# ALAS2023-2026-1695: Security update for 18 packages ALAS2023-2026-1695, released May 8, 2026, fixes 106 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1695 - Platform: Linux - Released: May 8, 2026 - Priority: Urgent (Closes CVE-2026-43341, rated Critical) - CVEs: 106, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1695.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [kernel-livepatch-6.12.83-113.160](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.83-113.160.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | | [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.83-113.160.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-43341](https://patchblox.com/security/data/cve/CVE-2026-43341.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/ipv6: ioam6: prevent schema length wraparoun... | 9.8 | 0.0051 | | | [CVE-2026-43071](https://patchblox.com/security/data/cve/CVE-2026-43071.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: dcache: Limit the minimal number of bucket to tw... | 9.1 | 0.0046 | | | [CVE-2026-43117](https://patchblox.com/security/data/cve/CVE-2026-43117.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from... | 9.1 | 0.0046 | | | [CVE-2026-31533](https://patchblox.com/security/data/cve/CVE-2026-31533.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/tls: fix use-after-free in -EBUSY error path... | 9.8 | 0.0040 | | | [CVE-2026-43284](https://patchblox.com/security/data/cve/CVE-2026-43284.md) | High | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 | | | [CVE-2026-43037](https://patchblox.com/security/data/cve/CVE-2026-43037.md) | High | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() | 9.8 | 0.0069 | | | [CVE-2026-31682](https://patchblox.com/security/data/cve/CVE-2026-31682.md) | High | bridge: br_nd_send: linearize skb before parsing ND options | 9.1 | 0.0064 | | | [CVE-2026-31637](https://patchblox.com/security/data/cve/CVE-2026-31637.md) | High | rxrpc: reject undecryptable rxkad response tickets | 9.8 | 0.0059 | | | [CVE-2026-31414](https://patchblox.com/security/data/cve/CVE-2026-31414.md) | High | netfilter: nf_conntrack_expect: use expect->helper | 9.8 | 0.0056 | | | [CVE-2026-43099](https://patchblox.com/security/data/cve/CVE-2026-43099.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: fix null-ptr-deref in icmp_build_pro... | 7.5 | 0.0050 | | | [CVE-2026-31685](https://patchblox.com/security/data/cve/CVE-2026-31685.md) | High | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 | | | [CVE-2026-43074](https://patchblox.com/security/data/cve/CVE-2026-43074.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.8 | 0.0048 | | | [CVE-2026-31669](https://patchblox.com/security/data/cve/CVE-2026-31669.md) | High | mptcp: fix slab-use-after-free in __inet_lookup_established | 9.8 | 0.0047 | | | [CVE-2026-31668](https://patchblox.com/security/data/cve/CVE-2026-31668.md) | High | seg6: separate dst_cache for input and output paths in seg6 lwtunnel | 9.8 | 0.0044 | | | [CVE-2026-43057](https://patchblox.com/security/data/cve/CVE-2026-43057.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_C... | 7.5 | 0.0044 | | | [CVE-2026-43336](https://patchblox.com/security/data/cve/CVE-2026-43336.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permuted_state befor... | 7.5 | 0.0043 | | | [CVE-2026-31450](https://patchblox.com/security/data/cve/CVE-2026-31450.md) | High | ext4: publish jinode after initialization | 8.8 | 0.0041 | | | [CVE-2026-31662](https://patchblox.com/security/data/cve/CVE-2026-31662.md) | High | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 7.5 | 0.0039 | | | [CVE-2026-43114](https://patchblox.com/security/data/cve/CVE-2026-43114.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k... | 9.4 | 0.0037 | | | [CVE-2026-43112](https://patchblox.com/security/data/cve/CVE-2026-43112.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 8.8 | 0.0035 | | | [CVE-2026-31607](https://patchblox.com/security/data/cve/CVE-2026-31607.md) | High | usbip: validate number_of_packets in usbip_pack_ret_submit() | 9.8 | 0.0031 | | | [CVE-2026-43038](https://patchblox.com/security/data/cve/CVE-2026-43038.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 9.8 | 0.0026 | | | [CVE-2026-31588](https://patchblox.com/security/data/cve/CVE-2026-31588.md) | High | KVM: x86: Use scratch field in MMIO fragment to hold small write values | 8.8 | 0.0019 | | | [CVE-2026-31407](https://patchblox.com/security/data/cve/CVE-2026-31407.md) | High | netfilter: conntrack: add missing netlink policy validations | 7.1 | 0.0018 | | | [CVE-2026-43329](https://patchblox.com/security/data/cve/CVE-2026-43329.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 7.8 | 0.0018 | | | [CVE-2026-31532](https://patchblox.com/security/data/cve/CVE-2026-31532.md) | High | can: raw: fix ro->uniq use-after-free in raw_rcv() | 8.8 | 0.0017 | | | [CVE-2026-31675](https://patchblox.com/security/data/cve/CVE-2026-31675.md) | High | net/sched: sch_netem: fix out-of-bounds access in packet corruption | 7.8 | 0.0016 | | | [CVE-2026-31680](https://patchblox.com/security/data/cve/CVE-2026-31680.md) | High | net: ipv6: flowlabel: defer exclusive option free until RCU teardown | 7.8 | 0.0016 | | | [CVE-2026-43332](https://patchblox.com/security/data/cve/CVE-2026-43332.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0016 | | | [CVE-2026-43339](https://patchblox.com/security/data/cve/CVE-2026-43339.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... | 8.1 | 0.0016 | | | [CVE-2026-43030](https://patchblox.com/security/data/cve/CVE-2026-43030.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe() for pointers to packet In ca... | 7.8 | 0.0014 | | | [CVE-2026-43093](https://patchblox.com/security/data/cve/CVE-2026-43093.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account... | 7.8 | 0.0014 | | | [CVE-2026-23442](https://patchblox.com/security/data/cve/CVE-2026-23442.md) | High | ipv6: add NULL checks for idev in SRv6 paths | 7.8 | 0.0013 | | | [CVE-2026-31586](https://patchblox.com/security/data/cve/CVE-2026-31586.md) | High | mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() | 7.8 | 0.0013 | | | [CVE-2026-43028](https://patchblox.com/security/data/cve/CVE-2026-43028.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-termin... | 7.1 | 0.0013 | | | [CVE-2026-31580](https://patchblox.com/security/data/cve/CVE-2026-31580.md) | High | bcache: fix cached_dev.sb_bio use-after-free and crash | 7.8 | 0.0013 | | | [CVE-2026-43027](https://patchblox.com/security/data/cve/CVE-2026-43027.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to e... | 7.8 | 0.0013 | | | [CVE-2026-31673](https://patchblox.com/security/data/cve/CVE-2026-31673.md) | High | af_unix: read UNIX_DIAG_VFS data under unix_state_lock | 7.8 | 0.0013 | | | [CVE-2026-43091](https://patchblox.com/security/data/cve/CVE-2026-43091.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns e... | 7.8 | 0.0013 | | | [CVE-2026-43328](https://patchblox.com/security/data/cve/CVE-2026-43328.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: fix double free in cpufreq_db... | 7.8 | 0.0013 | | | [CVE-2026-31624](https://patchblox.com/security/data/cve/CVE-2026-31624.md) | High | HID: core: clamp report_size in s32ton() to avoid undefined shift | 7.1 | 0.0013 | | | [CVE-2026-43040](https://patchblox.com/security/data/cve/CVE-2026-43040.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: fix ndisc_ra_useropt to initia... | 7.1 | 0.0013 | | | [CVE-2026-43025](https://patchblox.com/security/data/cve/CVE-2026-43025.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on... | 7.3 | 0.0013 | | | [CVE-2026-43016](https://patchblox.com/security/data/cve/CVE-2026-43016.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socke... | 7.8 | 0.0013 | | | [CVE-2026-31614](https://patchblox.com/security/data/cve/CVE-2026-31614.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.1 | 0.0013 | | | [CVE-2026-31774](https://patchblox.com/security/data/cve/CVE-2026-31774.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix slab-out-of-bounds read in io_... | 7.1 | 0.0013 | | | [CVE-2026-43084](https://patchblox.com/security/data/cve/CVE-2026-43084.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: make hash table per... | 7.8 | 0.0013 | | | [CVE-2026-23374](https://patchblox.com/security/data/cve/CVE-2026-23374.md) | High | blktrace: fix __this_cpu_read/write in preemptible context | 8.4 | 0.0012 | | | [CVE-2026-31665](https://patchblox.com/security/data/cve/CVE-2026-31665.md) | High | netfilter: nft_ct: fix use-after-free in timeout object destroy | 7.8 | 0.0012 | | | [CVE-2026-31593](https://patchblox.com/security/data/cve/CVE-2026-31593.md) | High | KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU | 8.8 | 0.0012 | | | [CVE-2026-43047](https://patchblox.com/security/data/cve/CVE-2026-43047.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report response... | 7.8 | 0.0012 | | | [CVE-2026-31416](https://patchblox.com/security/data/cve/CVE-2026-31416.md) | High | netfilter: nfnetlink_log: account for netlink header size | 8.1 | 0.0012 | | | [CVE-2026-31418](https://patchblox.com/security/data/cve/CVE-2026-31418.md) | High | netfilter: ipset: drop logically empty buckets in mtype_del | 8.1 | 0.0012 | | | [CVE-2026-31648](https://patchblox.com/security/data/cve/CVE-2026-31648.md) | High | mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() | 7.8 | 0.0012 | | | [CVE-2026-31666](https://patchblox.com/security/data/cve/CVE-2026-31666.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect return value after changing... | 7.8 | 0.0012 | | | [CVE-2026-31684](https://patchblox.com/security/data/cve/CVE-2026-31684.md) | High | net: sched: act_csum: validate nested VLAN headers | 7.8 | 0.0012 | | | [CVE-2026-31731](https://patchblox.com/security/data/cve/CVE-2026-31731.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: thermal: core: Address thermal zone removal race... | 7.8 | 0.0010 | | | [CVE-2026-31667](https://patchblox.com/security/data/cve/CVE-2026-31667.md) | High | Input: uinput - fix circular locking dependency with ff-core | 7.8 | 0.0010 | | | [CVE-2026-31656](https://patchblox.com/security/data/cve/CVE-2026-31656.md) | High | drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat | 8.8 | 0.0009 | | | [CVE-2026-23302](https://patchblox.com/security/data/cve/CVE-2026-23302.md) | High | net: annotate data-races around sk->sk_{data_ready,write_space} | 7.1 | 0.0009 | | | [CVE-2026-31430](https://patchblox.com/security/data/cve/CVE-2026-31430.md) | High | X.509: Fix out-of-bounds access when parsing extensions | 7.8 | 0.0008 | | | [CVE-2026-31429](https://patchblox.com/security/data/cve/CVE-2026-31429.md) | Routine | net: skb: fix cross-cache free of KFENCE-allocated skb head | 6.6 | 0.0026 | | | [CVE-2025-71269](https://patchblox.com/security/data/cve/CVE-2025-71269.md) | Routine | btrfs: do not free data reservation in fallback from inline due to -ENOSPC | 5.5 | 0.0023 | | | [CVE-2026-31531](https://patchblox.com/security/data/cve/CVE-2026-31531.md) | Routine | ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() | 5.5 | 0.0017 | | | [CVE-2026-31767](https://patchblox.com/security/data/cve/CVE-2026-31767.md) | Routine | drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode | 5.5 | 0.0016 | | | [CVE-2026-43073](https://patchblox.com/security/data/cve/CVE-2026-43073.md) | Routine | x86-64: rename misleadingly named '__copy_user_nocache()' function | 5.5 | 0.0016 | | | [CVE-2026-31677](https://patchblox.com/security/data/cve/CVE-2026-31677.md) | Routine | crypto: af_alg - limit RX SG extraction by receive buffer budget | 5.5 | 0.0016 | | | [CVE-2026-43036](https://patchblox.com/security/data/cve/CVE-2026-43036.md) | Routine | net: use skb_header_pointer() for TCPv4 GSO frag_off check | 5.5 | 0.0016 | | | [CVE-2026-43107](https://patchblox.com/security/data/cve/CVE-2026-43107.md) | Routine | xfrm: account XFRMA_IF_ID in aevent size calculation | 5.5 | 0.0016 | | | [CVE-2026-43089](https://patchblox.com/security/data/cve/CVE-2026-43089.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() str... | 5.5 | 0.0013 | | | [CVE-2026-31733](https://patchblox.com/security/data/cve/CVE-2026-31733.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix stale direct dispatch state in dd... | 5.5 | 0.0013 | | | [CVE-2026-43026](https://patchblox.com/security/data/cve/CVE-2026-43026.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: zero expect NAT fields whe... | 6.1 | 0.0013 | | | [CVE-2026-31625](https://patchblox.com/security/data/cve/CVE-2026-31625.md) | Routine | HID: alps: fix NULL pointer dereference in alps_raw_event() | 5.5 | 0.0013 | | | [CVE-2026-31628](https://patchblox.com/security/data/cve/CVE-2026-31628.md) | Routine | x86/CPU: Fix FPDSS on Zen1 | 5.5 | 0.0013 | | | [CVE-2026-31634](https://patchblox.com/security/data/cve/CVE-2026-31634.md) | Routine | rxrpc: fix reference count leak in rxrpc_server_keyring() | 5.5 | 0.0013 | | | [CVE-2026-31752](https://patchblox.com/security/data/cve/CVE-2026-31752.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: validate ND option lengths... | 5.5 | 0.0013 | | | [CVE-2026-43024](https://patchblox.com/security/data/cve/CVE-2026-43024.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject immediate NF_QUEUE... | 5.5 | 0.0013 | | | [CVE-2026-43035](https://patchblox.com/security/data/cve/CVE-2026-43035.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to i... | 5.5 | 0.0013 | | | [CVE-2026-43085](https://patchblox.com/security/data/cve/CVE-2026-43085.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: initialize nfgenmsg in... | 5.5 | 0.0013 | | | [CVE-2026-31681](https://patchblox.com/security/data/cve/CVE-2026-31681.md) | Routine | netfilter: xt_multiport: validate range encoding in checkentry | 6.1 | 0.0012 | | | [CVE-2026-31738](https://patchblox.com/security/data/cve/CVE-2026-31738.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0012 | | | [CVE-2026-31781](https://patchblox.com/security/data/cve/CVE-2026-31781.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/ioc32: stop speculation on the drm_compat_io... | 5.5 | 0.0012 | | | [CVE-2026-43013](https://patchblox.com/security/data/cve/CVE-2026-43013.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creat... | 5.5 | 0.0012 | | | [CVE-2026-43079](https://patchblox.com/security/data/cve/CVE-2026-43079.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/uncore: Skip discovery table for... | 5.5 | 0.0012 | | | [CVE-2026-43094](https://patchblox.com/security/data/cve/CVE-2026-43094.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiate_features op to Hy... | 5.5 | 0.0012 | | | [CVE-2026-43333](https://patchblox.com/security/data/cve/CVE-2026-43333.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTR_TO_BUF... | 5.5 | 0.0012 | | | [CVE-2026-31422](https://patchblox.com/security/data/cve/CVE-2026-31422.md) | Routine | net/sched: cls_flow: fix NULL pointer dereference on shared blocks | 5.5 | 0.0012 | | | [CVE-2026-31424](https://patchblox.com/security/data/cve/CVE-2026-31424.md) | Routine | netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP | 5.5 | 0.0012 | | | [CVE-2026-43012](https://patchblox.com/security/data/cve/CVE-2026-43012.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode rollback in case of... | 5.5 | 0.0012 | | | [CVE-2026-43086](https://patchblox.com/security/data/cve/CVE-2026-43086.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix NULL deref in ip_vs_add_service error... | 5.5 | 0.0012 | | | [CVE-2026-43090](https://patchblox.com/security/data/cve/CVE-2026-43090.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: fix refcount leak in xfrm_migrate_policy_f... | 5.5 | 0.0012 | | | [CVE-2026-43092](https://patchblox.com/security/data/cve/CVE-2026-43092.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on b... | 5.5 | 0.0012 | | | [CVE-2026-43323](https://patchblox.com/security/data/cve/CVE-2026-43323.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix zero_vruntime tracking fix John... | 5.5 | 0.0012 | | | [CVE-2026-31421](https://patchblox.com/security/data/cve/CVE-2026-31421.md) | Routine | net/sched: cls_fw: fix NULL pointer dereference on shared blocks | 5.5 | 0.0012 | | | [CVE-2026-31423](https://patchblox.com/security/data/cve/CVE-2026-31423.md) | Routine | net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() | 5.5 | 0.0012 | | | [CVE-2026-31664](https://patchblox.com/security/data/cve/CVE-2026-31664.md) | Routine | xfrm: clear trailing padding in build_polexpire() | 5.5 | 0.0012 | | | [CVE-2026-31671](https://patchblox.com/security/data/cve/CVE-2026-31671.md) | Routine | xfrm_user: fix info leak in build_report() | 5.5 | 0.0012 | | | [CVE-2026-23389](https://patchblox.com/security/data/cve/CVE-2026-23389.md) | Routine | ice: Fix memory leak in ice_set_ringparam() | 6.2 | 0.0012 | | | [CVE-2026-31689](https://patchblox.com/security/data/cve/CVE-2026-31689.md) | Routine | EDAC/mc: Fix error path ordering in edac_mc_alloc() | 5.5 | 0.0012 | | | [CVE-2026-43338](https://patchblox.com/security/data/cve/CVE-2026-43338.md) | Routine | btrfs: reserve enough transaction items for qgroup ioctls | 5.5 | 0.0012 | | | [CVE-2026-31415](https://patchblox.com/security/data/cve/CVE-2026-31415.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid overflows in ip6_datagram_send_ctl()... | 5.5 | 0.0011 | | | [CVE-2026-43043](https://patchblox.com/security/data/cve/CVE-2026-43043.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: af-alg - fix NULL pointer dereference in... | 5.5 | 0.0011 | | | [CVE-2026-43046](https://patchblox.com/security/data/cve/CVE-2026-43046.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with drop_progress and... | 5.5 | 0.0011 | | | [CVE-2026-43054](https://patchblox.com/security/data/cve/CVE-2026-43054.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Drain commands in target... | 5.5 | 0.0011 | | | [CVE-2026-22986](https://patchblox.com/security/data/cve/CVE-2026-22986.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: gpiolib: fix race condition for gdev->srcu If t... | 5.3 | 0.0010 | | | [CVE-2026-31466](https://patchblox.com/security/data/cve/CVE-2026-31466.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix folio isn't locked in softle... | 5.5 | 0.0009 | | --- Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.