# ALAS2023-2026-1594: Security update for 22 packages

ALAS2023-2026-1594, released April 27, 2026, fixes 97 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1594
- Platform: Linux
- Released: Apr 27, 2026
- Priority: Urgent (Closes CVE-2026-31402, rated Critical)
- CVEs: 97, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1594.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel-livepatch-6.12.79-101.147](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.79-101.147.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-libbpf](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-debuginfo.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-devel.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-libbpf-static](https://patchblox.com/security/data/product/linux/kernel6.12-libbpf-static.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |
| [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.79-101.147.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-31402](https://patchblox.com/security/data/cve/CVE-2026-31402.md) | Urgent | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 9.8 | 0.0122 |  |
| [CVE-2026-43407](https://patchblox.com/security/data/cve/CVE-2026-43407.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: Fix potential out-of-bounds access in c... | 9.1 | 0.0066 |  |
| [CVE-2026-43406](https://patchblox.com/security/data/cve/CVE-2026-43406.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: prevent potential out-of-bounds reads i... | 9.1 | 0.0061 |  |
| [CVE-2026-43383](https://patchblox.com/security/data/cve/CVE-2026-43383.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  net/tcp-md5: Fix MAC comparison to be constant-t... | 9.4 | 0.0054 |  |
| [CVE-2026-43384](https://patchblox.com/security/data/cve/CVE-2026-43384.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  net/tcp-ao: Fix MAC comparison to be constant-ti... | 9.8 | 0.0046 |  |
| [CVE-2026-23455](https://patchblox.com/security/data/cve/CVE-2026-23455.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng... | 9.1 | 0.0159 |  |
| [CVE-2025-40135](https://patchblox.com/security/data/cve/CVE-2025-40135.md) | High | ipv6: use RCU in ip6_xmit() | 8.4 | 0.0071 |  |
| [CVE-2026-43405](https://patchblox.com/security/data/cve/CVE-2026-43405.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: Use u32 for non-negative values in ceph... | 7.5 | 0.0060 |  |
| [CVE-2026-43441](https://patchblox.com/security/data/cve/CVE-2026-43441.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: bonding: Fix nd_tbl NULL dereference when I... | 7.5 | 0.0059 |  |
| [CVE-2026-23456](https://patchblox.com/security/data/cve/CVE-2026-23456.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_conntrack_h323: fix OOB read in de... | 8.2 | 0.0054 |  |
| [CVE-2026-43452](https://patchblox.com/security/data/cve/CVE-2026-43452.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: x_tables: guard option walkers agains... | 8.2 | 0.0054 |  |
| [CVE-2026-43365](https://patchblox.com/security/data/cve/CVE-2026-43365.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 8.2 | 0.0051 |  |
| [CVE-2026-23457](https://patchblox.com/security/data/cve/CVE-2026-23457.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_conntrack_sip: fix Content-Length... | 8.6 | 0.0045 |  |
| [CVE-2026-43466](https://patchblox.com/security/data/cve/CVE-2026-43466.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Fix DMA FIFO desync on error CQE SQ r... | 8.2 | 0.0041 |  |
| [CVE-2026-43362](https://patchblox.com/security/data/cve/CVE-2026-43362.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 8.1 | 0.0026 |  |
| [CVE-2026-23278](https://patchblox.com/security/data/cve/CVE-2026-23278.md) | High | netfilter: nf_tables: always walk all pending catchall elements | 7.8 | 0.0023 |  |
| [CVE-2026-31788](https://patchblox.com/security/data/cve/CVE-2026-31788.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xen/privcmd: restrict usage in unprivileged domU... | 8.2 | 0.0019 |  |
| [CVE-2026-43456](https://patchblox.com/security/data/cve/CVE-2026-43456.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:  The following security issues we... | 7.8 | 0.0019 |  |
| [CVE-2026-23274](https://patchblox.com/security/data/cve/CVE-2026-23274.md) | High | netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels | 7.8 | 0.0018 |  |
| [CVE-2026-23392](https://patchblox.com/security/data/cve/CVE-2026-23392.md) | High | netfilter: nf_tables: release flowtable after rcu grace period on error | 8.8 | 0.0017 |  |
| [CVE-2026-43368](https://patchblox.com/security/data/cve/CVE-2026-43368.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential overflow of shmem scatter... | 8.8 | 0.0016 |  |
| [CVE-2026-43408](https://patchblox.com/security/data/cve/CVE-2026-43408.md) | High | kernel-rt-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0016 |  |
| [CVE-2026-23413](https://patchblox.com/security/data/cve/CVE-2026-23413.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  clsact: Fix use-after-free in init/destroy rollb... | 7.8 | 0.0016 |  |
| [CVE-2026-43374](https://patchblox.com/security/data/cve/CVE-2026-43374.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: nexthop: fix percpu use-after-free in remov... | 7.8 | 0.0016 |  |
| [CVE-2026-45943](https://patchblox.com/security/data/cve/CVE-2026-45943.md) | High | erofs: fix inline data read failure for ztailpacking pclusters | 7.1 | 0.0016 |  |
| [CVE-2026-23412](https://patchblox.com/security/data/cve/CVE-2026-23412.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: bpf: defer hook memory release until... | 7.8 | 0.0016 |  |
| [CVE-2026-23004](https://patchblox.com/security/data/cve/CVE-2026-23004.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.   The following security bu... | 7.0 | 0.0016 |  |
| [CVE-2026-31401](https://patchblox.com/security/data/cve/CVE-2026-31401.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  HID: bpf: prevent buffer overflow in hid_hw_requ... | 7.8 | 0.0014 |  |
| [CVE-2026-23449](https://patchblox.com/security/data/cve/CVE-2026-23449.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 7.8 | 0.0014 |  |
| [CVE-2026-23458](https://patchblox.com/security/data/cve/CVE-2026-23458.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 7.8 | 0.0014 |  |
| [CVE-2026-43450](https://patchblox.com/security/data/cve/CVE-2026-43450.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.8 | 0.0013 |  |
| [CVE-2026-43427](https://patchblox.com/security/data/cve/CVE-2026-43427.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: class: cdc-wdm: fix reordering issue in rea... | 7.1 | 0.0013 |  |
| [CVE-2026-23391](https://patchblox.com/security/data/cve/CVE-2026-23391.md) | High | netfilter: xt_CT: drop pending enqueued packets on template removal | 7.8 | 0.0013 |  |
| [CVE-2026-31403](https://patchblox.com/security/data/cve/CVE-2026-31403.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 7.8 | 0.0013 |  |
| [CVE-2026-43403](https://patchblox.com/security/data/cve/CVE-2026-43403.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nsfs: tighten permission checks for ns iteration... | 8.8 | 0.0013 |  |
| [CVE-2026-43366](https://patchblox.com/security/data/cve/CVE-2026-43366.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 7.8 | 0.0013 |  |
| [CVE-2026-23397](https://patchblox.com/security/data/cve/CVE-2026-23397.md) | High | nfnetlink_osf: validate individual option lengths in fingerprints | 7.1 | 0.0013 |  |
| [CVE-2026-43449](https://patchblox.com/security/data/cve/CVE-2026-43449.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_s... | 7.1 | 0.0013 |  |
| [CVE-2026-43453](https://patchblox.com/security/data/cve/CVE-2026-43453.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nft_set_pipapo: fix stack out-of-boun... | 7.1 | 0.0013 |  |
| [CVE-2026-43438](https://patchblox.com/security/data/cve/CVE-2026-43438.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Remove redundant css_put() in scx_cgr... | 7.8 | 0.0013 |  |
| [CVE-2026-31389](https://patchblox.com/security/data/cve/CVE-2026-31389.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  spi: fix use-after-free on controller registrati... | 7.8 | 0.0012 |  |
| [CVE-2026-23375](https://patchblox.com/security/data/cve/CVE-2026-23375.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes f... | 7.5 | 0.0012 |  |
| [CVE-2026-31399](https://patchblox.com/security/data/cve/CVE-2026-31399.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nvdimm/bus: Fix potential use after free in asyn... | 7.8 | 0.0012 |  |
| [CVE-2026-31392](https://patchblox.com/security/data/cve/CVE-2026-31392.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix krb5 mount with username option... | 8.1 | 0.0012 |  |
| [CVE-2026-43060](https://patchblox.com/security/data/cve/CVE-2026-43060.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nft_ct: drop pending enqueued packets... | 7.8 | 0.0012 |  |
| [CVE-2025-71161](https://patchblox.com/security/data/cve/CVE-2025-71161.md) | Routine | dm-verity: disable recursive forward error correction | 5.5 | 0.0047 |  |
| [CVE-2026-23440](https://patchblox.com/security/data/cve/CVE-2026-23440.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Fix race condition during IPSec ESN u... | 4.7 | 0.0028 |  |
| [CVE-2025-40147](https://patchblox.com/security/data/cve/CVE-2025-40147.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  blk-throttle: fix access race during throttle po... | 6.2 | 0.0026 |  |
| [CVE-2025-68239](https://patchblox.com/security/data/cve/CVE-2025-68239.md) | Routine | binfmt_misc: restore write access before closing files opened by open_exec() | 6.2 | 0.0020 |  |
| [CVE-2026-23276](https://patchblox.com/security/data/cve/CVE-2026-23276.md) | Routine | net: add xmit recursion limit to tunnel xmit functions | 5.5 | 0.0018 |  |
| [CVE-2025-39764](https://patchblox.com/security/data/cve/CVE-2025-39764.md) | Routine | netfilter: ctnetlink: remove refcounting in expectation dumpers | 5.5 | 0.0017 |  |
| [CVE-2026-43360](https://patchblox.com/security/data/cve/CVE-2026-43360.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix transaction abort on file creation du... | 5.5 | 0.0016 |  |
| [CVE-2026-23138](https://patchblox.com/security/data/cve/CVE-2026-23138.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tracing: Add recursion protection in kernel stac... | 5.5 | 0.0015 |  |
| [CVE-2026-23321](https://patchblox.com/security/data/cve/CVE-2026-23321.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mptcp: pm: in-kernel: always mark signal+subflow... | 5.5 | 0.0013 |  |
| [CVE-2026-23439](https://patchblox.com/security/data/cve/CVE-2026-23439.md) | Routine | udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n | 5.5 | 0.0013 |  |
| [CVE-2026-23445](https://patchblox.com/security/data/cve/CVE-2026-23445.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  igc: fix page fault in XDP TX timestamps handlin... | 5.5 | 0.0013 |  |
| [CVE-2026-23399](https://patchblox.com/security/data/cve/CVE-2026-23399.md) | Routine | nf_tables: nft_dynset: fix possible stateful expression memleak in error path | 6.5 | 0.0013 |  |
| [CVE-2026-23475](https://patchblox.com/security/data/cve/CVE-2026-23475.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  spi: fix statistics allocation  The controller p... | 5.5 | 0.0013 |  |
| [CVE-2026-43392](https://patchblox.com/security/data/cve/CVE-2026-43392.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Fix starvation of scx_enable() under... | 5.5 | 0.0013 |  |
| [CVE-2026-23398](https://patchblox.com/security/data/cve/CVE-2026-23398.md) | Routine | icmp: fix NULL pointer dereference in icmp_tag_validation() | 6.5 | 0.0013 |  |
| [CVE-2026-31546](https://patchblox.com/security/data/cve/CVE-2026-31546.md) | Routine | net: bonding: fix NULL deref in bond_debug_rlb_hash_show | 5.5 | 0.0013 |  |
| [CVE-2026-23465](https://patchblox.com/security/data/cve/CVE-2026-23465.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: log new dentries when logging parent dir... | 5.5 | 0.0013 |  |
| [CVE-2026-23277](https://patchblox.com/security/data/cve/CVE-2026-23277.md) | Routine | net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit | 5.9 | 0.0013 |  |
| [CVE-2026-23443](https://patchblox.com/security/data/cve/CVE-2026-23443.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ACPI: processor: Fix previous acpi_processor_err... | 5.5 | 0.0012 |  |
| [CVE-2026-31540](https://patchblox.com/security/data/cve/CVE-2026-31540.md) | Routine | drm/i915/gt: Check set_default_submission() before deferencing | 5.5 | 0.0012 |  |
| [CVE-2026-43359](https://patchblox.com/security/data/cve/CVE-2026-43359.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix transaction abort on set received ioc... | 5.5 | 0.0012 |  |
| [CVE-2026-43361](https://patchblox.com/security/data/cve/CVE-2026-43361.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix transaction abort when snapshotting r... | 5.5 | 0.0012 |  |
| [CVE-2026-43363](https://patchblox.com/security/data/cve/CVE-2026-43363.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  x86/apic: Disable x2apic on resume if the kernel... | 5.5 | 0.0012 |  |
| [CVE-2026-43411](https://patchblox.com/security/data/cve/CVE-2026-43411.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tipc: fix divide-by-zero in tipc_sk_filter_conne... | 5.5 | 0.0012 |  |
| [CVE-2026-43419](https://patchblox.com/security/data/cve/CVE-2026-43419.md) | Routine | kernel-rt-64k-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system | 5.5 | 0.0012 |  |
| [CVE-2026-43428](https://patchblox.com/security/data/cve/CVE-2026-43428.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  USB: core: Limit the length of unkillable synchr... | 5.5 | 0.0012 |  |
| [CVE-2026-43432](https://patchblox.com/security/data/cve/CVE-2026-43432.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: xhci: Fix memory leak in xhci_disable_slot(... | 5.5 | 0.0012 |  |
| [CVE-2026-43445](https://patchblox.com/security/data/cve/CVE-2026-43445.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  e1000/e1000e: Fix leak in DMA error cleanup  If... | 5.5 | 0.0012 |  |
| [CVE-2026-43451](https://patchblox.com/security/data/cve/CVE-2026-43451.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nfnetlink_queue: fix entry leak in br... | 5.5 | 0.0012 |  |
| [CVE-2026-43393](https://patchblox.com/security/data/cve/CVE-2026-43393.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix chunk map leak in btrfs_map_block() a... | 5.5 | 0.0012 |  |
| [CVE-2026-43394](https://patchblox.com/security/data/cve/CVE-2026-43394.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: Fix cred ref leak in nfsd_nl_listener_set_... | 5.5 | 0.0012 |  |
| [CVE-2026-43409](https://patchblox.com/security/data/cve/CVE-2026-43409.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  kprobes: avoid crash when rmmod/insmod after ftr... | 5.5 | 0.0012 |  |
| [CVE-2026-43482](https://patchblox.com/security/data/cve/CVE-2026-43482.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Disable preemption between scx_claim_... | 5.5 | 0.0012 |  |
| [CVE-2026-31400](https://patchblox.com/security/data/cve/CVE-2026-31400.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  sunrpc: fix cache_request leak in cache_release... | 5.5 | 0.0012 |  |
| [CVE-2026-43470](https://patchblox.com/security/data/cve/CVE-2026-43470.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  nfs: return EISDIR on nfs3_proc_create if d_alia... | 5.5 | 0.0012 |  |
| [CVE-2026-43467](https://patchblox.com/security/data/cve/CVE-2026-43467.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5: Fix crash when moving to switchdev mod... | 5.5 | 0.0011 |  |
| [CVE-2026-43472](https://patchblox.com/security/data/cve/CVE-2026-43472.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  unshare: fix unshare_fs() handling  There's an u... | 5.5 | 0.0011 |  |
| [CVE-2026-43473](https://patchblox.com/security/data/cve/CVE-2026-43473.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: mpi3mr: Add NULL checks when resetting req... | 5.5 | 0.0011 |  |
| [CVE-2026-43475](https://patchblox.com/security/data/cve/CVE-2026-43475.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:  The following security issues we... | 5.5 | 0.0011 |  |
| [CVE-2026-43483](https://patchblox.com/security/data/cve/CVE-2026-43483.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: SVM: Set/clear CR8 write interception when... | 5.5 | 0.0011 |  |
| [CVE-2026-43486](https://patchblox.com/security/data/cve/CVE-2026-43486.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: contpte: fix set_access_flags() no-op che... | 5.5 | 0.0011 |  |
| [CVE-2026-43487](https://patchblox.com/security/data/cve/CVE-2026-43487.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ata: libata-core: Disable LPM on ST1000DM010-2EP... | 5.5 | 0.0011 |  |
| [CVE-2026-43488](https://patchblox.com/security/data/cve/CVE-2026-43488.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: xhci: Prevent interrupt storm on host contr... | 5.5 | 0.0011 |  |
| [CVE-2026-23368](https://patchblox.com/security/data/cve/CVE-2026-23368.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: phy: register phy led_triggers during probe... | 5.5 | 0.0010 |  |
| [CVE-2026-23452](https://patchblox.com/security/data/cve/CVE-2026-23452.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  PM: runtime: Fix a race condition related to dev... | 5.5 | 0.0010 |  |
| [CVE-2026-43252](https://patchblox.com/security/data/cve/CVE-2026-43252.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mptcp: pm: in-kernel: always set ID as avail whe... | 5.5 | 0.0010 |  |
| [CVE-2026-43420](https://patchblox.com/security/data/cve/CVE-2026-43420.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ceph: fix i_nlink underrun during async unlink... | 5.5 | 0.0009 |  |
| [CVE-2026-23441](https://patchblox.com/security/data/cve/CVE-2026-23441.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Prevent concurrent access to IPSec AS... | 5.5 | 0.0009 |  |
| [CVE-2026-43061](https://patchblox.com/security/data/cve/CVE-2026-43061.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  serial: 8250: Fix TX deadlock when using DMA  `d... | 5.5 | 0.0009 |  |
| [CVE-2026-43468](https://patchblox.com/security/data/cve/CVE-2026-43468.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5: Fix deadlock between devlink lock and... | 5.5 | 0.0009 |  |
| [CVE-2026-43439](https://patchblox.com/security/data/cve/CVE-2026-43439.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  cgroup: fix race between task migration and iter... | 4.7 | 0.0009 |  |
| [CVE-2026-43448](https://patchblox.com/security/data/cve/CVE-2026-43448.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  nvme-pci: Fix race bug in nvme_poll_irqdisable()... | 4.7 | 0.0009 |  |

---

Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
