# ALAS2023-2026-1543: Security update for 22 packages ALAS2023-2026-1543, released April 7, 2026, fixes 158 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1543 - Platform: Linux - Released: Apr 7, 2026 - Priority: Urgent (Closes CVE-2026-46266, rated Critical) - CVEs: 158, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1543.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel-livepatch-6.12.77-99.140](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.77-99.140.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-libbpf](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-debuginfo.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-devel.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-libbpf-static](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-static.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | | [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.77-99.140.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-46266](https://patchblox.com/security/data/cve/CVE-2026-46266.md) | Urgent | kernel-default: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684). | 9.1 | 0.0047 | | | [CVE-2025-71305](https://patchblox.com/security/data/cve/CVE-2025-71305.md) | Urgent | drm/display/dp_mst: Add protection against 0 vcpi | 9.8 | 0.0016 | | | [CVE-2026-45899](https://patchblox.com/security/data/cve/CVE-2026-45899.md) | Urgent | ext4: drop extent cache when splitting extent fails | 9.8 | 0.0016 | | | [CVE-2026-23231](https://patchblox.com/security/data/cve/CVE-2026-23231.md) | High | netfilter: nf_tables: fix use-after-free in nf_tables_addchain() | 7.8 | 0.0105 | | | [CVE-2026-45860](https://patchblox.com/security/data/cve/CVE-2026-45860.md) | High | kernel-64kb: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710). | 7.5 | 0.0075 | | | [CVE-2026-45859](https://patchblox.com/security/data/cve/CVE-2026-45859.md) | High | netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation | 8.1 | 0.0071 | | | [CVE-2026-43186](https://patchblox.com/security/data/cve/CVE-2026-43186.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0064 | | | [CVE-2026-43304](https://patchblox.com/security/data/cve/CVE-2026-43304.md) | High | kernel-64kb: libceph: define and enforce CEPH_MAX_KEY_LEN (bsc#1264993). | 9.8 | 0.0061 | | | [CVE-2026-23240](https://patchblox.com/security/data/cve/CVE-2026-23240.md) | High | tls: Fix race condition in tls_sw_cancel_work_tx() | 9.8 | 0.0056 | | | [CVE-2026-43194](https://patchblox.com/security/data/cve/CVE-2026-43194.md) | High | kernel-64kb: net: consume xmit errors of GSO frames (bsc#1264304). | 7.5 | 0.0053 | | | [CVE-2026-45898](https://patchblox.com/security/data/cve/CVE-2026-45898.md) | High | kernel-64kb: RDMA/iwcm: Fix workqueue list corruption by removing work_list (bsc#1266888). | 9.8 | 0.0053 | | | [CVE-2026-43226](https://patchblox.com/security/data/cve/CVE-2026-43226.md) | High | kernel-64kb: net/rds: No shortcut out of RDS_CONN_ERROR (bsc#1264544). | 7.5 | 0.0052 | | | [CVE-2026-43230](https://patchblox.com/security/data/cve/CVE-2026-43230.md) | High | kernel-64kb: net/rds: Clear reconnect pending bit (bsc#1264539). | 7.5 | 0.0052 | | | [CVE-2026-43158](https://patchblox.com/security/data/cve/CVE-2026-43158.md) | High | kernel-64kb: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595). | 8.8 | 0.0047 | | | [CVE-2026-43187](https://patchblox.com/security/data/cve/CVE-2026-43187.md) | High | kernel-64kb: xfs: delete attr leaf freemap entries when empty (bsc#1264603). | 8.8 | 0.0047 | | | [CVE-2026-43190](https://patchblox.com/security/data/cve/CVE-2026-43190.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length befo... | 8.2 | 0.0046 | | | [CVE-2026-43233](https://patchblox.com/security/data/cve/CVE-2026-43233.md) | High | kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337). | 8.2 | 0.0046 | | | [CVE-2026-43199](https://patchblox.com/security/data/cve/CVE-2026-43199.md) | High | net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query | 7.5 | 0.0042 | | | [CVE-2026-43139](https://patchblox.com/security/data/cve/CVE-2026-43139.md) | High | kernel-64kb: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294). | 8.6 | 0.0038 | | | [CVE-2026-43253](https://patchblox.com/security/data/cve/CVE-2026-43253.md) | High | kernel-64kb: iommu/amd: move wait_on_sem() out of spinlock (bsc#1260593 bsc#1264419). | 7.5 | 0.0037 | | | [CVE-2026-45972](https://patchblox.com/security/data/cve/CVE-2026-45972.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 9.8 | 0.0033 | | | [CVE-2026-43215](https://patchblox.com/security/data/cve/CVE-2026-43215.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0032 | | | [CVE-2026-43239](https://patchblox.com/security/data/cve/CVE-2026-43239.md) | High | kernel-64kb: smb: client: prevent races in ->query_interfaces() (bsc#1264444). | 8.8 | 0.0029 | | | [CVE-2026-45933](https://patchblox.com/security/data/cve/CVE-2026-45933.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0020 | | | [CVE-2026-45856](https://patchblox.com/security/data/cve/CVE-2026-45856.md) | High | kernel-64kb: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (bsc#1266720). | 8.8 | 0.0019 | | | [CVE-2026-23243](https://patchblox.com/security/data/cve/CVE-2026-23243.md) | High | RDMA/umad: Reject negative data_len in ib_umad_write | 7.8 | 0.0018 | | | [CVE-2026-43153](https://patchblox.com/security/data/cve/CVE-2026-43153.md) | High | xfs: remove xfs_attr_leaf_hasname | 7.8 | 0.0018 | | | [CVE-2026-43258](https://patchblox.com/security/data/cve/CVE-2026-43258.md) | High | alpha: fix user-space corruption during memory compaction | 7.8 | 0.0018 | | | [CVE-2026-23383](https://patchblox.com/security/data/cve/CVE-2026-23383.md) | High | bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing | 7.8 | 0.0018 | | | [CVE-2026-46253](https://patchblox.com/security/data/cve/CVE-2026-46253.md) | High | kernel-default: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635). | 7.8 | 0.0017 | | | [CVE-2026-23361](https://patchblox.com/security/data/cve/CVE-2026-23361.md) | High | PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry | 7.8 | 0.0017 | | | [CVE-2026-31693](https://patchblox.com/security/data/cve/CVE-2026-31693.md) | High | kernel-64kb: cifs: some missing initializations on replay (bsc#1267744). | 7.8 | 0.0017 | | | [CVE-2026-45851](https://patchblox.com/security/data/cve/CVE-2026-45851.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0016 | | | [CVE-2026-45886](https://patchblox.com/security/data/cve/CVE-2026-45886.md) | High | kernel-default: bpf: Fix bpf_xdp_store_bytes proto for read-only arg (bsc#1266810). | 7.0 | 0.0016 | | | [CVE-2026-45935](https://patchblox.com/security/data/cve/CVE-2026-45935.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds read in DeleteI... | 7.8 | 0.0015 | | | [CVE-2026-45920](https://patchblox.com/security/data/cve/CVE-2026-45920.md) | High | kernel-64kb: ext4: fix dirtyclusters double decrement on fs shutdown (bsc#1266893). | 7.8 | 0.0015 | | | [CVE-2026-23343](https://patchblox.com/security/data/cve/CVE-2026-23343.md) | High | xdp: produce a warning when calculated tailroom is negative | 7.8 | 0.0014 | | | [CVE-2026-23359](https://patchblox.com/security/data/cve/CVE-2026-23359.md) | High | bpf: Fix stack-out-of-bounds write in devmap | 7.8 | 0.0014 | | | [CVE-2026-43128](https://patchblox.com/security/data/cve/CVE-2026-43128.md) | High | kernel-64kb: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612). | 8.1 | 0.0014 | | | [CVE-2026-23317](https://patchblox.com/security/data/cve/CVE-2026-23317.md) | High | drm/vmwgfx: Return the correct value in vmw_translate_ptr functions | 7.8 | 0.0014 | | | [CVE-2026-43150](https://patchblox.com/security/data/cve/CVE-2026-43150.md) | High | kernel-64kb: perf/arm-cmn: Ensure dtm_idx is big enough (bsc#1264415). | 7.8 | 0.0014 | | | [CVE-2026-23270](https://patchblox.com/security/data/cve/CVE-2026-23270.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886). | 8.1 | 0.0014 | | | [CVE-2026-23319](https://patchblox.com/security/data/cve/CVE-2026-23319.md) | High | bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim | 7.8 | 0.0014 | | | [CVE-2026-23273](https://patchblox.com/security/data/cve/CVE-2026-23273.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0014 | | | [CVE-2026-23351](https://patchblox.com/security/data/cve/CVE-2026-23351.md) | High | netfilter: nft_set_pipapo: split gc into unlink and reclaim phase | 7.8 | 0.0013 | | | [CVE-2026-23354](https://patchblox.com/security/data/cve/CVE-2026-23354.md) | High | kernel-64kb: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801). | 7.8 | 0.0013 | | | [CVE-2026-23293](https://patchblox.com/security/data/cve/CVE-2026-23293.md) | High | net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled | 7.5 | 0.0013 | | | [CVE-2026-23300](https://patchblox.com/security/data/cve/CVE-2026-23300.md) | High | net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop | 7.5 | 0.0013 | | | [CVE-2026-23335](https://patchblox.com/security/data/cve/CVE-2026-23335.md) | High | RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() | 7.1 | 0.0013 | | | [CVE-2026-23352](https://patchblox.com/security/data/cve/CVE-2026-23352.md) | High | x86/efi: defer freeing of boot services memory | 7.1 | 0.0013 | | | [CVE-2026-43133](https://patchblox.com/security/data/cve/CVE-2026-43133.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0013 | | | [CVE-2026-23239](https://patchblox.com/security/data/cve/CVE-2026-23239.md) | High | espintcp: Fix race condition in espintcp_close() | 7.8 | 0.0013 | | | [CVE-2026-46251](https://patchblox.com/security/data/cve/CVE-2026-46251.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block_group_tree dirty_list corruptio... | 8.4 | 0.0013 | | | [CVE-2026-43178](https://patchblox.com/security/data/cve/CVE-2026-43178.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-45894](https://patchblox.com/security/data/cve/CVE-2026-45894.md) | High | iommu/vt-d: Clear Present bit before tearing down PASID entry | 8.8 | 0.0013 | | | [CVE-2026-45862](https://patchblox.com/security/data/cve/CVE-2026-45862.md) | High | kernel-64kb: iommu/vt-d: Flush cache for PASID table before using it (bsc#1266705). | 7.8 | 0.0013 | | | [CVE-2026-23244](https://patchblox.com/security/data/cve/CVE-2026-23244.md) | High | nvme: fix memory allocation in nvme_pr_read_keys() | 7.1 | 0.0013 | | | [CVE-2026-45942](https://patchblox.com/security/data/cve/CVE-2026-45942.md) | High | ext4: fix e4b bitmap inconsistency reports | 8.8 | 0.0013 | | | [CVE-2026-23296](https://patchblox.com/security/data/cve/CVE-2026-23296.md) | High | scsi: core: Fix refcount leak for tagset_refcnt | 7.1 | 0.0013 | | | [CVE-2026-23310](https://patchblox.com/security/data/cve/CVE-2026-23310.md) | High | bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded | 7.1 | 0.0013 | | | [CVE-2026-45970](https://patchblox.com/security/data/cve/CVE-2026-45970.md) | High | kernel-livepatch-SLE15-SP6_Update_12: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206). | 8.8 | 0.0013 | | | [CVE-2026-45957](https://patchblox.com/security/data/cve/CVE-2026-45957.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0013 | | | [CVE-2026-23388](https://patchblox.com/security/data/cve/CVE-2026-23388.md) | High | Squashfs: check metadata block offset is within range | 7.1 | 0.0012 | | | [CVE-2026-45912](https://patchblox.com/security/data/cve/CVE-2026-45912.md) | High | ext4: don't cache extent during splitting extent | 7.1 | 0.0012 | | | [CVE-2026-45983](https://patchblox.com/security/data/cve/CVE-2026-45983.md) | High | kernel-64kb: nfsd: never defer requests during idmap lookup (bsc#1266697). | 7.0 | 0.0012 | | | [CVE-2026-45985](https://patchblox.com/security/data/cve/CVE-2026-45985.md) | High | kernel-64kb: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700). | 7.0 | 0.0012 | | | [CVE-2026-43306](https://patchblox.com/security/data/cve/CVE-2026-43306.md) | High | bpf: crypto: Use the correct destructor kfunc type | 7.0 | 0.0012 | | | [CVE-2026-46259](https://patchblox.com/security/data/cve/CVE-2026-46259.md) | High | kernel-64kb: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (bsc#1267685). | 8.4 | 0.0012 | | | [CVE-2026-46260](https://patchblox.com/security/data/cve/CVE-2026-46260.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix out-of-bound access in fib6_add_rt2node() | 7.8 | 0.0012 | | | [CVE-2026-43281](https://patchblox.com/security/data/cve/CVE-2026-43281.md) | High | kernel-64kb: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534). | 7.1 | 0.0012 | | | [CVE-2026-23340](https://patchblox.com/security/data/cve/CVE-2026-23340.md) | High | net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs | 7.8 | 0.0012 | | | [CVE-2026-43278](https://patchblox.com/security/data/cve/CVE-2026-43278.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 | | | [CVE-2026-46328](https://patchblox.com/security/data/cve/CVE-2026-46328.md) | High | kernel-64kb: apparmor: fix rlimit for posix cpu timers (bsc#1268037). | 7.3 | 0.0011 | | | [CVE-2026-23271](https://patchblox.com/security/data/cve/CVE-2026-23271.md) | High | perf: Fix __perf_event_overflow() vs perf_remove_from_context() race | 7.8 | 0.0011 | | | [CVE-2026-43211](https://patchblox.com/security/data/cve/CVE-2026-43211.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0011 | | | [CVE-2026-43214](https://patchblox.com/security/data/cve/CVE-2026-43214.md) | High | kernel-default: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (bsc#1264651). | 7.8 | 0.0011 | | | [CVE-2026-46327](https://patchblox.com/security/data/cve/CVE-2026-46327.md) | High | kernel-64kb: dm: fix unlocked test for dm_suspended_md (bsc#1268031). | 7.8 | 0.0010 | | | [CVE-2026-43163](https://patchblox.com/security/data/cve/CVE-2026-43163.md) | High | kernel-64kb: md/bitmap: fix GPF in write_page caused by resize race (bsc#1264335). | 8.1 | 0.0009 | | | [CVE-2025-71311](https://patchblox.com/security/data/cve/CVE-2025-71311.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize new folios before use KMSA... | 5.5 | 0.0032 | | | [CVE-2024-14027](https://patchblox.com/security/data/cve/CVE-2024-14027.md) | Routine | xattr: switch to CLASS(fd) | 5.5 | 0.0024 | | | [CVE-2026-23419](https://patchblox.com/security/data/cve/CVE-2026-23419.md) | Routine | kernel-64kb: net/rds: Fix circular locking dependency in rds_tcp_tune (bsc#1261507). | 5.5 | 0.0019 | | | [CVE-2026-45872](https://patchblox.com/security/data/cve/CVE-2026-45872.md) | Routine | kernel-64kb: scsi: smartpqi: Fix memory leak in pqi_report_phys_luns() (bsc#1266735). | 5.5 | 0.0017 | | | [CVE-2026-45855](https://patchblox.com/security/data/cve/CVE-2026-45855.md) | Routine | ata: libata-scsi: avoid Non-NCQ command starvation | 5.5 | 0.0017 | | | [CVE-2025-71304](https://patchblox.com/security/data/cve/CVE-2025-71304.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: smack: /smack/doi: accept previously used values... | 5.5 | 0.0016 | | | [CVE-2026-45847](https://patchblox.com/security/data/cve/CVE-2026-45847.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0016 | | | [CVE-2026-45858](https://patchblox.com/security/data/cve/CVE-2026-45858.md) | Routine | ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 | 5.5 | 0.0016 | | | [CVE-2026-45864](https://patchblox.com/security/data/cve/CVE-2026-45864.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent infinite loops caused by the n... | 5.5 | 0.0016 | | | [CVE-2026-45870](https://patchblox.com/security/data/cve/CVE-2026-45870.md) | Routine | kernel-64kb: SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (bsc#1266704). | 5.5 | 0.0016 | | | [CVE-2026-45873](https://patchblox.com/security/data/cve/CVE-2026-45873.md) | Routine | kernel-64kb: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715). | 5.5 | 0.0016 | | | [CVE-2026-45888](https://patchblox.com/security/data/cve/CVE-2026-45888.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0016 | | | [CVE-2026-45895](https://patchblox.com/security/data/cve/CVE-2026-45895.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0016 | | | [CVE-2026-45913](https://patchblox.com/security/data/cve/CVE-2026-45913.md) | Routine | kernel-64kb: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891). | 5.5 | 0.0016 | | | [CVE-2026-45915](https://patchblox.com/security/data/cve/CVE-2026-45915.md) | Routine | kernel-64kb: fat: avoid parent link count underflow in rmdir (bsc#1266896). | 5.5 | 0.0016 | | | [CVE-2026-45922](https://patchblox.com/security/data/cve/CVE-2026-45922.md) | Routine | kernel-64kb: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (bsc#1266805). | 5.5 | 0.0016 | | | [CVE-2026-45925](https://patchblox.com/security/data/cve/CVE-2026-45925.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0016 | | | [CVE-2026-45948](https://patchblox.com/security/data/cve/CVE-2026-45948.md) | Routine | kernel-64kb: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929). | 5.5 | 0.0016 | | | [CVE-2026-45964](https://patchblox.com/security/data/cve/CVE-2026-45964.md) | Routine | kernel-64kb: SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (bsc#1266698). | 5.5 | 0.0016 | | | [CVE-2026-45973](https://patchblox.com/security/data/cve/CVE-2026-45973.md) | Routine | RDMA/mlx5: Fix UMR hang in LAG error state unload | 5.5 | 0.0016 | | | [CVE-2026-43244](https://patchblox.com/security/data/cve/CVE-2026-43244.md) | Routine | kcm: fix zero-frag skb in frag_list on partial sendmsg error | 5.5 | 0.0016 | | | [CVE-2026-45917](https://patchblox.com/security/data/cve/CVE-2026-45917.md) | Routine | ipvs: do not keep dest_dst if dev is going down | 5.5 | 0.0016 | | | [CVE-2026-23249](https://patchblox.com/security/data/cve/CVE-2026-23249.md) | Routine | kernel-uek: ELSA-2026-50260: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0015 | | | [CVE-2026-43314](https://patchblox.com/security/data/cve/CVE-2026-43314.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 | | | [CVE-2026-23157](https://patchblox.com/security/data/cve/CVE-2026-23157.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 | | | [CVE-2026-23356](https://patchblox.com/security/data/cve/CVE-2026-23356.md) | Routine | drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() | 6.3 | 0.0014 | | | [CVE-2026-23304](https://patchblox.com/security/data/cve/CVE-2026-23304.md) | Routine | ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() | 5.5 | 0.0013 | | | [CVE-2025-71239](https://patchblox.com/security/data/cve/CVE-2025-71239.md) | Routine | audit: add fchmodat2() to change attributes class | 5.5 | 0.0013 | | | [CVE-2025-71265](https://patchblox.com/security/data/cve/CVE-2025-71265.md) | Routine | fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata | 5.5 | 0.0013 | | | [CVE-2025-71266](https://patchblox.com/security/data/cve/CVE-2025-71266.md) | Routine | fs: ntfs3: check return value of indx_find to avoid infinite loop | 5.5 | 0.0013 | | | [CVE-2025-71267](https://patchblox.com/security/data/cve/CVE-2025-71267.md) | Routine | fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST | 5.5 | 0.0013 | | | [CVE-2026-23303](https://patchblox.com/security/data/cve/CVE-2026-23303.md) | Routine | smb: client: Don't log plaintext credentials in cifs_set_cifscreds | 5.5 | 0.0013 | | | [CVE-2026-23379](https://patchblox.com/security/data/cve/CVE-2026-23379.md) | Routine | kernel-livepatch-SLE15-SP7-RT_Update_11: net/sched: ets: fix divide by zero in the offload path (bsc#1260481). | 5.5 | 0.0013 | | | [CVE-2026-43288](https://patchblox.com/security/data/cve/CVE-2026-43288.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-43315](https://patchblox.com/security/data/cve/CVE-2026-43315.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-45919](https://patchblox.com/security/data/cve/CVE-2026-45919.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 | | | [CVE-2026-45968](https://patchblox.com/security/data/cve/CVE-2026-45968.md) | Routine | kernel-64kb: cpuidle: Skip governor when only one idle state is available (bsc#1267023). | 5.5 | 0.0013 | | | [CVE-2026-45982](https://patchblox.com/security/data/cve/CVE-2026-45982.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 | | | [CVE-2026-43123](https://patchblox.com/security/data/cve/CVE-2026-43123.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 | | | [CVE-2026-43124](https://patchblox.com/security/data/cve/CVE-2026-43124.md) | Routine | kernel-64kb: pstore: ram_core: fix incorrect success return when vmap() fails (bsc#1264545). | 5.5 | 0.0013 | | | [CVE-2026-43132](https://patchblox.com/security/data/cve/CVE-2026-43132.md) | Routine | kernel-64kb: dm-verity: correctly handle dm_bufio_client_create() failure (bsc#1264614). | 5.5 | 0.0013 | | | [CVE-2026-43143](https://patchblox.com/security/data/cve/CVE-2026-43143.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 | | | [CVE-2026-43152](https://patchblox.com/security/data/cve/CVE-2026-43152.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 | | | [CVE-2026-43238](https://patchblox.com/security/data/cve/CVE-2026-43238.md) | Routine | kernel-64kb: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320). | 5.5 | 0.0013 | | | [CVE-2026-43261](https://patchblox.com/security/data/cve/CVE-2026-43261.md) | Routine | kernel-64kb: arm64: Add support for TSV110 Spectre-BHB mitigation (bsc#1264430). | 5.5 | 0.0013 | | | [CVE-2026-45974](https://patchblox.com/security/data/cve/CVE-2026-45974.md) | Routine | kernel-64kb: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found (bsc#1266922). | 5.5 | 0.0013 | | | [CVE-2026-43210](https://patchblox.com/security/data/cve/CVE-2026-43210.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 6.1 | 0.0013 | | | [CVE-2026-23285](https://patchblox.com/security/data/cve/CVE-2026-23285.md) | Routine | drbd: fix null-pointer dereference on local read error | 5.5 | 0.0013 | | | [CVE-2026-23292](https://patchblox.com/security/data/cve/CVE-2026-23292.md) | Routine | scsi: target: Fix recursive locking in __configfs_open_file() | 5.5 | 0.0013 | | | [CVE-2026-23297](https://patchblox.com/security/data/cve/CVE-2026-23297.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-23313](https://patchblox.com/security/data/cve/CVE-2026-23313.md) | Routine | kernel-64kb: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555). | 5.5 | 0.0013 | | | [CVE-2026-23316](https://patchblox.com/security/data/cve/CVE-2026-23316.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-23360](https://patchblox.com/security/data/cve/CVE-2026-23360.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-23369](https://patchblox.com/security/data/cve/CVE-2026-23369.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-43169](https://patchblox.com/security/data/cve/CVE-2026-43169.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 | | | [CVE-2026-43189](https://patchblox.com/security/data/cve/CVE-2026-43189.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 | | | [CVE-2026-43201](https://patchblox.com/security/data/cve/CVE-2026-43201.md) | Routine | APEI/GHES: ARM processor Error: don't go past allocated memory | 5.5 | 0.0013 | | | [CVE-2026-23381](https://patchblox.com/security/data/cve/CVE-2026-23381.md) | Routine | net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled | 5.5 | 0.0013 | | | [CVE-2025-71295](https://patchblox.com/security/data/cve/CVE-2025-71295.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-43129](https://patchblox.com/security/data/cve/CVE-2026-43129.md) | Routine | ima: verify the previous kernel's IMA buffer lies in addressable RAM | 5.5 | 0.0012 | | | [CVE-2026-43130](https://patchblox.com/security/data/cve/CVE-2026-43130.md) | Routine | kernel-64kb: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532). | 5.5 | 0.0012 | | | [CVE-2026-43167](https://patchblox.com/security/data/cve/CVE-2026-43167.md) | Routine | kernel-64kb: xfrm: always flush state and policy upon NETDEV_UNREGISTER event (bsc#1264580). | 5.5 | 0.0012 | | | [CVE-2026-43171](https://patchblox.com/security/data/cve/CVE-2026-43171.md) | Routine | kernel-64kb: EFI/CPER: do not dump the entire memory region (bsc#1264549). | 5.5 | 0.0012 | | | [CVE-2026-43240](https://patchblox.com/security/data/cve/CVE-2026-43240.md) | Routine | kernel-64kb: ima: verify the previous kernel's IMA buffer lies in addressable RAM (bsc#1264386). | 5.5 | 0.0012 | | | [CVE-2026-43287](https://patchblox.com/security/data/cve/CVE-2026-43287.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 | | | [CVE-2026-43289](https://patchblox.com/security/data/cve/CVE-2026-43289.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-43313](https://patchblox.com/security/data/cve/CVE-2026-43313.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 | | | [CVE-2026-45890](https://patchblox.com/security/data/cve/CVE-2026-45890.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-43161](https://patchblox.com/security/data/cve/CVE-2026-43161.md) | Routine | iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode | 5.5 | 0.0012 | | | [CVE-2026-43292](https://patchblox.com/security/data/cve/CVE-2026-43292.md) | Routine | mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node | 5.5 | 0.0012 | | | [CVE-2026-43265](https://patchblox.com/security/data/cve/CVE-2026-43265.md) | Routine | kernel-64kb: KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (bsc#1264427). | 5.5 | 0.0012 | | | [CVE-2026-43266](https://patchblox.com/security/data/cve/CVE-2026-43266.md) | Routine | kernel-64kb: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418). | 5.5 | 0.0012 | | | [CVE-2026-23380](https://patchblox.com/security/data/cve/CVE-2026-23380.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-43273](https://patchblox.com/security/data/cve/CVE-2026-43273.md) | Routine | cephfs: ceph: supply snapshot context in ceph_zero_partial_object() (bsc#1264446). | 5.5 | 0.0012 | | | [CVE-2026-43277](https://patchblox.com/security/data/cve/CVE-2026-43277.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 | | | [CVE-2026-46329](https://patchblox.com/security/data/cve/CVE-2026-46329.md) | Routine | kernel-64kb: erofs: handle end of filesystem properly for file-backed mounts (bsc#1268038). | 5.5 | 0.0011 | | | [CVE-2026-45905](https://patchblox.com/security/data/cve/CVE-2026-45905.md) | Routine | kernel-64kb: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685). | 5.5 | 0.0011 | | | [CVE-2026-23362](https://patchblox.com/security/data/cve/CVE-2026-23362.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 | | | [CVE-2026-43147](https://patchblox.com/security/data/cve/CVE-2026-43147.md) | Routine | kernel-default: Revert 'PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV' (bsc#1264642). | 5.5 | 0.0010 | | | [CVE-2026-45949](https://patchblox.com/security/data/cve/CVE-2026-45949.md) | Routine | hwrng: core - use RCU and work_struct to fix race condition | 5.5 | 0.0009 | | --- Data as of 2026-11-11T01:20:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.