# ALAS2023-2026-1746: Security update for 18 packages ALAS2023-2026-1746, released May 25, 2026, fixes 128 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1746 - Platform: Linux - Released: May 25, 2026 - Priority: Urgent (Closes CVE-2026-43341, rated Critical) - CVEs: 128, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1746.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.18](https://patchblox.com/security/data/product/linux/bpftool6.18.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [bpftool6.18-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel-livepatch-6.18.25-52.107](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.18.25-52.107.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.18](https://patchblox.com/security/data/product/linux/kernel6.18.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-devel](https://patchblox.com/security/data/product/linux/kernel6.18-devel.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-headers](https://patchblox.com/security/data/product/linux/kernel6.18-headers.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra-common.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-tools](https://patchblox.com/security/data/product/linux/kernel6.18-tools.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-tools-debuginfo.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [kernel6.18-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.18-tools-devel.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [perf6.18](https://patchblox.com/security/data/product/linux/perf6.18.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [python3-perf6.18](https://patchblox.com/security/data/product/linux/python3-perf6.18.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | | [python3-perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.25-52.107.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-43341](https://patchblox.com/security/data/cve/CVE-2026-43341.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/ipv6: ioam6: prevent schema length wraparoun... | 9.8 | 0.0051 | | | [CVE-2026-43067](https://patchblox.com/security/data/cve/CVE-2026-43067.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching for block... | 9.8 | 0.0050 | | | [CVE-2026-43037](https://patchblox.com/security/data/cve/CVE-2026-43037.md) | High | ip6_tunnel: clear skb2->cb[] in ip4ip6_err() | 9.8 | 0.0069 | | | [CVE-2026-31682](https://patchblox.com/security/data/cve/CVE-2026-31682.md) | High | bridge: br_nd_send: linearize skb before parsing ND options | 9.1 | 0.0064 | | | [CVE-2026-31414](https://patchblox.com/security/data/cve/CVE-2026-31414.md) | High | netfilter: nf_conntrack_expect: use expect->helper | 9.8 | 0.0056 | | | [CVE-2026-31448](https://patchblox.com/security/data/cve/CVE-2026-31448.md) | High | ext4: avoid infinite loops caused by residual data | 9.4 | 0.0050 | | | [CVE-2026-31609](https://patchblox.com/security/data/cve/CVE-2026-31609.md) | High | smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush() | 9.8 | 0.0046 | | | [CVE-2026-43057](https://patchblox.com/security/data/cve/CVE-2026-43057.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_C... | 7.5 | 0.0044 | | | [CVE-2026-43336](https://patchblox.com/security/data/cve/CVE-2026-43336.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permuted_state befor... | 7.5 | 0.0043 | | | [CVE-2026-31450](https://patchblox.com/security/data/cve/CVE-2026-31450.md) | High | ext4: publish jinode after initialization | 8.8 | 0.0041 | | | [CVE-2026-31467](https://patchblox.com/security/data/cve/CVE-2026-31467.md) | High | erofs: add GFP_NOIO in the bio completion if needed | 8.8 | 0.0038 | | | [CVE-2026-43055](https://patchblox.com/security/data/cve/CVE-2026-43055.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: file: Use kzalloc_flex for aio_cmd... | 7.5 | 0.0036 | | | [CVE-2026-31435](https://patchblox.com/security/data/cve/CVE-2026-31435.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix read abandonment during retry Under... | 8.8 | 0.0034 | | | [CVE-2026-43029](https://patchblox.com/security/data/cve/CVE-2026-43029.md) | High | mptcp: fix soft lockup in mptcp_recvmsg() | 7.5 | 0.0033 | | | [CVE-2026-43048](https://patchblox.com/security/data/cve/CVE-2026-43048.md) | High | HID: core: Mitigate potential OOB by removing bogus memset() | 8.8 | 0.0032 | | | [CVE-2026-31570](https://patchblox.com/security/data/cve/CVE-2026-31570.md) | High | can: gw: fix OOB heap access in cgw_csum_crc8_rel() | 8.8 | 0.0026 | | | [CVE-2026-43038](https://patchblox.com/security/data/cve/CVE-2026-43038.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 9.8 | 0.0026 | | | [CVE-2026-31413](https://patchblox.com/security/data/cve/CVE-2026-31413.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix unsound scalar forking in maybe_fork_sc... | 7.8 | 0.0023 | | | [CVE-2026-31554](https://patchblox.com/security/data/cve/CVE-2026-31554.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... | 7.8 | 0.0021 | | | [CVE-2026-23401](https://patchblox.com/security/data/cve/CVE-2026-23401.md) | High | KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE | 8.8 | 0.0019 | | | [CVE-2026-43329](https://patchblox.com/security/data/cve/CVE-2026-43329.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 7.8 | 0.0018 | | | [CVE-2026-23415](https://patchblox.com/security/data/cve/CVE-2026-23415.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... | 7.8 | 0.0017 | | | [CVE-2026-31674](https://patchblox.com/security/data/cve/CVE-2026-31674.md) | High | netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() | 7.1 | 0.0017 | | | [CVE-2026-31675](https://patchblox.com/security/data/cve/CVE-2026-31675.md) | High | net/sched: sch_netem: fix out-of-bounds access in packet corruption | 7.8 | 0.0016 | | | [CVE-2026-31680](https://patchblox.com/security/data/cve/CVE-2026-31680.md) | High | net: ipv6: flowlabel: defer exclusive option free until RCU teardown | 7.8 | 0.0016 | | | [CVE-2026-31525](https://patchblox.com/security/data/cve/CVE-2026-31525.md) | High | bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN | 7.8 | 0.0016 | | | [CVE-2026-43332](https://patchblox.com/security/data/cve/CVE-2026-43332.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0016 | | | [CVE-2026-31406](https://patchblox.com/security/data/cve/CVE-2026-31406.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix work re-schedule after cancel in xfrm_... | 7.8 | 0.0016 | | | [CVE-2026-31679](https://patchblox.com/security/data/cve/CVE-2026-31679.md) | High | openvswitch: validate MPLS set/set_masked payload length | 7.1 | 0.0016 | | | [CVE-2026-43339](https://patchblox.com/security/data/cve/CVE-2026-43339.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... | 8.1 | 0.0016 | | | [CVE-2026-31449](https://patchblox.com/security/data/cve/CVE-2026-31449.md) | High | ext4: validate p_idx bounds in ext4_ext_correct_indexes | 7.8 | 0.0015 | | | [CVE-2026-31426](https://patchblox.com/security/data/cve/CVE-2026-31426.md) | High | ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() | 7.0 | 0.0014 | | | [CVE-2026-31447](https://patchblox.com/security/data/cve/CVE-2026-31447.md) | High | ext4: reject mount if bigalloc with s_first_data_block != 0 | 7.8 | 0.0014 | | | [CVE-2026-31446](https://patchblox.com/security/data/cve/CVE-2026-31446.md) | High | ext4: fix use-after-free in update_super_work when racing with umount | 7.8 | 0.0014 | | | [CVE-2026-31452](https://patchblox.com/security/data/cve/CVE-2026-31452.md) | High | ext4: convert inline data to extents when truncate exceeds inline size | 7.8 | 0.0014 | | | [CVE-2026-31469](https://patchblox.com/security/data/cve/CVE-2026-31469.md) | High | virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false | 7.8 | 0.0014 | | | [CVE-2026-43030](https://patchblox.com/security/data/cve/CVE-2026-43030.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe() for pointers to packet In ca... | 7.8 | 0.0014 | | | [CVE-2026-31678](https://patchblox.com/security/data/cve/CVE-2026-31678.md) | High | openvswitch: defer tunnel netdev_put to RCU release | 8.8 | 0.0013 | | | [CVE-2026-43028](https://patchblox.com/security/data/cve/CVE-2026-43028.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-termin... | 7.1 | 0.0013 | | | [CVE-2026-43027](https://patchblox.com/security/data/cve/CVE-2026-43027.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to e... | 7.8 | 0.0013 | | | [CVE-2026-31453](https://patchblox.com/security/data/cve/CVE-2026-31453.md) | High | xfs: avoid dereferencing log items after push callbacks | 7.8 | 0.0013 | | | [CVE-2026-31502](https://patchblox.com/security/data/cve/CVE-2026-31502.md) | High | team: fix header_ops type confusion with non-Ethernet ports | 7.8 | 0.0013 | | | [CVE-2026-31419](https://patchblox.com/security/data/cve/CVE-2026-31419.md) | High | net: bonding: fix use-after-free in bond_xmit_broadcast() | 8.8 | 0.0013 | | | [CVE-2026-31527](https://patchblox.com/security/data/cve/CVE-2026-31527.md) | High | driver core: platform: use generic driver_override infrastructure | 7.8 | 0.0013 | | | [CVE-2026-31528](https://patchblox.com/security/data/cve/CVE-2026-31528.md) | High | perf: Make sure to use pmu_ctx->pmu for groups | 7.8 | 0.0013 | | | [CVE-2026-31759](https://patchblox.com/security/data/cve/CVE-2026-31759.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_inte... | 7.8 | 0.0013 | | | [CVE-2026-43328](https://patchblox.com/security/data/cve/CVE-2026-43328.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: fix double free in cpufreq_db... | 7.8 | 0.0013 | | | [CVE-2026-31518](https://patchblox.com/security/data/cve/CVE-2026-31518.md) | High | esp: fix skb leak with espintcp and async crypto | 7.1 | 0.0013 | | | [CVE-2026-43040](https://patchblox.com/security/data/cve/CVE-2026-43040.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: fix ndisc_ra_useropt to initia... | 7.1 | 0.0013 | | | [CVE-2026-31515](https://patchblox.com/security/data/cve/CVE-2026-31515.md) | High | af_key: validate families in pfkey_send_migrate() | 7.0 | 0.0013 | | | [CVE-2026-31521](https://patchblox.com/security/data/cve/CVE-2026-31521.md) | High | module: Fix kernel panic when a symbol st_shndx is out of bounds | 7.0 | 0.0013 | | | [CVE-2026-31555](https://patchblox.com/security/data/cve/CVE-2026-31555.md) | High | futex: Clear stale exiting pointer in futex_lock_pi() retry path | 7.0 | 0.0013 | | | [CVE-2026-31742](https://patchblox.com/security/data/cve/CVE-2026-31742.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vt: discard stale unicode buffer on alt screen e... | 7.8 | 0.0013 | | | [CVE-2026-43025](https://patchblox.com/security/data/cve/CVE-2026-43025.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on... | 7.3 | 0.0013 | | | [CVE-2026-31782](https://patchblox.com/security/data/cve/CVE-2026-31782.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix potential bad container_of in inte... | 7.8 | 0.0013 | | | [CVE-2026-31454](https://patchblox.com/security/data/cve/CVE-2026-31454.md) | High | xfs: save ailp before dropping the AIL lock in push callbacks | 7.8 | 0.0013 | | | [CVE-2026-31455](https://patchblox.com/security/data/cve/CVE-2026-31455.md) | High | xfs: stop reclaim before pushing AIL during unmount | 7.8 | 0.0013 | | | [CVE-2026-31695](https://patchblox.com/security/data/cve/CVE-2026-31695.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid... | 7.8 | 0.0013 | | | [CVE-2026-43016](https://patchblox.com/security/data/cve/CVE-2026-43016.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socke... | 7.8 | 0.0013 | | | [CVE-2026-43063](https://patchblox.com/security/data/cve/CVE-2026-43063.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfs: don't irele after failing to iget in xfs_at... | 7.8 | 0.0013 | | | [CVE-2026-31470](https://patchblox.com/security/data/cve/CVE-2026-31470.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.1 | 0.0013 | | | [CVE-2026-31774](https://patchblox.com/security/data/cve/CVE-2026-31774.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix slab-out-of-bounds read in io_... | 7.1 | 0.0013 | | | [CVE-2026-31503](https://patchblox.com/security/data/cve/CVE-2026-31503.md) | High | udp: Fix wildcard bind conflict check when using hash2 | 7.8 | 0.0013 | | | [CVE-2026-43006](https://patchblox.com/security/data/cve/CVE-2026-43006.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: reject zero-length fixed buffer i... | 7.5 | 0.0012 | | | [CVE-2026-31492](https://patchblox.com/security/data/cve/CVE-2026-31492.md) | High | RDMA/irdma: Initialize free_qp completion before using it | 7.1 | 0.0012 | | | [CVE-2026-31519](https://patchblox.com/security/data/cve/CVE-2026-31519.md) | High | btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create | 7.1 | 0.0012 | | | [CVE-2026-43047](https://patchblox.com/security/data/cve/CVE-2026-43047.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report response... | 7.8 | 0.0012 | | | [CVE-2026-31416](https://patchblox.com/security/data/cve/CVE-2026-31416.md) | High | netfilter: nfnetlink_log: account for netlink header size | 8.1 | 0.0012 | | | [CVE-2026-31427](https://patchblox.com/security/data/cve/CVE-2026-31427.md) | High | netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp | 7.8 | 0.0012 | | | [CVE-2026-31487](https://patchblox.com/security/data/cve/CVE-2026-31487.md) | High | spi: use generic driver_override infrastructure | 7.0 | 0.0012 | | | [CVE-2026-31508](https://patchblox.com/security/data/cve/CVE-2026-31508.md) | High | net: openvswitch: Avoid releasing netdev before teardown completes | 8.8 | 0.0011 | | | [CVE-2026-31504](https://patchblox.com/security/data/cve/CVE-2026-31504.md) | High | net: fix fanout UAF in packet_release() via NETDEV_UP race | 7.8 | 0.0011 | | | [CVE-2026-31516](https://patchblox.com/security/data/cve/CVE-2026-31516.md) | High | xfrm: prevent policy_hthresh.work from racing with netns teardown | 7.8 | 0.0010 | | | [CVE-2026-31473](https://patchblox.com/security/data/cve/CVE-2026-31473.md) | High | media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex | 7.8 | 0.0010 | | | [CVE-2026-31731](https://patchblox.com/security/data/cve/CVE-2026-31731.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: thermal: core: Address thermal zone removal race... | 7.8 | 0.0010 | | | [CVE-2026-31523](https://patchblox.com/security/data/cve/CVE-2026-31523.md) | High | nvme-pci: ensure we're polling a polled queue | 7.1 | 0.0009 | | | [CVE-2026-23414](https://patchblox.com/security/data/cve/CVE-2026-23414.md) | Routine | tls: Purge async_hold in tls_decrypt_async_wait() | 5.5 | 0.0037 | | | [CVE-2026-23416](https://patchblox.com/security/data/cve/CVE-2026-23416.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/mseal: update VMA end correctly on merge Pre... | 5.5 | 0.0022 | | | [CVE-2026-23402](https://patchblox.com/security/data/cve/CVE-2026-23402.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Only WARN in direct MMUs when over... | 5.5 | 0.0017 | | | [CVE-2026-31767](https://patchblox.com/security/data/cve/CVE-2026-31767.md) | Routine | drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode | 5.5 | 0.0016 | | | [CVE-2026-43036](https://patchblox.com/security/data/cve/CVE-2026-43036.md) | Routine | net: use skb_header_pointer() for TCPv4 GSO frag_off check | 5.5 | 0.0016 | | | [CVE-2026-31428](https://patchblox.com/security/data/cve/CVE-2026-31428.md) | Routine | netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD | 5.5 | 0.0013 | | | [CVE-2026-31733](https://patchblox.com/security/data/cve/CVE-2026-31733.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix stale direct dispatch state in dd... | 5.5 | 0.0013 | | | [CVE-2026-43026](https://patchblox.com/security/data/cve/CVE-2026-43026.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: zero expect NAT fields whe... | 6.1 | 0.0013 | | | [CVE-2026-31451](https://patchblox.com/security/data/cve/CVE-2026-31451.md) | Routine | ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio | 5.5 | 0.0013 | | | [CVE-2026-31495](https://patchblox.com/security/data/cve/CVE-2026-31495.md) | Routine | netfilter: ctnetlink: use netlink policy range checks | 5.5 | 0.0013 | | | [CVE-2026-31752](https://patchblox.com/security/data/cve/CVE-2026-31752.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: validate ND option lengths... | 5.5 | 0.0013 | | | [CVE-2026-43024](https://patchblox.com/security/data/cve/CVE-2026-43024.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject immediate NF_QUEUE... | 5.5 | 0.0013 | | | [CVE-2026-43035](https://patchblox.com/security/data/cve/CVE-2026-43035.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to i... | 5.5 | 0.0013 | | | [CVE-2026-31567](https://patchblox.com/security/data/cve/CVE-2026-31567.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: PM: sleep: Drop spurious WARN_ON() from pm_resto... | 5.5 | 0.0013 | | | [CVE-2026-31526](https://patchblox.com/security/data/cve/CVE-2026-31526.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exception exit lock checking for subpro... | 5.5 | 0.0013 | | | [CVE-2026-31496](https://patchblox.com/security/data/cve/CVE-2026-31496.md) | Routine | netfilter: nf_conntrack_expect: skip expectations in other netns via proc | 5.5 | 0.0013 | | | [CVE-2026-31434](https://patchblox.com/security/data/cve/CVE-2026-31434.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix leak of kobject name for sub-group sp... | 5.5 | 0.0012 | | | [CVE-2026-31524](https://patchblox.com/security/data/cve/CVE-2026-31524.md) | Routine | HID: asus: avoid memory leak in asus_report_fixup() | 5.5 | 0.0012 | | | [CVE-2026-31738](https://patchblox.com/security/data/cve/CVE-2026-31738.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 5.5 | 0.0012 | | | [CVE-2026-31781](https://patchblox.com/security/data/cve/CVE-2026-31781.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/ioc32: stop speculation on the drm_compat_io... | 5.5 | 0.0012 | | | [CVE-2026-43010](https://patchblox.com/security/data/cve/CVE-2026-43010.md) | Routine | bpf: Reject sleepable kprobe_multi programs at attach time | 5.5 | 0.0012 | | | [CVE-2026-43013](https://patchblox.com/security/data/cve/CVE-2026-43013.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: lag: Check for LAG device before creat... | 5.5 | 0.0012 | | | [CVE-2026-43333](https://patchblox.com/security/data/cve/CVE-2026-43333.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: reject direct access to nullable PTR_TO_BUF... | 5.5 | 0.0012 | | | [CVE-2026-31422](https://patchblox.com/security/data/cve/CVE-2026-31422.md) | Routine | net/sched: cls_flow: fix NULL pointer dereference on shared blocks | 5.5 | 0.0012 | | | [CVE-2026-31424](https://patchblox.com/security/data/cve/CVE-2026-31424.md) | Routine | netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP | 5.5 | 0.0012 | | | [CVE-2026-31438](https://patchblox.com/security/data/cve/CVE-2026-31438.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel BUG in netfs_limit_iter() for... | 5.5 | 0.0012 | | | [CVE-2026-31458](https://patchblox.com/security/data/cve/CVE-2026-31458.md) | Routine | mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] | 5.5 | 0.0012 | | | [CVE-2026-31514](https://patchblox.com/security/data/cve/CVE-2026-31514.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio failed in short read case... | 5.5 | 0.0012 | | | [CVE-2026-31561](https://patchblox.com/security/data/cve/CVE-2026-31561.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Remove X86_CR4_FRED from the CR4 pinned... | 5.5 | 0.0012 | | | [CVE-2026-31732](https://patchblox.com/security/data/cve/CVE-2026-31732.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: gpio: Fix resource leaks on errors in gpiochip_a... | 5.5 | 0.0012 | | | [CVE-2026-43012](https://patchblox.com/security/data/cve/CVE-2026-43012.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix switchdev mode rollback in case of... | 5.5 | 0.0012 | | | [CVE-2026-43323](https://patchblox.com/security/data/cve/CVE-2026-43323.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix zero_vruntime tracking fix John... | 5.5 | 0.0012 | | | [CVE-2026-31445](https://patchblox.com/security/data/cve/CVE-2026-31445.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid use of half-online-committe... | 5.5 | 0.0012 | | | [CVE-2026-31457](https://patchblox.com/security/data/cve/CVE-2026-31457.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr in repeat_cal... | 5.5 | 0.0012 | | | [CVE-2026-31459](https://patchblox.com/security/data/cve/CVE-2026-31459.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysf... | 5.5 | 0.0012 | | | [CVE-2026-31465](https://patchblox.com/security/data/cve/CVE-2026-31465.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: writeback: don't block sync for filesystems with... | 5.5 | 0.0012 | | | [CVE-2026-31571](https://patchblox.com/security/data/cve/CVE-2026-31571.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Unlink NV12 planes earlier unlink_nv1... | 5.5 | 0.0012 | | | [CVE-2026-31734](https://patchblox.com/security/data/cve/CVE-2026-31734.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix is_bpf_migration_disabled() false... | 5.5 | 0.0012 | | | [CVE-2026-31421](https://patchblox.com/security/data/cve/CVE-2026-31421.md) | Routine | net/sched: cls_fw: fix NULL pointer dereference on shared blocks | 5.5 | 0.0012 | | | [CVE-2026-31423](https://patchblox.com/security/data/cve/CVE-2026-31423.md) | Routine | net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() | 5.5 | 0.0012 | | | [CVE-2026-23417](https://patchblox.com/security/data/cve/CVE-2026-23417.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix constant blinding for PROBE_MEM32 store... | 5.5 | 0.0012 | | | [CVE-2026-43065](https://patchblox.com/security/data/cve/CVE-2026-43065.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: always drain queued discard work in ext4_m... | 5.5 | 0.0012 | | | [CVE-2026-43066](https://patchblox.com/security/data/cve/CVE-2026-43066.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_fc_replay_inode()... | 5.5 | 0.0012 | | | [CVE-2026-43068](https://patchblox.com/security/data/cve/CVE-2026-43068.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: avoid allocate block from corrupted group... | 5.5 | 0.0012 | | | [CVE-2026-53080](https://patchblox.com/security/data/cve/CVE-2026-53080.md) | Routine | net/sched: cls_fw: fix NULL dereference of "old" filters before change() | 5.5 | 0.0012 | | | [CVE-2026-43338](https://patchblox.com/security/data/cve/CVE-2026-43338.md) | Routine | btrfs: reserve enough transaction items for qgroup ioctls | 5.5 | 0.0012 | | | [CVE-2026-31415](https://patchblox.com/security/data/cve/CVE-2026-31415.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid overflows in ip6_datagram_send_ctl()... | 5.5 | 0.0011 | | | [CVE-2026-43046](https://patchblox.com/security/data/cve/CVE-2026-43046.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with drop_progress and... | 5.5 | 0.0011 | | | [CVE-2026-43054](https://patchblox.com/security/data/cve/CVE-2026-43054.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcm_loop: Drain commands in target... | 5.5 | 0.0011 | | | [CVE-2026-31480](https://patchblox.com/security/data/cve/CVE-2026-31480.md) | Routine | tracing: Fix potential deadlock in cpu hotplug with osnoise | 5.5 | 0.0010 | | | [CVE-2026-31466](https://patchblox.com/security/data/cve/CVE-2026-31466.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix folio isn't locked in softle... | 5.5 | 0.0009 | | | [CVE-2026-31456](https://patchblox.com/security/data/cve/CVE-2026-31456.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix race between concurrent split a... | 5.5 | 0.0009 | | --- Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.