# ALAS2023-2026-1596: Security update for 22 packages ALAS2023-2026-1596, released April 27, 2026, fixes 167 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1596 - Platform: Linux - Released: Apr 27, 2026 - Priority: Urgent (Closes CVE-2026-43402, rated Critical) - CVEs: 167, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1596.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.18](https://patchblox.com/security/data/product/linux/bpftool6.18.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [bpftool6.18-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.18-debuginfo.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel-livepatch-6.18.20-20.229](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.18.20-20.229.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.18](https://patchblox.com/security/data/product/linux/kernel6.18.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-devel](https://patchblox.com/security/data/product/linux/kernel6.18-devel.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-headers](https://patchblox.com/security/data/product/linux/kernel6.18-headers.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-libbpf](https://patchblox.com/security/data/product/linux/kernel6.18-libbpf.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-libbpf-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-libbpf-debuginfo.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-libbpf-devel](https://patchblox.com/security/data/product/linux/kernel6.18-libbpf-devel.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-libbpf-static](https://patchblox.com/security/data/product/linux/kernel6.18-libbpf-static.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra-common.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-tools](https://patchblox.com/security/data/product/linux/kernel6.18-tools.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-tools-debuginfo.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [kernel6.18-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.18-tools-devel.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [perf6.18](https://patchblox.com/security/data/product/linux/perf6.18.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [python3-perf6.18](https://patchblox.com/security/data/product/linux/python3-perf6.18.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | | [python3-perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.20-20.229.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-43402](https://patchblox.com/security/data/cve/CVE-2026-43402.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: kthread: consolidate kthread exit paths to preve... | 9.8 | 0.0056 | | | [CVE-2026-43465](https://patchblox.com/security/data/cve/CVE-2026-43465.md) | Urgent | kernel-64kb: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (bsc#1264997). | 9.8 | 0.0054 | | | [CVE-2026-43384](https://patchblox.com/security/data/cve/CVE-2026-43384.md) | Urgent | kernel-64kb: net/tcp-ao: Fix MAC comparison to be constant-time (bsc#1265097). | 9.8 | 0.0046 | | | [CVE-2026-23455](https://patchblox.com/security/data/cve/CVE-2026-23455.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng... | 9.1 | 0.0159 | | | [CVE-2026-31402](https://patchblox.com/security/data/cve/CVE-2026-31402.md) | High | kernel-64kb: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638). | 9.8 | 0.0122 | | | [CVE-2026-43407](https://patchblox.com/security/data/cve/CVE-2026-43407.md) | High | kernel-64kb: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (bsc#1265020). | 9.1 | 0.0066 | | | [CVE-2026-43406](https://patchblox.com/security/data/cve/CVE-2026-43406.md) | High | kernel-64kb: libceph: prevent potential out-of-bounds reads in process_message_header() (bsc#1265073). | 9.1 | 0.0061 | | | [CVE-2026-43405](https://patchblox.com/security/data/cve/CVE-2026-43405.md) | High | kernel-64kb: libceph: Use u32 for non-negative values in ceph_monmap_decode() (bsc#1264741). | 7.5 | 0.0060 | | | [CVE-2026-43441](https://patchblox.com/security/data/cve/CVE-2026-43441.md) | High | kernel-64kb: net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1264674). | 7.5 | 0.0059 | | | [CVE-2026-43464](https://patchblox.com/security/data/cve/CVE-2026-43464.md) | High | net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ | 7.5 | 0.0055 | | | [CVE-2026-23456](https://patchblox.com/security/data/cve/CVE-2026-23456.md) | High | kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703). | 8.2 | 0.0054 | | | [CVE-2026-43383](https://patchblox.com/security/data/cve/CVE-2026-43383.md) | High | kernel-64kb: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744). | 9.4 | 0.0054 | | | [CVE-2026-43452](https://patchblox.com/security/data/cve/CVE-2026-43452.md) | High | kernel-64kb: netfilter: x_tables: guard option walkers against 1-byte tail reads (bsc#1265142). | 8.2 | 0.0054 | | | [CVE-2026-43365](https://patchblox.com/security/data/cve/CVE-2026-43365.md) | High | kernel-64kb: xfs: fix undersized l_iclog_roundoff values (bsc#1265119). | 8.2 | 0.0051 | | | [CVE-2026-23457](https://patchblox.com/security/data/cve/CVE-2026-23457.md) | High | kernel-64kb: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686). | 8.6 | 0.0045 | | | [CVE-2026-43466](https://patchblox.com/security/data/cve/CVE-2026-43466.md) | High | kernel-64kb: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (bsc#1264790). | 8.2 | 0.0041 | | | [CVE-2026-43362](https://patchblox.com/security/data/cve/CVE-2026-43362.md) | High | kernel-64kb: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989). | 8.1 | 0.0026 | | | [CVE-2026-23278](https://patchblox.com/security/data/cve/CVE-2026-23278.md) | High | netfilter: nf_tables: always walk all pending catchall elements | 7.8 | 0.0023 | | | [CVE-2026-31788](https://patchblox.com/security/data/cve/CVE-2026-31788.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: xen/privcmd: restrict usage in unprivileged domU (bsc#1259707). | 8.2 | 0.0019 | | | [CVE-2026-43456](https://patchblox.com/security/data/cve/CVE-2026-43456.md) | High | kernel-64kb: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734). | 7.8 | 0.0019 | | | [CVE-2026-23274](https://patchblox.com/security/data/cve/CVE-2026-23274.md) | High | netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels | 7.8 | 0.0018 | | | [CVE-2026-23272](https://patchblox.com/security/data/cve/CVE-2026-23272.md) | High | netfilter: nf_tables: unconditionally bump set->nelems before insertion | 7.8 | 0.0018 | | | [CVE-2026-23383](https://patchblox.com/security/data/cve/CVE-2026-23383.md) | High | bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing | 7.8 | 0.0018 | | | [CVE-2026-23392](https://patchblox.com/security/data/cve/CVE-2026-23392.md) | High | netfilter: nf_tables: release flowtable after rcu grace period on error | 8.8 | 0.0017 | | | [CVE-2026-43368](https://patchblox.com/security/data/cve/CVE-2026-43368.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0016 | | | [CVE-2026-43408](https://patchblox.com/security/data/cve/CVE-2026-43408.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 | | | [CVE-2026-23413](https://patchblox.com/security/data/cve/CVE-2026-23413.md) | High | kernel-uek64k-modules-deprecated: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 | | | [CVE-2026-43374](https://patchblox.com/security/data/cve/CVE-2026-43374.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0016 | | | [CVE-2026-23412](https://patchblox.com/security/data/cve/CVE-2026-23412.md) | High | kernel-64kb: netfilter: bpf: defer hook memory release until rcu readers are done (bsc#1261412). | 7.8 | 0.0016 | | | [CVE-2026-23343](https://patchblox.com/security/data/cve/CVE-2026-23343.md) | High | xdp: produce a warning when calculated tailroom is negative | 7.8 | 0.0014 | | | [CVE-2026-23359](https://patchblox.com/security/data/cve/CVE-2026-23359.md) | High | bpf: Fix stack-out-of-bounds write in devmap | 7.8 | 0.0014 | | | [CVE-2026-23245](https://patchblox.com/security/data/cve/CVE-2026-23245.md) | High | net/sched: act_gate: snapshot parameters with RCU on replace | 7.8 | 0.0014 | | | [CVE-2026-23317](https://patchblox.com/security/data/cve/CVE-2026-23317.md) | High | drm/vmwgfx: Return the correct value in vmw_translate_ptr functions | 7.8 | 0.0014 | | | [CVE-2026-23270](https://patchblox.com/security/data/cve/CVE-2026-23270.md) | High | kernel-livepatch-SLE15-SP7-RT_Update_11: net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (bsc#1259886). | 8.1 | 0.0014 | | | [CVE-2026-23449](https://patchblox.com/security/data/cve/CVE-2026-23449.md) | High | kernel-default: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779). | 7.8 | 0.0014 | | | [CVE-2026-23458](https://patchblox.com/security/data/cve/CVE-2026-23458.md) | High | kernel-64kb: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781). | 7.8 | 0.0014 | | | [CVE-2026-23319](https://patchblox.com/security/data/cve/CVE-2026-23319.md) | High | bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim | 7.8 | 0.0014 | | | [CVE-2026-23326](https://patchblox.com/security/data/cve/CVE-2026-23326.md) | High | dtb-aarch64: xsk: Fix fragment node deletion to prevent buffer leak (bsc#1260606). | 7.8 | 0.0013 | | | [CVE-2026-23351](https://patchblox.com/security/data/cve/CVE-2026-23351.md) | High | netfilter: nft_set_pipapo: split gc into unlink and reclaim phase | 7.8 | 0.0013 | | | [CVE-2026-23354](https://patchblox.com/security/data/cve/CVE-2026-23354.md) | High | kernel-64kb: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801). | 7.8 | 0.0013 | | | [CVE-2026-23293](https://patchblox.com/security/data/cve/CVE-2026-23293.md) | High | net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled | 7.5 | 0.0013 | | | [CVE-2026-23300](https://patchblox.com/security/data/cve/CVE-2026-23300.md) | High | net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop | 7.5 | 0.0013 | | | [CVE-2026-23352](https://patchblox.com/security/data/cve/CVE-2026-23352.md) | High | x86/efi: defer freeing of boot services memory | 7.1 | 0.0013 | | | [CVE-2026-43450](https://patchblox.com/security/data/cve/CVE-2026-43450.md) | High | kernel-rt-64k-modules-core: kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() | 8.8 | 0.0013 | | | [CVE-2026-43427](https://patchblox.com/security/data/cve/CVE-2026-43427.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 | | | [CVE-2026-23248](https://patchblox.com/security/data/cve/CVE-2026-23248.md) | High | perf/core: Fix refcount bug and potential UAF in perf_mmap | 7.8 | 0.0013 | | | [CVE-2026-23391](https://patchblox.com/security/data/cve/CVE-2026-23391.md) | High | netfilter: xt_CT: drop pending enqueued packets on template removal | 7.8 | 0.0013 | | | [CVE-2026-31403](https://patchblox.com/security/data/cve/CVE-2026-31403.md) | High | kernel-64kb: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796). | 7.8 | 0.0013 | | | [CVE-2026-43403](https://patchblox.com/security/data/cve/CVE-2026-43403.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 8.8 | 0.0013 | | | [CVE-2026-23322](https://patchblox.com/security/data/cve/CVE-2026-23322.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free and list corruption on... | 7.8 | 0.0013 | | | [CVE-2026-23244](https://patchblox.com/security/data/cve/CVE-2026-23244.md) | High | nvme: fix memory allocation in nvme_pr_read_keys() | 7.1 | 0.0013 | | | [CVE-2026-31541](https://patchblox.com/security/data/cve/CVE-2026-31541.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix trace_marker copy link list updates... | 7.8 | 0.0013 | | | [CVE-2026-43366](https://patchblox.com/security/data/cve/CVE-2026-43366.md) | High | kernel-docs: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265116). | 7.8 | 0.0013 | | | [CVE-2026-23296](https://patchblox.com/security/data/cve/CVE-2026-23296.md) | High | scsi: core: Fix refcount leak for tagset_refcnt | 7.1 | 0.0013 | | | [CVE-2026-23310](https://patchblox.com/security/data/cve/CVE-2026-23310.md) | High | bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded | 7.1 | 0.0013 | | | [CVE-2026-23397](https://patchblox.com/security/data/cve/CVE-2026-23397.md) | High | nfnetlink_osf: validate individual option lengths in fingerprints | 7.1 | 0.0013 | | | [CVE-2026-43449](https://patchblox.com/security/data/cve/CVE-2026-43449.md) | High | kernel-64kb: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set (bsc#1265023). | 7.1 | 0.0013 | | | [CVE-2026-43453](https://patchblox.com/security/data/cve/CVE-2026-43453.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.1 | 0.0013 | | | [CVE-2026-43438](https://patchblox.com/security/data/cve/CVE-2026-43438.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0013 | | | [CVE-2026-31389](https://patchblox.com/security/data/cve/CVE-2026-31389.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 | | | [CVE-2026-43388](https://patchblox.com/security/data/cve/CVE-2026-43388.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: clear walk_control on inactive co... | 7.8 | 0.0012 | | | [CVE-2026-23388](https://patchblox.com/security/data/cve/CVE-2026-23388.md) | High | Squashfs: check metadata block offset is within range | 7.1 | 0.0012 | | | [CVE-2026-31397](https://patchblox.com/security/data/cve/CVE-2026-31397.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix use of NULL folio in move_pa... | 7.8 | 0.0012 | | | [CVE-2026-31398](https://patchblox.com/security/data/cve/CVE-2026-31398.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix incorrect pte restoration for lazyf... | 7.8 | 0.0012 | | | [CVE-2026-23375](https://patchblox.com/security/data/cve/CVE-2026-23375.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes f... | 7.5 | 0.0012 | | | [CVE-2026-45985](https://patchblox.com/security/data/cve/CVE-2026-45985.md) | High | kernel-64kb: ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700). | 7.0 | 0.0012 | | | [CVE-2026-31399](https://patchblox.com/security/data/cve/CVE-2026-31399.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0012 | | | [CVE-2026-31392](https://patchblox.com/security/data/cve/CVE-2026-31392.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.1 | 0.0012 | | | [CVE-2026-43060](https://patchblox.com/security/data/cve/CVE-2026-43060.md) | High | kernel-64kb: netfilter: nft_ct: drop pending enqueued packets on removal (bsc#1264183). | 7.8 | 0.0012 | | | [CVE-2026-43454](https://patchblox.com/security/data/cve/CVE-2026-43454.md) | High | kernel-debug-devel: kernel: netfilter: nf_tables: Fix for duplicate device in netdev hooks | 8.8 | 0.0012 | | | [CVE-2026-43481](https://patchblox.com/security/data/cve/CVE-2026-43481.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0012 | | | [CVE-2026-23340](https://patchblox.com/security/data/cve/CVE-2026-23340.md) | High | net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs | 7.8 | 0.0012 | | | [CVE-2026-23271](https://patchblox.com/security/data/cve/CVE-2026-23271.md) | High | perf: Fix __perf_event_overflow() vs perf_remove_from_context() race | 7.8 | 0.0011 | | | [CVE-2026-23275](https://patchblox.com/security/data/cve/CVE-2026-23275.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring: ensure ctx->rings is stable for task w... | 7.8 | 0.0010 | | | [CVE-2026-23294](https://patchblox.com/security/data/cve/CVE-2026-23294.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in devmap on PREEMPT_RT On PREEMP... | 7.0 | 0.0009 | | | [CVE-2026-23302](https://patchblox.com/security/data/cve/CVE-2026-23302.md) | High | net: annotate data-races around sk->sk_{data_ready,write_space} | 7.1 | 0.0009 | | | [CVE-2026-31404](https://patchblox.com/security/data/cve/CVE-2026-31404.md) | High | kernel-64kb: xfs: avoid dereferencing log items after push callbacks (bsc#1261628). | 7.8 | n/a | | | [CVE-2026-23440](https://patchblox.com/security/data/cve/CVE-2026-23440.md) | Routine | kernel-64kb: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641). | 4.7 | 0.0028 | | | [CVE-2026-23419](https://patchblox.com/security/data/cve/CVE-2026-23419.md) | Routine | kernel-64kb: net/rds: Fix circular locking dependency in rds_tcp_tune (bsc#1261507). | 5.5 | 0.0019 | | | [CVE-2026-23385](https://patchblox.com/security/data/cve/CVE-2026-23385.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: clone set on flush only S... | 5.5 | 0.0019 | | | [CVE-2026-23276](https://patchblox.com/security/data/cve/CVE-2026-23276.md) | Routine | net: add xmit recursion limit to tunnel xmit functions | 5.5 | 0.0018 | | | [CVE-2026-23247](https://patchblox.com/security/data/cve/CVE-2026-23247.md) | Routine | tcp: secure_seq: add back ports to TS offset | 6.5 | 0.0017 | | | [CVE-2026-43360](https://patchblox.com/security/data/cve/CVE-2026-43360.md) | Routine | kernel-64kb: btrfs: fix transaction abort on file creation due to name hash collision (bsc#1264720). | 5.5 | 0.0016 | | | [CVE-2026-23472](https://patchblox.com/security/data/cve/CVE-2026-23472.md) | Routine | serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN | 5.5 | 0.0016 | | | [CVE-2026-23356](https://patchblox.com/security/data/cve/CVE-2026-23356.md) | Routine | drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() | 6.3 | 0.0014 | | | [CVE-2026-23304](https://patchblox.com/security/data/cve/CVE-2026-23304.md) | Routine | ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() | 5.5 | 0.0013 | | | [CVE-2026-23321](https://patchblox.com/security/data/cve/CVE-2026-23321.md) | Routine | kernel-64kb: mptcp: pm: in-kernel: always mark signal+subflow endp as used (bsc#1260505). | 5.5 | 0.0013 | | | [CVE-2026-23439](https://patchblox.com/security/data/cve/CVE-2026-23439.md) | Routine | udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n | 5.5 | 0.0013 | | | [CVE-2026-23445](https://patchblox.com/security/data/cve/CVE-2026-23445.md) | Routine | kernel-64kb: igc: fix page fault in XDP TX timestamps handling (bsc#1261702). | 5.5 | 0.0013 | | | [CVE-2026-23399](https://patchblox.com/security/data/cve/CVE-2026-23399.md) | Routine | nf_tables: nft_dynset: fix possible stateful expression memleak in error path | 6.5 | 0.0013 | | | [CVE-2026-23437](https://patchblox.com/security/data/cve/CVE-2026-23437.md) | Routine | kernel-livepatch-SLE16_Update_10: net: shaper: protect late read accesses to the hierarchy (bsc#1261845). | 5.5 | 0.0013 | | | [CVE-2026-23346](https://patchblox.com/security/data/cve/CVE-2026-23346.md) | Routine | arm64: io: Extract user memory type in ioremap_prot() | 5.5 | 0.0013 | | | [CVE-2026-23429](https://patchblox.com/security/data/cve/CVE-2026-23429.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Fix crash in iommu_sva_unbind_device(... | 5.5 | 0.0013 | | | [CVE-2026-23303](https://patchblox.com/security/data/cve/CVE-2026-23303.md) | Routine | smb: client: Don't log plaintext credentials in cifs_set_cifscreds | 5.5 | 0.0013 | | | [CVE-2026-23475](https://patchblox.com/security/data/cve/CVE-2026-23475.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 | | | [CVE-2026-43392](https://patchblox.com/security/data/cve/CVE-2026-43392.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-23398](https://patchblox.com/security/data/cve/CVE-2026-23398.md) | Routine | icmp: fix NULL pointer dereference in icmp_tag_validation() | 6.5 | 0.0013 | | | [CVE-2026-31546](https://patchblox.com/security/data/cve/CVE-2026-31546.md) | Routine | net: bonding: fix NULL deref in bond_debug_rlb_hash_show | 5.5 | 0.0013 | | | [CVE-2026-23465](https://patchblox.com/security/data/cve/CVE-2026-23465.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 | | | [CVE-2026-23467](https://patchblox.com/security/data/cve/CVE-2026-23467.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915/dmc: Fix an unlikely NULL pointer defer... | 5.5 | 0.0013 | | | [CVE-2026-23277](https://patchblox.com/security/data/cve/CVE-2026-23277.md) | Routine | net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit | 5.9 | 0.0013 | | | [CVE-2026-23285](https://patchblox.com/security/data/cve/CVE-2026-23285.md) | Routine | drbd: fix null-pointer dereference on local read error | 5.5 | 0.0013 | | | [CVE-2026-23292](https://patchblox.com/security/data/cve/CVE-2026-23292.md) | Routine | scsi: target: Fix recursive locking in __configfs_open_file() | 5.5 | 0.0013 | | | [CVE-2026-23297](https://patchblox.com/security/data/cve/CVE-2026-23297.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-23309](https://patchblox.com/security/data/cve/CVE-2026-23309.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-23313](https://patchblox.com/security/data/cve/CVE-2026-23313.md) | Routine | kernel-64kb: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555). | 5.5 | 0.0013 | | | [CVE-2026-23316](https://patchblox.com/security/data/cve/CVE-2026-23316.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-23355](https://patchblox.com/security/data/cve/CVE-2026-23355.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ata: libata: cancel pending work after clearing... | 5.5 | 0.0013 | | | [CVE-2026-23360](https://patchblox.com/security/data/cve/CVE-2026-23360.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-23369](https://patchblox.com/security/data/cve/CVE-2026-23369.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0013 | | | [CVE-2026-23282](https://patchblox.com/security/data/cve/CVE-2026-23282.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to uninitialised var i... | 5.5 | 0.0013 | | | [CVE-2026-23329](https://patchblox.com/security/data/cve/CVE-2026-23329.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: libie: don't unroll if fwlog isn't supported Th... | 5.5 | 0.0013 | | | [CVE-2026-23331](https://patchblox.com/security/data/cve/CVE-2026-23331.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: udp: Unhash auto-bound connected sk from 4-tuple... | 5.5 | 0.0013 | | | [CVE-2026-23332](https://patchblox.com/security/data/cve/CVE-2026-23332.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: cpufreq: intel_pstate: Fix crash during turbo di... | 5.5 | 0.0013 | | | [CVE-2026-23345](https://patchblox.com/security/data/cve/CVE-2026-23345.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: arm64: gcs: Do not set PTE_SHARED on GCS mapping... | 5.5 | 0.0013 | | | [CVE-2026-23366](https://patchblox.com/security/data/cve/CVE-2026-23366.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/client: Do not destroy NULL modes 'modes' i... | 5.5 | 0.0013 | | | [CVE-2026-23381](https://patchblox.com/security/data/cve/CVE-2026-23381.md) | Routine | net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled | 5.5 | 0.0013 | | | [CVE-2026-23430](https://patchblox.com/security/data/cve/CVE-2026-23430.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Don't overwrite KMS surface dirty tr... | 5.5 | 0.0013 | | | [CVE-2026-23435](https://patchblox.com/security/data/cve/CVE-2026-23435.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86: Move event pointer setup earlier in x8... | 5.5 | 0.0013 | | | [CVE-2026-23436](https://patchblox.com/security/data/cve/CVE-2026-23436.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: shaper: protect from late creation of hiera... | 5.5 | 0.0013 | | | [CVE-2026-23423](https://patchblox.com/security/data/cve/CVE-2026-23423.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: free pages on error in btrfs_uring_read_e... | 5.5 | 0.0012 | | | [CVE-2026-23425](https://patchblox.com/security/data/cve/CVE-2026-23425.md) | Routine | dtb-aarch64: KVM: arm64: Fix ID register initialization for non-protected pKVM guests (bsc#1261506). | 5.5 | 0.0012 | | | [CVE-2026-23443](https://patchblox.com/security/data/cve/CVE-2026-23443.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 | | | [CVE-2026-31540](https://patchblox.com/security/data/cve/CVE-2026-31540.md) | Routine | drm/i915/gt: Check set_default_submission() before deferencing | 5.5 | 0.0012 | | | [CVE-2026-43359](https://patchblox.com/security/data/cve/CVE-2026-43359.md) | Routine | kernel-64kb: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719). | 5.5 | 0.0012 | | | [CVE-2026-43361](https://patchblox.com/security/data/cve/CVE-2026-43361.md) | Routine | kernel-64kb: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722). | 5.5 | 0.0012 | | | [CVE-2026-43363](https://patchblox.com/security/data/cve/CVE-2026-43363.md) | Routine | kernel-64kb: x86/apic: Disable x2apic on resume if the kernel expects so (bsc#1265068). | 5.5 | 0.0012 | | | [CVE-2026-43411](https://patchblox.com/security/data/cve/CVE-2026-43411.md) | Routine | kernel-64kb: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672). | 5.5 | 0.0012 | | | [CVE-2026-43419](https://patchblox.com/security/data/cve/CVE-2026-43419.md) | Routine | kernel-rt-debug: kernel: ceph: fix memory leaks in ceph_mdsc_build_path() | 5.5 | 0.0012 | | | [CVE-2026-43428](https://patchblox.com/security/data/cve/CVE-2026-43428.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 | | | [CVE-2026-43432](https://patchblox.com/security/data/cve/CVE-2026-43432.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 | | | [CVE-2026-43445](https://patchblox.com/security/data/cve/CVE-2026-43445.md) | Routine | kernel-64kb: e1000/e1000e: Fix leak in DMA error cleanup (bsc#1265041). | 5.5 | 0.0012 | | | [CVE-2026-43451](https://patchblox.com/security/data/cve/CVE-2026-43451.md) | Routine | kernel-64kb: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009). | 5.5 | 0.0012 | | | [CVE-2026-43161](https://patchblox.com/security/data/cve/CVE-2026-43161.md) | Routine | iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode | 5.5 | 0.0012 | | | [CVE-2026-43393](https://patchblox.com/security/data/cve/CVE-2026-43393.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-43394](https://patchblox.com/security/data/cve/CVE-2026-43394.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-43409](https://patchblox.com/security/data/cve/CVE-2026-43409.md) | Routine | kernel-64kb: kprobes: avoid crash when rmmod/insmod after ftrace killed (bsc#1264747). | 5.5 | 0.0012 | | | [CVE-2026-31543](https://patchblox.com/security/data/cve/CVE-2026-31543.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: crash_dump: don't log dm-crypt key bytes in read... | 5.5 | 0.0012 | | | [CVE-2026-43351](https://patchblox.com/security/data/cve/CVE-2026-43351.md) | Routine | kernel-64kb: KVM: arm64: gic: Set vgic_model before initing private IRQs (bsc#1265082). | 5.5 | 0.0012 | | | [CVE-2026-43358](https://patchblox.com/security/data/cve/CVE-2026-43358.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: add missing RCU unlock in error path in t... | 5.5 | 0.0012 | | | [CVE-2026-43482](https://patchblox.com/security/data/cve/CVE-2026-43482.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-31400](https://patchblox.com/security/data/cve/CVE-2026-31400.md) | Routine | kernel-64kb: sunrpc: fix cache_request leak in cache_release (bsc#1261645). | 5.5 | 0.0012 | | | [CVE-2026-43265](https://patchblox.com/security/data/cve/CVE-2026-43265.md) | Routine | kernel-64kb: KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (bsc#1264427). | 5.5 | 0.0012 | | | [CVE-2026-23380](https://patchblox.com/security/data/cve/CVE-2026-23380.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0012 | | | [CVE-2026-43470](https://patchblox.com/security/data/cve/CVE-2026-43470.md) | Routine | kernel-64kb: nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (bsc#1265128). | 5.5 | 0.0012 | | | [CVE-2026-43467](https://patchblox.com/security/data/cve/CVE-2026-43467.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 | | | [CVE-2026-43472](https://patchblox.com/security/data/cve/CVE-2026-43472.md) | Routine | kernel-64kb: unshare: fix unshare_fs() handling (bsc#1264748). | 5.5 | 0.0011 | | | [CVE-2026-43473](https://patchblox.com/security/data/cve/CVE-2026-43473.md) | Routine | kernel-64kb: scsi: mpi3mr: Add NULL checks when resetting request and reply queues (bsc#1264731). | 5.5 | 0.0011 | | | [CVE-2026-43483](https://patchblox.com/security/data/cve/CVE-2026-43483.md) | Routine | kernel-64kb: KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (bsc#1265240). | 5.5 | 0.0011 | | | [CVE-2026-43486](https://patchblox.com/security/data/cve/CVE-2026-43486.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0011 | | | [CVE-2026-43487](https://patchblox.com/security/data/cve/CVE-2026-43487.md) | Routine | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0011 | | | [CVE-2026-43488](https://patchblox.com/security/data/cve/CVE-2026-43488.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 | | | [CVE-2026-43474](https://patchblox.com/security/data/cve/CVE-2026-43474.md) | Routine | fs: init flags_valid before calling vfs_fileattr_get | 5.5 | 0.0011 | | | [CVE-2026-43477](https://patchblox.com/security/data/cve/CVE-2026-43477.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: Configure VRR timings after enabli... | 5.5 | 0.0011 | | | [CVE-2026-23368](https://patchblox.com/security/data/cve/CVE-2026-23368.md) | Routine | kernel-source: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530). | 5.5 | 0.0010 | | | [CVE-2026-23362](https://patchblox.com/security/data/cve/CVE-2026-23362.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 | | | [CVE-2026-23311](https://patchblox.com/security/data/cve/CVE-2026-23311.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix invalid wait context in ctx_sched... | 5.5 | 0.0010 | | | [CVE-2026-23452](https://patchblox.com/security/data/cve/CVE-2026-23452.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0010 | | | [CVE-2026-43420](https://patchblox.com/security/data/cve/CVE-2026-43420.md) | Routine | cephfs: ceph: fix i_nlink underrun during async unlink (bsc#1264814). | 5.5 | 0.0009 | | | [CVE-2026-43404](https://patchblox.com/security/data/cve/CVE-2026-43404.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm: Fix a hmm_range_fault() livelock / starvatio... | 5.5 | 0.0009 | | | [CVE-2026-23441](https://patchblox.com/security/data/cve/CVE-2026-23441.md) | Routine | kernel-64kb: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768). | 5.5 | 0.0009 | | | [CVE-2026-43061](https://patchblox.com/security/data/cve/CVE-2026-43061.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0009 | | | [CVE-2026-43468](https://patchblox.com/security/data/cve/CVE-2026-43468.md) | Routine | kernel-64kb: net/mlx5: Fix deadlock between devlink lock and esw->wq (bsc#1264978). | 5.5 | 0.0009 | | | [CVE-2026-23342](https://patchblox.com/security/data/cve/CVE-2026-23342.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix race in cpumap on PREEMPT_RT On PREEMP... | 4.7 | 0.0009 | | | [CVE-2026-43439](https://patchblox.com/security/data/cve/CVE-2026-43439.md) | Routine | kernel-64kb: cgroup: fix race between task migration and iteration (bsc#1265141). | 4.7 | 0.0009 | | | [CVE-2026-43448](https://patchblox.com/security/data/cve/CVE-2026-43448.md) | Routine | kernel-64kb: nvme-pci: Fix race bug in nvme_poll_irqdisable() (bsc#1264807). | 4.7 | 0.0009 | | | [CVE-2026-23473](https://patchblox.com/security/data/cve/CVE-2026-23473.md) | Routine | io_uring/poll: fix multishot recv missing EOF on wakeup race | 4.7 | n/a | | --- Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.