{
  "fix": "ALAS2023-2026-1753",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1753",
  "summary": "ALAS2023-2026-1753, released May 25, 2026, fixes 95 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 18 packages",
  "released": "2026-05-25T09:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-46155, rated Critical",
  "supported": true,
  "cveCount": 95,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.05372,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1753.html",
  "appliesTo": [
    {
      "product": "bpftool6.12",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.12.88-119.157",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.88-119.157",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.88-119.157.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-46155",
      "url": "https://patchblox.com/security/cve/CVE-2026-46155",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  smb/client: fix out-of-bounds read in smb2_compo...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00478,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45988",
      "url": "https://patchblox.com/security/cve/CVE-2026-45988",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  rxrpc: Fix re-decryption of RESPONSE packets  If...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43499",
      "url": "https://patchblox.com/security/cve/CVE-2026-43499",
      "title": "rtmutex: Use waiter::task instead of current in remove_waiter()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.05372,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46333",
      "url": "https://patchblox.com/security/cve/CVE-2026-46333",
      "title": "ptrace: slightly saner \u0027get_dumpable()\u0027 logic",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.04299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43501",
      "url": "https://patchblox.com/security/cve/CVE-2026-43501",
      "title": "ipv6: rpl: reserve mac_len headroom when recompressed SRH grows",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00732,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43493",
      "url": "https://patchblox.com/security/cve/CVE-2026-43493",
      "title": "crypto: pcrypt - Fix handling of MAY_BACKLOG requests",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00681,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46195",
      "url": "https://patchblox.com/security/cve/CVE-2026-46195",
      "title": "smb: client: validate dacloffset before building DACL pointers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00675,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46102",
      "url": "https://patchblox.com/security/cve/CVE-2026-46102",
      "title": "net: strparser: fix skb_head leak in strp_abort_strp()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00564,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46177",
      "url": "https://patchblox.com/security/cve/CVE-2026-46177",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.00564,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46119",
      "url": "https://patchblox.com/security/cve/CVE-2026-46119",
      "title": "libceph: Fix slab-out-of-bounds access in auth message processing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46185",
      "url": "https://patchblox.com/security/cve/CVE-2026-46185",
      "title": "smb/client: fix out-of-bounds read in symlink_data()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46037",
      "url": "https://patchblox.com/security/cve/CVE-2026-46037",
      "title": "ipv4: icmp: validate reply type before using icmp_pointers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00512,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46052",
      "url": "https://patchblox.com/security/cve/CVE-2026-46052",
      "title": "ceph: only d_add() negative dentries when they are unhashed",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46115",
      "url": "https://patchblox.com/security/cve/CVE-2026-46115",
      "title": "block: add pgmap check to biovec_phys_mergeable",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46024",
      "url": "https://patchblox.com/security/cve/CVE-2026-46024",
      "title": "libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46124",
      "url": "https://patchblox.com/security/cve/CVE-2026-46124",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  isofs: validate block number from NFS file handl...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00476,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46289",
      "url": "https://patchblox.com/security/cve/CVE-2026-46289",
      "title": "lib/scatterlist: fix length calculations in extract_kvec_to_sg",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46306",
      "url": "https://patchblox.com/security/cve/CVE-2026-46306",
      "title": "flow_dissector: do not dissect PPPoE PFC frames",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00449,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43494",
      "url": "https://patchblox.com/security/cve/CVE-2026-43494",
      "title": "net/rds: reset op_nents when zerocopy page pin fails",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31709",
      "url": "https://patchblox.com/security/cve/CVE-2026-31709",
      "title": "smb: client: validate the whole DACL before rewriting it in cifsacl",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00345,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43502",
      "url": "https://patchblox.com/security/cve/CVE-2026-43502",
      "title": "net/rds: handle zerocopy send cleanup before the message is queued",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00324,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46303",
      "url": "https://patchblox.com/security/cve/CVE-2026-46303",
      "title": "isofs: validate Rock Ridge CE continuation extent against volume size",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.0032,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46099",
      "url": "https://patchblox.com/security/cve/CVE-2026-46099",
      "title": "net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00288,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31694",
      "url": "https://patchblox.com/security/cve/CVE-2026-31694",
      "title": "fuse: reject oversized dirents in page cache",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00284,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46113",
      "url": "https://patchblox.com/security/cve/CVE-2026-46113",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53369",
      "url": "https://patchblox.com/security/cve/CVE-2026-53369",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  udf: reject descriptors with oversized CRC lengt...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.4,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45991",
      "url": "https://patchblox.com/security/cve/CVE-2026-45991",
      "title": "udf: fix partition descriptor append bookkeeping",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45989",
      "url": "https://patchblox.com/security/cve/CVE-2026-45989",
      "title": "of: unittest: fix use-after-free in testdrv_probe()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46174",
      "url": "https://patchblox.com/security/cve/CVE-2026-46174",
      "title": "x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52933",
      "url": "https://patchblox.com/security/cve/CVE-2026-52933",
      "title": "io_uring/poll: fix signed comparison in io_poll_get_ownership()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46145",
      "url": "https://patchblox.com/security/cve/CVE-2026-46145",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nRDMA/mana: Validate rx_hash_key_len\nSashiko point...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46294",
      "url": "https://patchblox.com/security/cve/CVE-2026-46294",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46149",
      "url": "https://patchblox.com/security/cve/CVE-2026-46149",
      "title": "scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46062",
      "url": "https://patchblox.com/security/cve/CVE-2026-46062",
      "title": "ntfs3: fix integer overflow in run_unpack() volume boundary check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46176",
      "url": "https://patchblox.com/security/cve/CVE-2026-46176",
      "title": "RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46021",
      "url": "https://patchblox.com/security/cve/CVE-2026-46021",
      "title": "thermal: core: Fix thermal zone governor cleanup issues",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46076",
      "url": "https://patchblox.com/security/cve/CVE-2026-46076",
      "title": "KVM: nSVM: Raise #UD if unhandled VMMCALL isn\u0027t intercepted by L1",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46129",
      "url": "https://patchblox.com/security/cve/CVE-2026-46129",
      "title": "btrfs: fix double free in create_space_info() error path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46162",
      "url": "https://patchblox.com/security/cve/CVE-2026-46162",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ice: fix double free in ice_sf_eth_activate() er...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46193",
      "url": "https://patchblox.com/security/cve/CVE-2026-46193",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46033",
      "url": "https://patchblox.com/security/cve/CVE-2026-46033",
      "title": "crypto: authencesn - reject short ahash digests during instance creation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46015",
      "url": "https://patchblox.com/security/cve/CVE-2026-46015",
      "title": "tcp: call sk_data_ready() after listener migration",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46132",
      "url": "https://patchblox.com/security/cve/CVE-2026-46132",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46172",
      "url": "https://patchblox.com/security/cve/CVE-2026-46172",
      "title": "kernel-uek64k: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46023",
      "url": "https://patchblox.com/security/cve/CVE-2026-46023",
      "title": "dm mirror: fix integer overflow in create_dirty_log()",
      "priority": "High",
      "severity": "Low",
      "cvss": 7,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46173",
      "url": "https://patchblox.com/security/cve/CVE-2026-46173",
      "title": "exit: prevent preemption of oopsing TASK_DEAD task",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46078",
      "url": "https://patchblox.com/security/cve/CVE-2026-46078",
      "title": "erofs: fix the out-of-bounds nameoff handling for trailing dirents",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45999",
      "url": "https://patchblox.com/security/cve/CVE-2026-45999",
      "title": "erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46190",
      "url": "https://patchblox.com/security/cve/CVE-2026-46190",
      "title": "mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46116",
      "url": "https://patchblox.com/security/cve/CVE-2026-46116",
      "title": "xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46065",
      "url": "https://patchblox.com/security/cve/CVE-2026-46065",
      "title": "fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46150",
      "url": "https://patchblox.com/security/cve/CVE-2026-46150",
      "title": "fanotify: fix false positive on permission events",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46053",
      "url": "https://patchblox.com/security/cve/CVE-2026-46053",
      "title": "net: rds: fix MR cleanup on copy error",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46084",
      "url": "https://patchblox.com/security/cve/CVE-2026-46084",
      "title": "RDMA/mana_ib: Disable RX steering on RSS QP destroy",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46086",
      "url": "https://patchblox.com/security/cve/CVE-2026-46086",
      "title": "net: bridge: use a stable FDB dst snapshot in RCU readers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46120",
      "url": "https://patchblox.com/security/cve/CVE-2026-46120",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31716",
      "url": "https://patchblox.com/security/cve/CVE-2026-31716",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: validate rec-\u003Eused in journal-replay f...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46070",
      "url": "https://patchblox.com/security/cve/CVE-2026-46070",
      "title": "md/raid5: validate payload size before accessing journal metadata",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46121",
      "url": "https://patchblox.com/security/cve/CVE-2026-46121",
      "title": "mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46094",
      "url": "https://patchblox.com/security/cve/CVE-2026-46094",
      "title": "ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46072",
      "url": "https://patchblox.com/security/cve/CVE-2026-46072",
      "title": "ntfs3: add buffer boundary checks to run_unpack()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45837",
      "url": "https://patchblox.com/security/cve/CVE-2026-45837",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix use-after-free in arena_vm_close on for...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43109",
      "url": "https://patchblox.com/security/cve/CVE-2026-43109",
      "title": "x86: shadow stacks: proper error handling for mmap lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31700",
      "url": "https://patchblox.com/security/cve/CVE-2026-31700",
      "title": "net/packet: fix TOCTOU race on mmap\u0027d vnet_hdr in tpacket_snd()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46107",
      "url": "https://patchblox.com/security/cve/CVE-2026-46107",
      "title": "dm-thin: fix metadata refcount underflow",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46000",
      "url": "https://patchblox.com/security/cve/CVE-2026-46000",
      "title": "rxrpc: Fix conn-level packet handling to unshare RESPONSE packets",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43492",
      "url": "https://patchblox.com/security/cve/CVE-2026-43492",
      "title": "lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46079",
      "url": "https://patchblox.com/security/cve/CVE-2026-46079",
      "title": "rbd: fix null-ptr-deref when device_add_disk() fails",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46089",
      "url": "https://patchblox.com/security/cve/CVE-2026-46089",
      "title": "zram: do not forget to endio for partial discard requests",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46196",
      "url": "https://patchblox.com/security/cve/CVE-2026-46196",
      "title": "tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46128",
      "url": "https://patchblox.com/security/cve/CVE-2026-46128",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46161",
      "url": "https://patchblox.com/security/cve/CVE-2026-46161",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46040",
      "url": "https://patchblox.com/security/cve/CVE-2026-46040",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46046",
      "url": "https://patchblox.com/security/cve/CVE-2026-46046",
      "title": "ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46101",
      "url": "https://patchblox.com/security/cve/CVE-2026-46101",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46005",
      "url": "https://patchblox.com/security/cve/CVE-2026-46005",
      "title": "xfs: fix a resource leak in xfs_alloc_buftarg()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46168",
      "url": "https://patchblox.com/security/cve/CVE-2026-46168",
      "title": "mptcp: fix scheduling with atomic in timestamp sockopt",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46131",
      "url": "https://patchblox.com/security/cve/CVE-2026-46131",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: x86: check for nEPT/nNPT in slow flush hype...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46144",
      "url": "https://patchblox.com/security/cve/CVE-2026-46144",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/mana: Fix error unwind in mana_ib_create_qp...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45987",
      "url": "https://patchblox.com/security/cve/CVE-2026-45987",
      "title": "KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45997",
      "url": "https://patchblox.com/security/cve/CVE-2026-45997",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: sd: fix missing put_disk() when device_add...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46082",
      "url": "https://patchblox.com/security/cve/CVE-2026-46082",
      "title": "KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46083",
      "url": "https://patchblox.com/security/cve/CVE-2026-46083",
      "title": "spi: fix resource leaks on device setup failure",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46108",
      "url": "https://patchblox.com/security/cve/CVE-2026-46108",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46292",
      "url": "https://patchblox.com/security/cve/CVE-2026-46292",
      "title": "pmdomain: core: Fix detach procedure for virtual devices in genpd",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46106",
      "url": "https://patchblox.com/security/cve/CVE-2026-46106",
      "title": "eventfs: Hold eventfs_mutex and SRCU when remount walks events",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46139",
      "url": "https://patchblox.com/security/cve/CVE-2026-46139",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: use kzalloc to zero-initialize secu...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46283",
      "url": "https://patchblox.com/security/cve/CVE-2026-46283",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tpm: Use kfree_sensitive() to free auth session...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43496",
      "url": "https://patchblox.com/security/cve/CVE-2026-43496",
      "title": "net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52928",
      "url": "https://patchblox.com/security/cve/CVE-2026-52928",
      "title": "af_unix: Reject SIOCATMARK on non-stream sockets",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46165",
      "url": "https://patchblox.com/security/cve/CVE-2026-46165",
      "title": "openvswitch: vport: fix self-deadlock on release of tunnel ports",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00099,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46051",
      "url": "https://patchblox.com/security/cve/CVE-2026-46051",
      "title": "md/raid5: fix soft lockup in retry_aligned_read()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46050",
      "url": "https://patchblox.com/security/cve/CVE-2026-46050",
      "title": "md/raid10: fix deadlock with check operation and nowait requests",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46061",
      "url": "https://patchblox.com/security/cve/CVE-2026-46061",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  jbd2: fix deadlock in jbd2_journal_cancel_revoke...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31456",
      "url": "https://patchblox.com/security/cve/CVE-2026-31456",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/pagewalk: fix race between concurrent split a...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00089,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}