{
  "cveId": "CVE-2026-98507",
  "url": "https://patchblox.com/security/cve/CVE-2026-98507",
  "summary": "CVE-2026-98507 is fixed in 74 products on 1 platform, first by DEBIAN-CVE-2026-98507, released October 19, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "mm/rmap: fix missing barrier between anon_vma init and vma-\u003Eanon_vma publish",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  mm/rmap: fix missing barrier between anon_vma init and vma-\u003Eanon_vma publish  On arm64 server, we find that a task trying to grab the anon_vma lock triggers hungtask.  INFO: task main:2354726 blocked for more than 120 seconds.       Tainted: G            E     5.10.0-0021.aarch64 #1 \u0022echo 0 \u003E /proc/sys/kernel/hung_task_timeout_secs\u0022 disables this message. task:main            state:D stack:    0 pid:2354726 ppid:2350673 flags:0x00000a01 Call trace:  __switch_to\u002B0x7c/0xbc  __schedule\u002B0x3b4/0x8a0  schedule\u002B0x50/0xe0  rwsem_down_write_slowpath\u002B0x3cc/0x6cc  down_write\u002B0x60/0x260  __anon_vma_prepare\u002B0x6c/0x210  do_anonymous_page\u002B0x258/0x660  handle_pte_fault\u002B0x188/0x214  __handle_mm_fault\u002B0x1b0/0x380  handle_mm_fault\u002B0xf4/0x284  do_page_fault\u002B0x19c/0x494  do_translation_fault\u002B0xcc/0xf8  do_mem_abort\u002B0x48/0xac  el0_da\u002B0x44/0x80  el0_sync_handler\u002B0x88/0xb4  el0_sync\u002B0x160/0x180  After analyzing the vmcore, we found the anon_vma-\u003Eroot-\u003Erwsem.count is -1.  There is another anon_vma whose anon_vma-\u003Eroot-\u003Erwsem.count is 1, the anon_vma-\u003Eroot-\u003Erwsem.owner shows the lock is held, but the stack of the task shows the task doesn\u0027t hold the anon_vma lock.  After adding more debugging info, we found __anon_vma_prepare() reuses anon_vma and triggers the UAF of anon_vma-\u003Eroot due to missing memory barrier, leading to locking and unlocking two different anon_vma-\u003Eroot, thus leading to an anon_vma will never be unlocked, and another anon_vma couldn\u0027t be locked anymore.  This race requires two adjacent VMAs that are not merged but are anon_vma-compatible (e.g., they differ in VMA_ACCESS_FLAGS that can be changed by mprotect()).  Two threads fault on each VMA concurrently, both calling __anon_vma_prepare() with only mmap_lock held for reading.      THREAD A                             THREAD B __anon_vma_prepare                __anon_vma_prepare  find_mergeable_anon_vma() -\u003E NULL  anon_vma = anon_vma_alloc();    anon_vma-\u003Eroot = anon_vma;  // the two stores may be reordered  vma-\u003Eanon_vma = anon_vma;                                    // finds A\u0027s anon_vma                                    anon_vma = find_mergeable_anon_vma(vma);                                    anon_vma_lock_write(anon_vma);                                      // may still see the old root                                      down_write(\u0026anon_vma-\u003Eroot-\u003Erwsem);                                    anon_vma_unlock_write(anon_vma);                                      // see the new root, never unlock old                                      up_write(\u0026anon_vma-\u003Eroot-\u003Erwsem);  thread A triggers page fault and calls __anon_vma_prepare() to prepare anon_vma for the faulting vma.  __anon_vma_prepare() allocates and initializes a new anon_vma, and then publishes it to the vma with a plain store.  anon_vma_prepare() only requires the mmap_lock to be held for reading, so two threads can fault on adjacent VMAs at the same time.  While thread A publishes a new anon_vma, thread B could find the anon_vma via find_mergeable_anon_vma() and then locks anon_vma-\u003Eroot-\u003Erwsem.  The store to anon_vma-\u003Eroot in anon_vma_alloc() and the store to vma-\u003Eanon_vma can be reordered.  The anon_vma_lock_write() and spin_lock() only provide acquire semantics, which do not prevent prior stores from being reordered after them.  The release semantics of the corresponding spin_unlock() and anon_vma_unlock_write() come too late, the store to vma-\u003Eanon_vma is already published before they take effect.  As a result, thread B can observe the following order:      vma-\u003Eanon_vma = anon_vma;     anon_vma-\u003Eroot = anon_vma;  The anon_vma slab is SLAB_TYPESAFE_BY_RCU, so a newly allocated anon_vma may reuse memory from a previously freed one.  The constructor (anon_vma_ctor) does not reset anon_vma-\u003Eroot, and __put_anon_vma() doesn\u0027t clear it either, so the old root value persists until anon_vma_alloc() overwrites it.  If that store isn\u0027t v ---truncated---",
  "published": "2026-10-18T16:17:01Z",
  "severity": "Moderate",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00165,
  "epssPercentile": 0.05714,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-98507",
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.12.113-138.209",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.18.56-125.164",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.113-1",
      "fix": "DEBIAN-CVE-2026-98507",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98507",
      "released": "2026-10-19T16:27:52Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.9-1",
      "fix": "DEBIAN-CVE-2026-98507",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98507",
      "released": "2026-10-19T16:27:52Z"
    },
    {
      "platform": "linux",
      "product": "linux-6.12",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.12.113-1~deb12u1",
      "fix": "DEBIAN-CVE-2026-98507",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-98507",
      "released": "2026-10-19T16:27:52Z"
    },
    {
      "platform": "linux",
      "product": "microvm-kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.56-125.164.amzn2023",
      "fix": "ALAS2023-2026-3251",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3251",
      "released": "2026-11-07T01:06:52Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}