# ALAS2023-2026-1754: Security update for 18 packages ALAS2023-2026-1754, released May 25, 2026, fixes 126 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1754 - Platform: Linux - Released: May 25, 2026 - Priority: Urgent (Closes CVE-2026-46155, rated Critical) - CVEs: 126, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1754.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.18](https://patchblox.com/security/data/product/linux/bpftool6.18.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [bpftool6.18-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.18-debuginfo.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [kernel-livepatch-6.18.30-61.116](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.18.30-61.116.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.18](https://patchblox.com/security/data/product/linux/kernel6.18.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [kernel6.18-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [kernel6.18-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [kernel6.18-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [kernel6.18-devel](https://patchblox.com/security/data/product/linux/kernel6.18-devel.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [kernel6.18-headers](https://patchblox.com/security/data/product/linux/kernel6.18-headers.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [kernel6.18-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [kernel6.18-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra-common.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [kernel6.18-tools](https://patchblox.com/security/data/product/linux/kernel6.18-tools.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [kernel6.18-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-tools-debuginfo.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [kernel6.18-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.18-tools-devel.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [perf6.18](https://patchblox.com/security/data/product/linux/perf6.18.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [python3-perf6.18](https://patchblox.com/security/data/product/linux/python3-perf6.18.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | | [python3-perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.30-61.116.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-46155](https://patchblox.com/security/data/cve/CVE-2026-46155.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in smb2_compo... | 9.1 | 0.0048 | | | [CVE-2026-45988](https://patchblox.com/security/data/cve/CVE-2026-45988.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix re-decryption of RESPONSE packets If... | 9.8 | 0.0046 | | | [CVE-2026-43499](https://patchblox.com/security/data/cve/CVE-2026-43499.md) | High | rtmutex: Use waiter::task instead of current in remove_waiter() | 7.8 | 0.0537 | | | [CVE-2026-46333](https://patchblox.com/security/data/cve/CVE-2026-46333.md) | High | ptrace: slightly saner 'get_dumpable()' logic | 8.1 | 0.0430 | | | [CVE-2026-43501](https://patchblox.com/security/data/cve/CVE-2026-43501.md) | High | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 | | | [CVE-2026-43493](https://patchblox.com/security/data/cve/CVE-2026-43493.md) | High | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | 9.8 | 0.0068 | | | [CVE-2026-46195](https://patchblox.com/security/data/cve/CVE-2026-46195.md) | High | smb: client: validate dacloffset before building DACL pointers | 9.8 | 0.0068 | | | [CVE-2026-46102](https://patchblox.com/security/data/cve/CVE-2026-46102.md) | High | net: strparser: fix skb_head leak in strp_abort_strp() | 7.5 | 0.0056 | | | [CVE-2026-46177](https://patchblox.com/security/data/cve/CVE-2026-46177.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.5 | 0.0056 | | | [CVE-2026-46119](https://patchblox.com/security/data/cve/CVE-2026-46119.md) | High | libceph: Fix slab-out-of-bounds access in auth message processing | 9.1 | 0.0053 | | | [CVE-2026-46185](https://patchblox.com/security/data/cve/CVE-2026-46185.md) | High | smb/client: fix out-of-bounds read in symlink_data() | 9.1 | 0.0053 | | | [CVE-2026-46037](https://patchblox.com/security/data/cve/CVE-2026-46037.md) | High | ipv4: icmp: validate reply type before using icmp_pointers | 8.2 | 0.0051 | | | [CVE-2026-46052](https://patchblox.com/security/data/cve/CVE-2026-46052.md) | High | ceph: only d_add() negative dentries when they are unhashed | 7.5 | 0.0050 | | | [CVE-2026-46115](https://patchblox.com/security/data/cve/CVE-2026-46115.md) | High | block: add pgmap check to biovec_phys_mergeable | 9.8 | 0.0049 | | | [CVE-2026-46024](https://patchblox.com/security/data/cve/CVE-2026-46024.md) | High | libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() | 7.5 | 0.0049 | | | [CVE-2026-46137](https://patchblox.com/security/data/cve/CVE-2026-46137.md) | High | mptcp: pm: ADD_ADDR rtx: fix potential data-race | 9.8 | 0.0048 | | | [CVE-2026-46124](https://patchblox.com/security/data/cve/CVE-2026-46124.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handl... | 7.5 | 0.0048 | | | [CVE-2026-46289](https://patchblox.com/security/data/cve/CVE-2026-46289.md) | High | lib/scatterlist: fix length calculations in extract_kvec_to_sg | 9.8 | 0.0046 | | | [CVE-2026-46306](https://patchblox.com/security/data/cve/CVE-2026-46306.md) | High | flow_dissector: do not dissect PPPoE PFC frames | 8.1 | 0.0045 | | | [CVE-2026-31589](https://patchblox.com/security/data/cve/CVE-2026-31589.md) | High | mm: call ->free_folio() directly in folio_unmap_invalidate() | 9.8 | 0.0044 | | | [CVE-2026-43494](https://patchblox.com/security/data/cve/CVE-2026-43494.md) | High | net/rds: reset op_nents when zerocopy page pin fails | 7.8 | 0.0041 | | | [CVE-2026-43502](https://patchblox.com/security/data/cve/CVE-2026-43502.md) | High | net/rds: handle zerocopy send cleanup before the message is queued | 7.8 | 0.0032 | | | [CVE-2026-46303](https://patchblox.com/security/data/cve/CVE-2026-46303.md) | High | isofs: validate Rock Ridge CE continuation extent against volume size | 8.2 | 0.0032 | | | [CVE-2026-46099](https://patchblox.com/security/data/cve/CVE-2026-46099.md) | High | net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels | 8.1 | 0.0029 | | | [CVE-2026-31786](https://patchblox.com/security/data/cve/CVE-2026-31786.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c T... | 7.8 | 0.0020 | | | [CVE-2026-46113](https://patchblox.com/security/data/cve/CVE-2026-46113.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.8 | 0.0020 | | | [CVE-2026-53369](https://patchblox.com/security/data/cve/CVE-2026-53369.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC lengt... | 8.4 | 0.0019 | | | [CVE-2026-31787](https://patchblox.com/security/data/cve/CVE-2026-31787.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting pr... | 7.8 | 0.0018 | | | [CVE-2026-46081](https://patchblox.com/security/data/cve/CVE-2026-46081.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - fix wrong pointer stored by acom... | 7.8 | 0.0017 | | | [CVE-2026-45989](https://patchblox.com/security/data/cve/CVE-2026-45989.md) | High | of: unittest: fix use-after-free in testdrv_probe() | 7.8 | 0.0016 | | | [CVE-2026-46174](https://patchblox.com/security/data/cve/CVE-2026-46174.md) | High | x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache | 9.8 | 0.0015 | | | [CVE-2026-52933](https://patchblox.com/security/data/cve/CVE-2026-52933.md) | High | io_uring/poll: fix signed comparison in io_poll_get_ownership() | 7.8 | 0.0015 | | | [CVE-2026-46145](https://patchblox.com/security/data/cve/CVE-2026-46145.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko point... | 7.8 | 0.0015 | | | [CVE-2026-46029](https://patchblox.com/security/data/cve/CVE-2026-46029.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/slab: return NULL early from kmalloc_nolock()... | 7.0 | 0.0015 | | | [CVE-2026-46294](https://patchblox.com/security/data/cve/CVE-2026-46294.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0015 | | | [CVE-2026-46149](https://patchblox.com/security/data/cve/CVE-2026-46149.md) | High | scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() | 8.8 | 0.0014 | | | [CVE-2026-46062](https://patchblox.com/security/data/cve/CVE-2026-46062.md) | High | ntfs3: fix integer overflow in run_unpack() volume boundary check | 7.8 | 0.0014 | | | [CVE-2026-46176](https://patchblox.com/security/data/cve/CVE-2026-46176.md) | High | RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() | 7.8 | 0.0014 | | | [CVE-2026-46021](https://patchblox.com/security/data/cve/CVE-2026-46021.md) | High | thermal: core: Fix thermal zone governor cleanup issues | 7.0 | 0.0014 | | | [CVE-2026-46076](https://patchblox.com/security/data/cve/CVE-2026-46076.md) | High | KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 | 8.8 | 0.0014 | | | [CVE-2026-46100](https://patchblox.com/security/data/cve/CVE-2026-46100.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs: afs: revert mmap_prepare() change Partially... | 7.8 | 0.0014 | | | [CVE-2026-46281](https://patchblox.com/security/data/cve/CVE-2026-46281.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_al... | 7.8 | 0.0014 | | | [CVE-2026-46129](https://patchblox.com/security/data/cve/CVE-2026-46129.md) | High | btrfs: fix double free in create_space_info() error path | 7.8 | 0.0014 | | | [CVE-2026-46162](https://patchblox.com/security/data/cve/CVE-2026-46162.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix double free in ice_sf_eth_activate() er... | 7.8 | 0.0014 | | | [CVE-2026-46193](https://patchblox.com/security/data/cve/CVE-2026-46193.md) | High | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.0 | 0.0014 | | | [CVE-2026-46033](https://patchblox.com/security/data/cve/CVE-2026-46033.md) | High | crypto: authencesn - reject short ahash digests during instance creation | 7.3 | 0.0014 | | | [CVE-2026-46015](https://patchblox.com/security/data/cve/CVE-2026-46015.md) | High | tcp: call sk_data_ready() after listener migration | 8.1 | 0.0014 | | | [CVE-2026-46132](https://patchblox.com/security/data/cve/CVE-2026-46132.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.0 | 0.0014 | | | [CVE-2026-46172](https://patchblox.com/security/data/cve/CVE-2026-46172.md) | High | kernel-uek64k: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.0 | 0.0013 | | | [CVE-2026-46023](https://patchblox.com/security/data/cve/CVE-2026-46023.md) | High | dm mirror: fix integer overflow in create_dirty_log() | 7.0 | 0.0013 | | | [CVE-2026-46173](https://patchblox.com/security/data/cve/CVE-2026-46173.md) | High | exit: prevent preemption of oopsing TASK_DEAD task | 7.8 | 0.0013 | | | [CVE-2026-46078](https://patchblox.com/security/data/cve/CVE-2026-46078.md) | High | erofs: fix the out-of-bounds nameoff handling for trailing dirents | 7.1 | 0.0013 | | | [CVE-2026-45999](https://patchblox.com/security/data/cve/CVE-2026-45999.md) | High | erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() | 7.1 | 0.0013 | | | [CVE-2026-46190](https://patchblox.com/security/data/cve/CVE-2026-46190.md) | High | mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() | 7.1 | 0.0013 | | | [CVE-2026-46116](https://patchblox.com/security/data/cve/CVE-2026-46116.md) | High | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete | 8.4 | 0.0013 | | | [CVE-2026-46065](https://patchblox.com/security/data/cve/CVE-2026-46065.md) | High | fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info | 7.8 | 0.0013 | | | [CVE-2026-46150](https://patchblox.com/security/data/cve/CVE-2026-46150.md) | High | fanotify: fix false positive on permission events | 7.8 | 0.0013 | | | [CVE-2026-46053](https://patchblox.com/security/data/cve/CVE-2026-46053.md) | High | net: rds: fix MR cleanup on copy error | 7.8 | 0.0013 | | | [CVE-2026-46084](https://patchblox.com/security/data/cve/CVE-2026-46084.md) | High | RDMA/mana_ib: Disable RX steering on RSS QP destroy | 7.8 | 0.0013 | | | [CVE-2026-46086](https://patchblox.com/security/data/cve/CVE-2026-46086.md) | High | net: bridge: use a stable FDB dst snapshot in RCU readers | 7.8 | 0.0013 | | | [CVE-2026-46093](https://patchblox.com/security/data/cve/CVE-2026-46093.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker de... | 7.8 | 0.0013 | | | [CVE-2026-46120](https://patchblox.com/security/data/cve/CVE-2026-46120.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.8 | 0.0013 | | | [CVE-2026-46070](https://patchblox.com/security/data/cve/CVE-2026-46070.md) | High | md/raid5: validate payload size before accessing journal metadata | 7.1 | 0.0013 | | | [CVE-2026-46158](https://patchblox.com/security/data/cve/CVE-2026-46158.md) | High | mptcp: pm: ADD_ADDR rtx: always decrease sk refcount | 7.0 | 0.0013 | | | [CVE-2026-46160](https://patchblox.com/security/data/cve/CVE-2026-46160.md) | High | btrfs: fix missing last_unlink_trans update when removing a directory | 7.0 | 0.0013 | | | [CVE-2026-46170](https://patchblox.com/security/data/cve/CVE-2026-46170.md) | High | mptcp: pm: ADD_ADDR rtx: free sk if last | 7.0 | 0.0013 | | | [CVE-2026-46045](https://patchblox.com/security/data/cve/CVE-2026-46045.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: skip reading rdevs that are not... | 7.8 | 0.0013 | | | [CVE-2026-46105](https://patchblox.com/security/data/cve/CVE-2026-46105.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Limit NVMe request size to 2 MiB... | 7.8 | 0.0013 | | | [CVE-2026-46279](https://patchblox.com/security/data/cve/CVE-2026-46279.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/alloc_tag: clear codetag for pages allocated... | 7.8 | 0.0013 | | | [CVE-2026-46121](https://patchblox.com/security/data/cve/CVE-2026-46121.md) | High | mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock | 7.8 | 0.0013 | | | [CVE-2026-46094](https://patchblox.com/security/data/cve/CVE-2026-46094.md) | High | ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access | 7.1 | 0.0013 | | | [CVE-2026-46020](https://patchblox.com/security/data/cve/CVE-2026-46020.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate damos_quota_goal->nid fo... | 7.1 | 0.0012 | | | [CVE-2026-43088](https://patchblox.com/security/data/cve/CVE-2026-43088.md) | High | net: af_key: zero aligned sockaddr tail in PF_KEY exports | 7.1 | 0.0012 | | | [CVE-2026-46072](https://patchblox.com/security/data/cve/CVE-2026-46072.md) | High | ntfs3: add buffer boundary checks to run_unpack() | 7.1 | 0.0012 | | | [CVE-2026-45837](https://patchblox.com/security/data/cve/CVE-2026-45837.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in arena_vm_close on for... | 7.8 | 0.0012 | | | [CVE-2026-46107](https://patchblox.com/security/data/cve/CVE-2026-46107.md) | High | dm-thin: fix metadata refcount underflow | 7.8 | 0.0010 | | | [CVE-2026-46000](https://patchblox.com/security/data/cve/CVE-2026-46000.md) | Routine | rxrpc: Fix conn-level packet handling to unshare RESPONSE packets | 5.5 | 0.0016 | | | [CVE-2026-53367](https://patchblox.com/security/data/cve/CVE-2026-53367.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avd... | 5.5 | 0.0016 | | | [CVE-2026-53370](https://patchblox.com/security/data/cve/CVE-2026-53370.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configura... | 5.5 | 0.0016 | | | [CVE-2026-53372](https://patchblox.com/security/data/cve/CVE-2026-53372.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested dom... | 5.5 | 0.0016 | | | [CVE-2026-43492](https://patchblox.com/security/data/cve/CVE-2026-43492.md) | Routine | lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() | 5.5 | 0.0016 | | | [CVE-2026-46079](https://patchblox.com/security/data/cve/CVE-2026-46079.md) | Routine | rbd: fix null-ptr-deref when device_add_disk() fails | 5.5 | 0.0014 | | | [CVE-2026-46089](https://patchblox.com/security/data/cve/CVE-2026-46089.md) | Routine | zram: do not forget to endio for partial discard requests | 5.5 | 0.0014 | | | [CVE-2026-46196](https://patchblox.com/security/data/cve/CVE-2026-46196.md) | Routine | tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() | 5.5 | 0.0013 | | | [CVE-2026-45990](https://patchblox.com/security/data/cve/CVE-2026-45990.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: slub: fix data loss and overflow in krealloc()... | 5.5 | 0.0013 | | | [CVE-2026-46128](https://patchblox.com/security/data/cve/CVE-2026-46128.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-46161](https://patchblox.com/security/data/cve/CVE-2026-46161.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-46040](https://patchblox.com/security/data/cve/CVE-2026-46040.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-46046](https://patchblox.com/security/data/cve/CVE-2026-46046.md) | Routine | ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() | 5.5 | 0.0013 | | | [CVE-2026-46101](https://patchblox.com/security/data/cve/CVE-2026-46101.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-46005](https://patchblox.com/security/data/cve/CVE-2026-46005.md) | Routine | xfs: fix a resource leak in xfs_alloc_buftarg() | 5.5 | 0.0013 | | | [CVE-2026-46168](https://patchblox.com/security/data/cve/CVE-2026-46168.md) | Routine | mptcp: fix scheduling with atomic in timestamp sockopt | 5.5 | 0.0013 | | | [CVE-2026-46131](https://patchblox.com/security/data/cve/CVE-2026-46131.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: check for nEPT/nNPT in slow flush hype... | 5.5 | 0.0013 | | | [CVE-2026-46144](https://patchblox.com/security/data/cve/CVE-2026-46144.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix error unwind in mana_ib_create_qp... | 5.5 | 0.0013 | | | [CVE-2026-46042](https://patchblox.com/security/data/cve/CVE-2026-46042.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: fix memory leaks in weighted_inter... | 5.5 | 0.0013 | | | [CVE-2026-46147](https://patchblox.com/security/data/cve/CVE-2026-46147.md) | Routine | KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() | 5.5 | 0.0013 | | | [CVE-2026-45987](https://patchblox.com/security/data/cve/CVE-2026-45987.md) | Routine | KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 | 5.5 | 0.0012 | | | [CVE-2026-45997](https://patchblox.com/security/data/cve/CVE-2026-45997.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing put_disk() when device_add... | 5.5 | 0.0012 | | | [CVE-2026-46044](https://patchblox.com/security/data/cve/CVE-2026-46044.md) | Routine | kernel-uek-modules-extra: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0012 | | | [CVE-2026-46059](https://patchblox.com/security/data/cve/CVE-2026-46059.md) | Routine | KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN | 5.5 | 0.0012 | | | [CVE-2026-46071](https://patchblox.com/security/data/cve/CVE-2026-46071.md) | Routine | KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 | 5.5 | 0.0012 | | | [CVE-2026-46082](https://patchblox.com/security/data/cve/CVE-2026-46082.md) | Routine | KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 | 5.5 | 0.0012 | | | [CVE-2026-46083](https://patchblox.com/security/data/cve/CVE-2026-46083.md) | Routine | spi: fix resource leaks on device setup failure | 5.5 | 0.0012 | | | [CVE-2026-46108](https://patchblox.com/security/data/cve/CVE-2026-46108.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0012 | | | [CVE-2026-46292](https://patchblox.com/security/data/cve/CVE-2026-46292.md) | Routine | pmdomain: core: Fix detach procedure for virtual devices in genpd | 5.5 | 0.0012 | | | [CVE-2026-46066](https://patchblox.com/security/data/cve/CVE-2026-46066.md) | Routine | ceph: fix num_ops off-by-one when crypto allocation fails | 5.5 | 0.0012 | | | [CVE-2026-46106](https://patchblox.com/security/data/cve/CVE-2026-46106.md) | Routine | eventfs: Hold eventfs_mutex and SRCU when remount walks events | 5.5 | 0.0012 | | | [CVE-2026-46139](https://patchblox.com/security/data/cve/CVE-2026-46139.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: use kzalloc to zero-initialize secu... | 5.5 | 0.0012 | | | [CVE-2026-46283](https://patchblox.com/security/data/cve/CVE-2026-46283.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: tpm: Use kfree_sensitive() to free auth session... | 5.5 | 0.0012 | | | [CVE-2026-43496](https://patchblox.com/security/data/cve/CVE-2026-43496.md) | Routine | net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked | 5.5 | 0.0012 | | | [CVE-2026-46035](https://patchblox.com/security/data/cve/CVE-2026-46035.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: return NULL early from alloc_froz... | 5.5 | 0.0012 | | | [CVE-2026-46095](https://patchblox.com/security/data/cve/CVE-2026-46095.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: md/md-llbitmap: raise barrier before state machi... | 5.5 | 0.0012 | | | [CVE-2026-46096](https://patchblox.com/security/data/cve/CVE-2026-46096.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: tpm2-sessions: Fix missing tpm_buf_destroy() in... | 5.5 | 0.0012 | | | [CVE-2026-46104](https://patchblox.com/security/data/cve/CVE-2026-46104.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: selinux: use sk blob accessor in socket permissi... | 5.5 | 0.0012 | | | [CVE-2026-46284](https://patchblox.com/security/data/cve/CVE-2026-46284.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix early boot crash on parameters w... | 5.5 | 0.0012 | | | [CVE-2026-46290](https://patchblox.com/security/data/cve/CVE-2026-46290.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: x86/efi: Fix graceful fault handling after FPU s... | 5.5 | 0.0012 | | | [CVE-2026-46057](https://patchblox.com/security/data/cve/CVE-2026-46057.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LOG_SUBDOMAINS_OFF inheritance acr... | 3.3 | 0.0012 | | | [CVE-2026-52928](https://patchblox.com/security/data/cve/CVE-2026-52928.md) | Routine | af_unix: Reject SIOCATMARK on non-stream sockets | 5.5 | 0.0011 | | | [CVE-2026-46295](https://patchblox.com/security/data/cve/CVE-2026-46295.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in __kvm_apic_update_irr e... | 5.5 | 0.0011 | | | [CVE-2026-52905](https://patchblox.com/security/data/cve/CVE-2026-52905.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow non-power of two min_reg... | 5.5 | 0.0011 | | | [CVE-2026-46165](https://patchblox.com/security/data/cve/CVE-2026-46165.md) | Routine | openvswitch: vport: fix self-deadlock on release of tunnel ports | 5.5 | 0.0010 | | | [CVE-2026-46051](https://patchblox.com/security/data/cve/CVE-2026-46051.md) | Routine | md/raid5: fix soft lockup in retry_aligned_read() | 5.5 | 0.0010 | | | [CVE-2026-46014](https://patchblox.com/security/data/cve/CVE-2026-46014.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Add missing save/restore handling of L... | 5.5 | 0.0010 | | | [CVE-2026-46050](https://patchblox.com/security/data/cve/CVE-2026-46050.md) | Routine | md/raid10: fix deadlock with check operation and nowait requests | 5.5 | 0.0010 | | | [CVE-2026-46061](https://patchblox.com/security/data/cve/CVE-2026-46061.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: fix deadlock in jbd2_journal_cancel_revoke... | 5.5 | 0.0009 | | | [CVE-2026-46025](https://patchblox.com/security/data/cve/CVE-2026-46025.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix damon_call() vs kdamond_fn()... | 4.7 | 0.0009 | | --- Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.