE-2026-64061](https://patchblox.com/security/data/cve/CVE-2026-64061.md) | Urgent | kernel-64kb: netfs: Fix early put of sink folio in netfs_read_gaps() (bsc#1272505). | 9.8 | 0.0047 | | | [CVE-2026-52922](https://patchblox.com/security/data/cve/CVE-2026-52922.md) | Urgent | batman-adv: dat: handle forward allocation error | 9.8 | 0.0039 | | | [CVE-2026-64025](https://patchblox.com/security/data/cve/CVE-2026-64025.md) | Urgent | kernel-64kb: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117). | 9.8 | 0.0037 | | | [CVE-2026-53002](https://patchblox.com/security/data/cve/CVE-2026-53002.md) | Urgent | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 | | | [CVE-2026-52989](https://patchblox.com/security/data/cve/CVE-2026-52989.md) | Urgent | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers | 9.8 | 0.0036 | | | [CVE-2026-63974](https://patchblox.com/security/data/cve/CVE-2026-63974.md) | Urgent | Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close | 9.8 | 0.0035 | | | [CVE-2026-53260](https://patchblox.com/security/data/cve/CVE-2026-53260.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in re... | 9.8 | 0.0029 | | | [CVE-2026-52934](https://patchblox.com/security/data/cve/CVE-2026-52934.md) | Urgent | batman-adv: tvlv: reject oversized TVLV packets | 9.8 | 0.0024 | | | [CVE-2026-63882](https://patchblox.com/security/data/cve/CVE-2026-63882.md) | Urgent | drm/amdkfd: fix NULL pointer bug in svm_range_set_attr | 9.8 | 0.0022 | | | [CVE-2026-53009](https://patchblox.com/security/data/cve/CVE-2026-53009.md) | Urgent | ice: fix double-free of tx_buf skb | 9.8 | 0.0018 | | | [CVE-2026-63824](https://patchblox.com/security/data/cve/CVE-2026-63824.md) | Urgent | KEYS: fix overflow in keyctl_pkey_params_get_2() | 9.8 | 0.0017 | | | [CVE-2026-53376](https://patchblox.com/security/data/cve/CVE-2026-53376.md) | Urgent | drm/amdkfd: Add upper bound check for num_of_nodes | 9.8 | 0.0016 | | | [CVE-2025-71305](https://patchblox.com/security/data/cve/CVE-2025-71305.md) | Urgent | drm/display/dp_mst: Add protection against 0 vcpi | 9.8 | 0.0016 | | | [CVE-2026-63959](https://patchblox.com/security/data/cve/CVE-2026-63959.md) | Urgent | usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT | 9.8 | 0.0016 | | | [CVE-2026-64106](https://patchblox.com/security/data/cve/CVE-2026-64106.md) | Urgent | kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242). | 9.0 | 0.0015 | | | [CVE-2026-53403](https://patchblox.com/security/data/cve/CVE-2026-53403.md) | Urgent | fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var | 9.8 | 0.0013 | | | [CVE-2026-53374](https://patchblox.com/security/data/cve/CVE-2026-53374.md) | Urgent | drm/amdgpu: zero-initialize GART table on allocation | 9.8 | 0.0013 | | | [CVE-2026-63827](https://patchblox.com/security/data/cve/CVE-2026-63827.md) | Urgent | apparmor: fix use-after-free in rawdata dedup loop | 9.8 | 0.0012 | | | [CVE-2026-52913](https://patchblox.com/security/data/cve/CVE-2026-52913.md) | Urgent | batman-adv: v: stop OGMv2 on disabled interface | 9.8 | 0.0012 | | | [CVE-2026-52947](https://patchblox.com/security/data/cve/CVE-2026-52947.md) | Urgent | net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove | 9.8 | 0.0011 | | | [CVE-2026-53062](https://patchblox.com/security/data/cve/CVE-2026-53062.md) | Urgent | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 | | | [CVE-2026-53359](https://patchblox.com/security/data/cve/CVE-2026-53359.md) | High | kpatch-patch: A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) x86 shadow paging mechanism | 8.8 | 0.0137 | | | [CVE-2026-52958](https://patchblox.com/security/data/cve/CVE-2026-52958.md) | High | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 | | | [CVE-2026-43501](https://patchblox.com/security/data/cve/CVE-2026-43501.md) | High | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 | | | [CVE-2026-53003](https://patchblox.com/security/data/cve/CVE-2026-53003.md) | High | pppoe: drop PFC frames | 7.5 | 0.0072 | | | [CVE-2026-63912](https://patchblox.com/security/data/cve/CVE-2026-63912.md) | High | kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836). | 9.8 | 0.0071 | | | [CVE-2026-45859](https://patchblox.com/security/data/cve/CVE-2026-45859.md) | High | netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation | 8.1 | 0.0071 | | | [CVE-2026-63886](https://patchblox.com/security/data/cve/CVE-2026-63886.md) | High | kernel-default: Security update for the Linux Kernel | 9.8 | 0.0071 | | | [CVE-2026-53247](https://patchblox.com/security/data/cve/CVE-2026-53247.md) | High | net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown | 9.8 | 0.0069 | | | [CVE-2026-43493](https://patchblox.com/security/data/cve/CVE-2026-43493.md) | High | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | 9.8 | 0.0068 | | | [CVE-2026-63968](https://patchblox.com/security/data/cve/CVE-2026-63968.md) | High | kernel-default: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466). | 7.5 | 0.0067 | | | [CVE-2026-53399](https://patchblox.com/security/data/cve/CVE-2026-53399.md) | High | nfsd: release layout stid on setlease failure | 9.8 | 0.0066 | | | [CVE-2026-64530](https://patchblox.com/security/data/cve/CVE-2026-64530.md) | High | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle | 9.8 | 0.0066 | | | [CVE-2026-63919](https://patchblox.com/security/data/cve/CVE-2026-63919.md) | High | kernel-default: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907). | 8.8 | 0.0065 | | | [CVE-2026-52986](https://patchblox.com/security/data/cve/CVE-2026-52986.md) | High | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | | | [CVE-2026-53394](https://patchblox.com/security/data/cve/CVE-2026-53394.md) | High | kernel-uek64k-modules-usb: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0063 | | | [CVE-2026-63795](https://patchblox.com/security/data/cve/CVE-2026-63795.md) | High | 9p: avoid putting oldfid in p9_client_walk() error path | 10.0 | 0.0062 | | | [CVE-2026-43304](https://patchblox.com/security/data/cve/CVE-2026-43304.md) | High | kernel-64kb: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993). | 9.8 | 0.0061 | | | [CVE-2026-52956](https://patchblox.com/security/data/cve/CVE-2026-52956.md) | High | kernel-default: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172). | 7.5 | 0.0061 | | | [CVE-2026-63972](https://patchblox.com/security/data/cve/CVE-2026-63972.md) | High | kernel-default: Security update for the Linux Kernel | 7.5 | 0.0059 | | | [CVE-2026-52999](https://patchblox.com/security/data/cve/CVE-2026-52999.md) | High | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 | | | [CVE-2026-52998](https://patchblox.com/security/data/cve/CVE-2026-52998.md) | High | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 | | | [CVE-2026-53221](https://patchblox.com/security/data/cve/CVE-2026-53221.md) | High | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | 9.8 | 0.0058 | | | [CVE-2026-53225](https://patchblox.com/security/data/cve/CVE-2026-53225.md) | High | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 9.1 | 0.0058 | | | [CVE-2026-63976](https://patchblox.com/security/data/cve/CVE-2026-63976.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0057 | | | [CVE-2026-46102](https://patchblox.com/security/data/cve/CVE-2026-46102.md) | High | net: strparser: fix skb_head leak in strp_abort_strp() | 7.5 | 0.0056 | | | [CVE-2026-46177](https://patchblox.com/security/data/cve/CVE-2026-46177.md) | High | kernel-uek64k: ipmi: Add limits to event and receive message requests (Corey Minyard) [Orabug: 39460490] | 7.5 | 0.0056 | | | [CVE-2026-53398](https://patchblox.com/security/data/cve/CVE-2026-53398.md) | High | NFSD: Fix SECINFO_NO_NAME decode error cleanup | 9.8 | 0.0054 | | | [CVE-2026-52981](https://patchblox.com/security/data/cve/CVE-2026-52981.md) | High | kernel-64kb: neigh: let neigh_xmit take skb ownership (bsc#1269254). | 7.5 | 0.0053 | | | [CVE-2026-53392](https://patchblox.com/security/data/cve/CVE-2026-53392.md) | High | NFSv4/flexfiles: reject zero filehandle version count | 8.8 | 0.0053 | | | [CVE-2026-53397](https://patchblox.com/security/data/cve/CVE-2026-53397.md) | High | nfsd: fix posix_acl leak on SETACL decode failure | 8.8 | 0.0053 | | | [CVE-2026-53268](https://patchblox.com/security/data/cve/CVE-2026-53268.md) | High | netfilter: conntrack_irc: fix possible out-of-bounds read | 8.2 | 0.0052 | | | [CVE-2026-43230](https://patchblox.com/security/data/cve/CVE-2026-43230.md) | High | kernel-64kb: net/rds: Clear reconnect pending bit (bsc#1264539). | 7.5 | 0.0052 | | | [CVE-2026-53391](https://patchblox.com/security/data/cve/CVE-2026-53391.md) | High | NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr | 8.8 | 0.0052 | | | [CVE-2026-63994](https://patchblox.com/security/data/cve/CVE-2026-63994.md) | High | kernel-default: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035). | 9.8 | 0.0051 | | | [CVE-2026-53186](https://patchblox.com/security/data/cve/CVE-2026-53186.md) | High | RDMA/srp: bound SRP_RSP sense copy by the received length | 9.1 | 0.0051 | | | [CVE-2026-64560](https://patchblox.com/security/data/cve/CVE-2026-64560.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-lead... | 7.8 | 0.0050 | | | [CVE-2026-31552](https://patchblox.com/security/data/cve/CVE-2026-31552.md) | High | wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom | 7.5 | 0.0050 | | | [CVE-2026-46027](https://patchblox.com/security/data/cve/CVE-2026-46027.md) | High | net/smc: avoid early lgr access in smc_clc_wait_msg | 7.5 | 0.0050 | | | [CVE-2026-53199](https://patchblox.com/security/data/cve/CVE-2026-53199.md) | High | hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf | 7.5 | 0.0050 | | | [CVE-2026-52974](https://patchblox.com/security/data/cve/CVE-2026-52974.md) | High | net: tls: fix strparser anchor skb leak on offload RX setup failure | 7.5 | 0.0050 | | | [CVE-2026-53183](https://patchblox.com/security/data/cve/CVE-2026-53183.md) | High | mptcp: allow subflow rcv wnd to shrink | 7.5 | 0.0049 | | | [CVE-2026-53184](https://patchblox.com/security/data/cve/CVE-2026-53184.md) | High | udp: clear skb->dev before running a sockmap verdict | 7.5 | 0.0049 | | | [CVE-2026-46137](https://patchblox.com/security/data/cve/CVE-2026-46137.md) | High | mptcp: pm: ADD_ADDR rtx: fix potential data-race | 9.8 | 0.0048 | | | [CVE-2026-64600](https://patchblox.com/security/data/cve/CVE-2026-64600.md) | High | xfs: resample the data fork mapping after cycling ILOCK | 7.8 | 0.0047 | | | [CVE-2026-43117](https://patchblox.com/security/data/cve/CVE-2026-43117.md) | High | kernel-64kb: Security update for the Linux Kernel | 9.1 | 0.0046 | | | [CVE-2026-31436](https://patchblox.com/security/data/cve/CVE-2026-31436.md) | High | kernel-64kb: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602). | 9.8 | 0.0046 | | | [CVE-2026-31557](https://patchblox.com/security/data/cve/CVE-2026-31557.md) | High | nvmet: move async event work off nvmet-wq | 7.5 | 0.0045 | | | [CVE-2026-46306](https://patchblox.com/security/data/cve/CVE-2026-46306.md) | High | flow_dissector: do not dissect PPPoE PFC frames | 8.1 | 0.0045 | | | [CVE-2026-53246](https://patchblox.com/security/data/cve/CVE-2026-53246.md) | High | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | 9.8 | 0.0044 | | | [CVE-2026-53235](https://patchblox.com/security/data/cve/CVE-2026-53235.md) | High | kernel-uek64k-modules-usb: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0044 | | | [CVE-2026-53131](https://patchblox.com/security/data/cve/CVE-2026-53131.md) | High | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 | | | [CVE-2026-31598](https://patchblox.com/security/data/cve/CVE-2026-31598.md) | High | ocfs2: fix possible deadlock between unlink and dio_end_io_write | 7.5 | 0.0044 | | | [CVE-2026-53071](https://patchblox.com/security/data/cve/CVE-2026-53071.md) | High | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp | 8.8 | 0.0043 | | | [CVE-2026-64091](https://patchblox.com/security/data/cve/CVE-2026-64091.md) | High | kernel-uek64k-modules-extra: batman-adv: tt: fix TOCTOU race for reported vlans (Sven Eckelmann) [Orabug: 39754748] | 9.8 | 0.0043 | | | [CVE-2026-31659](https://patchblox.com/security/data/cve/CVE-2026-31659.md) | High | batman-adv: reject oversized global TT response buffers | 9.8 | 0.0042 | | | [CVE-2026-53355](https://patchblox.com/security/data/cve/CVE-2026-53355.md) | High | net: rds: clear i_sends on setup unwind | 9.8 | 0.0042 | | | [CVE-2026-31739](https://patchblox.com/security/data/cve/CVE-2026-31739.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0042 | | | [CVE-2026-43203](https://patchblox.com/security/data/cve/CVE-2026-43203.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0040 | | | [CVE-2026-31657](https://patchblox.com/security/data/cve/CVE-2026-31657.md) | High | batman-adv: hold claim backbone gateways by reference | 9.8 | 0.0040 | | | [CVE-2026-53088](https://patchblox.com/security/data/cve/CVE-2026-53088.md) | High | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb | 9.8 | 0.0040 | | | [CVE-2026-53006](https://patchblox.com/security/data/cve/CVE-2026-53006.md) | High | ipv6: fix possible UAF in icmpv6_rcv() | 9.8 | 0.0039 | | | [CVE-2026-52967](https://patchblox.com/security/data/cve/CVE-2026-52967.md) | High | kernel-default: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181). | 8.1 | 0.0039 | | | [CVE-2026-46273](https://patchblox.com/security/data/cve/CVE-2026-46273.md) | High | ibmveth: Disable GSO for packets with small MSS | 8.6 | 0.0039 | | | [CVE-2026-46265](https://patchblox.com/security/data/cve/CVE-2026-46265.md) | High | kernel-64kb: RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1267662). | 7.5 | 0.0039 | | | [CVE-2026-43232](https://patchblox.com/security/data/cve/CVE-2026-43232.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0039 | | | [CVE-2026-63893](https://patchblox.com/security/data/cve/CVE-2026-63893.md) | High | kernel-default: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607). | 8.1 | 0.0039 | | | [CVE-2026-43296](https://patchblox.com/security/data/cve/CVE-2026-43296.md) | High | kernel-64kb: octeontx2-af: Workaround SQM/PSE stalls by disabling sticky (bsc#1264805). | 7.5 | 0.0039 | | | [CVE-2026-64223](https://patchblox.com/security/data/cve/CVE-2026-64223.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated... | 8.1 | 0.0039 | | | [CVE-2026-53069](https://patchblox.com/security/data/cve/CVE-2026-53069.md) | High | kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186). | 7.5 | 0.0038 | | | [CVE-2026-31467](https://patchblox.com/security/data/cve/CVE-2026-31467.md) | High | erofs: add GFP_NOIO in the bio completion if needed | 8.8 | 0.0038 | | | [CVE-2026-43114](https://patchblox.com/security/data/cve/CVE-2026-43114.md) | High | kernel-rt-64k-modules-core: kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry | 9.4 | 0.0037 | | | [CVE-2026-43253](https://patchblox.com/security/data/cve/CVE-2026-43253.md) | High | kernel-64kb: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419). | 7.5 | 0.0037 | | | [CVE-2026-63916](https://patchblox.com/security/data/cve/CVE-2026-63916.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0036 | | | [CVE-2026-63915](https://patchblox.com/security/data/cve/CVE-2026-63915.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0035 | | | [CVE-2026-63947](https://patchblox.com/security/data/cve/CVE-2026-63947.md) | High | kernel-64k-modules-core: kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() | 8.8 | 0.0035 | | | [CVE-2026-63944](https://patchblox.com/security/data/cve/CVE-2026-63944.md) | High | kernel-default: Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (bsc#1272662). | 8.8 | 0.0033 | | | [CVE-2026-53357](https://patchblox.com/security/data/cve/CVE-2026-53357.md) | High | Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() | 8.0 | 0.0033 | | | [CVE-2026-43172](https://patchblox.com/security/data/cve/CVE-2026-43172.md) | High | wifi: iwlwifi: fix 22000 series SMEM parsing | 8.8 | 0.0033 | | | [CVE-2026-43495](https://patchblox.com/security/data/cve/CVE-2026-43495.md) | High | net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler | 8.8 | 0.0032 | | | [CVE-2026-43249](https://patchblox.com/security/data/cve/CVE-2026-43249.md) | High | 9p/xen: protect xen_9pfs_front_free against concurrent calls | 8.8 | 0.0032 | | | [CVE-2026-53175](https://patchblox.com/security/data/cve/CVE-2026-53175.md) | High | kernel-64kb: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714). | 9.8 | 0.0031 | | | [CVE-2026-31607](https://patchblox.com/security/data/cve/CVE-2026-31607.md) | High | usbip: validate number_of_packets in usbip_pack_ret_submit() | 9.8 | 0.0031 | | | [CVE-2026-63831](https://patchblox.com/security/data/cve/CVE-2026-63831.md) | High | mac802154: llsec: add skb_cow_data() before in-place crypto | 8.8 | 0.0031 | | | [CVE-2026-46125](https://patchblox.com/security/data/cve/CVE-2026-46125.md) | High | wifi: mac80211: remove station if connection prep fails | 8.8 | 0.0030 | | | [CVE-2026-53360](https://patchblox.com/security/data/cve/CVE-2026-53360.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2... | 8.8 | 0.0030 | | | [CVE-2026-53070](https://patchblox.com/security/data/cve/CVE-2026-53070.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0030 | | | [CVE-2026-31622](https://patchblox.com/security/data/cve/CVE-2026-31622.md) | High | NFC: digital: Bounds check NFC-A cascade depth in SDD response handler | 8.8 | 0.0029 | | | [CVE-2026-31626](https://patchblox.com/security/data/cve/CVE-2026-31626.md) | High | staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() | 7.1 | 0.0029 | | | [CVE-2025-54518](https://patchblox.com/security/data/cve/CVE-2025-54518.md) | High | AMD: CVE-2025-54518 CPU OP Cache Corruption | 7.8 | 0.0029 | | | [CVE-2026-46056](https://patchblox.com/security/data/cve/CVE-2026-46056.md) | High | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers | 8.8 | 0.0028 | | | [CVE-2026-46198](https://patchblox.com/security/data/cve/CVE-2026-46198.md) | High | bpftool: batman-adv: fix integer overflow on buff_pos (Lyes Bourennani) [Orabug: 39460580] | 8.8 | 0.0028 | | | [CVE-2026-53358](https://patchblox.com/security/data/cve/CVE-2026-53358.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0028 | | | [CVE-2026-31773](https://patchblox.com/security/data/cve/CVE-2026-31773.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0028 | | | [CVE-2026-43334](https://patchblox.com/security/data/cve/CVE-2026-43334.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements... | 8.8 | 0.0028 | | | [CVE-2026-46138](https://patchblox.com/security/data/cve/CVE-2026-46138.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0028 | | | [CVE-2026-53254](https://patchblox.com/security/data/cve/CVE-2026-53254.md) | High | Bluetooth: RFCOMM: validate skb length in MCC handlers | 8.1 | 0.0028 | | | [CVE-2026-46212](https://patchblox.com/security/data/cve/CVE-2026-46212.md) | High | batman-adv: bla: prevent use-after-free when deleting claims | 8.8 | 0.0027 | | | [CVE-2026-63975](https://patchblox.com/security/data/cve/CVE-2026-63975.md) | High | kernel-default: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694). | 8.8 | 0.0027 | | | [CVE-2026-31779](https://patchblox.com/security/data/cve/CVE-2026-31779.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0027 | | | [CVE-2026-53196](https://patchblox.com/security/data/cve/CVE-2026-53196.md) | High | USB: serial: io_ti: fix heap overflow in get_manuf_info() | 8.8 | 0.0027 | | | [CVE-2026-43110](https://patchblox.com/security/data/cve/CVE-2026-43110.md) | High | kernel-default: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482). | 8.8 | 0.0027 | | | [CVE-2026-43291](https://patchblox.com/security/data/cve/CVE-2026-43291.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.3 | 0.0027 | | | [CVE-2026-53147](https://patchblox.com/security/data/cve/CVE-2026-53147.md) | High | thunderbolt: Validate XDomain request packet size before type cast | 8.1 | 0.0027 | | | [CVE-2026-53253](https://patchblox.com/security/data/cve/CVE-2026-53253.md) | High | Bluetooth: bnep: reject short frames before parsing | 7.1 | 0.0027 | | | [CVE-2026-53256](https://patchblox.com/security/data/cve/CVE-2026-53256.md) | High | kernel-rt-devel: kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() | 8.1 | 0.0026 | | | [CVE-2026-31570](https://patchblox.com/security/data/cve/CVE-2026-31570.md) | High | can: gw: fix OOB heap access in cgw_csum_crc8_rel() | 8.8 | 0.0026 | | | [CVE-2026-46238](https://patchblox.com/security/data/cve/CVE-2026-46238.md) | High | batman-adv: stop caching unowned originator pointers in BAT IV | 8.8 | 0.0026 | | | [CVE-2026-53275](https://patchblox.com/security/data/cve/CVE-2026-53275.md) | High | ipv6: mcast: Fix use-after-free when processing MLD queries | 8.8 | 0.0026 | | | [CVE-2026-63946](https://patchblox.com/security/data/cve/CVE-2026-63946.md) | High | kernel-default: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665). | 8.8 | 0.0026 | | | [CVE-2026-53146](https://patchblox.com/security/data/cve/CVE-2026-53146.md) | High | thunderbolt: Limit XDomain response copy to actual frame size | 7.1 | 0.0026 | | | [CVE-2026-46232](https://patchblox.com/security/data/cve/CVE-2026-46232.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0026 | | | [CVE-2026-43018](https://patchblox.com/security/data/cve/CVE-2026-43018.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0026 | | | [CVE-2026-43051](https://patchblox.com/security/data/cve/CVE-2026-43051.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0026 | | | [CVE-2026-63869](https://patchblox.com/security/data/cve/CVE-2026-63869.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: limit injected antenna index in i... | 8.8 | 0.0026 | | | [CVE-2026-53157](https://patchblox.com/security/data/cve/CVE-2026-53157.md) | High | net: phonet: free phonet_device after RCU grace period | 7.8 | 0.0025 | | | [CVE-2026-31513](https://patchblox.com/security/data/cve/CVE-2026-31513.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0025 | | | [CVE-2026-31629](https://patchblox.com/security/data/cve/CVE-2026-31629.md) | High | nfc: llcp: add missing return after LLCP_CLOSED checks | 8.8 | 0.0025 | | | [CVE-2026-43113](https://patchblox.com/security/data/cve/CVE-2026-43113.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0024 | | | [CVE-2025-40022](https://patchblox.com/security/data/cve/CVE-2025-40022.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0024 | | | [CVE-2026-46307](https://patchblox.com/security/data/cve/CVE-2026-46307.md) | High | wifi: ath5k: do not access array OOB | 8.3 | 0.0024 | | | [CVE-2026-46275](https://patchblox.com/security/data/cve/CVE-2026-46275.md) | High | Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths | 7.8 | 0.0023 | | | [CVE-2026-52918](https://patchblox.com/security/data/cve/CVE-2026-52918.md) | High | Bluetooth: serialize accept_q access | 8.8 | 0.0022 | | | [CVE-2026-43062](https://patchblox.com/security/data/cve/CVE-2026-43062.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0022 | | | [CVE-2026-63896](https://patchblox.com/security/data/cve/CVE-2026-63896.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 | | | [CVE-2026-45878](https://patchblox.com/security/data/cve/CVE-2026-45878.md) | High | kernel-debug-devel: kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 | 7.8 | 0.0021 | | | [CVE-2026-46166](https://patchblox.com/security/data/cve/CVE-2026-46166.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0020 | | | [CVE-2026-63939](https://patchblox.com/security/data/cve/CVE-2026-63939.md) | High | kernel-64kb: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272691). | 9.3 | 0.0020 | | | [CVE-2026-63938](https://patchblox.com/security/data/cve/CVE-2026-63938.md) | High | kernel-64kb: KVM: SEV: Check PSC request indices against the actual size of the buffer (bsc#1272620). | 9.3 | 0.0020 | | | [CVE-2026-53072](https://patchblox.com/security/data/cve/CVE-2026-53072.md) | High | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER | 8.8 | 0.0020 | | | [CVE-2026-46113](https://patchblox.com/security/data/cve/CVE-2026-46113.md) | High | kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | 8.8 | 0.0020 | | | [CVE-2026-52969](https://patchblox.com/security/data/cve/CVE-2026-52969.md) | High | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 | | | [CVE-2026-53212](https://patchblox.com/security/data/cve/CVE-2026-53212.md) | High | netfilter: nft_tunnel: fix use-after-free on object destroy | 7.8 | 0.0019 | | | [CVE-2026-53369](https://patchblox.com/security/data/cve/CVE-2026-53369.md) | High | kernel-64kb: udf: reject descriptors with oversized CRC length (bsc#1271818). | 8.4 | 0.0019 | | | [CVE-2026-63940](https://patchblox.com/security/data/cve/CVE-2026-63940.md) | High | KVM: SEV: Ignore Port I/O requests of length '0' | 9.3 | 0.0019 | | | [CVE-2026-52976](https://patchblox.com/security/data/cve/CVE-2026-52976.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix error cleanup in xe_exec_queue_create... | 7.8 | 0.0018 | | | [CVE-2026-53000](https://patchblox.com/security/data/cve/CVE-2026-53000.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Flor... | 7.8 | 0.0018 | | | [CVE-2025-38250](https://patchblox.com/security/data/cve/CVE-2025-38250.md) | High | Bluetooth: hci_core: Fix use-after-free in vhci_flush() | 7.8 | 0.0018 | | | [CVE-2026-52951](https://patchblox.com/security/data/cve/CVE-2026-52951.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-53375](https://patchblox.com/security/data/cve/CVE-2026-53375.md) | High | drm/amdgpu/vce: Prevent partial address patches | 8.8 | 0.0018 | | | [CVE-2026-63875](https://patchblox.com/security/data/cve/CVE-2026-63875.md) | High | kernel-modules: kernel: arm64: tlb: Flush walk cache when unsharing PMD tables | 8.8 | 0.0018 | | | [CVE-2026-63899](https://patchblox.com/security/data/cve/CVE-2026-63899.md) | High | kernel: kernel: USB: serial: mxuport: fix memory corruption with small endpoint | 8.8 | 0.0018 | | | [CVE-2026-63845](https://patchblox.com/security/data/cve/CVE-2026-63845.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63846](https://patchblox.com/security/data/cve/CVE-2026-63846.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63847](https://patchblox.com/security/data/cve/CVE-2026-63847.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63848](https://patchblox.com/security/data/cve/CVE-2026-63848.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63853](https://patchblox.com/security/data/cve/CVE-2026-63853.md) | High | drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring | 7.8 | 0.0018 | | | [CVE-2026-63854](https://patchblox.com/security/data/cve/CVE-2026-63854.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63855](https://patchblox.com/security/data/cve/CVE-2026-63855.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63856](https://patchblox.com/security/data/cve/CVE-2026-63856.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63884](https://patchblox.com/security/data/cve/CVE-2026-63884.md) | High | kernel-zfcpdump: kernel: drm/i915: Fix potential UAF in TTM object purge | 7.8 | 0.0018 | | | [CVE-2026-53085](https://patchblox.com/security/data/cve/CVE-2026-53085.md) | High | kernel-64kb: bpf: fix mm lifecycle in open-coded task_vma iterator (bsc#1269879). | 7.8 | 0.0018 | | | [CVE-2026-53191](https://patchblox.com/security/data/cve/CVE-2026-53191.md) | High | kernel-uek64k-modules-wireless: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | | | [CVE-2026-53233](https://patchblox.com/security/data/cve/CVE-2026-53233.md) | High | kernel-uek64k-modules-usb: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0018 | | | [CVE-2026-53386](https://patchblox.com/security/data/cve/CVE-2026-53386.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63842](https://patchblox.com/security/data/cve/CVE-2026-63842.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63843](https://patchblox.com/security/data/cve/CVE-2026-63843.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63844](https://patchblox.com/security/data/cve/CVE-2026-63844.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63850](https://patchblox.com/security/data/cve/CVE-2026-63850.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63851](https://patchblox.com/security/data/cve/CVE-2026-63851.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63852](https://patchblox.com/security/data/cve/CVE-2026-63852.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 | | | [CVE-2026-63836](https://patchblox.com/security/data/cve/CVE-2026-63836.md) | High | batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd | 7.5 | 0.0017 | | | [CVE-2026-63807](https://patchblox.com/security/data/cve/CVE-2026-63807.md) | High | KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level | 8.8 | 0.0017 | | | [CVE-2026-63923](https://patchblox.com/security/data/cve/CVE-2026-63923.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_h... | 8.8 | 0.0017 | | | [CVE-2026-23227](https://patchblox.com/security/data/cve/CVE-2026-23227.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 | | | [CVE-2026-53366](https://patchblox.com/security/data/cve/CVE-2026-53366.md) | High | ipv4: account for fraggap on the paged allocation path | 8.5 | 0.0017 | | | [CVE-2026-53098](https://patchblox.com/security/data/cve/CVE-2026-53098.md) | High | wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() | 7.8 | 0.0017 | | | [CVE-2026-53112](https://patchblox.com/security/data/cve/CVE-2026-53112.md) | High | wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet | 7.8 | 0.0017 | | | [CVE-2026-63883](https://patchblox.com/security/data/cve/CVE-2026-63883.md) | High | kernel-64kb: serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (bsc#1272572). | 7.3 | 0.0017 | | | [CVE-2026-53402](https://patchblox.com/security/data/cve/CVE-2026-53402.md) | High | fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | 7.1 | 0.0017 | | | [CVE-2026-63902](https://patchblox.com/security/data/cve/CVE-2026-63902.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 | | | [CVE-2026-63903](https://patchblox.com/security/data/cve/CVE-2026-63903.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 | | | [CVE-2026-63904](https://patchblox.com/security/data/cve/CVE-2026-63904.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 | | | [CVE-2026-53097](https://patchblox.com/security/data/cve/CVE-2026-53097.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix use-after-free bugs in m... | 7.8 | 0.0017 | | | [CVE-2026-63894](https://patchblox.com/security/data/cve/CVE-2026-63894.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 | | | [CVE-2026-63826](https://patchblox.com/security/data/cve/CVE-2026-63826.md) | High | fbdev: fix use-after-free in store_modes() | 7.1 | 0.0017 | | | [CVE-2026-63957](https://patchblox.com/security/data/cve/CVE-2026-63957.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 | | | [CVE-2026-46152](https://patchblox.com/security/data/cve/CVE-2026-46152.md) | High | wifi: mac80211: drop stray 'static' from fast-RX rx_result | 8.8 | 0.0017 | | | [CVE-2026-64528](https://patchblox.com/security/data/cve/CVE-2026-64528.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock... | n/a | 0.0017 | | | [CVE-2026-53068](https://patchblox.com/security/data/cve/CVE-2026-53068.md) | High | drm/komeda: fix integer overflow in AFBC framebuffer size check | 7.8 | 0.0017 | | | [CVE-2026-63905](https://patchblox.com/security/data/cve/CVE-2026-63905.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 | | | [CVE-2026-64191](https://patchblox.com/security/data/cve/CVE-2026-64191.md) | High | i2c: stub: Reject I2C block transfers with invalid length | 9.8 | 0.0017 | | | [CVE-2026-31532](https://patchblox.com/security/data/cve/CVE-2026-31532.md) | High | can: raw: fix ro->uniq use-after-free in raw_rcv() | 8.8 | 0.0017 | | | [CVE-2026-43059](https://patchblox.com/security/data/cve/CVE-2026-43059.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 | | | [CVE-2026-43126](https://patchblox.com/security/data/cve/CVE-2026-43126.md) | High | ALSA: mixer: oss: Add card disconnect checkpoints | 7.8 | 0.0016 | | | [CVE-2026-43250](https://patchblox.com/security/data/cve/CVE-2026-43250.md) | High | usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() | 7.8 | 0.0016 | | | [CVE-2026-43352](https://patchblox.com/security/data/cve/CVE-2026-43352.md) | High | i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue | 7.8 | 0.0016 | | | [CVE-2026-45853](https://patchblox.com/security/data/cve/CVE-2026-45853.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2026-45866](https://patchblox.com/security/data/cve/CVE-2026-45866.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2026-45867](https://patchblox.com/security/data/cve/CVE-2026-45867.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2026-45879](https://patchblox.com/security/data/cve/CVE-2026-45879.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2026-45902](https://patchblox.com/security/data/cve/CVE-2026-45902.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2026-45916](https://patchblox.com/security/data/cve/CVE-2026-45916.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2026-63927](https://patchblox.com/security/data/cve/CVE-2026-63927.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2026-63967](https://patchblox.com/security/data/cve/CVE-2026-63967.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2026-45851](https://patchblox.com/security/data/cve/CVE-2026-45851.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0016 | | | [CVE-2026-43368](https://patchblox.com/security/data/cve/CVE-2026-43368.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0016 | | | [CVE-2026-53022](https://patchblox.com/security/data/cve/CVE-2026-53022.md) | High | platform/x86: dell-wmi-sysman: bound enumeration string aggregation | 7.0 | 0.0016 | | | [CVE-2026-63962](https://patchblox.com/security/data/cve/CVE-2026-63962.md) | High | usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() | 8.8 | 0.0016 | | | [CVE-2026-45885](https://patchblox.com/security/data/cve/CVE-2026-45885.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2026-45946](https://patchblox.com/security/data/cve/CVE-2026-45946.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2026-63930](https://patchblox.com/security/data/cve/CVE-2026-63930.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2026-63934](https://patchblox.com/security/data/cve/CVE-2026-63934.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0016 | | | [CVE-2026-63961](https://patchblox.com/security/data/cve/CVE-2026-63961.md) | High | usb: typec: altmodes/displayport: validate count before reading Status Update VDO | 7.1 | 0.0016 | | | [CVE-2026-63963](https://patchblox.com/security/data/cve/CVE-2026-63963.md) | High | usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers | 7.1 | 0.0016 | | | [CVE-2026-63958](https://patchblox.com/security/data/cve/CVE-2026-63958.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0016 | | | [CVE-2026-43437](https://patchblox.com/security/data/cve/CVE-2026-43437.md) | High | kernel-default: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265126). | 7.8 | 0.0016 | | | [CVE-2026-45882](https://patchblox.com/security/data/cve/CVE-2026-45882.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 | | | [CVE-2026-63943](https://patchblox.com/security/data/cve/CVE-2026-63943.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0016 | | | [CVE-2026-53270](https://patchblox.com/security/data/cve/CVE-2026-53270.md) | High | ipvs: clear the svc scheduler ptr early on edit | 9.8 | 0.0016 | | | [CVE-2026-53202](https://patchblox.com/security/data/cve/CVE-2026-53202.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC... | 7.8 | 0.0016 | | | [CVE-2026-63806](https://patchblox.com/security/data/cve/CVE-2026-63806.md) | High | KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() | 7.3 | 0.0016 | | | [CVE-2025-68179](https://patchblox.com/security/data/cve/CVE-2025-68179.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP... | 7.8 | 0.0015 | | | [CVE-2026-63809](https://patchblox.com/security/data/cve/CVE-2026-63809.md) | High | bpf: use kvfree() for replaced sysctl write buffer | 7.8 | 0.0015 | | | [CVE-2026-46174](https://patchblox.com/security/data/cve/CVE-2026-46174.md) | High | x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache | 9.8 | 0.0015 | | | [CVE-2026-53143](https://patchblox.com/security/data/cve/CVE-2026-53143.md) | High | drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 | 7.8 | 0.0015 | | | [CVE-2025-40216](https://patchblox.com/security/data/cve/CVE-2025-40216.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't rely on user vaddr alignmen... | 7.8 | 0.0015 | | | [CVE-2026-43049](https://patchblox.com/security/data/cve/CVE-2026-43049.md) | High | HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure | 7.8 | 0.0015 | | | [CVE-2026-53273](https://patchblox.com/security/data/cve/CVE-2026-53273.md) | High | kernel-64kb: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713). | 7.8 | 0.0015 | | | [CVE-2025-40199](https://patchblox.com/security/data/cve/CVE-2025-40199.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix PP_MAGIC_MASK to avoid crashing o... | 7.8 | 0.0015 | | | [CVE-2026-63829](https://patchblox.com/security/data/cve/CVE-2026-63829.md) | High | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 | | | [CVE-2026-46145](https://patchblox.com/security/data/cve/CVE-2026-46145.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0015 | | | [CVE-2026-53329](https://patchblox.com/security/data/cve/CVE-2026-53329.md) | High | drm/amd/display: Use krealloc_array() in dal_vector_reserve() | 7.8 | 0.0015 | | | [CVE-2026-43459](https://patchblox.com/security/data/cve/CVE-2026-43459.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.3 | 0.0015 | | | [CVE-2026-46294](https://patchblox.com/security/data/cve/CVE-2026-46294.md) | High | kernel-uek: dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585] | 7.8 | 0.0015 | | | [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 | | | [CVE-2026-31447](https://patchblox.com/security/data/cve/CVE-2026-31447.md) | High | ext4: reject mount if bigalloc with s_first_data_block != 0 | 7.8 | 0.0014 | | | [CVE-2026-31780](https://patchblox.com/security/data/cve/CVE-2026-31780.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-46006](https://patchblox.com/security/data/cve/CVE-2026-46006.md) | High | drm/nouveau: fix u32 overflow in pushbuf reloc bounds check | 7.8 | 0.0014 | | | [CVE-2026-46189](https://patchblox.com/security/data/cve/CVE-2026-46189.md) | High | kernel-uek-modules-extra: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [Orabug: 39460540] | 7.8 | 0.0014 | | | [CVE-2026-52910](https://patchblox.com/security/data/cve/CVE-2026-52910.md) | High | bpf: Free reuseport cBPF prog after RCU grace period. | 7.8 | 0.0014 | | | [CVE-2026-53137](https://patchblox.com/security/data/cve/CVE-2026-53137.md) | High | drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size | 7.8 | 0.0014 | | | [CVE-2026-53195](https://patchblox.com/security/data/cve/CVE-2026-53195.md) | High | USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() | 7.8 | 0.0014 | | | [CVE-2026-53203](https://patchblox.com/security/data/cve/CVE-2026-53203.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-43380](https://patchblox.com/security/data/cve/CVE-2026-43380.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0014 | | | [CVE-2026-64018](https://patchblox.com/security/data/cve/CVE-2026-64018.md) | High | kernel-default: Security update for the Linux Kernel | 9.3 | 0.0014 | | | [CVE-2026-46149](https://patchblox.com/security/data/cve/CVE-2026-46149.md) | High | scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() | 8.8 | 0.0014 | | | [CVE-2026-63794](https://patchblox.com/security/data/cve/CVE-2026-63794.md) | High | KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path | 8.8 | 0.0014 | | | [CVE-2026-46209](https://patchblox.com/security/data/cve/CVE-2026-46209.md) | High | kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460... | 8.4 | 0.0014 | | | [CVE-2026-46123](https://patchblox.com/security/data/cve/CVE-2026-46123.md) | High | kernel-default: Bluetooth: virtio_bt: clamp rx length before skb_put (bsc#1267621). | 8.1 | 0.0014 | | | [CVE-2026-31772](https://patchblox.com/security/data/cve/CVE-2026-31772.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0014 | | | [CVE-2026-46064](https://patchblox.com/security/data/cve/CVE-2026-46064.md) | High | ibmasm: fix heap over-read in ibmasm_send_i2o_message() | 7.1 | 0.0014 | | | [CVE-2026-53193](https://patchblox.com/security/data/cve/CVE-2026-53193.md) | High | perf: kernel: ALSA: timer: Forcibly close timer instances at closing | 8.8 | 0.0014 | | | [CVE-2026-46180](https://patchblox.com/security/data/cve/CVE-2026-46180.md) | High | wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task | 7.8 | 0.0014 | | | [CVE-2026-46205](https://patchblox.com/security/data/cve/CVE-2026-46205.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-53016](https://patchblox.com/security/data/cve/CVE-2026-53016.md) | High | crypto: ccp - copy IV using skcipher ivsize | 7.8 | 0.0014 | | | [CVE-2026-31488](https://patchblox.com/security/data/cve/CVE-2026-31488.md) | High | drm/amd/display: Do not skip unrelated mode changes in DSC validation | 7.8 | 0.0014 | | | [CVE-2026-53381](https://patchblox.com/security/data/cve/CVE-2026-53381.md) | High | virtiofs: fix UAF on submount umount | 8.1 | 0.0014 | | | [CVE-2026-43196](https://patchblox.com/security/data/cve/CVE-2026-43196.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-43206](https://patchblox.com/security/data/cve/CVE-2026-43206.md) | High | kernel-core: kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() | 7.8 | 0.0014 | | | [CVE-2026-43207](https://patchblox.com/security/data/cve/CVE-2026-43207.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-45996](https://patchblox.com/security/data/cve/CVE-2026-45996.md) | High | spi: imx: fix use-after-free on unbind | 7.8 | 0.0014 | | | [CVE-2026-46036](https://patchblox.com/security/data/cve/CVE-2026-46036.md) | High | kernel-64kb: vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a per-device mutex (bsc#1267470). | 7.8 | 0.0014 | | | [CVE-2026-46197](https://patchblox.com/security/data/cve/CVE-2026-46197.md) | High | drm/amdkfd: validate SVM ioctl nattr against buffer size | 7.8 | 0.0014 | | | [CVE-2026-46206](https://patchblox.com/security/data/cve/CVE-2026-46206.md) | High | batman-adv: reject new tp_meter sessions during teardown | 7.8 | 0.0014 | | | [CVE-2026-45994](https://patchblox.com/security/data/cve/CVE-2026-45994.md) | High | ibmasm: fix OOB reads in command_file_write due to missing size checks | 7.1 | 0.0014 | | | [CVE-2026-53132](https://patchblox.com/security/data/cve/CVE-2026-53132.md) | High | vsock/virtio: fix potential unbounded skb queue | 7.1 | 0.0014 | | | [CVE-2026-43222](https://patchblox.com/security/data/cve/CVE-2026-43222.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-46117](https://patchblox.com/security/data/cve/CVE-2026-46117.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-46201](https://patchblox.com/security/data/cve/CVE-2026-46201.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-46274](https://patchblox.com/security/data/cve/CVE-2026-46274.md) | High | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | 7.8 | 0.0014 | | | [CVE-2026-46193](https://patchblox.com/security/data/cve/CVE-2026-46193.md) | High | kernel-uek-debug-devel: xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460554] | 7.0 | 0.0014 | | | [CVE-2026-46323](https://patchblox.com/security/data/cve/CVE-2026-46323.md) | High | net: gro: don't merge zcopy skbs | 8.4 | 0.0014 | | | [CVE-2026-46191](https://patchblox.com/security/data/cve/CVE-2026-46191.md) | High | fbcon: Avoid OOB font access if console rotation fails | 7.7 | 0.0014 | | | [CVE-2026-45839](https://patchblox.com/security/data/cve/CVE-2026-45839.md) | High | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | 7.8 | 0.0014 | | | [CVE-2026-53400](https://patchblox.com/security/data/cve/CVE-2026-53400.md) | High | i2c: core: fix adapter registration race | 7.8 | 0.0014 | | | [CVE-2026-46033](https://patchblox.com/security/data/cve/CVE-2026-46033.md) | High | crypto: authencesn - reject short ahash digests during instance creation | 7.3 | 0.0014 | | | [CVE-2026-46080](https://patchblox.com/security/data/cve/CVE-2026-46080.md) | High | ocfs2: split transactions in dio completion to avoid credit exhaustion | 7.1 | 0.0014 | | | [CVE-2026-63937](https://patchblox.com/security/data/cve/CVE-2026-63937.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0014 | | | [CVE-2026-53005](https://patchblox.com/security/data/cve/CVE-2026-53005.md) | High | af_unix: Drop all SCM attributes for SOCKMAP. | 8.3 | 0.0014 | | | [CVE-2026-46015](https://patchblox.com/security/data/cve/CVE-2026-46015.md) | High | tcp: call sk_data_ready() after listener migration | 8.1 | 0.0014 | | | [CVE-2026-43033](https://patchblox.com/security/data/cve/CVE-2026-43033.md) | High | crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption | 7.8 | 0.0014 | | | [CVE-2026-43236](https://patchblox.com/security/data/cve/CVE-2026-43236.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-46219](https://patchblox.com/security/data/cve/CVE-2026-46219.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-53148](https://patchblox.com/security/data/cve/CVE-2026-53148.md) | High | thunderbolt: Clamp XDomain response data copy to allocation size | 7.8 | 0.0014 | | | [CVE-2026-46132](https://patchblox.com/security/data/cve/CVE-2026-46132.md) | High | bpftool: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297] | 7.0 | 0.0014 | | | [CVE-2026-31617](https://patchblox.com/security/data/cve/CVE-2026-31617.md) | High | usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() | 7.8 | 0.0013 | | | [CVE-2026-43138](https://patchblox.com/security/data/cve/CVE-2026-43138.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-53356](https://patchblox.com/security/data/cve/CVE-2026-53356.md) | High | drm/i915/gem: Fix phys BO pread/pwrite with offset | 7.8 | 0.0013 | | | [CVE-2026-52953](https://patchblox.com/security/data/cve/CVE-2026-52953.md) | High | iommu/vt-d: Fix oops due to out of scope access | 7.1 | 0.0013 | | | [CVE-2026-52970](https://patchblox.com/security/data/cve/CVE-2026-52970.md) | High | netfilter: nft_ct: fix missing expect put in obj eval | 7.0 | 0.0013 | | | [CVE-2026-43133](https://patchblox.com/security/data/cve/CVE-2026-43133.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0013 | | | [CVE-2026-46321](https://patchblox.com/security/data/cve/CVE-2026-46321.md) | High | tun: free page on short-frame rejection in tun_xdp_one() | 7.1 | 0.0013 | | | [CVE-2026-46023](https://patchblox.com/security/data/cve/CVE-2026-46023.md) | High | dm mirror: fix integer overflow in create_dirty_log() | 7.0 | 0.0013 | | | [CVE-2026-46199](https://patchblox.com/security/data/cve/CVE-2026-46199.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0013 | | | [CVE-2026-46204](https://patchblox.com/security/data/cve/CVE-2026-46204.md) | High | drm/amdgpu/vcn4: Prevent OOB reads when parsing IB | 8.8 | 0.0013 | | | [CVE-2026-46326](https://patchblox.com/security/data/cve/CVE-2026-46326.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.4 | 0.0013 | | | [CVE-2026-31697](https://patchblox.com/security/data/cve/CVE-2026-31697.md) | High | crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | 7.1 | 0.0013 | | | [CVE-2026-31698](https://patchblox.com/security/data/cve/CVE-2026-31698.md) | High | crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | 7.1 | 0.0013 | | | [CVE-2026-31699](https://patchblox.com/security/data/cve/CVE-2026-31699.md) | High | crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | 7.1 | 0.0013 | | | [CVE-2026-43427](https://patchblox.com/security/data/cve/CVE-2026-43427.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 | | | [CVE-2026-52942](https://patchblox.com/security/data/cve/CVE-2026-52942.md) | High | netfilter: nf_log: validate MAC header was set before dumping it | 7.1 | 0.0013 | | | [CVE-2026-53387](https://patchblox.com/security/data/cve/CVE-2026-53387.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 | | | [CVE-2026-63971](https://patchblox.com/security/data/cve/CVE-2026-63971.md) | High | kernel-default: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678). | 8.8 | 0.0013 | | | [CVE-2026-31485](https://patchblox.com/security/data/cve/CVE-2026-31485.md) | High | spi: spi-fsl-lpspi: fix teardown order issue (UAF) | 7.8 | 0.0013 | | | [CVE-2026-31583](https://patchblox.com/security/data/cve/CVE-2026-31583.md) | High | media: em28xx: fix use-after-free in em28xx_v4l2_open() | 7.8 | 0.0013 | | | [CVE-2026-31602](https://patchblox.com/security/data/cve/CVE-2026-31602.md) | High | ALSA: ctxfi: Limit PTP to a single page | 7.8 | 0.0013 | | | [CVE-2026-31627](https://patchblox.com/security/data/cve/CVE-2026-31627.md) | High | i2c: s3c24xx: check the size of the SMBUS message before using it | 7.8 | 0.0013 | | | [CVE-2026-31768](https://patchblox.com/security/data/cve/CVE-2026-31768.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-46122](https://patchblox.com/security/data/cve/CVE-2026-46122.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-46163](https://patchblox.com/security/data/cve/CVE-2026-46163.md) | High | wifi: b43legacy: enforce bounds check on firmware key index in RX path | 7.8 | 0.0013 | | | [CVE-2026-46234](https://patchblox.com/security/data/cve/CVE-2026-46234.md) | High | vsock: fix buffer size clamping order | 7.8 | 0.0013 | | | [CVE-2026-63942](https://patchblox.com/security/data/cve/CVE-2026-63942.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-43141](https://patchblox.com/security/data/cve/CVE-2026-43141.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 | | | [CVE-2026-46140](https://patchblox.com/security/data/cve/CVE-2026-46140.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 | | | [CVE-2026-46190](https://patchblox.com/security/data/cve/CVE-2026-46190.md) | High | mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() | 7.1 | 0.0013 | | | [CVE-2026-46218](https://patchblox.com/security/data/cve/CVE-2026-46218.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 | | | [CVE-2026-53011](https://patchblox.com/security/data/cve/CVE-2026-53011.md) | High | net/sched: taprio: fix use-after-free in advance_sched() on schedule switch | 8.8 | 0.0013 | | | [CVE-2026-53189](https://patchblox.com/security/data/cve/CVE-2026-53189.md) | High | bpftool: kernel: mm/huge_memory: update file PMD counter before folio_put() | 8.8 | 0.0013 | | | [CVE-2026-53182](https://patchblox.com/security/data/cve/CVE-2026-53182.md) | High | wifi: nl80211: reject oversized EMA RNR lists | 8.1 | 0.0013 | | | [CVE-2026-53209](https://patchblox.com/security/data/cve/CVE-2026-53209.md) | High | Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend | 8.1 | 0.0013 | | | [CVE-2026-23308](https://patchblox.com/security/data/cve/CVE-2026-23308.md) | High | pinctrl: equilibrium: fix warning trace on load | 7.8 | 0.0013 | | | [CVE-2026-43091](https://patchblox.com/security/data/cve/CVE-2026-43091.md) | High | kernel-64kb: xfrm: Wait for RCU readers during policy netns exit (bsc#1264267). | 7.8 | 0.0013 | | | [CVE-2026-43324](https://patchblox.com/security/data/cve/CVE-2026-43324.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-46270](https://patchblox.com/security/data/cve/CVE-2026-46270.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.4 | 0.0013 | | | [CVE-2026-31489](https://patchblox.com/security/data/cve/CVE-2026-31489.md) | High | spi: meson-spicc: Fix double-put in remove path | 7.8 | 0.0013 | | | [CVE-2026-31511](https://patchblox.com/security/data/cve/CVE-2026-31511.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-31720](https://patchblox.com/security/data/cve/CVE-2026-31720.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-31730](https://patchblox.com/security/data/cve/CVE-2026-31730.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-31747](https://patchblox.com/security/data/cve/CVE-2026-31747.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-31748](https://patchblox.com/security/data/cve/CVE-2026-31748.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-31759](https://patchblox.com/security/data/cve/CVE-2026-31759.md) | High | kernel-default: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076). | 7.8 | 0.0013 | | | [CVE-2026-43007](https://patchblox.com/security/data/cve/CVE-2026-43007.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-43020](https://patchblox.com/security/data/cve/CVE-2026-43020.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-43256](https://patchblox.com/security/data/cve/CVE-2026-43256.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-43307](https://patchblox.com/security/data/cve/CVE-2026-43307.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-43330](https://patchblox.com/security/data/cve/CVE-2026-43330.md) | High | kernel-64kb: crypto: caam - fix overflow on long hmac keys (bsc#1264801). | 7.8 | 0.0013 | | | [CVE-2026-46001](https://patchblox.com/security/data/cve/CVE-2026-46001.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-46004](https://patchblox.com/security/data/cve/CVE-2026-46004.md) | High | ALSA: caiaq: Handle probe errors properly | 7.8 | 0.0013 | | | [CVE-2026-46068](https://patchblox.com/security/data/cve/CVE-2026-46068.md) | High | kernel-64kb: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592). | 7.8 | 0.0013 | | | [CVE-2026-46075](https://patchblox.com/security/data/cve/CVE-2026-46075.md) | High | crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path | 7.8 | 0.0013 | | | [CVE-2026-46084](https://patchblox.com/security/data/cve/CVE-2026-46084.md) | High | RDMA/mana_ib: Disable RX steering on RSS QP destroy | 7.8 | 0.0013 | | | [CVE-2026-46086](https://patchblox.com/security/data/cve/CVE-2026-46086.md) | High | net: bridge: use a stable FDB dst snapshot in RCU readers | 7.8 | 0.0013 | | | [CVE-2026-46136](https://patchblox.com/security/data/cve/CVE-2026-46136.md) | High | wifi: mt76: mt7921: fix a potential clc buffer length underflow | 7.8 | 0.0013 | | | [CVE-2026-53004](https://patchblox.com/security/data/cve/CVE-2026-53004.md) | High | kernel-uek-modules-extra: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757] | 7.8 | 0.0013 | | | [CVE-2026-53136](https://patchblox.com/security/data/cve/CVE-2026-53136.md) | High | bpftool: kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size | 7.8 | 0.0013 | | | [CVE-2026-53159](https://patchblox.com/security/data/cve/CVE-2026-53159.md) | High | misc: fastrpc: fix DMA address corruption due to find_vma misuse | 7.8 | 0.0013 | | | [CVE-2026-64330](https://patchblox.com/security/data/cve/CVE-2026-64330.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdm_co... | 7.8 | 0.0013 | | | [CVE-2026-31624](https://patchblox.com/security/data/cve/CVE-2026-31624.md) | High | HID: core: clamp report_size in s32ton() to avoid undefined shift | 7.1 | 0.0013 | | | [CVE-2026-53218](https://patchblox.com/security/data/cve/CVE-2026-53218.md) | High | netfilter: nft_exthdr: fix register tracking for F_PRESENT flag | 7.0 | 0.0013 | | | [CVE-2026-53393](https://patchblox.com/security/data/cve/CVE-2026-53393.md) | High | nfsd: reset write verifier on deferred writeback errors | 7.0 | 0.0013 | | | [CVE-2026-31581](https://patchblox.com/security/data/cve/CVE-2026-31581.md) | High | ALSA: 6fire: fix use-after-free on disconnect | 8.8 | 0.0013 | | | [CVE-2026-31442](https://patchblox.com/security/data/cve/CVE-2026-31442.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-31576](https://patchblox.com/security/data/cve/CVE-2026-31576.md) | High | media: hackrf: fix to not free memory after the device is registered in hackrf_probe() | 7.8 | 0.0013 | | | [CVE-2026-31578](https://patchblox.com/security/data/cve/CVE-2026-31578.md) | High | media: as102: fix to not free memory after the device is registered in as102_usb_probe() | 7.8 | 0.0013 | | | [CVE-2026-53063](https://patchblox.com/security/data/cve/CVE-2026-53063.md) | High | dm cache: fix write hang in passthrough mode | 7.1 | 0.0013 | | | [CVE-2026-53149](https://patchblox.com/security/data/cve/CVE-2026-53149.md) | High | thunderbolt: Bound root directory content to block size | 7.1 | 0.0013 | | | [CVE-2026-46158](https://patchblox.com/security/data/cve/CVE-2026-46158.md) | High | mptcp: pm: ADD_ADDR rtx: always decrease sk refcount | 7.0 | 0.0013 | | | [CVE-2026-46170](https://patchblox.com/security/data/cve/CVE-2026-46170.md) | High | mptcp: pm: ADD_ADDR rtx: free sk if last | 7.0 | 0.0013 | | | [CVE-2026-63952](https://patchblox.com/security/data/cve/CVE-2026-63952.md) | High | kernel-default: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468). | 8.4 | 0.0013 | | | [CVE-2026-31721](https://patchblox.com/security/data/cve/CVE-2026-31721.md) | High | usb: gadget: f_hid: move list and spinlock inits from bind to alloc | 7.8 | 0.0013 | | | [CVE-2026-43353](https://patchblox.com/security/data/cve/CVE-2026-43353.md) | High | i3c: mipi-i3c-hci: Fix race in DMA ring dequeue | 7.8 | 0.0013 | | | [CVE-2026-63945](https://patchblox.com/security/data/cve/CVE-2026-63945.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-31566](https://patchblox.com/security/data/cve/CVE-2026-31566.md) | High | drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib | 8.8 | 0.0013 | | | [CVE-2026-53230](https://patchblox.com/security/data/cve/CVE-2026-53230.md) | High | net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list | 8.8 | 0.0013 | | | [CVE-2026-64189](https://patchblox.com/security/data/cve/CVE-2026-64189.md) | High | netfilter: ipset: fix race between dump and ip_set_list resize | 8.8 | 0.0013 | | | [CVE-2026-31500](https://patchblox.com/security/data/cve/CVE-2026-31500.md) | High | Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock | 7.8 | 0.0013 | | | [CVE-2026-31587](https://patchblox.com/security/data/cve/CVE-2026-31587.md) | High | ASoC: qcom: q6apm: move component registration to unmanaged version | 7.8 | 0.0013 | | | [CVE-2026-31758](https://patchblox.com/security/data/cve/CVE-2026-31758.md) | High | kernel-default-base: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093). | 7.8 | 0.0013 | | | [CVE-2026-43426](https://patchblox.com/security/data/cve/CVE-2026-43426.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-45936](https://patchblox.com/security/data/cve/CVE-2026-45936.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-45958](https://patchblox.com/security/data/cve/CVE-2026-45958.md) | High | drm/exynos: vidi: fix to avoid directly dereferencing user pointer | 7.8 | 0.0013 | | | [CVE-2026-46241](https://patchblox.com/security/data/cve/CVE-2026-46241.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-46285](https://patchblox.com/security/data/cve/CVE-2026-46285.md) | High | mtd: docg3: fix use-after-free in docg3_release() | 7.8 | 0.0013 | | | [CVE-2026-53160](https://patchblox.com/security/data/cve/CVE-2026-53160.md) | High | misc: fastrpc: fix use-after-free race in fastrpc_map_create | 7.8 | 0.0013 | | | [CVE-2026-53161](https://patchblox.com/security/data/cve/CVE-2026-53161.md) | High | misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context | 7.8 | 0.0013 | | | [CVE-2026-64221](https://patchblox.com/security/data/cve/CVE-2026-64221.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup... | 7.8 | 0.0013 | | | [CVE-2026-31778](https://patchblox.com/security/data/cve/CVE-2026-31778.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 | | | [CVE-2026-43241](https://patchblox.com/security/data/cve/CVE-2026-43241.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 | | | [CVE-2026-46130](https://patchblox.com/security/data/cve/CVE-2026-46130.md) | High | kernel-64kb: dm-verity-fec: fix reading parity bytes split across blocks (take 3) (bsc#1267629). | 7.1 | 0.0013 | | | [CVE-2026-52915](https://patchblox.com/security/data/cve/CVE-2026-52915.md) | High | netfilter: ip6t_hbh: reject oversized option lists | 7.1 | 0.0013 | | | [CVE-2026-53138](https://patchblox.com/security/data/cve/CVE-2026-53138.md) | High | drm/amd/display: Bound VBIOS record-chain walk loops | 7.1 | 0.0013 | | | [CVE-2026-53205](https://patchblox.com/security/data/cve/CVE-2026-53205.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 | | | [CVE-2026-63949](https://patchblox.com/security/data/cve/CVE-2026-63949.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 | | | [CVE-2026-53236](https://patchblox.com/security/data/cve/CVE-2026-53236.md) | High | tcp: restrict SO_ATTACH_FILTER to priv users | 8.8 | 0.0013 | | | [CVE-2026-31582](https://patchblox.com/security/data/cve/CVE-2026-31582.md) | High | hwmon: (powerz) Fix use-after-free on USB disconnect | 7.8 | 0.0013 | | | [CVE-2026-45938](https://patchblox.com/security/data/cve/CVE-2026-45938.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-46011](https://patchblox.com/security/data/cve/CVE-2026-46011.md) | High | media: mtk-jpeg: fix use-after-free in release path due to uncancelled work | 7.8 | 0.0013 | | | [CVE-2026-46121](https://patchblox.com/security/data/cve/CVE-2026-46121.md) | High | mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock | 7.8 | 0.0013 | | | [CVE-2026-46246](https://patchblox.com/security/data/cve/CVE-2026-46246.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 | | | [CVE-2026-46324](https://patchblox.com/security/data/cve/CVE-2026-46324.md) | High | kernel-default: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995). | 7.8 | 0.0013 | | | [CVE-2026-31619](https://patchblox.com/security/data/cve/CVE-2026-31619.md) | High | ALSA: fireworks: bound device-supplied status before string array lookup | 7.3 | 0.0013 | | | [CVE-2026-31616](https://patchblox.com/security/data/cve/CVE-2026-31616.md) | High | usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() | 7.1 | 0.0013 | | | [CVE-2026-31623](https://patchblox.com/security/data/cve/CVE-2026-31623.md) | High | net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() | 7.1 | 0.0013 | | | [CVE-2026-53150](https://patchblox.com/security/data/cve/CVE-2026-53150.md) | High | thunderbolt: Reject zero-length property entries in validator | 7.0 | 0.0013 | | | [CVE-2026-53181](https://patchblox.com/security/data/cve/CVE-2026-53181.md) | High | vsock/vmci: fix sk_ack_backlog leak on failed handshake | 7.0 | 0.0013 | | | [CVE-2026-53208](https://patchblox.com/security/data/cve/CVE-2026-53208.md) | High | Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig | 7.0 | 0.0013 | | | [CVE-2026-43440](https://patchblox.com/security/data/cve/CVE-2026-43440.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0012 | | | [CVE-2026-45944](https://patchblox.com/security/data/cve/CVE-2026-45944.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing dow... | 7.5 | 0.0012 | | | [CVE-2026-43370](https://patchblox.com/security/data/cve/CVE-2026-43370.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0012 | | | [CVE-2026-46230](https://patchblox.com/security/data/cve/CVE-2026-46230.md) | High | drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg | 8.8 | 0.0012 | | | [CVE-2026-43077](https://patchblox.com/security/data/cve/CVE-2026-43077.md) | High | kernel-default: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470). | 8.1 | 0.0012 | | | [CVE-2026-31483](https://patchblox.com/security/data/cve/CVE-2026-31483.md) | High | s390/syscalls: Add spectre boundary for syscall dispatch table | 7.8 | 0.0012 | | | [CVE-2026-43120](https://patchblox.com/security/data/cve/CVE-2026-43120.md) | High | kernel-default: RDMA/irdma: Fix double free related to rereg_user_mr. | 7.8 | 0.0012 | | | [CVE-2026-43279](https://patchblox.com/security/data/cve/CVE-2026-43279.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes... | 7.8 | 0.0012 | | | [CVE-2026-46009](https://patchblox.com/security/data/cve/CVE-2026-46009.md) | High | PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown | 7.5 | 0.0012 | | | [CVE-2026-31512](https://patchblox.com/security/data/cve/CVE-2026-31512.md) | High | Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() | 7.1 | 0.0012 | | | [CVE-2026-43052](https://patchblox.com/security/data/cve/CVE-2026-43052.md) | High | wifi: mac80211: check tdls flag in ieee80211_tdls_oper | 7.1 | 0.0012 | | | [CVE-2026-53064](https://patchblox.com/security/data/cve/CVE-2026-53064.md) | High | dm cache: fix null-deref with concurrent writes in passthrough mode | 7.1 | 0.0012 | | | [CVE-2026-31498](https://patchblox.com/security/data/cve/CVE-2026-31498.md) | High | Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop | 7.0 | 0.0012 | | | [CVE-2026-31593](https://patchblox.com/security/data/cve/CVE-2026-31593.md) | High | KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU | 8.8 | 0.0012 | | | [CVE-2026-31482](https://patchblox.com/security/data/cve/CVE-2026-31482.md) | High | s390/entry: Scrub r12 register on kernel entry | 7.1 | 0.0012 | | | [CVE-2026-31591](https://patchblox.com/security/data/cve/CVE-2026-31591.md) | High | KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish | 7.0 | 0.0012 | | | [CVE-2026-43306](https://patchblox.com/security/data/cve/CVE-2026-43306.md) | High | bpf: crypto: Use the correct destructor kfunc type | 7.0 | 0.0012 | | | [CVE-2026-43047](https://patchblox.com/security/data/cve/CVE-2026-43047.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 | | | [CVE-2026-43476](https://patchblox.com/security/data/cve/CVE-2026-43476.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 | | | [CVE-2026-46267](https://patchblox.com/security/data/cve/CVE-2026-46267.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 | | | [CVE-2026-52927](https://patchblox.com/security/data/cve/CVE-2026-52927.md) | High | netfilter: ebtables: fix OOB read in compat_mtw_from_user | 7.8 | 0.0012 | | | [CVE-2026-53267](https://patchblox.com/security/data/cve/CVE-2026-53267.md) | High | netfilter: nft_ct: bail out on template ct in get eval | 7.8 | 0.0012 | | | [CVE-2026-64242](https://patchblox.com/security/data/cve/CVE-2026-64242.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe e... | 7.8 | 0.0012 | | | [CVE-2026-43058](https://patchblox.com/security/data/cve/CVE-2026-43058.md) | High | media: vidtv: fix pass-by-value structs causing MSAN warnings | 7.1 | 0.0012 | | | [CVE-2026-64174](https://patchblox.com/security/data/cve/CVE-2026-64174.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211_me... | 8.8 | 0.0012 | | | [CVE-2026-31776](https://patchblox.com/security/data/cve/CVE-2026-31776.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 | | | [CVE-2026-43044](https://patchblox.com/security/data/cve/CVE-2026-43044.md) | High | kernel-default: crypto: caam - fix DMA corruption on long hmac keys (bsc#1264087). | 7.8 | 0.0012 | | | [CVE-2026-46263](https://patchblox.com/security/data/cve/CVE-2026-46263.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 | | | [CVE-2026-43481](https://patchblox.com/security/data/cve/CVE-2026-43481.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 | | | [CVE-2026-43281](https://patchblox.com/security/data/cve/CVE-2026-43281.md) | High | kernel-64kb: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534). | 7.1 | 0.0012 | | | [CVE-2026-46226](https://patchblox.com/security/data/cve/CVE-2026-46226.md) | High | spi: fsl: fix controller deregistration | 7.1 | 0.0012 | | | [CVE-2026-46231](https://patchblox.com/security/data/cve/CVE-2026-46231.md) | High | batman-adv: bla: put backbone reference on failed claim hash insert | 7.1 | 0.0012 | | | [CVE-2026-46233](https://patchblox.com/security/data/cve/CVE-2026-46233.md) | High | batman-adv: bla: only purge non-released claims | 7.1 | 0.0012 | | | [CVE-2026-53255](https://patchblox.com/security/data/cve/CVE-2026-53255.md) | High | Bluetooth: MGMT: validate advertising TLV before type checks | 7.1 | 0.0012 | | | [CVE-2026-43276](https://patchblox.com/security/data/cve/CVE-2026-43276.md) | High | kernel-default: Security update for the Linux Kernel | 8.4 | 0.0012 | | | [CVE-2026-43056](https://patchblox.com/security/data/cve/CVE-2026-43056.md) | High | kernel-default: Security update for the Linux Kernel | 8.8 | 0.0012 | | | [CVE-2026-43134](https://patchblox.com/security/data/cve/CVE-2026-43134.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0012 | | | [CVE-2026-43278](https://patchblox.com/security/data/cve/CVE-2026-43278.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 | | | [CVE-2026-46301](https://patchblox.com/security/data/cve/CVE-2026-46301.md) | High | spi: topcliff-pch: fix use-after-free on unbind | 7.8 | 0.0012 | | | [CVE-2026-64188](https://patchblox.com/security/data/cve/CVE-2026-64188.md) | High | net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() | 7.8 | 0.0012 | | | [CVE-2026-64034](https://patchblox.com/security/data/cve/CVE-2026-64034.md) | High | kernel-default: Security update for the Linux Kernel | 9.3 | 0.0012 | | | [CVE-2026-53073](https://patchblox.com/security/data/cve/CVE-2026-53073.md) | High | Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error | 8.8 | 0.0011 | | | [CVE-2026-52926](https://patchblox.com/security/data/cve/CVE-2026-52926.md) | High | batman-adv: clear current gateway during teardown | 7.8 | 0.0011 | | | [CVE-2026-52959](https://patchblox.com/security/data/cve/CVE-2026-52959.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0011 | | | [CVE-2026-53185](https://patchblox.com/security/data/cve/CVE-2026-53185.md) | High | kernel: kernel: zram: fix use-after-free in zram_bvec_write_partial() | 8.8 | 0.0011 | | | [CVE-2026-53277](https://patchblox.com/security/data/cve/CVE-2026-53277.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table wal... | 8.8 | 0.0011 | | | [CVE-2026-43211](https://patchblox.com/security/data/cve/CVE-2026-43211.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0011 | | | [CVE-2026-43214](https://patchblox.com/security/data/cve/CVE-2026-43214.md) | High | kernel-default: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (bsc#1264651). | 7.8 | 0.0011 | | | [CVE-2026-53250](https://patchblox.com/security/data/cve/CVE-2026-53250.md) | High | kernel-default: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808). | 7.8 | 0.0011 | | | [CVE-2026-31474](https://patchblox.com/security/data/cve/CVE-2026-31474.md) | High | can: isotp: fix tx.buf use-after-free in isotp_sendmsg() | 7.8 | 0.0010 | | | [CVE-2026-31761](https://patchblox.com/security/data/cve/CVE-2026-31761.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0010 | | | [CVE-2026-53239](https://patchblox.com/security/data/cve/CVE-2026-53239.md) | High | xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() | 8.8 | 0.0010 | | | [CVE-2026-63802](https://patchblox.com/security/data/cve/CVE-2026-63802.md) | High | blk-cgroup: fix UAF in __blkcg_rstat_flush() | 8.3 | 0.0010 | | | [CVE-2026-53242](https://patchblox.com/security/data/cve/CVE-2026-53242.md) | High | ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams | 7.8 | 0.0010 | | | [CVE-2026-52988](https://patchblox.com/security/data/cve/CVE-2026-52988.md) | High | netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase | 7.1 | 0.0010 | | | [CVE-2026-31548](https://patchblox.com/security/data/cve/CVE-2026-31548.md) | High | wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down | 7.8 | 0.0010 | | | [CVE-2026-43019](https://patchblox.com/security/data/cve/CVE-2026-43019.md) | High | Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync | 7.8 | 0.0010 | | | [CVE-2026-43180](https://patchblox.com/security/data/cve/CVE-2026-43180.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0010 | | | [CVE-2026-46157](https://patchblox.com/security/data/cve/CVE-2026-46157.md) | High | ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger | 7.8 | 0.0010 | | | [CVE-2026-43111](https://patchblox.com/security/data/cve/CVE-2026-43111.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0010 | | | [CVE-2026-53265](https://patchblox.com/security/data/cve/CVE-2026-53265.md) | High | dm cache policy smq: check allocation under invalidate lock | 7.8 | 0.0010 | | | [CVE-2026-53192](https://patchblox.com/security/data/cve/CVE-2026-53192.md) | High | ALSA: timer: Fix UAF at snd_timer_user_params() | 8.8 | 0.0010 | | | [CVE-2026-31473](https://patchblox.com/security/data/cve/CVE-2026-31473.md) | High | media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex | 7.8 | 0.0010 | | | [CVE-2026-43023](https://patchblox.com/security/data/cve/CVE-2026-43023.md) | High | kernel-default: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137). | 7.8 | 0.0010 | | | [CVE-2026-46058](https://patchblox.com/security/data/cve/CVE-2026-46058.md) | High | media: amphion: Fix race between m2m job_abort and device_run | 7.8 | 0.0010 | | | [CVE-2026-31667](https://patchblox.com/security/data/cve/CVE-2026-31667.md) | High | Input: uinput - fix circular locking dependency with ff-core | 7.8 | 0.0010 | | | [CVE-2026-46327](https://patchblox.com/security/data/cve/CVE-2026-46327.md) | High | kernel-64kb: dm: fix unlocked test for dm_suspended_md (bsc#1268031). | 7.8 | 0.0010 | | | [CVE-2026-31656](https://patchblox.com/security/data/cve/CVE-2026-31656.md) | High | drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat | 8.8 | 0.0009 | | | [CVE-2026-31523](https://patchblox.com/security/data/cve/CVE-2026-31523.md) | High | nvme-pci: ensure we're polling a polled queue | 7.1 | 0.0009 | | | [CVE-2026-31430](https://patchblox.com/security/data/cve/CVE-2026-31430.md) | High | X.509: Fix out-of-bounds access when parsing extensions | 7.8 | 0.0008 | | | [CVE-2026-64158](https://patchblox.com/security/data/cve/CVE-2026-64158.md) | High | kernel-64kb: netfs: Fix write streaming disablement if fd open O_RDWR (bsc#1272524). | 7.3 | n/a | | | [CVE-2023-2058](https://patchblox.com/security/data/cve/CVE-2023-2058.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0061 | | | [CVE-2026-63895](https://patchblox.com/security/data/cve/CVE-2026-63895.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0026 | | | [CVE-2026-63892](https://patchblox.com/security/data/cve/CVE-2026-63892.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 | | | [CVE-2026-23036](https://patchblox.com/security/data/cve/CVE-2026-23036.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0022 | | | [CVE-2025-68204](https://patchblox.com/security/data/cve/CVE-2025-68204.md) | Routine | pmdomain: arm: scmi: Fix genpd leak on provider registration failure | 6.2 | 0.0021 | | | [CVE-2025-38238](https://patchblox.com/security/data/cve/CVE-2025-38238.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0021 | | | [CVE-2026-23052](https://patchblox.com/security/data/cve/CVE-2026-23052.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2025-40163](https://patchblox.com/security/data/cve/CVE-2025-40163.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0020 | | | [CVE-2026-45871](https://patchblox.com/security/data/cve/CVE-2026-45871.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 | | | [CVE-2026-64465](https://patchblox.com/security/data/cve/CVE-2026-64465.md) | Routine | usb: xhci: Fix sleep in atomic context in xhci_free_streams() | 5.5 | 0.0018 | | | [CVE-2026-23276](https://patchblox.com/security/data/cve/CVE-2026-23276.md) | Routine | net: add xmit recursion limit to tunnel xmit functions | 5.5 | 0.0018 | | | [CVE-2026-45877](https://patchblox.com/security/data/cve/CVE-2026-45877.md) | Routine | HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients | 5.5 | 0.0018 | | | [CVE-2026-46018](https://patchblox.com/security/data/cve/CVE-2026-46018.md) | Routine | ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES | 5.5 | 0.0018 | | | [CVE-2025-38469](https://patchblox.com/security/data/cve/CVE-2025-38469.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0018 | | | [CVE-2026-53047](https://patchblox.com/security/data/cve/CVE-2026-53047.md) | Routine | efi/capsule-loader: fix incorrect sizeof in phys array reallocation | 5.5 | 0.0018 | | Showing 500 of 891 CVEs; the web page lists them all. --- Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.