{
  "fix": "ALAS2023-2026-1702",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1702",
  "summary": "ALAS2023-2026-1702, released May 11, 2026, fixes 88 CVEs across 22 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 22 packages",
  "released": "2026-05-11T09:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-43186, rated Critical",
  "supported": true,
  "cveCount": 88,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00642,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1702.html",
  "appliesTo": [
    {
      "product": "bpftool6.18",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.18.16-18.222",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.18.16-18.222",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-libbpf",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-libbpf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-libbpf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-libbpf-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-libbpf-static",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.18",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.18",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.16-18.222.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-43186",
      "url": "https://patchblox.com/security/cve/CVE-2026-43186",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: ioam: fix heap buffer overflow in __ioam6_...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00642,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43304",
      "url": "https://patchblox.com/security/cve/CVE-2026-43304",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: define and enforce CEPH_MAX_KEY_LEN  Wh...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00613,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43208",
      "url": "https://patchblox.com/security/cve/CVE-2026-43208",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: do not pass flow_id to set_rps_cpu()  Blame...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00481,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71305",
      "url": "https://patchblox.com/security/cve/CVE-2025-71305",
      "title": "drm/display/dp_mst: Add protection against 0 vcpi",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23240",
      "url": "https://patchblox.com/security/cve/CVE-2026-23240",
      "title": "tls: Fix race condition in tls_sw_cancel_work_tx()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00563,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43194",
      "url": "https://patchblox.com/security/cve/CVE-2026-43194",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: consume xmit errors of GSO frames  udpgro_f...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00533,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43226",
      "url": "https://patchblox.com/security/cve/CVE-2026-43226",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/rds: No shortcut out of RDS_CONN_ERROR  RDS...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43230",
      "url": "https://patchblox.com/security/cve/CVE-2026-43230",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/rds: Clear reconnect pending bit  When cance...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43158",
      "url": "https://patchblox.com/security/cve/CVE-2026-43158",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: fix freemap adjustments when adding xattrs...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00469,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43187",
      "url": "https://patchblox.com/security/cve/CVE-2026-43187",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: delete attr leaf freemap entries when empty...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00469,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43190",
      "url": "https://patchblox.com/security/cve/CVE-2026-43190",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: xt_tcpmss: check remaining length befo...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.2,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43233",
      "url": "https://patchblox.com/security/cve/CVE-2026-43233",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43164",
      "url": "https://patchblox.com/security/cve/CVE-2026-43164",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  udplite: Fix null-ptr-deref in __udp_enqueue_sch...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00451,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43254",
      "url": "https://patchblox.com/security/cve/CVE-2026-43254",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ovpn: tcp - fix packet extraction from stream  W...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00451,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43245",
      "url": "https://patchblox.com/security/cve/CVE-2026-43245",
      "title": "ntfs: -\u003Ed_compare() must not block",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43199",
      "url": "https://patchblox.com/security/cve/CVE-2026-43199",
      "title": "net/mlx5e: Fix \u0022scheduling while atomic\u0022 in IPsec MAC address query",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00415,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43139",
      "url": "https://patchblox.com/security/cve/CVE-2026-43139",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm6: fix uninitialized saddr in xfrm6_get_sadd...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.6,
      "epss": 0.00375,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43253",
      "url": "https://patchblox.com/security/cve/CVE-2026-43253",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/amd: move wait_on_sem() out of spinlock  W...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.0037,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43215",
      "url": "https://patchblox.com/security/cve/CVE-2026-43215",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: Fix locking usage for tcon fields  We used...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0032,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43198",
      "url": "https://patchblox.com/security/cve/CVE-2026-43198",
      "title": "tcp: fix potential race in tcp_v6_syn_recv_sock()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00298,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43239",
      "url": "https://patchblox.com/security/cve/CVE-2026-43239",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: prevent races in -\u003Equery_interfaces...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00294,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43153",
      "url": "https://patchblox.com/security/cve/CVE-2026-43153",
      "title": "xfs: remove xfs_attr_leaf_hasname",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43258",
      "url": "https://patchblox.com/security/cve/CVE-2026-43258",
      "title": "alpha: fix user-space corruption during memory compaction",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43303",
      "url": "https://patchblox.com/security/cve/CVE-2026-43303",
      "title": "mm/page_alloc: clear page-\u003Eprivate in free_pages_prepare()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31693",
      "url": "https://patchblox.com/security/cve/CVE-2026-31693",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: some missing initializations on replay  In...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43321",
      "url": "https://patchblox.com/security/cve/CVE-2026-43321",
      "title": "bpf: Properly mark live registers for indirect jumps",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43128",
      "url": "https://patchblox.com/security/cve/CVE-2026-43128",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/umem: Fix double dma_buf_unpin in failure p...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43150",
      "url": "https://patchblox.com/security/cve/CVE-2026-43150",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  perf/arm-cmn: Reject unsupported hardware config...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43133",
      "url": "https://patchblox.com/security/cve/CVE-2026-43133",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nKVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emu...",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23239",
      "url": "https://patchblox.com/security/cve/CVE-2026-23239",
      "title": "espintcp: Fix race condition in espintcp_close()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43166",
      "url": "https://patchblox.com/security/cve/CVE-2026-43166",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: fix interlaced plain identification for e...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43306",
      "url": "https://patchblox.com/security/cve/CVE-2026-43306",
      "title": "bpf: crypto: Use the correct destructor kfunc type",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43281",
      "url": "https://patchblox.com/security/cve/CVE-2026-43281",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mailbox: Prevent out-of-bounds access in fw_mbox...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43278",
      "url": "https://patchblox.com/security/cve/CVE-2026-43278",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dm: clear cloned request bio pointer when last c...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43211",
      "url": "https://patchblox.com/security/cve/CVE-2026-43211",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  PCI: Fix pci_slot_trylock() error handling  Comm...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43214",
      "url": "https://patchblox.com/security/cve/CVE-2026-43214",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: x86: Add SRCU protection for reading PDPTRs...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43163",
      "url": "https://patchblox.com/security/cve/CVE-2026-43163",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  md/bitmap: fix GPF in write_page caused by resiz...",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.1,
      "epss": 0.00091,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43188",
      "url": "https://patchblox.com/security/cve/CVE-2026-43188",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ceph: do not propagate page array emplacement er...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43272",
      "url": "https://patchblox.com/security/cve/CVE-2026-43272",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ring-buffer: Fix possible dereference of uniniti...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43234",
      "url": "https://patchblox.com/security/cve/CVE-2026-43234",
      "title": "team: avoid NETDEV_CHANGEMTU event when unregistering slave",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43244",
      "url": "https://patchblox.com/security/cve/CVE-2026-43244",
      "title": "kcm: fix zero-frag skb in frag_list on partial sendmsg error",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23249",
      "url": "https://patchblox.com/security/cve/CVE-2026-23249",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: check for deleted cursors when revalidating...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43216",
      "url": "https://patchblox.com/security/cve/CVE-2026-43216",
      "title": "net: Drop the lock in skb_may_tx_timestamp()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43314",
      "url": "https://patchblox.com/security/cve/CVE-2026-43314",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dm: remove fake timeout to avoid leak request  S...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23241",
      "url": "https://patchblox.com/security/cve/CVE-2026-23241",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  audit: add missing syscalls to read class  The \u0022...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71239",
      "url": "https://patchblox.com/security/cve/CVE-2025-71239",
      "title": "audit: add fchmodat2() to change attributes class",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71265",
      "url": "https://patchblox.com/security/cve/CVE-2025-71265",
      "title": "fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71266",
      "url": "https://patchblox.com/security/cve/CVE-2025-71266",
      "title": "fs: ntfs3: check return value of indx_find to avoid infinite loop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71267",
      "url": "https://patchblox.com/security/cve/CVE-2025-71267",
      "title": "fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43288",
      "url": "https://patchblox.com/security/cve/CVE-2026-43288",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: move ext4_percpu_param_init() before ext4_...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43315",
      "url": "https://patchblox.com/security/cve/CVE-2026-43315",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: nSVM: Remove a user-triggerable WARN on nes...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43123",
      "url": "https://patchblox.com/security/cve/CVE-2026-43123",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fbcon: check return value of con2fb_acquire_newi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43124",
      "url": "https://patchblox.com/security/cve/CVE-2026-43124",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  pstore: ram_core: fix incorrect success return w...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43132",
      "url": "https://patchblox.com/security/cve/CVE-2026-43132",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dm-verity: correctly handle dm_bufio_client_crea...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43143",
      "url": "https://patchblox.com/security/cve/CVE-2026-43143",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mfd: core: Add locking around \u0027mfd_of_node_list\u0027...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43152",
      "url": "https://patchblox.com/security/cve/CVE-2026-43152",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  HID: hid-pl: handle probe errors  Errors in init...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43238",
      "url": "https://patchblox.com/security/cve/CVE-2026-43238",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: act_skbedit: fix divide-by-zero in tc...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43261",
      "url": "https://patchblox.com/security/cve/CVE-2026-43261",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: Add support for TSV110 Spectre-BHB mitiga...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43210",
      "url": "https://patchblox.com/security/cve/CVE-2026-43210",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tracing: ring-buffer: Fix to check event length...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.1,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43169",
      "url": "https://patchblox.com/security/cve/CVE-2026-43169",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/buddy: Prevent BUG_ON by validating rounded...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43189",
      "url": "https://patchblox.com/security/cve/CVE-2026-43189",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  media: v4l2-async: Fix error handling on steps a...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43201",
      "url": "https://patchblox.com/security/cve/CVE-2026-43201",
      "title": "APEI/GHES: ARM processor Error: don\u0027t go past allocated memory",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43154",
      "url": "https://patchblox.com/security/cve/CVE-2026-43154",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: fix incorrect early exits in volume label...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43179",
      "url": "https://patchblox.com/security/cve/CVE-2026-43179",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: fix incorrect early exits for invalid met...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43224",
      "url": "https://patchblox.com/security/cve/CVE-2026-43224",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/zcrx: fix sgtable leak on mapping failu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71295",
      "url": "https://patchblox.com/security/cve/CVE-2025-71295",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs/buffer: add alert in try_to_free_buffers() fo...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43129",
      "url": "https://patchblox.com/security/cve/CVE-2026-43129",
      "title": "ima: verify the previous kernel\u0027s IMA buffer lies in addressable RAM",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43130",
      "url": "https://patchblox.com/security/cve/CVE-2026-43130",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Flush dev-IOTLB only when PCIe devic...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43167",
      "url": "https://patchblox.com/security/cve/CVE-2026-43167",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm: always flush state and policy upon NETDEV_...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43171",
      "url": "https://patchblox.com/security/cve/CVE-2026-43171",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  EFI/CPER: don\u0027t dump the entire memory region  T...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43240",
      "url": "https://patchblox.com/security/cve/CVE-2026-43240",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  x86/kexec: add a sanity check on previous kernel...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43287",
      "url": "https://patchblox.com/security/cve/CVE-2026-43287",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm: Account property blob allocations to memcg...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43289",
      "url": "https://patchblox.com/security/cve/CVE-2026-43289",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  kexec: derive purgatory entry from symbol  kexec...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43313",
      "url": "https://patchblox.com/security/cve/CVE-2026-43313",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ACPI: processor: Fix NULL-pointer dereference in...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43292",
      "url": "https://patchblox.com/security/cve/CVE-2026-43292",
      "title": "mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43309",
      "url": "https://patchblox.com/security/cve/CVE-2026-43309",
      "title": "md raid: fix hang when stopping arrays with metadata through dm-raid",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71296",
      "url": "https://patchblox.com/security/cve/CVE-2025-71296",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/tests: shmem: Hold reservation lock around p...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71298",
      "url": "https://patchblox.com/security/cve/CVE-2025-71298",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/tests: shmem: Hold reservation lock around m...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71301",
      "url": "https://patchblox.com/security/cve/CVE-2025-71301",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/tests: shmem: Hold reservation lock around v...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43285",
      "url": "https://patchblox.com/security/cve/CVE-2026-43285",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/slab: do not access current-\u003Emems_allowed_seq...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43286",
      "url": "https://patchblox.com/security/cve/CVE-2026-43286",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/hugetlb: restore failed global reservations t...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43127",
      "url": "https://patchblox.com/security/cve/CVE-2026-43127",
      "title": "ntfs3: fix circular locking dependency in run_unpack_ex",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43266",
      "url": "https://patchblox.com/security/cve/CVE-2026-43266",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  EFI/CPER: don\u0027t go past the ARM processor CPER r...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43273",
      "url": "https://patchblox.com/security/cve/CVE-2026-43273",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ceph: supply snapshot context in ceph_zero_parti...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43277",
      "url": "https://patchblox.com/security/cve/CVE-2026-43277",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  APEI/GHES: ensure that won\u0027t go past CPER alloca...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43121",
      "url": "https://patchblox.com/security/cve/CVE-2026-43121",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/zcrx: fix user_ref race between scrub a...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.7,
      "epss": 0.00111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43147",
      "url": "https://patchblox.com/security/cve/CVE-2026-43147",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  Revert \u0022PCI/IOV: Add PCI rescan-remove locking w...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43252",
      "url": "https://patchblox.com/security/cve/CVE-2026-43252",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mptcp: pm: in-kernel: always set ID as avail whe...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}