{ "fix": "ALAS2023-2026-1544", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1544", "summary": "ALAS2023-2026-1544, released April 7, 2026, fixes 70 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 22 packages", "released": "2026-04-07T09:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-43186, rated Critical", "supported": true, "cveCount": 70, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.01045, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1544.html", "appliesTo": [ { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "bpftool-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel", "productUrl": "https://patchblox.com/security/product/linux/kernel", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel-headers", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-libbpf", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-libbpf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-libbpf-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-libbpf-static", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.1.166-197.305", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.166-197.305", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "kernel-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "perf", "productUrl": "https://patchblox.com/security/product/linux/perf", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "python3-perf", "productUrl": "https://patchblox.com/security/product/linux/python3-perf", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true }, { "product": "python3-perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.166-197.305.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-43186", "url": "https://patchblox.com/security/cve/CVE-2026-43186", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix heap buffer overflow in __ioam6_...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00642, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43304", "url": "https://patchblox.com/security/cve/CVE-2026-43304", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN Wh...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00613, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71305", "url": "https://patchblox.com/security/cve/CVE-2025-71305", "title": "drm/display/dp_mst: Add protection against 0 vcpi", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23231", "url": "https://patchblox.com/security/cve/CVE-2026-23231", "title": "netfilter: nf_tables: fix use-after-free in nf_tables_addchain()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.01045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45860", "url": "https://patchblox.com/security/cve/CVE-2026-45860", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: increase the connection...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43194", "url": "https://patchblox.com/security/cve/CVE-2026-43194", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: consume xmit errors of GSO frames udpgro_f...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00533, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43226", "url": "https://patchblox.com/security/cve/CVE-2026-43226", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/rds: No shortcut out of RDS_CONN_ERROR RDS...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43230", "url": "https://patchblox.com/security/cve/CVE-2026-43230", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/rds: Clear reconnect pending bit When cance...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43158", "url": "https://patchblox.com/security/cve/CVE-2026-43158", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43187", "url": "https://patchblox.com/security/cve/CVE-2026-43187", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfs: delete attr leaf freemap entries when empty...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43190", "url": "https://patchblox.com/security/cve/CVE-2026-43190", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: xt_tcpmss: check remaining length befo...", "priority": "High", "severity": "moderate", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43233", "url": "https://patchblox.com/security/cve/CVE-2026-43233", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43139", "url": "https://patchblox.com/security/cve/CVE-2026-43139", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6_get_sadd...", "priority": "High", "severity": "high", "cvss": 8.6, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45856", "url": "https://patchblox.com/security/cve/CVE-2026-45856", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it i...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23243", "url": "https://patchblox.com/security/cve/CVE-2026-23243", "title": "RDMA/umad: Reject negative data_len in ib_umad_write", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46253", "url": "https://patchblox.com/security/cve/CVE-2026-46253", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistent_ra...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45886", "url": "https://patchblox.com/security/cve/CVE-2026-45886", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_xdp_store_bytes proto for read-only...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45935", "url": "https://patchblox.com/security/cve/CVE-2026-45935", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix slab-out-of-bounds read in DeleteI...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43128", "url": "https://patchblox.com/security/cve/CVE-2026-43128", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix double dma_buf_unpin in failure p...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43150", "url": "https://patchblox.com/security/cve/CVE-2026-43150", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/arm-cmn: Reject unsupported hardware config...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43133", "url": "https://patchblox.com/security/cve/CVE-2026-43133", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nKVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emu...", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46251", "url": "https://patchblox.com/security/cve/CVE-2026-46251", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix block_group_tree dirty_list corruptio...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45862", "url": "https://patchblox.com/security/cve/CVE-2026-45862", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before u...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45970", "url": "https://patchblox.com/security/cve/CVE-2026-45970", "title": "kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45912", "url": "https://patchblox.com/security/cve/CVE-2026-45912", "title": "ext4: don\u0027t cache extent during splitting extent", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45983", "url": "https://patchblox.com/security/cve/CVE-2026-45983", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: never defer requests during idmap lookup...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46259", "url": "https://patchblox.com/security/cve/CVE-2026-46259", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when reading...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43278", "url": "https://patchblox.com/security/cve/CVE-2026-43278", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last c...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46328", "url": "https://patchblox.com/security/cve/CVE-2026-46328", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43211", "url": "https://patchblox.com/security/cve/CVE-2026-43211", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_slot_trylock() error handling Comm...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43214", "url": "https://patchblox.com/security/cve/CVE-2026-43214", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Add SRCU protection for reading PDPTRs...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43163", "url": "https://patchblox.com/security/cve/CVE-2026-43163", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resiz...", "priority": "High", "severity": "medium", "cvss": 8.1, "epss": 0.00091, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45872", "url": "https://patchblox.com/security/cve/CVE-2026-45872", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix memory leak in pqi_report_ph...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71304", "url": "https://patchblox.com/security/cve/CVE-2025-71304", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smack: /smack/doi: accept previously used values...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45847", "url": "https://patchblox.com/security/cve/CVE-2026-45847", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE when accessing forward...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45864", "url": "https://patchblox.com/security/cve/CVE-2026-45864", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: prevent infinite loops caused by the n...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45870", "url": "https://patchblox.com/security/cve/CVE-2026-45870", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: auth_gss: fix memory leaks in XDR decodi...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45873", "url": "https://patchblox.com/security/cve/CVE-2026-45873", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: check for partial ove...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45915", "url": "https://patchblox.com/security/cve/CVE-2026-45915", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fat: avoid parent link count underflow in rmdir...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45948", "url": "https://patchblox.com/security/cve/CVE-2026-45948", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4_ext_shift_extents(...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45964", "url": "https://patchblox.com/security/cve/CVE-2026-45964", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gss_auth kref leak in gss_alloc_msg...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43314", "url": "https://patchblox.com/security/cve/CVE-2026-43314", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: remove fake timeout to avoid leak request S...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71265", "url": "https://patchblox.com/security/cve/CVE-2025-71265", "title": "fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71266", "url": "https://patchblox.com/security/cve/CVE-2025-71266", "title": "fs: ntfs3: check return value of indx_find to avoid infinite loop", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71267", "url": "https://patchblox.com/security/cve/CVE-2025-71267", "title": "fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43315", "url": "https://patchblox.com/security/cve/CVE-2026-43315", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Remove a user-triggerable WARN on nes...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45919", "url": "https://patchblox.com/security/cve/CVE-2026-45919", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched/rt: Skip currently executing CPU in rto_ne...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45968", "url": "https://patchblox.com/security/cve/CVE-2026-45968", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpuidle: Skip governor when only one idle state...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45982", "url": "https://patchblox.com/security/cve/CVE-2026-45982", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi_ev_...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43123", "url": "https://patchblox.com/security/cve/CVE-2026-43123", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbcon: check return value of con2fb_acquire_newi...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43124", "url": "https://patchblox.com/security/cve/CVE-2026-43124", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return w...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43132", "url": "https://patchblox.com/security/cve/CVE-2026-43132", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_crea...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43143", "url": "https://patchblox.com/security/cve/CVE-2026-43143", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mfd: core: Add locking around \u0027mfd_of_node_list\u0027...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43152", "url": "https://patchblox.com/security/cve/CVE-2026-43152", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: hid-pl: handle probe errors Errors in init...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43238", "url": "https://patchblox.com/security/cve/CVE-2026-43238", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbedit: fix divide-by-zero in tc...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43261", "url": "https://patchblox.com/security/cve/CVE-2026-43261", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitiga...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45974", "url": "https://patchblox.com/security/cve/CVE-2026-45974", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid leaf access in btrfs_quota_en...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71295", "url": "https://patchblox.com/security/cve/CVE-2025-71295", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/buffer: add alert in try_to_free_buffers() fo...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43130", "url": "https://patchblox.com/security/cve/CVE-2026-43130", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe devic...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43171", "url": "https://patchblox.com/security/cve/CVE-2026-43171", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don\u0027t dump the entire memory region T...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43240", "url": "https://patchblox.com/security/cve/CVE-2026-43240", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/kexec: add a sanity check on previous kernel...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43287", "url": "https://patchblox.com/security/cve/CVE-2026-43287", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm: Account property blob allocations to memcg...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43289", "url": "https://patchblox.com/security/cve/CVE-2026-43289", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: kexec: derive purgatory entry from symbol kexec...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43313", "url": "https://patchblox.com/security/cve/CVE-2026-43313", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix NULL-pointer dereference in...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45890", "url": "https://patchblox.com/security/cve/CVE-2026-45890", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xen-netback: reject zero-queue configuration fro...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43266", "url": "https://patchblox.com/security/cve/CVE-2026-43266", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don\u0027t go past the ARM processor CPER r...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43273", "url": "https://patchblox.com/security/cve/CVE-2026-43273", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ceph: supply snapshot context in ceph_zero_parti...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43277", "url": "https://patchblox.com/security/cve/CVE-2026-43277", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: APEI/GHES: ensure that won\u0027t go past CPER alloca...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45905", "url": "https://patchblox.com/security/cve/CVE-2026-45905", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: fix ip_rt_bug race in icmp_route_lookup re...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00111, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43147", "url": "https://patchblox.com/security/cve/CVE-2026-43147", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Revert \u0022PCI/IOV: Add PCI rescan-remove locking w...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T13:56:55Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }