{ "fix": "ALAS2023-2026-1543", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1543", "summary": "ALAS2023-2026-1543, released April 7, 2026, fixes 158 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 22 packages", "released": "2026-04-07T09:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-46266, rated Critical", "supported": true, "cveCount": 158, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.01045, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1543.html", "appliesTo": [ { "product": "bpftool6.12", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "bpftool6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.12.77-99.140", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.77-99.140", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel6.12", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-libbpf", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-libbpf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-libbpf-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-libbpf-static", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-libbpf-static", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "kernel6.12-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "perf6.12", "productUrl": "https://patchblox.com/security/product/linux/perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "perf6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "python3-perf6.12", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true }, { "product": "python3-perf6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.77-99.140.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-46266", "url": "https://patchblox.com/security/cve/CVE-2026-46266", "title": "kernel-default: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00465, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71305", "url": "https://patchblox.com/security/cve/CVE-2025-71305", "title": "drm/display/dp_mst: Add protection against 0 vcpi", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45899", "url": "https://patchblox.com/security/cve/CVE-2026-45899", "title": "ext4: drop extent cache when splitting extent fails", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23231", "url": "https://patchblox.com/security/cve/CVE-2026-23231", "title": "netfilter: nf_tables: fix use-after-free in nf_tables_addchain()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.01045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45860", "url": "https://patchblox.com/security/cve/CVE-2026-45860", "title": "kernel-64kb: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45859", "url": "https://patchblox.com/security/cve/CVE-2026-45859", "title": "netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00712, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43186", "url": "https://patchblox.com/security/cve/CVE-2026-43186", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00642, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43304", "url": "https://patchblox.com/security/cve/CVE-2026-43304", "title": "kernel-64kb: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00613, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23240", "url": "https://patchblox.com/security/cve/CVE-2026-23240", "title": "tls: Fix race condition in tls_sw_cancel_work_tx()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00563, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43194", "url": "https://patchblox.com/security/cve/CVE-2026-43194", "title": "kernel-64kb: net: consume xmit errors of GSO frames (bsc#1264304).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00533, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45898", "url": "https://patchblox.com/security/cve/CVE-2026-45898", "title": "kernel-64kb: RDMA/iwcm: Fix workqueue list corruption by removing work_list (bsc#1266888).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00529, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43226", "url": "https://patchblox.com/security/cve/CVE-2026-43226", "title": "kernel-64kb: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544).", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43230", "url": "https://patchblox.com/security/cve/CVE-2026-43230", "title": "kernel-64kb: net/rds: Clear reconnect pending bit (bsc#1264539).", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43158", "url": "https://patchblox.com/security/cve/CVE-2026-43158", "title": "kernel-64kb: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43187", "url": "https://patchblox.com/security/cve/CVE-2026-43187", "title": "kernel-64kb: xfs: delete attr leaf freemap entries when empty (bsc#1264603).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43190", "url": "https://patchblox.com/security/cve/CVE-2026-43190", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: xt_tcpmss: check remaining length befo...", "priority": "High", "severity": "moderate", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43233", "url": "https://patchblox.com/security/cve/CVE-2026-43233", "title": "kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43199", "url": "https://patchblox.com/security/cve/CVE-2026-43199", "title": "net/mlx5e: Fix \u0022scheduling while atomic\u0022 in IPsec MAC address query", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43139", "url": "https://patchblox.com/security/cve/CVE-2026-43139", "title": "kernel-64kb: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.6, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43253", "url": "https://patchblox.com/security/cve/CVE-2026-43253", "title": "kernel-64kb: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45972", "url": "https://patchblox.com/security/cve/CVE-2026-45972", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43215", "url": "https://patchblox.com/security/cve/CVE-2026-43215", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.0032, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43239", "url": "https://patchblox.com/security/cve/CVE-2026-43239", "title": "kernel-64kb: smb: client: prevent races in -\u003Equery_interfaces() (bsc#1264444).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45933", "url": "https://patchblox.com/security/cve/CVE-2026-45933", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45856", "url": "https://patchblox.com/security/cve/CVE-2026-45856", "title": "kernel-64kb: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (bsc#1266720).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23243", "url": "https://patchblox.com/security/cve/CVE-2026-23243", "title": "RDMA/umad: Reject negative data_len in ib_umad_write", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43153", "url": "https://patchblox.com/security/cve/CVE-2026-43153", "title": "xfs: remove xfs_attr_leaf_hasname", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43258", "url": "https://patchblox.com/security/cve/CVE-2026-43258", "title": "alpha: fix user-space corruption during memory compaction", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23383", "url": "https://patchblox.com/security/cve/CVE-2026-23383", "title": "bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46253", "url": "https://patchblox.com/security/cve/CVE-2026-46253", "title": "kernel-default: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23361", "url": "https://patchblox.com/security/cve/CVE-2026-23361", "title": "PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31693", "url": "https://patchblox.com/security/cve/CVE-2026-31693", "title": "kernel-64kb: cifs: some missing initializations on replay (bsc#1267744).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45851", "url": "https://patchblox.com/security/cve/CVE-2026-45851", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45886", "url": "https://patchblox.com/security/cve/CVE-2026-45886", "title": "kernel-default: bpf: Fix bpf_xdp_store_bytes proto for read-only arg (bsc#1266810).", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45935", "url": "https://patchblox.com/security/cve/CVE-2026-45935", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds read in DeleteI...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45920", "url": "https://patchblox.com/security/cve/CVE-2026-45920", "title": "kernel-64kb: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23343", "url": "https://patchblox.com/security/cve/CVE-2026-23343", "title": "xdp: produce a warning when calculated tailroom is negative", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23359", "url": "https://patchblox.com/security/cve/CVE-2026-23359", "title": "bpf: Fix stack-out-of-bounds write in devmap", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43128", "url": "https://patchblox.com/security/cve/CVE-2026-43128", "title": "kernel-64kb: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23317", "url": "https://patchblox.com/security/cve/CVE-2026-23317", "title": "drm/vmwgfx: Return the correct value in vmw_translate_ptr functions", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43150", "url": "https://patchblox.com/security/cve/CVE-2026-43150", "title": "kernel-64kb: perf/arm-cmn: Ensure dtm_idx is big enough (bsc#1264415).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23270", "url": "https://patchblox.com/security/cve/CVE-2026-23270", "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23319", "url": "https://patchblox.com/security/cve/CVE-2026-23319", "title": "bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23273", "url": "https://patchblox.com/security/cve/CVE-2026-23273", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23351", "url": "https://patchblox.com/security/cve/CVE-2026-23351", "title": "netfilter: nft_set_pipapo: split gc into unlink and reclaim phase", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23354", "url": "https://patchblox.com/security/cve/CVE-2026-23354", "title": "kernel-64kb: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23293", "url": "https://patchblox.com/security/cve/CVE-2026-23293", "title": "net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23300", "url": "https://patchblox.com/security/cve/CVE-2026-23300", "title": "net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23335", "url": "https://patchblox.com/security/cve/CVE-2026-23335", "title": "RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23352", "url": "https://patchblox.com/security/cve/CVE-2026-23352", "title": "x86/efi: defer freeing of boot services memory", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43133", "url": "https://patchblox.com/security/cve/CVE-2026-43133", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23239", "url": "https://patchblox.com/security/cve/CVE-2026-23239", "title": "espintcp: Fix race condition in espintcp_close()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46251", "url": "https://patchblox.com/security/cve/CVE-2026-46251", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block_group_tree dirty_list corruptio...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43178", "url": "https://patchblox.com/security/cve/CVE-2026-43178", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45894", "url": "https://patchblox.com/security/cve/CVE-2026-45894", "title": "iommu/vt-d: Clear Present bit before tearing down PASID entry", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45862", "url": "https://patchblox.com/security/cve/CVE-2026-45862", "title": "kernel-64kb: iommu/vt-d: Flush cache for PASID table before using it (bsc#1266705).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23244", "url": "https://patchblox.com/security/cve/CVE-2026-23244", "title": "nvme: fix memory allocation in nvme_pr_read_keys()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45942", "url": "https://patchblox.com/security/cve/CVE-2026-45942", "title": "ext4: fix e4b bitmap inconsistency reports", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23296", "url": "https://patchblox.com/security/cve/CVE-2026-23296", "title": "scsi: core: Fix refcount leak for tagset_refcnt", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23310", "url": "https://patchblox.com/security/cve/CVE-2026-23310", "title": "bpf/bonding: reject vlan\u002Bsrcmac xmit_hash_policy change when XDP is loaded", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45970", "url": "https://patchblox.com/security/cve/CVE-2026-45970", "title": "kernel-livepatch-SLE15-SP6_Update_12: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45957", "url": "https://patchblox.com/security/cve/CVE-2026-45957", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23388", "url": "https://patchblox.com/security/cve/CVE-2026-23388", "title": "Squashfs: check metadata block offset is within range", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45912", "url": "https://patchblox.com/security/cve/CVE-2026-45912", "title": "ext4: don\u0027t cache extent during splitting extent", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45983", "url": "https://patchblox.com/security/cve/CVE-2026-45983", "title": "kernel-64kb: nfsd: never defer requests during idmap lookup (bsc#1266697).", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45985", "url": "https://patchblox.com/security/cve/CVE-2026-45985", "title": "kernel-64kb: ext4: don\u0027t set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43306", "url": "https://patchblox.com/security/cve/CVE-2026-43306", "title": "bpf: crypto: Use the correct destructor kfunc type", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46259", "url": "https://patchblox.com/security/cve/CVE-2026-46259", "title": "kernel-64kb: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (bsc#1267685).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.4, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46260", "url": "https://patchblox.com/security/cve/CVE-2026-46260", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bound access in fib6_add_rt2node()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43281", "url": "https://patchblox.com/security/cve/CVE-2026-43281", "title": "kernel-64kb: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23340", "url": "https://patchblox.com/security/cve/CVE-2026-23340", "title": "net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43278", "url": "https://patchblox.com/security/cve/CVE-2026-43278", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46328", "url": "https://patchblox.com/security/cve/CVE-2026-46328", "title": "kernel-64kb: apparmor: fix rlimit for posix cpu timers (bsc#1268037).", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23271", "url": "https://patchblox.com/security/cve/CVE-2026-23271", "title": "perf: Fix __perf_event_overflow() vs perf_remove_from_context() race", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00111, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43211", "url": "https://patchblox.com/security/cve/CVE-2026-43211", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43214", "url": "https://patchblox.com/security/cve/CVE-2026-43214", "title": "kernel-default: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (bsc#1264651).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46327", "url": "https://patchblox.com/security/cve/CVE-2026-46327", "title": "kernel-64kb: dm: fix unlocked test for dm_suspended_md (bsc#1268031).", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00096, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43163", "url": "https://patchblox.com/security/cve/CVE-2026-43163", "title": "kernel-64kb: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00091, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71311", "url": "https://patchblox.com/security/cve/CVE-2025-71311", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize new folios before use KMSA...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00323, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-14027", "url": "https://patchblox.com/security/cve/CVE-2024-14027", "title": "xattr: switch to CLASS(fd)", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23419", "url": "https://patchblox.com/security/cve/CVE-2026-23419", "title": "kernel-64kb: net/rds: Fix circular locking dependency in rds_tcp_tune (bsc#1261507).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45872", "url": "https://patchblox.com/security/cve/CVE-2026-45872", "title": "kernel-64kb: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45855", "url": "https://patchblox.com/security/cve/CVE-2026-45855", "title": "ata: libata-scsi: avoid Non-NCQ command starvation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71304", "url": "https://patchblox.com/security/cve/CVE-2025-71304", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smack: /smack/doi: accept previously used values...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45847", "url": "https://patchblox.com/security/cve/CVE-2026-45847", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45858", "url": "https://patchblox.com/security/cve/CVE-2026-45858", "title": "ext4: don\u0027t zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45864", "url": "https://patchblox.com/security/cve/CVE-2026-45864", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent infinite loops caused by the n...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45870", "url": "https://patchblox.com/security/cve/CVE-2026-45870", "title": "kernel-64kb: SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (bsc#1266704).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45873", "url": "https://patchblox.com/security/cve/CVE-2026-45873", "title": "kernel-64kb: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45888", "url": "https://patchblox.com/security/cve/CVE-2026-45888", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45895", "url": "https://patchblox.com/security/cve/CVE-2026-45895", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45913", "url": "https://patchblox.com/security/cve/CVE-2026-45913", "title": "kernel-64kb: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45915", "url": "https://patchblox.com/security/cve/CVE-2026-45915", "title": "kernel-64kb: fat: avoid parent link count underflow in rmdir (bsc#1266896).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45922", "url": "https://patchblox.com/security/cve/CVE-2026-45922", "title": "kernel-64kb: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45925", "url": "https://patchblox.com/security/cve/CVE-2026-45925", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45948", "url": "https://patchblox.com/security/cve/CVE-2026-45948", "title": "kernel-64kb: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45964", "url": "https://patchblox.com/security/cve/CVE-2026-45964", "title": "kernel-64kb: SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (bsc#1266698).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45973", "url": "https://patchblox.com/security/cve/CVE-2026-45973", "title": "RDMA/mlx5: Fix UMR hang in LAG error state unload", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43244", "url": "https://patchblox.com/security/cve/CVE-2026-43244", "title": "kcm: fix zero-frag skb in frag_list on partial sendmsg error", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45917", "url": "https://patchblox.com/security/cve/CVE-2026-45917", "title": "ipvs: do not keep dest_dst if dev is going down", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23249", "url": "https://patchblox.com/security/cve/CVE-2026-23249", "title": "kernel-uek: ELSA-2026-50260: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43314", "url": "https://patchblox.com/security/cve/CVE-2026-43314", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23157", "url": "https://patchblox.com/security/cve/CVE-2026-23157", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23356", "url": "https://patchblox.com/security/cve/CVE-2026-23356", "title": "drbd: fix \u0022LOGIC BUG\u0022 in drbd_al_begin_io_nonblock()", "priority": "Routine", "severity": "Moderate", "cvss": 6.3, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23304", "url": "https://patchblox.com/security/cve/CVE-2026-23304", "title": "ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71239", "url": "https://patchblox.com/security/cve/CVE-2025-71239", "title": "audit: add fchmodat2() to change attributes class", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71265", "url": "https://patchblox.com/security/cve/CVE-2025-71265", "title": "fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71266", "url": "https://patchblox.com/security/cve/CVE-2025-71266", "title": "fs: ntfs3: check return value of indx_find to avoid infinite loop", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71267", "url": "https://patchblox.com/security/cve/CVE-2025-71267", "title": "fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23303", "url": "https://patchblox.com/security/cve/CVE-2026-23303", "title": "smb: client: Don\u0027t log plaintext credentials in cifs_set_cifscreds", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23379", "url": "https://patchblox.com/security/cve/CVE-2026-23379", "title": "kernel-livepatch-SLE15-SP7-RT_Update_11: net/sched: ets: fix divide by zero in the offload path (bsc#1260481).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43288", "url": "https://patchblox.com/security/cve/CVE-2026-43288", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43315", "url": "https://patchblox.com/security/cve/CVE-2026-43315", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45919", "url": "https://patchblox.com/security/cve/CVE-2026-45919", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45968", "url": "https://patchblox.com/security/cve/CVE-2026-45968", "title": "kernel-64kb: cpuidle: Skip governor when only one idle state is available (bsc#1267023).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45982", "url": "https://patchblox.com/security/cve/CVE-2026-45982", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43123", "url": "https://patchblox.com/security/cve/CVE-2026-43123", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43124", "url": "https://patchblox.com/security/cve/CVE-2026-43124", "title": "kernel-64kb: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43132", "url": "https://patchblox.com/security/cve/CVE-2026-43132", "title": "kernel-64kb: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43143", "url": "https://patchblox.com/security/cve/CVE-2026-43143", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43152", "url": "https://patchblox.com/security/cve/CVE-2026-43152", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43238", "url": "https://patchblox.com/security/cve/CVE-2026-43238", "title": "kernel-64kb: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43261", "url": "https://patchblox.com/security/cve/CVE-2026-43261", "title": "kernel-64kb: arm64: Add support for TSV110 Spectre-BHB mitigation (bsc#1264430).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45974", "url": "https://patchblox.com/security/cve/CVE-2026-45974", "title": "kernel-64kb: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found (bsc#1266922).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43210", "url": "https://patchblox.com/security/cve/CVE-2026-43210", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.1, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23285", "url": "https://patchblox.com/security/cve/CVE-2026-23285", "title": "drbd: fix null-pointer dereference on local read error", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23292", "url": "https://patchblox.com/security/cve/CVE-2026-23292", "title": "scsi: target: Fix recursive locking in __configfs_open_file()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23297", "url": "https://patchblox.com/security/cve/CVE-2026-23297", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23313", "url": "https://patchblox.com/security/cve/CVE-2026-23313", "title": "kernel-64kb: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23316", "url": "https://patchblox.com/security/cve/CVE-2026-23316", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23360", "url": "https://patchblox.com/security/cve/CVE-2026-23360", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23369", "url": "https://patchblox.com/security/cve/CVE-2026-23369", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43169", "url": "https://patchblox.com/security/cve/CVE-2026-43169", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43189", "url": "https://patchblox.com/security/cve/CVE-2026-43189", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43201", "url": "https://patchblox.com/security/cve/CVE-2026-43201", "title": "APEI/GHES: ARM processor Error: don\u0027t go past allocated memory", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23381", "url": "https://patchblox.com/security/cve/CVE-2026-23381", "title": "net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71295", "url": "https://patchblox.com/security/cve/CVE-2025-71295", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43129", "url": "https://patchblox.com/security/cve/CVE-2026-43129", "title": "ima: verify the previous kernel\u0027s IMA buffer lies in addressable RAM", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43130", "url": "https://patchblox.com/security/cve/CVE-2026-43130", "title": "kernel-64kb: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43167", "url": "https://patchblox.com/security/cve/CVE-2026-43167", "title": "kernel-64kb: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43171", "url": "https://patchblox.com/security/cve/CVE-2026-43171", "title": "kernel-64kb: EFI/CPER: do not dump the entire memory region (bsc#1264549).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43240", "url": "https://patchblox.com/security/cve/CVE-2026-43240", "title": "kernel-64kb: ima: verify the previous kernel\u0027s IMA buffer lies in addressable RAM (bsc#1264386).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43287", "url": "https://patchblox.com/security/cve/CVE-2026-43287", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43289", "url": "https://patchblox.com/security/cve/CVE-2026-43289", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43313", "url": "https://patchblox.com/security/cve/CVE-2026-43313", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45890", "url": "https://patchblox.com/security/cve/CVE-2026-45890", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43161", "url": "https://patchblox.com/security/cve/CVE-2026-43161", "title": "iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43292", "url": "https://patchblox.com/security/cve/CVE-2026-43292", "title": "mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43265", "url": "https://patchblox.com/security/cve/CVE-2026-43265", "title": "kernel-64kb: KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (bsc#1264427).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43266", "url": "https://patchblox.com/security/cve/CVE-2026-43266", "title": "kernel-64kb: EFI/CPER: don\u0027t go past the ARM processor CPER record buffer (bsc#1264418).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23380", "url": "https://patchblox.com/security/cve/CVE-2026-23380", "title": "kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43273", "url": "https://patchblox.com/security/cve/CVE-2026-43273", "title": "cephfs: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43277", "url": "https://patchblox.com/security/cve/CVE-2026-43277", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46329", "url": "https://patchblox.com/security/cve/CVE-2026-46329", "title": "kernel-64kb: erofs: handle end of filesystem properly for file-backed mounts (bsc#1268038).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45905", "url": "https://patchblox.com/security/cve/CVE-2026-45905", "title": "kernel-64kb: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00111, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23362", "url": "https://patchblox.com/security/cve/CVE-2026-23362", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00098, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43147", "url": "https://patchblox.com/security/cve/CVE-2026-43147", "title": "kernel-default: Revert \u0027PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV\u0027 (bsc#1264642).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45949", "url": "https://patchblox.com/security/cve/CVE-2026-45949", "title": "hwrng: core - use RCU and work_struct to fix race condition", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00089, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-11T01:20:23Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }