# CVE-2026-97438: fs/ntfs3: validate index entry key bounds

CVE-2026-97438 is fixed in 95 products on 1 platform, first by DEBIAN-CVE-2026-97438, released September 24, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-97438
- Priority: High
- CVSS: 7.1 (Moderate)
- EPSS: 0.0013
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 24, 2026
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-97438

## Description

In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: validate index entry key bounds  [BUG] A malformed NTFS directory index entry can advertise a key_size larger than the bytes actually present in its NTFS_DE payload. Directory lookup then passes that malformed key to cmp_fnames(), which can read past the end of the kmalloc'ed index buffer.  BUG: KASAN: slab-out-of-bounds in fname_full_size fs/ntfs3/ntfs.h:590 [inline] BUG: KASAN: slab-out-of-bounds in cmp_fnames+0x1ea/0x230 fs/ntfs3/index.c:46 Read of size 1 at addr ffff88801c313018 by task syz.6.3365/9279  Call Trace:  __dump_stack lib/dump_stack.c:94 [inline]  dump_stack_lvl+0xbe/0x130 lib/dump_stack.c:120  print_address_description mm/kasan/report.c:378 [inline]  print_report+0xd1/0x650 mm/kasan/report.c:482  kasan_report+0xfb/0x140 mm/kasan/report.c:595  __asan_report_load1_noabort+0x14/0x30 mm/kasan/report_generic.c:378  fname_full_size fs/ntfs3/ntfs.h:590 [inline]  cmp_fnames+0x1ea/0x230 fs/ntfs3/index.c:46  hdr_find_e.isra.0+0x3ed/0x670 fs/ntfs3/index.c:762  indx_find+0x4b5/0x900 fs/ntfs3/index.c:1186  dir_search_u+0x2c0/0x460 fs/ntfs3/dir.c:254  ntfs_lookup+0x1cc/0x2a0 fs/ntfs3/namei.c:85  __lookup_slow+0x241/0x450 fs/namei.c:1816  lookup_slow fs/namei.c:1833 [inline]  walk_component+0x31c/0x570 fs/namei.c:2151  link_path_walk+0x592/0xd60 fs/namei.c:2519  path_lookupat+0x138/0x660 fs/namei.c:2675  filename_lookup+0x1f3/0x560 fs/namei.c:2705  filename_setxattr+0xad/0x1c0 fs/xattr.c:660  path_setxattrat+0x1d8/0x280 fs/xattr.c:713  __do_sys_lsetxattr fs/xattr.c:754 [inline]  __se_sys_lsetxattr fs/xattr.c:750 [inline]  __x64_sys_lsetxattr+0xd0/0x150 fs/xattr.c:750  ...  Allocated by task 9279:  kasan_save_stack+0x39/0x70 mm/kasan/common.c:56  kasan_save_track+0x14/0x40 mm/kasan/common.c:77  kasan_save_alloc_info+0x37/0x60 mm/kasan/generic.c:573  poison_kmalloc_redzone mm/kasan/common.c:400 [inline]  __kasan_kmalloc+0xc3/0xd0 mm/kasan/common.c:417  kasan_kmalloc include/linux/kasan.h:262 [inline]  __do_kmalloc_node mm/slub.c:5650 [inline]  __kmalloc_noprof+0x2bd/0x900 mm/slub.c:5662  kmalloc_noprof include/linux/slab.h:961 [inline]  indx_read+0x41d/0xad0 fs/ntfs3/index.c:1059  indx_find+0x447/0x900 fs/ntfs3/index.c:1179  dir_search_u+0x2c0/0x460 fs/ntfs3/dir.c:254  ntfs_lookup+0x1cc/0x2a0 fs/ntfs3/namei.c:85  __lookup_slow+0x241/0x450 fs/namei.c:1816  lookup_slow fs/namei.c:1833 [inline]  walk_component+0x31c/0x570 fs/namei.c:2151  link_path_walk+0x592/0xd60 fs/namei.c:2519  path_lookupat+0x138/0x660 fs/namei.c:2675  filename_lookup+0x1f3/0x560 fs/namei.c:2705  filename_setxattr+0xad/0x1c0 fs/xattr.c:660  path_setxattrat+0x1d8/0x280 fs/xattr.c:713  __do_sys_lsetxattr fs/xattr.c:754 [inline]  __se_sys_lsetxattr fs/xattr.c:750 [inline]  __x64_sys_lsetxattr+0xd0/0x150 fs/xattr.c:750  ...  [CAUSE] The index-header validators only validated INDEX_HDR-level geometry. They did not walk each NTFS_DE to verify entry alignment, subnode layout, or that key_size fit inside the entry payload. They also allowed a last sentinel entry to carry a non-zero key_size.  [FIX] Walk every NTFS_DE in ntfs3's index-header validators and reject entries with invalid layout, mismatched subnode state, oversized key_size, or non-zero sentinel keys before lookup or log replay can consume them.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | bpftool amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | bpftool ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | bpftool ol 9 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | bpftool-debuginfo amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | bpftool6.12 amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | bpftool6.12-debuginfo amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | bpftool6.18 amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | bpftool6.18-debuginfo amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | kernel amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | kernel-debuginfo amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | kernel-debuginfo-common-aarch64 amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | kernel-debuginfo-common-x86_64 amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | kernel-devel amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | kernel-headers amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | kernel-livepatch-6.1.189-236.399 amzn 2023 | 1:1.0-0.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | kernel-livepatch-6.12.111-136.204 amzn 2023 | 1:1.0-0.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | kernel-livepatch-6.18.54-121.166 amzn 2023 | 1:1.0-0.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | kernel-modules-extra amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | kernel-modules-extra-common amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | kernel-tools amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | kernel-tools-debuginfo amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | kernel-tools-devel amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | kernel-uek ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-container ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-container ol 9 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-container-debug ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-container-debug ol 9 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-core ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-core ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-core ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-debug ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-core ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-core ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-debug-core ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-devel ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-devel ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-debug-devel ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-debug-modules ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-core ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-core ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-deprecated ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-deprecated ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-desktop ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-desktop ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-extra ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-extra ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-debug-modules-extra ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-extra-netfilter ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-extra-netfilter ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-usb ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-usb ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-wireless ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-debug-modules-wireless ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-devel ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-devel ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-devel ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-doc ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-doc ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-doc ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-modules ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-core ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-core ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-deprecated ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-deprecated ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-desktop ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-desktop ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-extra ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-extra ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek-modules-extra ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-extra-netfilter ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-extra-netfilter ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-usb ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-usb ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-wireless ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-modules-wireless ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-tools ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek-tools ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek64k ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-core ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-core ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek64k-core ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-devel ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-devel ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek64k-devel ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek64k-modules ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-core ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-core ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-deprecated ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-deprecated ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-desktop ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-desktop ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-extra ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-extra ol 8 | 0:5.15.0-325.221.6.2.el9uek | [ELSA-2026-500385](https://patchblox.com/security/data/fix/linux/elsa-2026-500385.md) | Nov 7, 2026 |
| Linux | kernel-uek64k-modules-extra ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-extra-netfilter ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-extra-netfilter ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-usb ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-usb ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-wireless ol 10 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel-uek64k-modules-wireless ol 9 | 0:6.12.0-207.111.5.1.el9uek | [ELSA-2026-500374](https://patchblox.com/security/data/fix/linux/elsa-2026-500374.md) | Oct 7, 2026 |
| Linux | kernel6.12 amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | kernel6.12-debuginfo amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | kernel6.12-debuginfo-common-aarch64 amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | kernel6.12-debuginfo-common-x86_64 amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | kernel6.12-devel amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | kernel6.12-headers amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | kernel6.12-modules-extra amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | kernel6.12-modules-extra-common amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | kernel6.12-tools amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | kernel6.12-tools-debuginfo amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | kernel6.12-tools-devel amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | kernel6.18 amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | kernel6.18-debuginfo amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | kernel6.18-debuginfo-common-aarch64 amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | kernel6.18-debuginfo-common-x86_64 amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | kernel6.18-devel amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | kernel6.18-headers amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | kernel6.18-modules-extra amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | kernel6.18-modules-extra-common amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | kernel6.18-tools amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | kernel6.18-tools-debuginfo amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | kernel6.18-tools-devel amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | linux Debian 12.15 (bookworm) | 6.1.190-1 | [DEBIAN-CVE-2026-97438](https://patchblox.com/security/data/fix/linux/debian-cve-2026-97438.md) | Sep 24, 2026 |
| Linux | linux Debian 13.5 (trixie) | 6.12.111-1 | [DEBIAN-CVE-2026-97438](https://patchblox.com/security/data/fix/linux/debian-cve-2026-97438.md) | Sep 24, 2026 |
| Linux | linux Debian 14 | 7.2.6-1 | [DEBIAN-CVE-2026-97438](https://patchblox.com/security/data/fix/linux/debian-cve-2026-97438.md) | Sep 24, 2026 |
| Linux | linux-6.12 Debian 12.15 (bookworm) | 6.12.111-1~deb12u1 | [DEBIAN-CVE-2026-97438](https://patchblox.com/security/data/fix/linux/debian-cve-2026-97438.md) | Sep 24, 2026 |
| Linux | microvm-kernel amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | microvm-kernel6.18 amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | perf amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | perf-debuginfo amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | perf6.12 amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | perf6.12-debuginfo amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | perf6.18 amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | perf6.18-debuginfo amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | python3-perf amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | python3-perf-debuginfo amzn 2023 | 1:6.1.189-236.399.amzn2023 | [ALAS2023-2026-3336](https://patchblox.com/security/data/fix/linux/alas2023-2026-3336.md) | Nov 7, 2026 |
| Linux | python3-perf6.12 amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | python3-perf6.12-debuginfo amzn 2023 | 1:6.12.111-136.204.amzn2023 | [ALAS2023-2026-3193](https://patchblox.com/security/data/fix/linux/alas2023-2026-3193.md) | Nov 7, 2026 |
| Linux | python3-perf6.18 amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |
| Linux | python3-perf6.18-debuginfo amzn 2023 | 1:6.18.54-121.166.amzn2023 | [ALAS2023-2026-3192](https://patchblox.com/security/data/fix/linux/alas2023-2026-3192.md) | Nov 7, 2026 |

---

Data as of 2026-11-09T07:25:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
