{ "cveId": "CVE-2026-72338", "url": "https://patchblox.com/security/cve/CVE-2026-72338", "summary": "CVE-2026-72338 is fixed in 73 products on 1 platform, first by DEBIAN-CVE-2026-72338, released August 15, 2026. It is not reported as exploited. Patch Radar priority: High.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_pedit: fix TOCTOU heap OOB write...", "description": "In the Linux kernel, the following vulnerability has been resolved: net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload There is a TOCTOU race condition in flower lockless approach between sizing a flow_rule buffer and filling it. zdi-disclosures@trendmicro.com reports: The cls_flower classifier operates with TCF_PROTO_OPS_DOIT_UNLOCKED (fl_change runs without RTNL), while RTM_NEWACTION holds RTNL, so the independent locking domains make the race reachable in practice. KASAN confirms: BUG: KASAN: slab-out-of-bounds in tcf_pedit_offload_act_setup\u002B0x81b/0x930 Write of size 4 at addr ffff888001f27520 by task poc-toctou/312 The buggy address is located 0 bytes to the right of allocated 288-byte region [ffff888001f27400, ffff888001f27520) (cache kmalloc-512) Note: The result is a heap OOB write attacker-controlled content into the adjacent slab object (requires CAP_NET_ADMIN). The fix introduces reading tcfp_nkeys under act-\u003Etcfa_lock in all places using a new tcf_pedit_nkeys_locked() which replaces the old tcf_pedit_nkeys(). Additionally we close the remaining TOCTOU window between the sizing read and the fill reads by more careful accounting. Rather than silently truncating the key count, which leads to incorrect action semantics offloaded to hardware and secondary OOB writes if the remaining capacity is zero or consumed by prior actions, we enforce remaining capacity checks and return -ENOSPC if the required space exceeds the remaining capacity.", "published": "2026-08-15T06:22:07Z", "severity": "high", "cvss": 7.8, "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "epss": 0.00167, "epssPercentile": 0.05986, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "bpftool6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "bpftool6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "bpftool6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel-livepatch-6.12.100-125.179", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "kernel-livepatch-6.18.41-94.142", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-headers", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-tools", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "kernel6.12-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-headers", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-tools", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.12.100-1", "fix": "DEBIAN-CVE-2026-72338", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-72338", "released": "2026-08-15T22:38:55Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "7.1.5-1", "fix": "DEBIAN-CVE-2026-72338", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-72338", "released": "2026-08-15T22:38:55Z" }, { "platform": "linux", "product": "microvm-kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "python3-perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "python3-perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "released": "2026-08-17T09:00:00Z" }, { "platform": "linux", "product": "python3-perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "python3-perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-09T13:31:49Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }