{ "fix": "ALAS2023-2026-1681", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1681", "summary": "ALAS2023-2026-1681, released May 11, 2026, fixes 174 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 22 packages", "released": "2026-05-11T09:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-31402, rated Critical", "supported": true, "cveCount": 174, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.01587, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1681.html", "appliesTo": [ { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "bpftool-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel", "productUrl": "https://patchblox.com/security/product/linux/kernel", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel-headers", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-libbpf", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-libbpf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-libbpf-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-libbpf-static", "productUrl": "https://patchblox.com/security/product/linux/kernel-libbpf-static", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.1.168-202.320", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.168-202.320", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "kernel-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "perf", "productUrl": "https://patchblox.com/security/product/linux/perf", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "python3-perf", "productUrl": "https://patchblox.com/security/product/linux/python3-perf", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true }, { "product": "python3-perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.168-202.320.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-31402", "url": "https://patchblox.com/security/cve/CVE-2026-31402", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.01219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68206", "url": "https://patchblox.com/security/cve/CVE-2025-68206", "title": "netfilter: nft_ct: add seqadj extension for natted connections", "priority": "Urgent", "severity": "Critical", "cvss": 9.1, "epss": 0.00712, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43407", "url": "https://patchblox.com/security/cve/CVE-2026-43407", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in c...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00656, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43406", "url": "https://patchblox.com/security/cve/CVE-2026-43406", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads i...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00613, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43383", "url": "https://patchblox.com/security/cve/CVE-2026-43383", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-t...", "priority": "Urgent", "severity": "critical", "cvss": 9.4, "epss": 0.00541, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43341", "url": "https://patchblox.com/security/cve/CVE-2026-43341", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/ipv6: ioam6: prevent schema length wraparoun...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45899", "url": "https://patchblox.com/security/cve/CVE-2026-45899", "title": "ext4: drop extent cache when splitting extent fails", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23455", "url": "https://patchblox.com/security/cve/CVE-2026-23455", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: nf_conntrack_h323: check for zero leng...", "priority": "High", "severity": "moderate", "cvss": 9.1, "epss": 0.01587, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40135", "url": "https://patchblox.com/security/cve/CVE-2025-40135", "title": "ipv6: use RCU in ip6_xmit()", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.0071, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43037", "url": "https://patchblox.com/security/cve/CVE-2026-43037", "title": "ip6_tunnel: clear skb2-\u003Ecb[] in ip4ip6_err()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00688, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31682", "url": "https://patchblox.com/security/cve/CVE-2026-31682", "title": "bridge: br_nd_send: linearize skb before parsing ND options", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00638, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43405", "url": "https://patchblox.com/security/cve/CVE-2026-43405", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: Use u32 for non-negative values in ceph...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00598, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43441", "url": "https://patchblox.com/security/cve/CVE-2026-43441", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: bonding: Fix nd_tbl NULL dereference when I...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00585, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31414", "url": "https://patchblox.com/security/cve/CVE-2026-31414", "title": "netfilter: nf_conntrack_expect: use expect-\u003Ehelper", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00581, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23456", "url": "https://patchblox.com/security/cve/CVE-2026-23456", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: fix OOB read in de...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00543, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43452", "url": "https://patchblox.com/security/cve/CVE-2026-43452", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers agains...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00541, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43365", "url": "https://patchblox.com/security/cve/CVE-2026-43365", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00506, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31448", "url": "https://patchblox.com/security/cve/CVE-2026-31448", "title": "ext4: avoid infinite loops caused by residual data", "priority": "High", "severity": "Important", "cvss": 9.4, "epss": 0.00499, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23457", "url": "https://patchblox.com/security/cve/CVE-2026-23457", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix Content-Length...", "priority": "High", "severity": "high", "cvss": 8.6, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43057", "url": "https://patchblox.com/security/cve/CVE-2026-43057", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_C...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00437, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31450", "url": "https://patchblox.com/security/cve/CVE-2026-31450", "title": "ext4: publish jinode after initialization", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43466", "url": "https://patchblox.com/security/cve/CVE-2026-43466", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ r...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31467", "url": "https://patchblox.com/security/cve/CVE-2026-31467", "title": "erofs: add GFP_NOIO in the bio completion if needed", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00378, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31570", "url": "https://patchblox.com/security/cve/CVE-2026-31570", "title": "can: gw: fix OOB heap access in cgw_csum_crc8_rel()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43038", "url": "https://patchblox.com/security/cve/CVE-2026-43038", "title": "kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00255, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38192", "url": "https://patchblox.com/security/cve/CVE-2025-38192", "title": "net: clear the dst when changing skb protocol", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71067", "url": "https://patchblox.com/security/cve/CVE-2025-71067", "title": "ntfs: set dummy blocksize to read boot_block when mounting", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31788", "url": "https://patchblox.com/security/cve/CVE-2026-31788", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: restrict usage in unprivileged domU...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23401", "url": "https://patchblox.com/security/cve/CVE-2026-23401", "title": "KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38704", "url": "https://patchblox.com/security/cve/CVE-2025-38704", "title": "rcu/nocb: Fix possible invalid rdp\u0027s-\u003Enocb_cb_kthread pointer access", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23274", "url": "https://patchblox.com/security/cve/CVE-2026-23274", "title": "netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43329", "url": "https://patchblox.com/security/cve/CVE-2026-43329", "title": "kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31674", "url": "https://patchblox.com/security/cve/CVE-2026-31674", "title": "netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23392", "url": "https://patchblox.com/security/cve/CVE-2026-23392", "title": "netfilter: nf_tables: release flowtable after rcu grace period on error", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31680", "url": "https://patchblox.com/security/cve/CVE-2026-31680", "title": "net: ipv6: flowlabel: defer exclusive option free until RCU teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31679", "url": "https://patchblox.com/security/cve/CVE-2026-31679", "title": "openvswitch: validate MPLS set/set_masked payload length", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45892", "url": "https://patchblox.com/security/cve/CVE-2026-45892", "title": "ext4: drop extent cache after doing PARTIAL_VALID1 zeroout", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43339", "url": "https://patchblox.com/security/cve/CVE-2026-43339", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv6: prevent possible UaF in addrconf_permanent_...", "priority": "High", "severity": "moderate", "cvss": 8.1, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68265", "url": "https://patchblox.com/security/cve/CVE-2025-68265", "title": "nvme: fix admin request_queue lifetime", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23204", "url": "https://patchblox.com/security/cve/CVE-2026-23204", "title": "kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: L...", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31426", "url": "https://patchblox.com/security/cve/CVE-2026-31426", "title": "ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45920", "url": "https://patchblox.com/security/cve/CVE-2026-45920", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix dirtyclusters double decrement on fs s...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31447", "url": "https://patchblox.com/security/cve/CVE-2026-31447", "title": "ext4: reject mount if bigalloc with s_first_data_block != 0", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23343", "url": "https://patchblox.com/security/cve/CVE-2026-23343", "title": "xdp: produce a warning when calculated tailroom is negative", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23359", "url": "https://patchblox.com/security/cve/CVE-2026-23359", "title": "bpf: Fix stack-out-of-bounds write in devmap", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23317", "url": "https://patchblox.com/security/cve/CVE-2026-23317", "title": "drm/vmwgfx: Return the correct value in vmw_translate_ptr functions", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31446", "url": "https://patchblox.com/security/cve/CVE-2026-31446", "title": "ext4: fix use-after-free in update_super_work when racing with umount", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23270", "url": "https://patchblox.com/security/cve/CVE-2026-23270", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: Only allow act_ct to bind to clsact/i...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23449", "url": "https://patchblox.com/security/cve/CVE-2026-23449", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23458", "url": "https://patchblox.com/security/cve/CVE-2026-23458", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23319", "url": "https://patchblox.com/security/cve/CVE-2026-23319", "title": "bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31452", "url": "https://patchblox.com/security/cve/CVE-2026-31452", "title": "ext4: convert inline data to extents when truncate exceeds inline size", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31469", "url": "https://patchblox.com/security/cve/CVE-2026-31469", "title": "virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43030", "url": "https://patchblox.com/security/cve/CVE-2026-43030", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe() for pointers to packet In ca...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23351", "url": "https://patchblox.com/security/cve/CVE-2026-23351", "title": "netfilter: nft_set_pipapo: split gc into unlink and reclaim phase", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23293", "url": "https://patchblox.com/security/cve/CVE-2026-23293", "title": "net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23300", "url": "https://patchblox.com/security/cve/CVE-2026-23300", "title": "net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23352", "url": "https://patchblox.com/security/cve/CVE-2026-23352", "title": "x86/efi: defer freeing of boot services memory", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31678", "url": "https://patchblox.com/security/cve/CVE-2026-31678", "title": "openvswitch: defer tunnel netdev_put to RCU release", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43450", "url": "https://patchblox.com/security/cve/CVE-2026-43450", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: f...", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43028", "url": "https://patchblox.com/security/cve/CVE-2026-43028", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-termin...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43427", "url": "https://patchblox.com/security/cve/CVE-2026-43427", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in rea...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23391", "url": "https://patchblox.com/security/cve/CVE-2026-23391", "title": "netfilter: xt_CT: drop pending enqueued packets on template removal", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31403", "url": "https://patchblox.com/security/cve/CVE-2026-31403", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43027", "url": "https://patchblox.com/security/cve/CVE-2026-43027", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to e...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31453", "url": "https://patchblox.com/security/cve/CVE-2026-31453", "title": "xfs: avoid dereferencing log items after push callbacks", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31759", "url": "https://patchblox.com/security/cve/CVE-2026-31759", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_inte...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43328", "url": "https://patchblox.com/security/cve/CVE-2026-43328", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: fix double free in cpufreq_db...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31518", "url": "https://patchblox.com/security/cve/CVE-2026-31518", "title": "esp: fix skb leak with espintcp and async crypto", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43040", "url": "https://patchblox.com/security/cve/CVE-2026-43040", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: fix ndisc_ra_useropt to initia...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31515", "url": "https://patchblox.com/security/cve/CVE-2026-31515", "title": "af_key: validate families in pfkey_send_migrate()", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31521", "url": "https://patchblox.com/security/cve/CVE-2026-31521", "title": "module: Fix kernel panic when a symbol st_shndx is out of bounds", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31555", "url": "https://patchblox.com/security/cve/CVE-2026-31555", "title": "futex: Clear stale exiting pointer in futex_lock_pi() retry path", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43025", "url": "https://patchblox.com/security/cve/CVE-2026-43025", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43366", "url": "https://patchblox.com/security/cve/CVE-2026-43366", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23296", "url": "https://patchblox.com/security/cve/CVE-2026-23296", "title": "scsi: core: Fix refcount leak for tagset_refcnt", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23397", "url": "https://patchblox.com/security/cve/CVE-2026-23397", "title": "nfnetlink_osf: validate individual option lengths in fingerprints", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31454", "url": "https://patchblox.com/security/cve/CVE-2026-31454", "title": "xfs: save ailp before dropping the AIL lock in push callbacks", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31455", "url": "https://patchblox.com/security/cve/CVE-2026-31455", "title": "xfs: stop reclaim before pushing AIL during unmount", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31695", "url": "https://patchblox.com/security/cve/CVE-2026-31695", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43449", "url": "https://patchblox.com/security/cve/CVE-2026-43449", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_s...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43453", "url": "https://patchblox.com/security/cve/CVE-2026-43453", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: fix stack out-of-boun...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31416", "url": "https://patchblox.com/security/cve/CVE-2026-31416", "title": "netfilter: nfnetlink_log: account for netlink header size", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31418", "url": "https://patchblox.com/security/cve/CVE-2026-31418", "title": "netfilter: ipset: drop logically empty buckets in mtype_del", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31427", "url": "https://patchblox.com/security/cve/CVE-2026-31427", "title": "netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31503", "url": "https://patchblox.com/security/cve/CVE-2026-31503", "title": "udp: Fix wildcard bind conflict check when using hash2", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23388", "url": "https://patchblox.com/security/cve/CVE-2026-23388", "title": "Squashfs: check metadata block offset is within range", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31492", "url": "https://patchblox.com/security/cve/CVE-2026-31492", "title": "RDMA/irdma: Initialize free_qp completion before using it", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31519", "url": "https://patchblox.com/security/cve/CVE-2026-31519", "title": "btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31399", "url": "https://patchblox.com/security/cve/CVE-2026-31399", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/bus: Fix potential use after free in asyn...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31392", "url": "https://patchblox.com/security/cve/CVE-2026-31392", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix krb5 mount with username option...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43047", "url": "https://patchblox.com/security/cve/CVE-2026-43047", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report response...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43060", "url": "https://patchblox.com/security/cve/CVE-2026-43060", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: drop pending enqueued packets...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43281", "url": "https://patchblox.com/security/cve/CVE-2026-43281", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23340", "url": "https://patchblox.com/security/cve/CVE-2026-23340", "title": "net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23271", "url": "https://patchblox.com/security/cve/CVE-2026-23271", "title": "perf: Fix __perf_event_overflow() vs perf_remove_from_context() race", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00111, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31508", "url": "https://patchblox.com/security/cve/CVE-2026-31508", "title": "net: openvswitch: Avoid releasing netdev before teardown completes", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31504", "url": "https://patchblox.com/security/cve/CVE-2026-31504", "title": "net: fix fanout UAF in packet_release() via NETDEV_UP race", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31473", "url": "https://patchblox.com/security/cve/CVE-2026-31473", "title": "media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31523", "url": "https://patchblox.com/security/cve/CVE-2026-31523", "title": "nvme-pci: ensure we\u0027re polling a polled queue", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00089, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71161", "url": "https://patchblox.com/security/cve/CVE-2025-71161", "title": "dm-verity: disable recursive forward error correction", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00468, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23414", "url": "https://patchblox.com/security/cve/CVE-2026-23414", "title": "tls: Purge async_hold in tls_decrypt_async_wait()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71269", "url": "https://patchblox.com/security/cve/CVE-2025-71269", "title": "btrfs: do not free data reservation in fallback from inline due to -ENOSPC", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68239", "url": "https://patchblox.com/security/cve/CVE-2025-68239", "title": "binfmt_misc: restore write access before closing files opened by open_exec()", "priority": "Routine", "severity": "Moderate", "cvss": 6.2, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23154", "url": "https://patchblox.com/security/cve/CVE-2026-23154", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: fix segmentation of forwarding fraglist GRO...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39748", "url": "https://patchblox.com/security/cve/CVE-2025-39748", "title": "bpf: Forget ranges when refining tnum after JSET", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39764", "url": "https://patchblox.com/security/cve/CVE-2025-39764", "title": "netfilter: ctnetlink: remove refcounting in expectation dumpers", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43360", "url": "https://patchblox.com/security/cve/CVE-2026-43360", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on file creation du...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45858", "url": "https://patchblox.com/security/cve/CVE-2026-45858", "title": "ext4: don\u0027t zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23113", "url": "https://patchblox.com/security/cve/CVE-2026-23113", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23100", "url": "https://patchblox.com/security/cve/CVE-2026-23100", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb_pmd_shared() Patch seri...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23141", "url": "https://patchblox.com/security/cve/CVE-2026-23141", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23157", "url": "https://patchblox.com/security/cve/CVE-2026-23157", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23356", "url": "https://patchblox.com/security/cve/CVE-2026-23356", "title": "drbd: fix \u0022LOGIC BUG\u0022 in drbd_al_begin_io_nonblock()", "priority": "Routine", "severity": "Moderate", "cvss": 6.3, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31428", "url": "https://patchblox.com/security/cve/CVE-2026-31428", "title": "netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23304", "url": "https://patchblox.com/security/cve/CVE-2026-23304", "title": "ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23321", "url": "https://patchblox.com/security/cve/CVE-2026-23321", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always mark signal\u002Bsubflow...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23439", "url": "https://patchblox.com/security/cve/CVE-2026-23439", "title": "udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23303", "url": "https://patchblox.com/security/cve/CVE-2026-23303", "title": "smb: client: Don\u0027t log plaintext credentials in cifs_set_cifscreds", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23398", "url": "https://patchblox.com/security/cve/CVE-2026-23398", "title": "icmp: fix NULL pointer dereference in icmp_tag_validation()", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43026", "url": "https://patchblox.com/security/cve/CVE-2026-43026", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: zero expect NAT fields whe...", "priority": "Routine", "severity": "medium", "cvss": 6.1, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31495", "url": "https://patchblox.com/security/cve/CVE-2026-31495", "title": "netfilter: ctnetlink: use netlink policy range checks", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31546", "url": "https://patchblox.com/security/cve/CVE-2026-31546", "title": "net: bonding: fix NULL deref in bond_debug_rlb_hash_show", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31752", "url": "https://patchblox.com/security/cve/CVE-2026-31752", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: validate ND option lengths...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43024", "url": "https://patchblox.com/security/cve/CVE-2026-43024", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject immediate NF_QUEUE...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43035", "url": "https://patchblox.com/security/cve/CVE-2026-43035", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to i...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23277", "url": "https://patchblox.com/security/cve/CVE-2026-23277", "title": "net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23292", "url": "https://patchblox.com/security/cve/CVE-2026-23292", "title": "scsi: target: Fix recursive locking in __configfs_open_file()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31422", "url": "https://patchblox.com/security/cve/CVE-2026-31422", "title": "net/sched: cls_flow: fix NULL pointer dereference on shared blocks", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31424", "url": "https://patchblox.com/security/cve/CVE-2026-31424", "title": "netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23381", "url": "https://patchblox.com/security/cve/CVE-2026-23381", "title": "net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31421", "url": "https://patchblox.com/security/cve/CVE-2026-31421", "title": "net/sched: cls_fw: fix NULL pointer dereference on shared blocks", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31423", "url": "https://patchblox.com/security/cve/CVE-2026-31423", "title": "net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31496", "url": "https://patchblox.com/security/cve/CVE-2026-31496", "title": "netfilter: nf_conntrack_expect: skip expectations in other netns via proc", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23443", "url": "https://patchblox.com/security/cve/CVE-2026-23443", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix previous acpi_processor_err...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31434", "url": "https://patchblox.com/security/cve/CVE-2026-31434", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix leak of kobject name for sub-group sp...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31524", "url": "https://patchblox.com/security/cve/CVE-2026-31524", "title": "HID: asus: avoid memory leak in asus_report_fixup()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31540", "url": "https://patchblox.com/security/cve/CVE-2026-31540", "title": "drm/i915/gt: Check set_default_submission() before deferencing", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31738", "url": "https://patchblox.com/security/cve/CVE-2026-31738", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31781", "url": "https://patchblox.com/security/cve/CVE-2026-31781", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/ioc32: stop speculation on the drm_compat_io...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43013", "url": "https://patchblox.com/security/cve/CVE-2026-43013", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creat...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43333", "url": "https://patchblox.com/security/cve/CVE-2026-43333", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTR_TO_BUF...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43359", "url": "https://patchblox.com/security/cve/CVE-2026-43359", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on set received ioc...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43361", "url": "https://patchblox.com/security/cve/CVE-2026-43361", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort when snapshotting r...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43363", "url": "https://patchblox.com/security/cve/CVE-2026-43363", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/apic: Disable x2apic on resume if the kernel...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43411", "url": "https://patchblox.com/security/cve/CVE-2026-43411", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix divide-by-zero in tipc_sk_filter_conne...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43428", "url": "https://patchblox.com/security/cve/CVE-2026-43428", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: USB: core: Limit the length of unkillable synchr...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43432", "url": "https://patchblox.com/security/cve/CVE-2026-43432", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix memory leak in xhci_disable_slot(...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43445", "url": "https://patchblox.com/security/cve/CVE-2026-43445", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: e1000/e1000e: Fix leak in DMA error cleanup If...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43451", "url": "https://patchblox.com/security/cve/CVE-2026-43451", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: fix entry leak in br...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31458", "url": "https://patchblox.com/security/cve/CVE-2026-31458", "title": "mm/damon/sysfs: check contexts-\u003Enr before accessing contexts_arr[0]", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31400", "url": "https://patchblox.com/security/cve/CVE-2026-31400", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix cache_request leak in cache_release...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43265", "url": "https://patchblox.com/security/cve/CVE-2026-43265", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore -EBUSY when checking nested eve...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31415", "url": "https://patchblox.com/security/cve/CVE-2026-31415", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid overflows in ip6_datagram_send_ctl()...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43065", "url": "https://patchblox.com/security/cve/CVE-2026-43065", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: always drain queued discard work in ext4_m...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43066", "url": "https://patchblox.com/security/cve/CVE-2026-43066", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_fc_replay_inode()...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43068", "url": "https://patchblox.com/security/cve/CVE-2026-43068", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43043", "url": "https://patchblox.com/security/cve/CVE-2026-43043", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg - fix NULL pointer dereference in...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43046", "url": "https://patchblox.com/security/cve/CVE-2026-43046", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with drop_progress and...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43054", "url": "https://patchblox.com/security/cve/CVE-2026-43054", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Drain commands in target...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43472", "url": "https://patchblox.com/security/cve/CVE-2026-43472", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: unshare: fix unshare_fs() handling There\u0027s an u...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43475", "url": "https://patchblox.com/security/cve/CVE-2026-43475", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:\n\nThe following security issues we...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43483", "url": "https://patchblox.com/security/cve/CVE-2026-43483", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Set/clear CR8 write interception when...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23368", "url": "https://patchblox.com/security/cve/CVE-2026-23368", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: phy: register phy led_triggers during probe...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00103, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23362", "url": "https://patchblox.com/security/cve/CVE-2026-23362", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix locking for bcm_op runtime updates...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00098, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23452", "url": "https://patchblox.com/security/cve/CVE-2026-23452", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PM: runtime: Fix a race condition related to dev...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31480", "url": "https://patchblox.com/security/cve/CVE-2026-31480", "title": "tracing: Fix potential deadlock in cpu hotplug with osnoise", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43252", "url": "https://patchblox.com/security/cve/CVE-2026-43252", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always set ID as avail whe...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31466", "url": "https://patchblox.com/security/cve/CVE-2026-31466", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix folio isn\u0027t locked in softle...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00094, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43420", "url": "https://patchblox.com/security/cve/CVE-2026-43420", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix i_nlink underrun during async unlink...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00094, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43061", "url": "https://patchblox.com/security/cve/CVE-2026-43061", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Fix TX deadlock when using DMA \u0060d...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00091, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43468", "url": "https://patchblox.com/security/cve/CVE-2026-43468", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix deadlock between devlink lock and...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00091, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43439", "url": "https://patchblox.com/security/cve/CVE-2026-43439", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cgroup: fix race between task migration and iter...", "priority": "Routine", "severity": "medium", "cvss": 4.7, "epss": 0.00089, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43448", "url": "https://patchblox.com/security/cve/CVE-2026-43448", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix race bug in nvme_poll_irqdisable()...", "priority": "Routine", "severity": "medium", "cvss": 4.7, "epss": 0.00089, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T20:03:11Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }