# SUSE-SU-2026:3166-1: Security update for 10 packages

SUSE-SU-2026:3166-1, released July 21, 2026, fixes 513 CVEs across 10 products. One of them is being exploited (CVE-2026-53362); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-3166-1
- Platform: Linux
- Released: Jul 21, 2026
- Priority: Patch now (Closes CVE-2026-53362, exploited (CISA KEV))
- CVEs: 513, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:3166-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.7 | 6.4.0-150700.53.73.2 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.7 | 6.4.0-150700.53.73.2 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.7 | 6.4.0-150700.53.73.2 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.7 | 6.4.0-150700.53.73.2.150700.17.41.4 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.7 | 6.4.0-150700.53.73.1 |
| [kernel-livepatch-SLE15-SP7_Update_19](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-update-19.md) | sles 15.7 | 1-150700.15.3.4 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.7 | 6.4.0-150700.53.73.2 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.7 | 6.4.0-150700.53.73.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.7 | 6.4.0-150700.53.73.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.7 | 6.4.0-150700.53.73.2 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-53362](https://patchblox.com/security/data/cve/CVE-2026-53362.md) | Patch now | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | CISA KEV |
| [CVE-2026-52914](https://patchblox.com/security/data/cve/CVE-2026-52914.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0063 |  |
| [CVE-2026-43011](https://patchblox.com/security/data/cve/CVE-2026-43011.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0059 |  |
| [CVE-2026-53224](https://patchblox.com/security/data/cve/CVE-2026-53224.md) | Urgent | kernel-default: sctp: validate embedded INIT chunk and address list lengths in cookie (bsc#1269997). | 9.1 | 0.0057 |  |
| [CVE-2026-43465](https://patchblox.com/security/data/cve/CVE-2026-43465.md) | Urgent | kernel-64kb: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997). | 9.8 | 0.0054 |  |
| [CVE-2026-52982](https://patchblox.com/security/data/cve/CVE-2026-52982.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0054 |  |
| [CVE-2026-53045](https://patchblox.com/security/data/cve/CVE-2026-53045.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0051 |  |
| [CVE-2026-52931](https://patchblox.com/security/data/cve/CVE-2026-52931.md) | Urgent | batman-adv: tp_meter: avoid use of uninit sender vars | 9.8 | 0.0050 |  |
| [CVE-2026-52993](https://patchblox.com/security/data/cve/CVE-2026-52993.md) | Urgent | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 |  |
| [CVE-2026-52922](https://patchblox.com/security/data/cve/CVE-2026-52922.md) | Urgent | batman-adv: dat: handle forward allocation error | 9.8 | 0.0039 |  |
| [CVE-2026-52955](https://patchblox.com/security/data/cve/CVE-2026-52955.md) | Urgent | kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159). | 9.8 | 0.0038 |  |
| [CVE-2026-52989](https://patchblox.com/security/data/cve/CVE-2026-52989.md) | Urgent | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers | 9.8 | 0.0036 |  |
| [CVE-2026-53086](https://patchblox.com/security/data/cve/CVE-2026-53086.md) | Urgent | net: bcmgenet: fix racing timeout handler | 9.8 | 0.0030 |  |
| [CVE-2026-53075](https://patchblox.com/security/data/cve/CVE-2026-53075.md) | Urgent | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 |  |
| [CVE-2026-53009](https://patchblox.com/security/data/cve/CVE-2026-53009.md) | Urgent | ice: fix double-free of tx_buf skb | 9.8 | 0.0018 |  |
| [CVE-2025-71305](https://patchblox.com/security/data/cve/CVE-2025-71305.md) | Urgent | drm/display/dp_mst: Add protection against 0 vcpi | 9.8 | 0.0016 |  |
| [CVE-2026-45899](https://patchblox.com/security/data/cve/CVE-2026-45899.md) | Urgent | ext4: drop extent cache when splitting extent fails | 9.8 | 0.0016 |  |
| [CVE-2026-53036](https://patchblox.com/security/data/cve/CVE-2026-53036.md) | Urgent | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 |  |
| [CVE-2026-52919](https://patchblox.com/security/data/cve/CVE-2026-52919.md) | Urgent | batman-adv: fix tp_meter counter underflow during shutdown | 9.8 | 0.0012 |  |
| [CVE-2026-46242](https://patchblox.com/security/data/cve/CVE-2026-46242.md) | High | kernel-default: eventpoll: Fix integer overflow in ep_loop_check_proc() (bsc#1267618). | 7.8 | 0.0458 |  |
| [CVE-2026-53359](https://patchblox.com/security/data/cve/CVE-2026-53359.md) | High | kpatch-patch: A flaw was found in the Linux kernel's Kernel-based Virtual Machine (KVM) x86 shadow paging mechanism | 8.8 | 0.0137 |  |
| [CVE-2026-53176](https://patchblox.com/security/data/cve/CVE-2026-53176.md) | High | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN | 9.8 | 0.0076 |  |
| [CVE-2026-52958](https://patchblox.com/security/data/cve/CVE-2026-52958.md) | High | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 |  |
| [CVE-2026-53003](https://patchblox.com/security/data/cve/CVE-2026-53003.md) | High | pppoe: drop PFC frames | 7.5 | 0.0072 |  |
| [CVE-2026-43493](https://patchblox.com/security/data/cve/CVE-2026-43493.md) | High | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | 9.8 | 0.0068 |  |
| [CVE-2026-52924](https://patchblox.com/security/data/cve/CVE-2026-52924.md) | High | sctp: purge outqueue on stale COOKIE-ECHO handling | 9.8 | 0.0066 |  |
| [CVE-2026-43304](https://patchblox.com/security/data/cve/CVE-2026-43304.md) | High | kernel-64kb: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993). | 9.8 | 0.0061 |  |
| [CVE-2026-52956](https://patchblox.com/security/data/cve/CVE-2026-52956.md) | High | kernel-default: libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() (bsc#1269172). | 7.5 | 0.0061 |  |
| [CVE-2026-53225](https://patchblox.com/security/data/cve/CVE-2026-53225.md) | High | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 9.1 | 0.0058 |  |
| [CVE-2026-46102](https://patchblox.com/security/data/cve/CVE-2026-46102.md) | High | net: strparser: fix skb_head leak in strp_abort_strp() | 7.5 | 0.0056 |  |
| [CVE-2026-46177](https://patchblox.com/security/data/cve/CVE-2026-46177.md) | High | kernel-uek64k: ipmi: Add limits to event and receive message requests (Corey Minyard) [Orabug: 39460490] | 7.5 | 0.0056 |  |
| [CVE-2026-43383](https://patchblox.com/security/data/cve/CVE-2026-43383.md) | High | kernel-64kb: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744). | 9.4 | 0.0054 |  |
| [CVE-2026-43452](https://patchblox.com/security/data/cve/CVE-2026-43452.md) | High | kernel-64kb: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142). | 8.2 | 0.0054 |  |
| [CVE-2026-43194](https://patchblox.com/security/data/cve/CVE-2026-43194.md) | High | kernel-64kb: net: consume xmit errors of GSO frames (bsc#1264304). | 7.5 | 0.0053 |  |
| [CVE-2026-52981](https://patchblox.com/security/data/cve/CVE-2026-52981.md) | High | kernel-64kb: neigh: let neigh_xmit take skb ownership (bsc#1269254). | 7.5 | 0.0053 |  |
| [CVE-2026-53268](https://patchblox.com/security/data/cve/CVE-2026-53268.md) | High | netfilter: conntrack_irc: fix possible out-of-bounds read | 8.2 | 0.0052 |  |
| [CVE-2026-43226](https://patchblox.com/security/data/cve/CVE-2026-43226.md) | High | kernel-64kb: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544). | 7.5 | 0.0052 |  |
| [CVE-2026-53186](https://patchblox.com/security/data/cve/CVE-2026-53186.md) | High | RDMA/srp: bound SRP_RSP sense copy by the received length | 9.1 | 0.0051 |  |
| [CVE-2026-53215](https://patchblox.com/security/data/cve/CVE-2026-53215.md) | High | kernel-64kb: net: mvpp2: refill RX buffers before XDP or skb use (bsc#1269680). | 9.8 | 0.0050 |  |
| [CVE-2026-53216](https://patchblox.com/security/data/cve/CVE-2026-53216.md) | High | kernel-64kb: net: mvpp2: limit XDP frame size to the RX buffer (bsc#1269587). | 9.8 | 0.0050 |  |
| [CVE-2026-31552](https://patchblox.com/security/data/cve/CVE-2026-31552.md) | High | wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom | 7.5 | 0.0050 |  |
| [CVE-2026-43373](https://patchblox.com/security/data/cve/CVE-2026-43373.md) | High | kernel-64kb: net: ncsi: fix skb leak in error paths (bsc#1265079). | 7.5 | 0.0050 |  |
| [CVE-2026-46027](https://patchblox.com/security/data/cve/CVE-2026-46027.md) | High | net/smc: avoid early lgr access in smc_clc_wait_msg | 7.5 | 0.0050 |  |
| [CVE-2026-46052](https://patchblox.com/security/data/cve/CVE-2026-46052.md) | High | ceph: only d_add() negative dentries when they are unhashed | 7.5 | 0.0050 |  |
| [CVE-2026-53229](https://patchblox.com/security/data/cve/CVE-2026-53229.md) | High | kernel-64kb: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure (bsc#1269691). | 7.5 | 0.0048 |  |
| [CVE-2026-43117](https://patchblox.com/security/data/cve/CVE-2026-43117.md) | High | kernel-64kb: Security update for the Linux Kernel | 9.1 | 0.0046 |  |
| [CVE-2026-53246](https://patchblox.com/security/data/cve/CVE-2026-53246.md) | High | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | 9.8 | 0.0044 |  |
| [CVE-2026-43057](https://patchblox.com/security/data/cve/CVE-2026-43057.md) | High | kernel-64kb: net: mpls: error out if inner headers are not set (bsc#1264056). | 7.5 | 0.0044 |  |
| [CVE-2026-31659](https://patchblox.com/security/data/cve/CVE-2026-31659.md) | High | batman-adv: reject oversized global TT response buffers | 9.8 | 0.0042 |  |
| [CVE-2026-53355](https://patchblox.com/security/data/cve/CVE-2026-53355.md) | High | net: rds: clear i_sends on setup unwind | 9.8 | 0.0042 |  |
| [CVE-2026-43199](https://patchblox.com/security/data/cve/CVE-2026-43199.md) | High | net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query | 7.5 | 0.0042 |  |
| [CVE-2026-43466](https://patchblox.com/security/data/cve/CVE-2026-43466.md) | High | kernel-64kb: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790). | 8.2 | 0.0041 |  |
| [CVE-2026-53178](https://patchblox.com/security/data/cve/CVE-2026-53178.md) | High | staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction | 8.1 | 0.0041 |  |
| [CVE-2026-43203](https://patchblox.com/security/data/cve/CVE-2026-43203.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0040 |  |
| [CVE-2026-31657](https://patchblox.com/security/data/cve/CVE-2026-31657.md) | High | batman-adv: hold claim backbone gateways by reference | 9.8 | 0.0040 |  |
| [CVE-2026-53049](https://patchblox.com/security/data/cve/CVE-2026-53049.md) | High | kernel: kernel: gfs2: add some missing log locking | 9.8 | 0.0039 |  |
| [CVE-2026-43232](https://patchblox.com/security/data/cve/CVE-2026-43232.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0039 |  |
| [CVE-2026-53217](https://patchblox.com/security/data/cve/CVE-2026-53217.md) | High | net: mvpp2: sync RX data at the hardware packet offset | 8.6 | 0.0038 |  |
| [CVE-2026-43253](https://patchblox.com/security/data/cve/CVE-2026-43253.md) | High | kernel-64kb: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419). | 7.5 | 0.0037 |  |
| [CVE-2026-53357](https://patchblox.com/security/data/cve/CVE-2026-53357.md) | High | Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() | 8.0 | 0.0033 |  |
| [CVE-2026-43215](https://patchblox.com/security/data/cve/CVE-2026-43215.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0032 |  |
| [CVE-2026-46125](https://patchblox.com/security/data/cve/CVE-2026-46125.md) | High | wifi: mac80211: remove station if connection prep fails | 8.8 | 0.0030 |  |
| [CVE-2026-53360](https://patchblox.com/security/data/cve/CVE-2026-53360.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2... | 8.8 | 0.0030 |  |
| [CVE-2026-53070](https://patchblox.com/security/data/cve/CVE-2026-53070.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.5 | 0.0030 |  |
| [CVE-2026-46099](https://patchblox.com/security/data/cve/CVE-2026-46099.md) | High | net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels | 8.1 | 0.0029 |  |
| [CVE-2026-31626](https://patchblox.com/security/data/cve/CVE-2026-31626.md) | High | staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() | 7.1 | 0.0029 |  |
| [CVE-2026-46056](https://patchblox.com/security/data/cve/CVE-2026-46056.md) | High | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers | 8.8 | 0.0028 |  |
| [CVE-2026-46198](https://patchblox.com/security/data/cve/CVE-2026-46198.md) | High | bpftool: batman-adv: fix integer overflow on buff_pos (Lyes Bourennani) [Orabug: 39460580] | 8.8 | 0.0028 |  |
| [CVE-2026-53358](https://patchblox.com/security/data/cve/CVE-2026-53358.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0028 |  |
| [CVE-2026-31773](https://patchblox.com/security/data/cve/CVE-2026-31773.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0028 |  |
| [CVE-2026-46138](https://patchblox.com/security/data/cve/CVE-2026-46138.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0028 |  |
| [CVE-2026-53254](https://patchblox.com/security/data/cve/CVE-2026-53254.md) | High | Bluetooth: RFCOMM: validate skb length in MCC handlers | 8.1 | 0.0028 |  |
| [CVE-2026-46212](https://patchblox.com/security/data/cve/CVE-2026-46212.md) | High | batman-adv: bla: prevent use-after-free when deleting claims | 8.8 | 0.0027 |  |
| [CVE-2026-31779](https://patchblox.com/security/data/cve/CVE-2026-31779.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0027 |  |
| [CVE-2026-53196](https://patchblox.com/security/data/cve/CVE-2026-53196.md) | High | USB: serial: io_ti: fix heap overflow in get_manuf_info() | 8.8 | 0.0027 |  |
| [CVE-2026-43291](https://patchblox.com/security/data/cve/CVE-2026-43291.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.3 | 0.0027 |  |
| [CVE-2026-53147](https://patchblox.com/security/data/cve/CVE-2026-53147.md) | High | thunderbolt: Validate XDomain request packet size before type cast | 8.1 | 0.0027 |  |
| [CVE-2026-53256](https://patchblox.com/security/data/cve/CVE-2026-53256.md) | High | kernel-rt-devel: kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() | 8.1 | 0.0026 |  |
| [CVE-2026-46238](https://patchblox.com/security/data/cve/CVE-2026-46238.md) | High | batman-adv: stop caching unowned originator pointers in BAT IV | 8.8 | 0.0026 |  |
| [CVE-2026-53146](https://patchblox.com/security/data/cve/CVE-2026-53146.md) | High | thunderbolt: Limit XDomain response copy to actual frame size | 7.1 | 0.0026 |  |
| [CVE-2026-46232](https://patchblox.com/security/data/cve/CVE-2026-46232.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0026 |  |
| [CVE-2026-43018](https://patchblox.com/security/data/cve/CVE-2026-43018.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0026 |  |
| [CVE-2026-43051](https://patchblox.com/security/data/cve/CVE-2026-43051.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0026 |  |
| [CVE-2026-31513](https://patchblox.com/security/data/cve/CVE-2026-31513.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0025 |  |
| [CVE-2026-43113](https://patchblox.com/security/data/cve/CVE-2026-43113.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0024 |  |
| [CVE-2026-46307](https://patchblox.com/security/data/cve/CVE-2026-46307.md) | High | wifi: ath5k: do not access array OOB | 8.3 | 0.0024 |  |
| [CVE-2026-46275](https://patchblox.com/security/data/cve/CVE-2026-46275.md) | High | Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths | 7.8 | 0.0023 |  |
| [CVE-2026-43062](https://patchblox.com/security/data/cve/CVE-2026-43062.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0022 |  |
| [CVE-2026-46166](https://patchblox.com/security/data/cve/CVE-2026-46166.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0020 |  |
| [CVE-2026-52976](https://patchblox.com/security/data/cve/CVE-2026-52976.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix error cleanup in xe_exec_queue_create... | 7.8 | 0.0018 |  |
| [CVE-2026-52951](https://patchblox.com/security/data/cve/CVE-2026-52951.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-53366](https://patchblox.com/security/data/cve/CVE-2026-53366.md) | High | ipv4: account for fraggap on the paged allocation path | 8.5 | 0.0017 |  |
| [CVE-2026-53098](https://patchblox.com/security/data/cve/CVE-2026-53098.md) | High | wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() | 7.8 | 0.0017 |  |
| [CVE-2026-53112](https://patchblox.com/security/data/cve/CVE-2026-53112.md) | High | wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet | 7.8 | 0.0017 |  |
| [CVE-2026-46152](https://patchblox.com/security/data/cve/CVE-2026-46152.md) | High | wifi: mac80211: drop stray 'static' from fast-RX rx_result | 8.8 | 0.0017 |  |
| [CVE-2026-53068](https://patchblox.com/security/data/cve/CVE-2026-53068.md) | High | drm/komeda: fix integer overflow in AFBC framebuffer size check | 7.8 | 0.0017 |  |
| [CVE-2026-31532](https://patchblox.com/security/data/cve/CVE-2026-31532.md) | High | can: raw: fix ro->uniq use-after-free in raw_rcv() | 8.8 | 0.0017 |  |
| [CVE-2026-43248](https://patchblox.com/security/data/cve/CVE-2026-43248.md) | High | vhost: move vdpa group bound check to vhost_vdpa | 8.8 | 0.0016 |  |
| [CVE-2026-45853](https://patchblox.com/security/data/cve/CVE-2026-45853.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2026-45867](https://patchblox.com/security/data/cve/CVE-2026-45867.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2026-45879](https://patchblox.com/security/data/cve/CVE-2026-45879.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2026-45902](https://patchblox.com/security/data/cve/CVE-2026-45902.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2026-45916](https://patchblox.com/security/data/cve/CVE-2026-45916.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2026-45851](https://patchblox.com/security/data/cve/CVE-2026-45851.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0016 |  |
| [CVE-2026-53306](https://patchblox.com/security/data/cve/CVE-2026-53306.md) | High | tty: hvc_iucv: fix off-by-one in number of supported devices | 7.1 | 0.0016 |  |
| [CVE-2026-53022](https://patchblox.com/security/data/cve/CVE-2026-53022.md) | High | platform/x86: dell-wmi-sysman: bound enumeration string aggregation | 7.0 | 0.0016 |  |
| [CVE-2026-45885](https://patchblox.com/security/data/cve/CVE-2026-45885.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2026-45946](https://patchblox.com/security/data/cve/CVE-2026-45946.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2026-31568](https://patchblox.com/security/data/cve/CVE-2026-31568.md) | High | s390/mm: Add missing secure storage access fixups for donated memory | 7.1 | 0.0016 |  |
| [CVE-2026-53202](https://patchblox.com/security/data/cve/CVE-2026-53202.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC... | 7.8 | 0.0016 |  |
| [CVE-2026-53143](https://patchblox.com/security/data/cve/CVE-2026-53143.md) | High | drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 | 7.8 | 0.0015 |  |
| [CVE-2026-46330](https://patchblox.com/security/data/cve/CVE-2026-46330.md) | High | Revert "net/smc: Introduce TCP ULP support" | 8.1 | 0.0015 |  |
| [CVE-2026-52933](https://patchblox.com/security/data/cve/CVE-2026-52933.md) | High | io_uring/poll: fix signed comparison in io_poll_get_ownership() | 7.8 | 0.0015 |  |
| [CVE-2026-53194](https://patchblox.com/security/data/cve/CVE-2026-53194.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2026-53329](https://patchblox.com/security/data/cve/CVE-2026-53329.md) | High | drm/amd/display: Use krealloc_array() in dal_vector_reserve() | 7.8 | 0.0015 |  |
| [CVE-2026-43459](https://patchblox.com/security/data/cve/CVE-2026-43459.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.3 | 0.0015 |  |
| [CVE-2026-45920](https://patchblox.com/security/data/cve/CVE-2026-45920.md) | High | kernel-64kb: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893). | 7.8 | 0.0015 |  |
| [CVE-2026-46294](https://patchblox.com/security/data/cve/CVE-2026-46294.md) | High | kernel-uek: dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585] | 7.8 | 0.0015 |  |
| [CVE-2026-31447](https://patchblox.com/security/data/cve/CVE-2026-31447.md) | High | ext4: reject mount if bigalloc with s_first_data_block != 0 | 7.8 | 0.0014 |  |
| [CVE-2026-31780](https://patchblox.com/security/data/cve/CVE-2026-31780.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2026-46006](https://patchblox.com/security/data/cve/CVE-2026-46006.md) | High | drm/nouveau: fix u32 overflow in pushbuf reloc bounds check | 7.8 | 0.0014 |  |
| [CVE-2026-53137](https://patchblox.com/security/data/cve/CVE-2026-53137.md) | High | drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size | 7.8 | 0.0014 |  |
| [CVE-2026-53195](https://patchblox.com/security/data/cve/CVE-2026-53195.md) | High | USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() | 7.8 | 0.0014 |  |
| [CVE-2026-53203](https://patchblox.com/security/data/cve/CVE-2026-53203.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2026-43380](https://patchblox.com/security/data/cve/CVE-2026-43380.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0014 |  |
| [CVE-2026-46064](https://patchblox.com/security/data/cve/CVE-2026-46064.md) | High | ibmasm: fix heap over-read in ibmasm_send_i2o_message() | 7.1 | 0.0014 |  |
| [CVE-2026-46205](https://patchblox.com/security/data/cve/CVE-2026-46205.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2026-53090](https://patchblox.com/security/data/cve/CVE-2026-53090.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix ld_{abs,ind} failure path analysis in s... | 7.8 | 0.0014 |  |
| [CVE-2026-43196](https://patchblox.com/security/data/cve/CVE-2026-43196.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2026-43205](https://patchblox.com/security/data/cve/CVE-2026-43205.md) | High | kernel-64kb: dpaa2-switch: validate num_ifs to prevent out-of-bounds write (bsc#1264328). | 7.8 | 0.0014 |  |
| [CVE-2026-43207](https://patchblox.com/security/data/cve/CVE-2026-43207.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2026-45996](https://patchblox.com/security/data/cve/CVE-2026-45996.md) | High | spi: imx: fix use-after-free on unbind | 7.8 | 0.0014 |  |
| [CVE-2026-46206](https://patchblox.com/security/data/cve/CVE-2026-46206.md) | High | batman-adv: reject new tp_meter sessions during teardown | 7.8 | 0.0014 |  |
| [CVE-2026-45994](https://patchblox.com/security/data/cve/CVE-2026-45994.md) | High | ibmasm: fix OOB reads in command_file_write due to missing size checks | 7.1 | 0.0014 |  |
| [CVE-2026-43222](https://patchblox.com/security/data/cve/CVE-2026-43222.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2026-43260](https://patchblox.com/security/data/cve/CVE-2026-43260.md) | High | kernel-64kb: bnxt_en: Fix RSS context delete logic (bsc#1264429). | 7.8 | 0.0014 |  |
| [CVE-2026-46201](https://patchblox.com/security/data/cve/CVE-2026-46201.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2026-46191](https://patchblox.com/security/data/cve/CVE-2026-46191.md) | High | fbcon: Avoid OOB font access if console rotation fails | 7.7 | 0.0014 |  |
| [CVE-2026-45839](https://patchblox.com/security/data/cve/CVE-2026-45839.md) | High | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | 7.8 | 0.0014 |  |
| [CVE-2026-46033](https://patchblox.com/security/data/cve/CVE-2026-46033.md) | High | crypto: authencesn - reject short ahash digests during instance creation | 7.3 | 0.0014 |  |
| [CVE-2026-43236](https://patchblox.com/security/data/cve/CVE-2026-43236.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2026-46219](https://patchblox.com/security/data/cve/CVE-2026-46219.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2026-53148](https://patchblox.com/security/data/cve/CVE-2026-53148.md) | High | thunderbolt: Clamp XDomain response data copy to allocation size | 7.8 | 0.0014 |  |
| [CVE-2026-46132](https://patchblox.com/security/data/cve/CVE-2026-46132.md) | High | bpftool: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297] | 7.0 | 0.0014 |  |
| [CVE-2026-31617](https://patchblox.com/security/data/cve/CVE-2026-31617.md) | High | usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() | 7.8 | 0.0013 |  |
| [CVE-2026-53356](https://patchblox.com/security/data/cve/CVE-2026-53356.md) | High | drm/i915/gem: Fix phys BO pread/pwrite with offset | 7.8 | 0.0013 |  |
| [CVE-2026-46322](https://patchblox.com/security/data/cve/CVE-2026-46322.md) | High | tun: free page on build_skb failure in tun_xdp_one() | 7.1 | 0.0013 |  |
| [CVE-2026-52953](https://patchblox.com/security/data/cve/CVE-2026-52953.md) | High | iommu/vt-d: Fix oops due to out of scope access | 7.1 | 0.0013 |  |
| [CVE-2026-43133](https://patchblox.com/security/data/cve/CVE-2026-43133.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0013 |  |
| [CVE-2026-46321](https://patchblox.com/security/data/cve/CVE-2026-46321.md) | High | tun: free page on short-frame rejection in tun_xdp_one() | 7.1 | 0.0013 |  |
| [CVE-2026-46023](https://patchblox.com/security/data/cve/CVE-2026-46023.md) | High | dm mirror: fix integer overflow in create_dirty_log() | 7.0 | 0.0013 |  |
| [CVE-2026-31678](https://patchblox.com/security/data/cve/CVE-2026-31678.md) | High | openvswitch: defer tunnel netdev_put to RCU release | 8.8 | 0.0013 |  |
| [CVE-2026-43450](https://patchblox.com/security/data/cve/CVE-2026-43450.md) | High | kernel-rt-64k-modules-core: kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() | 8.8 | 0.0013 |  |
| [CVE-2026-46199](https://patchblox.com/security/data/cve/CVE-2026-46199.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0013 |  |
| [CVE-2026-46204](https://patchblox.com/security/data/cve/CVE-2026-46204.md) | High | drm/amdgpu/vcn4: Prevent OOB reads when parsing IB | 8.8 | 0.0013 |  |
| [CVE-2026-43427](https://patchblox.com/security/data/cve/CVE-2026-43427.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 |  |
| [CVE-2026-31485](https://patchblox.com/security/data/cve/CVE-2026-31485.md) | High | spi: spi-fsl-lpspi: fix teardown order issue (UAF) | 7.8 | 0.0013 |  |
| [CVE-2026-31583](https://patchblox.com/security/data/cve/CVE-2026-31583.md) | High | media: em28xx: fix use-after-free in em28xx_v4l2_open() | 7.8 | 0.0013 |  |
| [CVE-2026-31627](https://patchblox.com/security/data/cve/CVE-2026-31627.md) | High | i2c: s3c24xx: check the size of the SMBUS message before using it | 7.8 | 0.0013 |  |
| [CVE-2026-31768](https://patchblox.com/security/data/cve/CVE-2026-31768.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-46122](https://patchblox.com/security/data/cve/CVE-2026-46122.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-46163](https://patchblox.com/security/data/cve/CVE-2026-46163.md) | High | wifi: b43legacy: enforce bounds check on firmware key index in RX path | 7.8 | 0.0013 |  |
| [CVE-2026-43141](https://patchblox.com/security/data/cve/CVE-2026-43141.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 |  |
| [CVE-2026-46140](https://patchblox.com/security/data/cve/CVE-2026-46140.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 |  |
| [CVE-2026-46190](https://patchblox.com/security/data/cve/CVE-2026-46190.md) | High | mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() | 7.1 | 0.0013 |  |
| [CVE-2026-46218](https://patchblox.com/security/data/cve/CVE-2026-46218.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 |  |
| [CVE-2026-53209](https://patchblox.com/security/data/cve/CVE-2026-53209.md) | High | Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend | 8.1 | 0.0013 |  |
| [CVE-2026-43324](https://patchblox.com/security/data/cve/CVE-2026-43324.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-46178](https://patchblox.com/security/data/cve/CVE-2026-46178.md) | High | kernel-uek64k: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (Jason Gunthorpe) [Orabug: 39460496] | 7.8 | 0.0013 |  |
| [CVE-2026-31479](https://patchblox.com/security/data/cve/CVE-2026-31479.md) | High | kernel-64kb: drm/xe: always keep track of remap prev/next (bsc#1262765). | 8.8 | 0.0013 |  |
| [CVE-2026-46270](https://patchblox.com/security/data/cve/CVE-2026-46270.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.4 | 0.0013 |  |
| [CVE-2026-31511](https://patchblox.com/security/data/cve/CVE-2026-31511.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-31720](https://patchblox.com/security/data/cve/CVE-2026-31720.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-31730](https://patchblox.com/security/data/cve/CVE-2026-31730.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-31747](https://patchblox.com/security/data/cve/CVE-2026-31747.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-31748](https://patchblox.com/security/data/cve/CVE-2026-31748.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-43007](https://patchblox.com/security/data/cve/CVE-2026-43007.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-43020](https://patchblox.com/security/data/cve/CVE-2026-43020.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-43256](https://patchblox.com/security/data/cve/CVE-2026-43256.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-46068](https://patchblox.com/security/data/cve/CVE-2026-46068.md) | High | kernel-64kb: crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx (bsc#1267592). | 7.8 | 0.0013 |  |
| [CVE-2026-46075](https://patchblox.com/security/data/cve/CVE-2026-46075.md) | High | crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path | 7.8 | 0.0013 |  |
| [CVE-2026-46086](https://patchblox.com/security/data/cve/CVE-2026-46086.md) | High | net: bridge: use a stable FDB dst snapshot in RCU readers | 7.8 | 0.0013 |  |
| [CVE-2026-46136](https://patchblox.com/security/data/cve/CVE-2026-46136.md) | High | wifi: mt76: mt7921: fix a potential clc buffer length underflow | 7.8 | 0.0013 |  |
| [CVE-2026-53004](https://patchblox.com/security/data/cve/CVE-2026-53004.md) | High | kernel-uek-modules-extra: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757] | 7.8 | 0.0013 |  |
| [CVE-2026-53136](https://patchblox.com/security/data/cve/CVE-2026-53136.md) | High | bpftool: kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size | 7.8 | 0.0013 |  |
| [CVE-2026-53159](https://patchblox.com/security/data/cve/CVE-2026-53159.md) | High | misc: fastrpc: fix DMA address corruption due to find_vma misuse | 7.8 | 0.0013 |  |
| [CVE-2026-31624](https://patchblox.com/security/data/cve/CVE-2026-31624.md) | High | HID: core: clamp report_size in s32ton() to avoid undefined shift | 7.1 | 0.0013 |  |
| [CVE-2026-53167](https://patchblox.com/security/data/cve/CVE-2026-53167.md) | High | fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios | 7.0 | 0.0013 |  |
| [CVE-2026-53218](https://patchblox.com/security/data/cve/CVE-2026-53218.md) | High | netfilter: nft_exthdr: fix register tracking for F_PRESENT flag | 7.0 | 0.0013 |  |
| [CVE-2026-53249](https://patchblox.com/security/data/cve/CVE-2026-53249.md) | High | ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | 7.0 | 0.0013 |  |
| [CVE-2026-31581](https://patchblox.com/security/data/cve/CVE-2026-31581.md) | High | ALSA: 6fire: fix use-after-free on disconnect | 8.8 | 0.0013 |  |
| [CVE-2026-31576](https://patchblox.com/security/data/cve/CVE-2026-31576.md) | High | media: hackrf: fix to not free memory after the device is registered in hackrf_probe() | 7.8 | 0.0013 |  |
| [CVE-2026-31578](https://patchblox.com/security/data/cve/CVE-2026-31578.md) | High | media: as102: fix to not free memory after the device is registered in as102_usb_probe() | 7.8 | 0.0013 |  |
| [CVE-2026-53149](https://patchblox.com/security/data/cve/CVE-2026-53149.md) | High | thunderbolt: Bound root directory content to block size | 7.1 | 0.0013 |  |
| [CVE-2026-43353](https://patchblox.com/security/data/cve/CVE-2026-43353.md) | High | i3c: mipi-i3c-hci: Fix race in DMA ring dequeue | 7.8 | 0.0013 |  |
| [CVE-2026-31566](https://patchblox.com/security/data/cve/CVE-2026-31566.md) | High | drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib | 8.8 | 0.0013 |  |
| [CVE-2026-31587](https://patchblox.com/security/data/cve/CVE-2026-31587.md) | High | ASoC: qcom: q6apm: move component registration to unmanaged version | 7.8 | 0.0013 |  |
| [CVE-2026-43426](https://patchblox.com/security/data/cve/CVE-2026-43426.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-45914](https://patchblox.com/security/data/cve/CVE-2026-45914.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-45936](https://patchblox.com/security/data/cve/CVE-2026-45936.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-45958](https://patchblox.com/security/data/cve/CVE-2026-45958.md) | High | drm/exynos: vidi: fix to avoid directly dereferencing user pointer | 7.8 | 0.0013 |  |
| [CVE-2026-46285](https://patchblox.com/security/data/cve/CVE-2026-46285.md) | High | mtd: docg3: fix use-after-free in docg3_release() | 7.8 | 0.0013 |  |
| [CVE-2026-53160](https://patchblox.com/security/data/cve/CVE-2026-53160.md) | High | misc: fastrpc: fix use-after-free race in fastrpc_map_create | 7.8 | 0.0013 |  |
| [CVE-2026-53161](https://patchblox.com/security/data/cve/CVE-2026-53161.md) | High | misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context | 7.8 | 0.0013 |  |
| [CVE-2026-31778](https://patchblox.com/security/data/cve/CVE-2026-31778.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 |  |
| [CVE-2026-43241](https://patchblox.com/security/data/cve/CVE-2026-43241.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 |  |
| [CVE-2026-43449](https://patchblox.com/security/data/cve/CVE-2026-43449.md) | High | kernel-64kb: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023). | 7.1 | 0.0013 |  |
| [CVE-2026-52915](https://patchblox.com/security/data/cve/CVE-2026-52915.md) | High | netfilter: ip6t_hbh: reject oversized option lists | 7.1 | 0.0013 |  |
| [CVE-2026-31503](https://patchblox.com/security/data/cve/CVE-2026-31503.md) | High | udp: Fix wildcard bind conflict check when using hash2 | 7.8 | 0.0013 |  |
| [CVE-2026-46011](https://patchblox.com/security/data/cve/CVE-2026-46011.md) | High | media: mtk-jpeg: fix use-after-free in release path due to uncancelled work | 7.8 | 0.0013 |  |
| [CVE-2026-31619](https://patchblox.com/security/data/cve/CVE-2026-31619.md) | High | ALSA: fireworks: bound device-supplied status before string array lookup | 7.3 | 0.0013 |  |
| [CVE-2026-31616](https://patchblox.com/security/data/cve/CVE-2026-31616.md) | High | usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() | 7.1 | 0.0013 |  |
| [CVE-2026-31623](https://patchblox.com/security/data/cve/CVE-2026-31623.md) | High | net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() | 7.1 | 0.0013 |  |
| [CVE-2026-53150](https://patchblox.com/security/data/cve/CVE-2026-53150.md) | High | thunderbolt: Reject zero-length property entries in validator | 7.0 | 0.0013 |  |
| [CVE-2026-53168](https://patchblox.com/security/data/cve/CVE-2026-53168.md) | High | fuse: reject fuse_notify() pagecache ops on directories | 7.0 | 0.0013 |  |
| [CVE-2026-53181](https://patchblox.com/security/data/cve/CVE-2026-53181.md) | High | vsock/vmci: fix sk_ack_backlog leak on failed handshake | 7.0 | 0.0013 |  |
| [CVE-2026-53208](https://patchblox.com/security/data/cve/CVE-2026-53208.md) | High | Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig | 7.0 | 0.0013 |  |
| [CVE-2026-43370](https://patchblox.com/security/data/cve/CVE-2026-43370.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0012 |  |
| [CVE-2026-46230](https://patchblox.com/security/data/cve/CVE-2026-46230.md) | High | drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg | 8.8 | 0.0012 |  |
| [CVE-2026-43279](https://patchblox.com/security/data/cve/CVE-2026-43279.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes... | 7.8 | 0.0012 |  |
| [CVE-2026-46009](https://patchblox.com/security/data/cve/CVE-2026-46009.md) | High | PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown | 7.5 | 0.0012 |  |
| [CVE-2026-31498](https://patchblox.com/security/data/cve/CVE-2026-31498.md) | High | Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop | 7.0 | 0.0012 |  |
| [CVE-2026-53021](https://patchblox.com/security/data/cve/CVE-2026-53021.md) | High | scsi: target: core: Fix integer overflow in UNMAP bounds check | 7.0 | 0.0012 |  |
| [CVE-2026-43047](https://patchblox.com/security/data/cve/CVE-2026-43047.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 |  |
| [CVE-2026-43476](https://patchblox.com/security/data/cve/CVE-2026-43476.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 |  |
| [CVE-2026-46267](https://patchblox.com/security/data/cve/CVE-2026-46267.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 |  |
| [CVE-2026-53078](https://patchblox.com/security/data/cve/CVE-2026-53078.md) | High | bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops | 7.8 | 0.0012 |  |
| [CVE-2026-43058](https://patchblox.com/security/data/cve/CVE-2026-43058.md) | High | media: vidtv: fix pass-by-value structs causing MSAN warnings | 7.1 | 0.0012 |  |
| [CVE-2026-31776](https://patchblox.com/security/data/cve/CVE-2026-31776.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 |  |
| [CVE-2026-46263](https://patchblox.com/security/data/cve/CVE-2026-46263.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 |  |
| [CVE-2026-46231](https://patchblox.com/security/data/cve/CVE-2026-46231.md) | High | batman-adv: bla: put backbone reference on failed claim hash insert | 7.1 | 0.0012 |  |
| [CVE-2026-46233](https://patchblox.com/security/data/cve/CVE-2026-46233.md) | High | batman-adv: bla: only purge non-released claims | 7.1 | 0.0012 |  |
| [CVE-2026-53255](https://patchblox.com/security/data/cve/CVE-2026-53255.md) | High | Bluetooth: MGMT: validate advertising TLV before type checks | 7.1 | 0.0012 |  |
| [CVE-2026-43134](https://patchblox.com/security/data/cve/CVE-2026-43134.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0012 |  |
| [CVE-2026-43278](https://patchblox.com/security/data/cve/CVE-2026-43278.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 |  |
| [CVE-2026-53272](https://patchblox.com/security/data/cve/CVE-2026-53272.md) | High | kernel-64kb: erofs: fix use-after-free on sbi->sync_decompress (bsc#1269809). | 7.8 | 0.0012 |  |
| [CVE-2026-53073](https://patchblox.com/security/data/cve/CVE-2026-53073.md) | High | Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error | 8.8 | 0.0011 |  |
| [CVE-2026-52926](https://patchblox.com/security/data/cve/CVE-2026-52926.md) | High | batman-adv: clear current gateway during teardown | 7.8 | 0.0011 |  |
| [CVE-2026-43497](https://patchblox.com/security/data/cve/CVE-2026-43497.md) | High | fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free | 7.8 | 0.0011 |  |
| [CVE-2026-43211](https://patchblox.com/security/data/cve/CVE-2026-43211.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0011 |  |
| [CVE-2026-31474](https://patchblox.com/security/data/cve/CVE-2026-31474.md) | High | can: isotp: fix tx.buf use-after-free in isotp_sendmsg() | 7.8 | 0.0010 |  |
| [CVE-2026-31761](https://patchblox.com/security/data/cve/CVE-2026-31761.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0010 |  |
| [CVE-2026-53050](https://patchblox.com/security/data/cve/CVE-2026-53050.md) | High | quota: Fix race of dquot_scan_active() with quota deactivation | 7.8 | 0.0010 |  |
| [CVE-2026-53239](https://patchblox.com/security/data/cve/CVE-2026-53239.md) | High | xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() | 8.8 | 0.0010 |  |
| [CVE-2026-53242](https://patchblox.com/security/data/cve/CVE-2026-53242.md) | High | ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams | 7.8 | 0.0010 |  |
| [CVE-2026-31548](https://patchblox.com/security/data/cve/CVE-2026-31548.md) | High | wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down | 7.8 | 0.0010 |  |
| [CVE-2026-43019](https://patchblox.com/security/data/cve/CVE-2026-43019.md) | High | Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync | 7.8 | 0.0010 |  |
| [CVE-2026-43180](https://patchblox.com/security/data/cve/CVE-2026-43180.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0010 |  |
| [CVE-2026-43111](https://patchblox.com/security/data/cve/CVE-2026-43111.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0010 |  |
| [CVE-2026-53192](https://patchblox.com/security/data/cve/CVE-2026-53192.md) | High | ALSA: timer: Fix UAF at snd_timer_user_params() | 8.8 | 0.0010 |  |
| [CVE-2026-46058](https://patchblox.com/security/data/cve/CVE-2026-46058.md) | High | media: amphion: Fix race between m2m job_abort and device_run | 7.8 | 0.0010 |  |
| [CVE-2026-31667](https://patchblox.com/security/data/cve/CVE-2026-31667.md) | High | Input: uinput - fix circular locking dependency with ff-core | 7.8 | 0.0010 |  |
| [CVE-2026-31523](https://patchblox.com/security/data/cve/CVE-2026-31523.md) | High | nvme-pci: ensure we're polling a polled queue | 7.1 | 0.0009 |  |
| [CVE-2026-31430](https://patchblox.com/security/data/cve/CVE-2026-31430.md) | High | X.509: Fix out-of-bounds access when parsing extensions | 7.8 | 0.0008 |  |
| [CVE-2026-45871](https://patchblox.com/security/data/cve/CVE-2026-45871.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0019 |  |
| [CVE-2026-23276](https://patchblox.com/security/data/cve/CVE-2026-23276.md) | Routine | net: add xmit recursion limit to tunnel xmit functions | 5.5 | 0.0018 |  |
| [CVE-2026-45877](https://patchblox.com/security/data/cve/CVE-2026-45877.md) | Routine | HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients | 5.5 | 0.0018 |  |
| [CVE-2026-46018](https://patchblox.com/security/data/cve/CVE-2026-46018.md) | Routine | ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES | 5.5 | 0.0018 |  |
| [CVE-2026-53047](https://patchblox.com/security/data/cve/CVE-2026-53047.md) | Routine | efi/capsule-loader: fix incorrect sizeof in phys array reallocation | 5.5 | 0.0018 |  |
| [CVE-2026-45875](https://patchblox.com/security/data/cve/CVE-2026-45875.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-46019](https://patchblox.com/security/data/cve/CVE-2026-46019.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-43191](https://patchblox.com/security/data/cve/CVE-2026-43191.md) | Routine | drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 | 5.5 | 0.0016 |  |
| [CVE-2026-43204](https://patchblox.com/security/data/cve/CVE-2026-43204.md) | Routine | ASoC: qcom: q6asm: drop DSP responses for closed data streams | 5.5 | 0.0016 |  |
| [CVE-2026-45947](https://patchblox.com/security/data/cve/CVE-2026-45947.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-52963](https://patchblox.com/security/data/cve/CVE-2026-52963.md) | Routine | ALSA: usb-audio: Bound MIDI endpoint descriptor scans | 5.5 | 0.0016 |  |
| [CVE-2026-52964](https://patchblox.com/security/data/cve/CVE-2026-52964.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-53039](https://patchblox.com/security/data/cve/CVE-2026-53039.md) | Routine | kernel-uek: ocfs2: validate group add input before caching (Zhengyuan Huang) [Orabug: 39621864] | 5.5 | 0.0016 |  |
| [CVE-2026-53056](https://patchblox.com/security/data/cve/CVE-2026-53056.md) | Routine | drm/msm/dpu: fix mismatch between power and frequency | 5.5 | 0.0016 |  |
| [CVE-2026-53058](https://patchblox.com/security/data/cve/CVE-2026-53058.md) | Routine | drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() | 5.5 | 0.0016 |  |
| [CVE-2026-53065](https://patchblox.com/security/data/cve/CVE-2026-53065.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: sti: use managed regmap_field allocations... | 5.5 | 0.0016 |  |
| [CVE-2026-53066](https://patchblox.com/security/data/cve/CVE-2026-53066.md) | Routine | drm/sun4i: backend: fix error pointer dereference | 5.5 | 0.0016 |  |
| [CVE-2026-53093](https://patchblox.com/security/data/cve/CVE-2026-53093.md) | Routine | wifi: brcmfmac: Fix error pointer dereference | 5.5 | 0.0016 |  |
| [CVE-2026-53241](https://patchblox.com/security/data/cve/CVE-2026-53241.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-53258](https://patchblox.com/security/data/cve/CVE-2026-53258.md) | Routine | wifi: fix leak if split 6 GHz scanning fails | 5.5 | 0.0016 |  |
| [CVE-2026-53279](https://patchblox.com/security/data/cve/CVE-2026-53279.md) | Routine | drm/gma500/oaktrail_lvds: fix hang on init failure | 5.5 | 0.0016 |  |
| [CVE-2026-45857](https://patchblox.com/security/data/cve/CVE-2026-45857.md) | Routine | kernel-64kb: scsi: csiostor: Fix dereference of null pointer rn (bsc#1266458). | 5.5 | 0.0016 |  |
| [CVE-2026-45858](https://patchblox.com/security/data/cve/CVE-2026-45858.md) | Routine | ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 | 5.5 | 0.0016 |  |
| [CVE-2026-45868](https://patchblox.com/security/data/cve/CVE-2026-45868.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-45869](https://patchblox.com/security/data/cve/CVE-2026-45869.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-45880](https://patchblox.com/security/data/cve/CVE-2026-45880.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-45881](https://patchblox.com/security/data/cve/CVE-2026-45881.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-45883](https://patchblox.com/security/data/cve/CVE-2026-45883.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-45911](https://patchblox.com/security/data/cve/CVE-2026-45911.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-45922](https://patchblox.com/security/data/cve/CVE-2026-45922.md) | Routine | kernel-64kb: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805). | 5.5 | 0.0016 |  |
| [CVE-2026-45923](https://patchblox.com/security/data/cve/CVE-2026-45923.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-43118](https://patchblox.com/security/data/cve/CVE-2026-43118.md) | Routine | btrfs: fix zero size inode with non-zero size after log replay | 5.5 | 0.0016 |  |
| [CVE-2026-43244](https://patchblox.com/security/data/cve/CVE-2026-43244.md) | Routine | kcm: fix zero-frag skb in frag_list on partial sendmsg error | 5.5 | 0.0016 |  |
| [CVE-2026-43294](https://patchblox.com/security/data/cve/CVE-2026-43294.md) | Routine | drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels | 5.5 | 0.0016 |  |
| [CVE-2025-71302](https://patchblox.com/security/data/cve/CVE-2025-71302.md) | Routine | drm/panthor: fix for dma-fence safe access rules | 5.5 | 0.0015 |  |
| [CVE-2025-71314](https://patchblox.com/security/data/cve/CVE-2025-71314.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0015 |  |
| [CVE-2026-52961](https://patchblox.com/security/data/cve/CVE-2026-52961.md) | Routine | cephfs: ceph: fix BUG_ON in __ceph_build_xattrs_blob() due to stale blob size (bsc#1269129). | 5.5 | 0.0015 |  |
| [CVE-2025-71286](https://patchblox.com/security/data/cve/CVE-2025-71286.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-43314](https://patchblox.com/security/data/cve/CVE-2026-43314.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-46092](https://patchblox.com/security/data/cve/CVE-2026-46092.md) | Routine | wifi: rtw88: check for PCI upstream bridge existence | 5.5 | 0.0014 |  |
| [CVE-2026-46089](https://patchblox.com/security/data/cve/CVE-2026-46089.md) | Routine | zram: do not forget to endio for partial discard requests | 5.5 | 0.0014 |  |
| [CVE-2026-53227](https://patchblox.com/security/data/cve/CVE-2026-53227.md) | Routine | net: openvswitch: fix possible kfree_skb of ERR_PTR | 5.5 | 0.0013 |  |
| [CVE-2026-52948](https://patchblox.com/security/data/cve/CVE-2026-52948.md) | Routine | i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl | 5.5 | 0.0013 |  |
| [CVE-2026-46128](https://patchblox.com/security/data/cve/CVE-2026-46128.md) | Routine | bpftool: ipmi: Check event message buffer response for bad data (Corey Minyard) [Orabug: 39460284] | 5.5 | 0.0013 |  |
| [CVE-2026-46146](https://patchblox.com/security/data/cve/CVE-2026-46146.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-46161](https://patchblox.com/security/data/cve/CVE-2026-46161.md) | Routine | bpftool: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415] | 5.5 | 0.0013 |  |
| [CVE-2026-46167](https://patchblox.com/security/data/cve/CVE-2026-46167.md) | Routine | kernel-uek: usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl (Greg Kroah-Hartman) [Orabug: 39460438] | 5.5 | 0.0013 |  |
| [CVE-2026-45919](https://patchblox.com/security/data/cve/CVE-2026-45919.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-45963](https://patchblox.com/security/data/cve/CVE-2026-45963.md) | Routine | ASoC: nau8821: Cancel delayed work on component remove | 5.5 | 0.0013 |  |
| [CVE-2026-45982](https://patchblox.com/security/data/cve/CVE-2026-45982.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-53325](https://patchblox.com/security/data/cve/CVE-2026-53325.md) | Routine | agp/amd64: Fix broken error propagation in agp_amd64_probe() | 5.5 | 0.0013 |  |
| [CVE-2026-31625](https://patchblox.com/security/data/cve/CVE-2026-31625.md) | Routine | HID: alps: fix NULL pointer dereference in alps_raw_event() | 5.5 | 0.0013 |  |
| [CVE-2026-46040](https://patchblox.com/security/data/cve/CVE-2026-46040.md) | Routine | bpftool: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (Chia-Ming Chang) [Orabug: 39452251] | 5.5 | 0.0013 |  |
| [CVE-2026-46046](https://patchblox.com/security/data/cve/CVE-2026-46046.md) | Routine | ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() | 5.5 | 0.0013 |  |
| [CVE-2026-43123](https://patchblox.com/security/data/cve/CVE-2026-43123.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43124](https://patchblox.com/security/data/cve/CVE-2026-43124.md) | Routine | kernel-64kb: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545). | 5.5 | 0.0013 |  |
| [CVE-2026-43136](https://patchblox.com/security/data/cve/CVE-2026-43136.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43140](https://patchblox.com/security/data/cve/CVE-2026-43140.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43143](https://patchblox.com/security/data/cve/CVE-2026-43143.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43149](https://patchblox.com/security/data/cve/CVE-2026-43149.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43152](https://patchblox.com/security/data/cve/CVE-2026-43152.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43157](https://patchblox.com/security/data/cve/CVE-2026-43157.md) | Routine | kernel-64kb: octeontx2-af: CGX: fix bitmap leaks (bsc#1264624). | 5.5 | 0.0013 |  |
| [CVE-2026-43159](https://patchblox.com/security/data/cve/CVE-2026-43159.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43162](https://patchblox.com/security/data/cve/CVE-2026-43162.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43182](https://patchblox.com/security/data/cve/CVE-2026-43182.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43183](https://patchblox.com/security/data/cve/CVE-2026-43183.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43202](https://patchblox.com/security/data/cve/CVE-2026-43202.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43218](https://patchblox.com/security/data/cve/CVE-2026-43218.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43221](https://patchblox.com/security/data/cve/CVE-2026-43221.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43223](https://patchblox.com/security/data/cve/CVE-2026-43223.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43225](https://patchblox.com/security/data/cve/CVE-2026-43225.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43231](https://patchblox.com/security/data/cve/CVE-2026-43231.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43255](https://patchblox.com/security/data/cve/CVE-2026-43255.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43257](https://patchblox.com/security/data/cve/CVE-2026-43257.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-45928](https://patchblox.com/security/data/cve/CVE-2026-45928.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-46143](https://patchblox.com/security/data/cve/CVE-2026-46143.md) | Routine | ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens | 5.5 | 0.0013 |  |
| [CVE-2026-46184](https://patchblox.com/security/data/cve/CVE-2026-46184.md) | Routine | kernel-uek64k-modules: sound: ua101: fix division by zero at probe (Seungju Cheon) [Orabug: 39460519] | 5.5 | 0.0013 |  |
| [CVE-2026-53060](https://patchblox.com/security/data/cve/CVE-2026-53060.md) | Routine | dm cache metadata: fix memory leak on metadata abort retry | 5.5 | 0.0013 |  |
| [CVE-2026-43137](https://patchblox.com/security/data/cve/CVE-2026-43137.md) | Routine | ASoC: SOF: Intel: hda: Fix NULL pointer dereference | 5.5 | 0.0013 |  |
| [CVE-2026-43169](https://patchblox.com/security/data/cve/CVE-2026-43169.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43177](https://patchblox.com/security/data/cve/CVE-2026-43177.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43189](https://patchblox.com/security/data/cve/CVE-2026-43189.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43220](https://patchblox.com/security/data/cve/CVE-2026-43220.md) | Routine | iommu/amd: serialize sequence allocation under concurrent TLB invalidations | 5.5 | 0.0013 |  |
| [CVE-2026-46131](https://patchblox.com/security/data/cve/CVE-2026-46131.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-46207](https://patchblox.com/security/data/cve/CVE-2026-46207.md) | Routine | kernel-64kb: vsock/virtio: fix length and offset in tap skb for split packets (bsc#1267691). | 5.5 | 0.0013 |  |
| [CVE-2026-46211](https://patchblox.com/security/data/cve/CVE-2026-46211.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-46216](https://patchblox.com/security/data/cve/CVE-2026-46216.md) | Routine | kernel-64kb: drm/xe/hdcp: Add NULL check for media_gt in (bsc#1267234). | 5.5 | 0.0013 |  |
| [CVE-2026-45834](https://patchblox.com/security/data/cve/CVE-2026-45834.md) | Routine | Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() | 5.5 | 0.0013 |  |
| [CVE-2026-45835](https://patchblox.com/security/data/cve/CVE-2026-45835.md) | Routine | Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() | 5.5 | 0.0013 |  |
| [CVE-2026-45981](https://patchblox.com/security/data/cve/CVE-2026-45981.md) | Routine | kernel-64kb: s390/cio: Fix device lifecycle handling in css_alloc_subchannel() (bsc#1267204). | 5.5 | 0.0013 |  |
| [CVE-2026-31441](https://patchblox.com/security/data/cve/CVE-2026-31441.md) | Routine | dmaengine: idxd: Fix memory leak when a wq is reset | 5.5 | 0.0013 |  |
| [CVE-2026-31585](https://patchblox.com/security/data/cve/CVE-2026-31585.md) | Routine | media: vidtv: fix nfeeds state corruption on start_streaming failure | 5.5 | 0.0013 |  |
| [CVE-2026-31599](https://patchblox.com/security/data/cve/CVE-2026-31599.md) | Routine | media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections | 5.5 | 0.0013 |  |
| [CVE-2026-31603](https://patchblox.com/security/data/cve/CVE-2026-31603.md) | Routine | staging: sm750fb: fix division by zero in ps_to_hz() | 5.5 | 0.0013 |  |
| [CVE-2026-31605](https://patchblox.com/security/data/cve/CVE-2026-31605.md) | Routine | fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO | 5.5 | 0.0013 |  |
| [CVE-2026-31615](https://patchblox.com/security/data/cve/CVE-2026-31615.md) | Routine | usb: gadget: renesas_usb3: validate endpoint index in standard request handlers | 5.5 | 0.0013 |  |
| [CVE-2026-31618](https://patchblox.com/security/data/cve/CVE-2026-31618.md) | Routine | fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO | 5.5 | 0.0013 |  |
| [CVE-2026-46088](https://patchblox.com/security/data/cve/CVE-2026-46088.md) | Routine | ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() | 5.5 | 0.0013 |  |
| [CVE-2026-46151](https://patchblox.com/security/data/cve/CVE-2026-46151.md) | Routine | usb: usblp: fix heap leak in IEEE 1284 device ID via short response | 5.5 | 0.0013 |  |
| [CVE-2026-53245](https://patchblox.com/security/data/cve/CVE-2026-53245.md) | Routine | net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr | 5.5 | 0.0013 |  |
| [CVE-2026-53293](https://patchblox.com/security/data/cve/CVE-2026-53293.md) | Routine | drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG | 5.5 | 0.0013 |  |
| [CVE-2025-71291](https://patchblox.com/security/data/cve/CVE-2025-71291.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2025-71297](https://patchblox.com/security/data/cve/CVE-2025-71297.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-31497](https://patchblox.com/security/data/cve/CVE-2026-31497.md) | Routine | Bluetooth: btusb: clamp SCO altsetting table indices | 5.5 | 0.0012 |  |
| [CVE-2026-31510](https://patchblox.com/security/data/cve/CVE-2026-31510.md) | Routine | Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb | 5.5 | 0.0012 |  |
| [CVE-2026-31520](https://patchblox.com/security/data/cve/CVE-2026-31520.md) | Routine | HID: apple: avoid memory leak in apple_report_fixup() | 5.5 | 0.0012 |  |
| [CVE-2026-31522](https://patchblox.com/security/data/cve/CVE-2026-31522.md) | Routine | HID: magicmouse: avoid memory leak in magicmouse_report_fixup() | 5.5 | 0.0012 |  |
| [CVE-2026-31524](https://patchblox.com/security/data/cve/CVE-2026-31524.md) | Routine | HID: asus: avoid memory leak in asus_report_fixup() | 5.5 | 0.0012 |  |
| [CVE-2026-31540](https://patchblox.com/security/data/cve/CVE-2026-31540.md) | Routine | drm/i915/gt: Check set_default_submission() before deferencing | 5.5 | 0.0012 |  |
| [CVE-2026-31545](https://patchblox.com/security/data/cve/CVE-2026-31545.md) | Routine | NFC: nxp-nci: allow GPIOs to sleep | 5.5 | 0.0012 |  |
| [CVE-2026-31549](https://patchblox.com/security/data/cve/CVE-2026-31549.md) | Routine | i2c: cp2615: fix serial string NULL-deref at probe | 5.5 | 0.0012 |  |
| [CVE-2026-31551](https://patchblox.com/security/data/cve/CVE-2026-31551.md) | Routine | wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. | 5.5 | 0.0012 |  |
| [CVE-2026-31604](https://patchblox.com/security/data/cve/CVE-2026-31604.md) | Routine | wifi: rtw88: fix device leak on probe failure | 5.5 | 0.0012 |  |
| [CVE-2026-31727](https://patchblox.com/security/data/cve/CVE-2026-31727.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-31749](https://patchblox.com/security/data/cve/CVE-2026-31749.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-31754](https://patchblox.com/security/data/cve/CVE-2026-31754.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-31755](https://patchblox.com/security/data/cve/CVE-2026-31755.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-31762](https://patchblox.com/security/data/cve/CVE-2026-31762.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-31763](https://patchblox.com/security/data/cve/CVE-2026-31763.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-31770](https://patchblox.com/security/data/cve/CVE-2026-31770.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-31781](https://patchblox.com/security/data/cve/CVE-2026-31781.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43032](https://patchblox.com/security/data/cve/CVE-2026-43032.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43098](https://patchblox.com/security/data/cve/CVE-2026-43098.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43104](https://patchblox.com/security/data/cve/CVE-2026-43104.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43129](https://patchblox.com/security/data/cve/CVE-2026-43129.md) | Routine | ima: verify the previous kernel's IMA buffer lies in addressable RAM | 5.5 | 0.0012 |  |
| [CVE-2026-43135](https://patchblox.com/security/data/cve/CVE-2026-43135.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43156](https://patchblox.com/security/data/cve/CVE-2026-43156.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43167](https://patchblox.com/security/data/cve/CVE-2026-43167.md) | Routine | kernel-64kb: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580). | 5.5 | 0.0012 |  |
| [CVE-2026-43200](https://patchblox.com/security/data/cve/CVE-2026-43200.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43240](https://patchblox.com/security/data/cve/CVE-2026-43240.md) | Routine | kernel-64kb: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386). | 5.5 | 0.0012 |  |
| [CVE-2026-43242](https://patchblox.com/security/data/cve/CVE-2026-43242.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43246](https://patchblox.com/security/data/cve/CVE-2026-43246.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43251](https://patchblox.com/security/data/cve/CVE-2026-43251.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43287](https://patchblox.com/security/data/cve/CVE-2026-43287.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43295](https://patchblox.com/security/data/cve/CVE-2026-43295.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43302](https://patchblox.com/security/data/cve/CVE-2026-43302.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43312](https://patchblox.com/security/data/cve/CVE-2026-43312.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43313](https://patchblox.com/security/data/cve/CVE-2026-43313.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43316](https://patchblox.com/security/data/cve/CVE-2026-43316.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43357](https://patchblox.com/security/data/cve/CVE-2026-43357.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43381](https://patchblox.com/security/data/cve/CVE-2026-43381.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43387](https://patchblox.com/security/data/cve/CVE-2026-43387.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43412](https://patchblox.com/security/data/cve/CVE-2026-43412.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43425](https://patchblox.com/security/data/cve/CVE-2026-43425.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43428](https://patchblox.com/security/data/cve/CVE-2026-43428.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43429](https://patchblox.com/security/data/cve/CVE-2026-43429.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43432](https://patchblox.com/security/data/cve/CVE-2026-43432.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43436](https://patchblox.com/security/data/cve/CVE-2026-43436.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43443](https://patchblox.com/security/data/cve/CVE-2026-43443.md) | Routine | ASoC: amd: acp-mach-common: Add missing error check for clock acquisition | 5.5 | 0.0012 |  |
| [CVE-2026-43445](https://patchblox.com/security/data/cve/CVE-2026-43445.md) | Routine | kernel-64kb: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041). | 5.5 | 0.0012 |  |
| [CVE-2026-45941](https://patchblox.com/security/data/cve/CVE-2026-45941.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-45954](https://patchblox.com/security/data/cve/CVE-2026-45954.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-45969](https://patchblox.com/security/data/cve/CVE-2026-45969.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-45986](https://patchblox.com/security/data/cve/CVE-2026-45986.md) | Routine | crypto: ccree - fix a memory leak in cc_mac_digest() | 5.5 | 0.0012 |  |
| [CVE-2026-45987](https://patchblox.com/security/data/cve/CVE-2026-45987.md) | Routine | KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 | 5.5 | 0.0012 |  |
| [CVE-2026-45997](https://patchblox.com/security/data/cve/CVE-2026-45997.md) | Routine | kernel-64kb: scsi: sd: fix missing put_disk() when device_add(&disk_dev) fails (bsc#1266740). | 5.5 | 0.0012 |  |
| [CVE-2026-46048](https://patchblox.com/security/data/cve/CVE-2026-46048.md) | Routine | kernel-uek64k: ALSA: caiaq: fix usb_dev refcount leak on probe failure (Deepanshu Kartikey) [Orabug: 39784983] | 5.5 | 0.0012 |  |
| [CVE-2026-46049](https://patchblox.com/security/data/cve/CVE-2026-46049.md) | Routine | ALSA: ctxfi: Add fallback to default RSR for S/PDIF | 5.5 | 0.0012 |  |
| [CVE-2026-46059](https://patchblox.com/security/data/cve/CVE-2026-46059.md) | Routine | KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN | 5.5 | 0.0012 |  |
| [CVE-2026-46077](https://patchblox.com/security/data/cve/CVE-2026-46077.md) | Routine | crypto: atmel-tdes - fix DMA sync direction | 5.5 | 0.0012 |  |
| [CVE-2026-46082](https://patchblox.com/security/data/cve/CVE-2026-46082.md) | Routine | KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 | 5.5 | 0.0012 |  |
| [CVE-2026-46108](https://patchblox.com/security/data/cve/CVE-2026-46108.md) | Routine | kernel-uek: ipmi:si: Return state to normal if message allocation fails (Corey Minyard) [Orabug: 39460202] | 5.5 | 0.0012 |  |
| [CVE-2026-46179](https://patchblox.com/security/data/cve/CVE-2026-46179.md) | Routine | ASoC: SOF: Don't allow pointer operations on unconfigured streams | 5.5 | 0.0012 |  |
| [CVE-2026-46186](https://patchblox.com/security/data/cve/CVE-2026-46186.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-46247](https://patchblox.com/security/data/cve/CVE-2026-46247.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-46276](https://patchblox.com/security/data/cve/CVE-2026-46276.md) | Routine | bpftool: drm/amdgpu: fix zero-size GDS range init on RDNA4 (Arjan van de Ven) [Orabug: 39524543] | 5.5 | 0.0012 |  |
| [CVE-2026-52916](https://patchblox.com/security/data/cve/CVE-2026-52916.md) | Routine | batman-adv: frag: disallow unicast fragment in fragment | 5.5 | 0.0012 |  |
| [CVE-2026-52995](https://patchblox.com/security/data/cve/CVE-2026-52995.md) | Routine | kernel-64kb: net/rds: zero per-item info buffer before handing it to visitors (bsc#1269124). | 5.5 | 0.0012 |  |
| [CVE-2026-53135](https://patchblox.com/security/data/cve/CVE-2026-53135.md) | Routine | drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs | 5.5 | 0.0012 |  |
| [CVE-2026-53139](https://patchblox.com/security/data/cve/CVE-2026-53139.md) | Routine | drm/v3d: Skip CSD when it has zeroed workgroups | 5.5 | 0.0012 |  |
| [CVE-2026-53158](https://patchblox.com/security/data/cve/CVE-2026-53158.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-53213](https://patchblox.com/security/data/cve/CVE-2026-53213.md) | Routine | drm/vc4: fix krealloc() memory leak | 5.5 | 0.0012 |  |
| [CVE-2026-53237](https://patchblox.com/security/data/cve/CVE-2026-53237.md) | Routine | gpio: mvebu: fix NULL pointer dereference in suspend/resume | 5.5 | 0.0012 |  |
| [CVE-2026-43017](https://patchblox.com/security/data/cve/CVE-2026-43017.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 6.1 | 0.0012 |  |
| [CVE-2026-31439](https://patchblox.com/security/data/cve/CVE-2026-31439.md) | Routine | dmaengine: xilinx: xdma: Fix regmap init error handling | 5.5 | 0.0012 |  |
| [CVE-2026-31440](https://patchblox.com/security/data/cve/CVE-2026-31440.md) | Routine | dmaengine: idxd: Fix leaking event log memory | 5.5 | 0.0012 |  |
| [CVE-2026-31561](https://patchblox.com/security/data/cve/CVE-2026-31561.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-31765](https://patchblox.com/security/data/cve/CVE-2026-31765.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43092](https://patchblox.com/security/data/cve/CVE-2026-43092.md) | Routine | kernel-64kb: xsk: validate MTU against usable frame size on bind (bsc#1264270). | 5.5 | 0.0012 |  |
| [CVE-2026-43243](https://patchblox.com/security/data/cve/CVE-2026-43243.md) | Routine | drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src | 5.5 | 0.0012 |  |
| [CVE-2026-43300](https://patchblox.com/security/data/cve/CVE-2026-43300.md) | Routine | drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove() | 5.5 | 0.0012 |  |
| [CVE-2026-43318](https://patchblox.com/security/data/cve/CVE-2026-43318.md) | Routine | drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify | 5.5 | 0.0012 |  |
| [CVE-2026-43320](https://patchblox.com/security/data/cve/CVE-2026-43320.md) | Routine | drm/amd/display: Fix dsc eDP issue | 5.5 | 0.0012 |  |
| [CVE-2026-43395](https://patchblox.com/security/data/cve/CVE-2026-43395.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43397](https://patchblox.com/security/data/cve/CVE-2026-43397.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43444](https://patchblox.com/security/data/cve/CVE-2026-43444.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-45921](https://patchblox.com/security/data/cve/CVE-2026-45921.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-45976](https://patchblox.com/security/data/cve/CVE-2026-45976.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-46016](https://patchblox.com/security/data/cve/CVE-2026-46016.md) | Routine | remoteproc: xlnx: Only access buffer information if IPI is buffered | 5.5 | 0.0012 |  |
| [CVE-2026-46286](https://patchblox.com/security/data/cve/CVE-2026-46286.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-53013](https://patchblox.com/security/data/cve/CVE-2026-53013.md) | Routine | macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF | 5.5 | 0.0012 |  |
| [CVE-2026-53140](https://patchblox.com/security/data/cve/CVE-2026-53140.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-53144](https://patchblox.com/security/data/cve/CVE-2026-53144.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-53190](https://patchblox.com/security/data/cve/CVE-2026-53190.md) | Routine | drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait() | 5.5 | 0.0012 |  |
| [CVE-2026-53285](https://patchblox.com/security/data/cve/CVE-2026-53285.md) | Routine | kernel-64kb: drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED (bsc#1269527). | 5.5 | 0.0012 |  |
| [CVE-2026-43496](https://patchblox.com/security/data/cve/CVE-2026-43496.md) | Routine | net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked | 5.5 | 0.0012 |  |
| [CVE-2026-53274](https://patchblox.com/security/data/cve/CVE-2026-53274.md) | Routine | net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS | 5.5 | 0.0012 |  |
| [CVE-2026-53339](https://patchblox.com/security/data/cve/CVE-2026-53339.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  i2c: qcom-cci: Fix NULL pointer dereference in c... | 5.5 | 0.0012 |  |
| [CVE-2026-53347](https://patchblox.com/security/data/cve/CVE-2026-53347.md) | Routine | drm/virtio: Fix driver removal with disabled KMS | 5.5 | 0.0012 |  |
| [CVE-2026-53350](https://patchblox.com/security/data/cve/CVE-2026-53350.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: wm_adsp: Fix NULL dereference when removin... | 5.5 | 0.0012 |  |
| [CVE-2026-31726](https://patchblox.com/security/data/cve/CVE-2026-31726.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-46220](https://patchblox.com/security/data/cve/CVE-2026-46220.md) | Routine | bpftool: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (John B | 5.5 | 0.0012 |  |
| [CVE-2026-46225](https://patchblox.com/security/data/cve/CVE-2026-46225.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-46235](https://patchblox.com/security/data/cve/CVE-2026-46235.md) | Routine | media: saa7164: add ioremap return checks and cleanups | 5.5 | 0.0012 |  |
| [CVE-2026-46236](https://patchblox.com/security/data/cve/CVE-2026-46236.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-31651](https://patchblox.com/security/data/cve/CVE-2026-31651.md) | Routine | mmc: vub300: fix NULL-deref on disconnect | 5.5 | 0.0012 |  |
| [CVE-2026-31701](https://patchblox.com/security/data/cve/CVE-2026-31701.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-53080](https://patchblox.com/security/data/cve/CVE-2026-53080.md) | Routine | net/sched: cls_fw: fix NULL dereference of "old" filters before change() | 5.5 | 0.0012 |  |
| [CVE-2026-46249](https://patchblox.com/security/data/cve/CVE-2026-46249.md) | Routine | kernel-64kb: octeontx2-af: Fix PF driver crash with kexec kernel booting (bsc#1267683). | 5.5 | 0.0012 |  |
| [CVE-2026-46314](https://patchblox.com/security/data/cve/CVE-2026-46314.md) | Routine | drm/v3d: Reject empty multisync extension to prevent infinite loop | 5.5 | 0.0012 |  |
| [CVE-2026-53313](https://patchblox.com/security/data/cve/CVE-2026-53313.md) | Routine | drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths | 5.5 | 0.0012 |  |
| [CVE-2026-31660](https://patchblox.com/security/data/cve/CVE-2026-31660.md) | Routine | nfc: pn533: allocate rx skb before consuming bytes | 5.5 | 0.0011 |  |
| [CVE-2026-31661](https://patchblox.com/security/data/cve/CVE-2026-31661.md) | Routine | wifi: brcmsmac: Fix dma_free_coherent() size | 5.5 | 0.0011 |  |
| [CVE-2026-31672](https://patchblox.com/security/data/cve/CVE-2026-31672.md) | Routine | wifi: rt2x00usb: fix devres lifetime | 5.5 | 0.0011 |  |
| [CVE-2026-43043](https://patchblox.com/security/data/cve/CVE-2026-43043.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43064](https://patchblox.com/security/data/cve/CVE-2026-43064.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43069](https://patchblox.com/security/data/cve/CVE-2026-43069.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43072](https://patchblox.com/security/data/cve/CVE-2026-43072.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43105](https://patchblox.com/security/data/cve/CVE-2026-43105.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43264](https://patchblox.com/security/data/cve/CVE-2026-43264.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43269](https://patchblox.com/security/data/cve/CVE-2026-43269.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43270](https://patchblox.com/security/data/cve/CVE-2026-43270.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43277](https://patchblox.com/security/data/cve/CVE-2026-43277.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43337](https://patchblox.com/security/data/cve/CVE-2026-43337.md) | Routine | kernel-64kb: drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() (bsc#1265112). | 5.5 | 0.0011 |  |
| [CVE-2026-43340](https://patchblox.com/security/data/cve/CVE-2026-43340.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43343](https://patchblox.com/security/data/cve/CVE-2026-43343.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43346](https://patchblox.com/security/data/cve/CVE-2026-43346.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43467](https://patchblox.com/security/data/cve/CVE-2026-43467.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43473](https://patchblox.com/security/data/cve/CVE-2026-43473.md) | Routine | kernel-64kb: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731). | 5.5 | 0.0011 |  |
| [CVE-2026-43480](https://patchblox.com/security/data/cve/CVE-2026-43480.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43488](https://patchblox.com/security/data/cve/CVE-2026-43488.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-46103](https://patchblox.com/security/data/cve/CVE-2026-46103.md) | Routine | can: ucan: fix devres lifetime | 5.5 | 0.0011 |  |
| [CVE-2026-46261](https://patchblox.com/security/data/cve/CVE-2026-46261.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-46312](https://patchblox.com/security/data/cve/CVE-2026-46312.md) | Routine | media: videobuf2: Set vma_flags in vb2_dma_sg_mmap | 5.5 | 0.0011 |  |
| [CVE-2026-46313](https://patchblox.com/security/data/cve/CVE-2026-46313.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-52904](https://patchblox.com/security/data/cve/CVE-2026-52904.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-52936](https://patchblox.com/security/data/cve/CVE-2026-52936.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2025-71274](https://patchblox.com/security/data/cve/CVE-2025-71274.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 |  |
| [CVE-2026-46165](https://patchblox.com/security/data/cve/CVE-2026-46165.md) | Routine | openvswitch: vport: fix self-deadlock on release of tunnel ports | 5.5 | 0.0010 |  |
| [CVE-2023-20585](https://patchblox.com/security/data/cve/CVE-2023-20585.md) | Routine | AMD: CVE-2023-20585 IOMMU Write Buffer Vulnerability | 5.3 | 0.0010 |  |
| [CVE-2026-46051](https://patchblox.com/security/data/cve/CVE-2026-46051.md) | Routine | md/raid5: fix soft lockup in retry_aligned_read() | 5.5 | 0.0010 |  |
| [CVE-2026-31687](https://patchblox.com/security/data/cve/CVE-2026-31687.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 |  |
| [CVE-2026-31509](https://patchblox.com/security/data/cve/CVE-2026-31509.md) | Routine | nfc: nci: fix circular locking dependency in nci_close_device | 5.5 | 0.0010 |  |
| [CVE-2026-31756](https://patchblox.com/security/data/cve/CVE-2026-31756.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 |  |
| [CVE-2026-43147](https://patchblox.com/security/data/cve/CVE-2026-43147.md) | Routine | kernel-default: Revert 'PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV' (bsc#1264642). | 5.5 | 0.0010 |  |
| [CVE-2026-43327](https://patchblox.com/security/data/cve/CVE-2026-43327.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 |  |

Showing 500 of 513 CVEs; the web page lists them all.

---

Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.