{ "fix": "ALAS2023-2026-1494", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1494", "summary": "ALAS2023-2026-1494, released March 16, 2026, fixes 67 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 22 packages", "released": "2026-03-16T09:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2025-68814, rated Critical", "supported": true, "cveCount": 67, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00712, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1494.html", "appliesTo": [ { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "bpftool-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel", "productUrl": "https://patchblox.com/security/product/linux/kernel", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel-headers", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-libbpf", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-libbpf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-libbpf-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-libbpf-static", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.1.161-183.298", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.161-183.298", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "kernel-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "perf", "productUrl": "https://patchblox.com/security/product/linux/perf", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "python3-perf", "productUrl": "https://patchblox.com/security/product/linux/python3-perf", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true }, { "product": "python3-perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.161-183.298.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2025-68814", "url": "https://patchblox.com/security/cve/CVE-2025-68814", "title": "io_uring: fix filename leak in __io_openat_prep()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68366", "url": "https://patchblox.com/security/cve/CVE-2025-68366", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect Th...", "priority": "Urgent", "severity": "Critical", "cvss": 8.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71098", "url": "https://patchblox.com/security/cve/CVE-2025-71098", "title": "ip6_gre: make ip6gre_header() robust", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68349", "url": "https://patchblox.com/security/cve/CVE-2025-68349", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00712, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68782", "url": "https://patchblox.com/security/cve/CVE-2025-68782", "title": "scsi: target: Reset t_task_cdb pointer in error case", "priority": "High", "severity": "Important", "cvss": 8.6, "epss": 0.00693, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68261", "url": "https://patchblox.com/security/cve/CVE-2025-68261", "title": "ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68337", "url": "https://patchblox.com/security/cve/CVE-2025-68337", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_ac...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71120", "url": "https://patchblox.com/security/cve/CVE-2025-71120", "title": "SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00529, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71116", "url": "https://patchblox.com/security/cve/CVE-2025-71116", "title": "libceph: make decode_pool() more resilient against corrupted osdmaps", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00458, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68803", "url": "https://patchblox.com/security/cve/CVE-2025-68803", "title": "NFSD: NFSv4 file creation neglects setting ACL", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00448, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-22984", "url": "https://patchblox.com/security/cve/CVE-2026-22984", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nlibceph: prevent potential out-of-bounds reads in...", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00407, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-22990", "url": "https://patchblox.com/security/cve/CVE-2026-22990", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nlibceph: replace overzealous BUG_ON in osdmap_app...", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00403, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71085", "url": "https://patchblox.com/security/cve/CVE-2025-71085", "title": "kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: i...", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00305, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71093", "url": "https://patchblox.com/security/cve/CVE-2025-71093", "title": "e1000: fix OOB in e1000_tbi_should_accept()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00293, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38129", "url": "https://patchblox.com/security/cve/CVE-2025-38129", "title": "page_pool: Fix use-after-free in page_pool_recycle_in_ring", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68371", "url": "https://patchblox.com/security/cve/CVE-2025-68371", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix device resources accessed af...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68325", "url": "https://patchblox.com/security/cve/CVE-2025-68325", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_cake: Fix incorrect qlen reductio...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-22977", "url": "https://patchblox.com/security/cve/CVE-2026-22977", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: sock: fix hardened usercopy panic in sock_r...", "priority": "High", "severity": "medium", "cvss": 9.8, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68727", "url": "https://patchblox.com/security/cve/CVE-2025-68727", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: Fix uninit buffer allocated by __getname(...", "priority": "High", "severity": "important", "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68728", "url": "https://patchblox.com/security/cve/CVE-2025-68728", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix uninit memory after failed mi_read in...", "priority": "High", "severity": "important", "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40149", "url": "https://patchblox.com/security/cve/CVE-2025-40149", "title": "tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68795", "url": "https://patchblox.com/security/cve/CVE-2025-68795", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on s...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71123", "url": "https://patchblox.com/security/cve/CVE-2025-71123", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix string copying in parse_apply_sb_mount...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68764", "url": "https://patchblox.com/security/cve/CVE-2025-68764", "title": "NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68785", "url": "https://patchblox.com/security/cve/CVE-2025-68785", "title": "net: openvswitch: fix middle attribute validation in push_nsh() action", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40215", "url": "https://patchblox.com/security/cve/CVE-2025-40215", "title": "xfrm: delete x-\u003Etunnel as we delete x", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71130", "url": "https://patchblox.com/security/cve/CVE-2025-71130", "title": "drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71113", "url": "https://patchblox.com/security/cve/CVE-2025-71113", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ncrypto: af_alg - zero initialize memory allocated...", "priority": "High", "severity": "low", "cvss": 7.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-22980", "url": "https://patchblox.com/security/cve/CVE-2026-22980", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71091", "url": "https://patchblox.com/security/cve/CVE-2025-71091", "title": "team: fix check for port enabled in team_queue_override_port_prio_changed()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71147", "url": "https://patchblox.com/security/cve/CVE-2025-71147", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nKEYS: trusted: Fix a memory leak in tpm2_load_cmd...", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68724", "url": "https://patchblox.com/security/cve/CVE-2025-68724", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in as...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-22979", "url": "https://patchblox.com/security/cve/CVE-2026-22979", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: fix memory leak in skb_segment_list for GRO...", "priority": "High", "severity": "medium", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71096", "url": "https://patchblox.com/security/cve/CVE-2025-71096", "title": "RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-22991", "url": "https://patchblox.com/security/cve/CVE-2026-22991", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: make free_choose_arg_map() resilient to...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-22992", "url": "https://patchblox.com/security/cve/CVE-2026-22992", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: return the handler error from mon_handl...", "priority": "Routine", "severity": "medium", "cvss": 6.5, "epss": 0.00449, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71183", "url": "https://patchblox.com/security/cve/CVE-2025-71183", "title": "btrfs: always detect conflicting inodes when logging inode refs", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00316, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71131", "url": "https://patchblox.com/security/cve/CVE-2025-71131", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ncrypto: seqiv - Do not use req-\u003Eiv after crypto_a...", "priority": "Routine", "severity": "moderate", "cvss": 5.5, "epss": 0.00305, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68788", "url": "https://patchblox.com/security/cve/CVE-2025-68788", "title": "fsnotify: do not generate ACCESS/MODIFY events on child for special files", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71126", "url": "https://patchblox.com/security/cve/CVE-2025-71126", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid deadlock on fallback while reinject...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00265, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68816", "url": "https://patchblox.com/security/cve/CVE-2025-68816", "title": "net/mlx5: fw_tracer, Validate format string parameters", "priority": "Routine", "severity": "Moderate", "cvss": 6.6, "epss": 0.00235, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68820", "url": "https://patchblox.com/security/cve/CVE-2025-68820", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4_raw_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00235, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68264", "url": "https://patchblox.com/security/cve/CVE-2025-68264", "title": "ext4: refresh inline data size before write operations", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00224, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68742", "url": "https://patchblox.com/security/cve/CVE-2025-68742", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix invalid prog-\u003Estats access when update_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.8, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68363", "url": "https://patchblox.com/security/cve/CVE-2025-68363", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Check skb-\u003Etransport_header is set in bpf_s...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68798", "url": "https://patchblox.com/security/cve/CVE-2025-68798", "title": "perf/x86/amd: Check event before enable to avoid GPF", "priority": "Routine", "severity": "Moderate", "cvss": 5.8, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68740", "url": "https://patchblox.com/security/cve/CVE-2025-68740", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ima: Handle error code returned by ima_filter_ru...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68780", "url": "https://patchblox.com/security/cve/CVE-2025-68780", "title": "sched/deadline: only set free_cpus for online runqueues", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68813", "url": "https://patchblox.com/security/cve/CVE-2025-68813", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error pat...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68821", "url": "https://patchblox.com/security/cve/CVE-2025-68821", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: fix readahead reclaim deadlock Commit e26...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40110", "url": "https://patchblox.com/security/cve/CVE-2025-40110", "title": "drm/vmwgfx: Fix a null-ptr access in the cursor snooper", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68778", "url": "https://patchblox.com/security/cve/CVE-2025-68778", "title": "btrfs: don\u0027t log conflicting inode if it\u0027s a dir moved in the current transaction", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68372", "url": "https://patchblox.com/security/cve/CVE-2025-68372", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config put in recv_work There is one...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68259", "url": "https://patchblox.com/security/cve/CVE-2025-68259", "title": "KVM: SVM: Don\u0027t skip unrelated instruction if INT3/INTO is replaced", "priority": "Routine", "severity": "Moderate", "cvss": 6.2, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23047", "url": "https://patchblox.com/security/cve/CVE-2026-23047", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: make calc_target() set t-\u003Epaused, not j...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-22976", "url": "https://patchblox.com/security/cve/CVE-2026-22976", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix NULL deref when deactiva...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71118", "url": "https://patchblox.com/security/cve/CVE-2025-71118", "title": "ACPICA: Avoid walking the Namespace if start_node is NULL", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71125", "url": "https://patchblox.com/security/cve/CVE-2025-71125", "title": "tracing: Do not register unsupported perf events", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71077", "url": "https://patchblox.com/security/cve/CVE-2025-71077", "title": "tpm: Cap the number of PCR banks", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23140", "url": "https://patchblox.com/security/cve/CVE-2026-23140", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, test_run: Subtract size of xdp_frame from a...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71088", "url": "https://patchblox.com/security/cve/CVE-2025-71088", "title": "mptcp: fallback earlier on simult connection", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71097", "url": "https://patchblox.com/security/cve/CVE-2025-71097", "title": "ipv4: Fix reference count leak when using error routes with nexthop objects", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-22994", "url": "https://patchblox.com/security/cve/CVE-2026-22994", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference count leak in bpf_prog_test_r...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71083", "url": "https://patchblox.com/security/cve/CVE-2025-71083", "title": "drm/ttm: Avoid NULL pointer deref for evicted BOs", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71084", "url": "https://patchblox.com/security/cve/CVE-2025-71084", "title": "RDMA/cm: Fix leaking the multicast GID table reference", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71104", "url": "https://patchblox.com/security/cve/CVE-2025-71104", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged ina...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71149", "url": "https://patchblox.com/security/cve/CVE-2025-71149", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: correctly handle io_poll_add() re...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T20:03:11Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }