{ "cveId": "CVE-2026-74677", "url": "https://patchblox.com/security/cve/CVE-2026-74677", "summary": "CVE-2026-74677 is fixed in 47 products on 1 platform, first by DEBIAN-CVE-2026-74677, released August 27, 2026. It is not reported as exploited. Patch Radar priority: High.", "title": "net: usb: ipheth: fix carrier_work UAF on disconnect", "description": "In the Linux kernel, the following vulnerability has been resolved: net: usb: ipheth: fix carrier_work UAF on disconnect ipheth_sndbulk_callback() re-arms the carrier-check work on any non-zero URB status: \telse \t\tschedule_delayed_work(\u0026dev-\u003Ecarrier_work, 0); Nothing ties that to the interface being up, so the work can be armed again after ipheth_close() has already drained it, and stay armed until the netdev whose private area embeds it is freed. On unplug with a TX URB in flight, ipheth_disconnect() drains the work through unregister_netdev() -\u003E ipheth_close() -\u003E cancel_delayed_work_sync() and only then calls ipheth_kill_urbs(). usb_kill_urb() completes the in-flight TX URB with -ENOENT, so ipheth_sndbulk_callback() runs after the drain and re-arms carrier_work. The same completion also re-arms the work if the interface is only brought down while a TX URB is in flight, and ipheth_carrier_check_work() then keeps re-queueing itself once a second. unregister_netdev() does not call ipheth_close() for an already-down interface, so nothing drains it on the later unplug either. In both cases free_netdev() frees the netdev while carrier_work is still pending, and ipheth_carrier_check_work() dereferences freed memory. Tie the work to the interface state instead of chasing the completion: disable it in ipheth_close() and enable it in ipheth_open(), so a schedule_delayed_work() from the URB completion is a no-op whenever the interface is not up. disable_delayed_work_sync() also waits for a running instance, so it fully replaces the cancel_delayed_work_sync() it takes the place of. The work starts out disabled in ipheth_probe() so the enable/disable counts balance from the first open. Reproduced under KASAN on linux-next (next-20260731) with dummy_hcd and raw-gadget standing in for the device, driving the second path above (the interface is already down, so unregister_netdev() does not call ipheth_close()): 15 of 15 unpatched boots report a slab-use-after-free in __run_timers(), freed by ipheth_disconnect() and re-armed from ipheth_sndbulk_callback() via queue_delayed_work_on(). The same trigger on a kernel differing only by this patch reports 0 of 15, and the carrier check still functions across open/close cycles. The reproducer needs an attached USB device that stops draining bulk OUT, plus a link down and unplug, driven as root. It is not a privilege boundary crossing and no exploit primitive was developed. Found by 0sec (https://0sec.ai).", "published": "2026-08-22T16:16:41Z", "severity": "Moderate", "cvss": 7, "epss": 0.00168, "epssPercentile": 0.06112, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74677", "fixes": [ { "platform": "linux", "product": "kernel-64kb", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1.150700.17.51.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP7_Update_24", "release": "sles 15.7", "fixedVersion": "1-150700.15.3.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "released": "2026-09-04T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.12.105-1", "fix": "DEBIAN-CVE-2026-74677", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-74677", "released": "2026-08-27T00:27:02Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "7.1.9-1", "fix": "DEBIAN-CVE-2026-74677", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-74677", "released": "2026-08-27T00:27:02Z" }, { "platform": "linux", "product": "linux-6.12", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.12.107-1~deb12u1", "fix": "DEBIAN-CVE-2026-74677", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-74677", "released": "2026-08-27T00:27:02Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T13:06:02Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }