{
  "fix": "ALAS2023-2026-1866",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1866",
  "summary": "ALAS2023-2026-1866, released June 22, 2026, fixes 130 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 18 packages",
  "released": "2026-06-22T09:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-52993, rated Critical",
  "supported": true,
  "cveCount": 130,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.04576,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1866.html",
  "appliesTo": [
    {
      "product": "bpftool6.18",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.18.33-63.124",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.18.33-63.124",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.18",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.18",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.33-63.124.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-52993",
      "url": "https://patchblox.com/security/cve/CVE-2026-52993",
      "title": "tipc: fix double-free in tipc_buf_append()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52955",
      "url": "https://patchblox.com/security/cve/CVE-2026-52955",
      "title": "kernel-uek64k-core: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53002",
      "url": "https://patchblox.com/security/cve/CVE-2026-53002",
      "title": "netfilter: conntrack: remove sprintf usage",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53075",
      "url": "https://patchblox.com/security/cve/CVE-2026-53075",
      "title": "ppp: require CAP_NET_ADMIN in target netns for unattached ioctls",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53009",
      "url": "https://patchblox.com/security/cve/CVE-2026-53009",
      "title": "ice: fix double-free of tx_buf skb",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52991",
      "url": "https://patchblox.com/security/cve/CVE-2026-52991",
      "title": "sched/psi: fix race between file release and pressure write",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53036",
      "url": "https://patchblox.com/security/cve/CVE-2026-53036",
      "title": "bpf, arm64: Fix off-by-one in check_imm signed range check",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53053",
      "url": "https://patchblox.com/security/cve/CVE-2026-53053",
      "title": "iommu/amd: Fix clone_alias() to use the original device\u0027s devid",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53077",
      "url": "https://patchblox.com/security/cve/CVE-2026-53077",
      "title": "net/rds: Restrict use of RDS/IB to the initial network namespace",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53062",
      "url": "https://patchblox.com/security/cve/CVE-2026-53062",
      "title": "dm cache policy smq: fix missing locks in invalidating cache blocks",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46242",
      "url": "https://patchblox.com/security/cve/CVE-2026-46242",
      "title": "kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.04576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52958",
      "url": "https://patchblox.com/security/cve/CVE-2026-52958",
      "title": "libceph: Fix potential out-of-bounds access in osdmap_decode()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00735,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53003",
      "url": "https://patchblox.com/security/cve/CVE-2026-53003",
      "title": "pppoe: drop PFC frames",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00716,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52986",
      "url": "https://patchblox.com/security/cve/CVE-2026-52986",
      "title": "netfilter: nf_conntrack_sip: don\u0027t use simple_strtoul",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00634,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52999",
      "url": "https://patchblox.com/security/cve/CVE-2026-52999",
      "title": "netfilter: nfnetlink_osf: fix out-of-bounds read on option matching",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00591,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52998",
      "url": "https://patchblox.com/security/cve/CVE-2026-52998",
      "title": "netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00579,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52981",
      "url": "https://patchblox.com/security/cve/CVE-2026-52981",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  neigh: let neigh_xmit take skb ownership  neigh_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00532,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52954",
      "url": "https://patchblox.com/security/cve/CVE-2026-52954",
      "title": "libceph: handle rbtree insertion error in decode_choose_args()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52957",
      "url": "https://patchblox.com/security/cve/CVE-2026-52957",
      "title": "libceph: Fix potential null-ptr-deref in decode_choose_args()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52974",
      "url": "https://patchblox.com/security/cve/CVE-2026-52974",
      "title": "net: tls: fix strparser anchor skb leak on offload RX setup failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53284",
      "url": "https://patchblox.com/security/cve/CVE-2026-53284",
      "title": "btrfs: only release the dirty pages io tree after successful writes",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53026",
      "url": "https://patchblox.com/security/cve/CVE-2026-53026",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nNFSD: fix nfs4_file access extra count in nfsd4_a...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00426,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45843",
      "url": "https://patchblox.com/security/cve/CVE-2026-45843",
      "title": "slip: bound decode() reads against the compressed packet length",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53006",
      "url": "https://patchblox.com/security/cve/CVE-2026-53006",
      "title": "ipv6: fix possible UAF in icmpv6_rcv()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00394,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52967",
      "url": "https://patchblox.com/security/cve/CVE-2026-52967",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  smb/client: fix possible infinite loop and oob r...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00393,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53069",
      "url": "https://patchblox.com/security/cve/CVE-2026-53069",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64379",
      "url": "https://patchblox.com/security/cve/CVE-2026-64379",
      "title": "smb: client: mask server-provided mode to 07777 in modefromsid",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00309,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52920",
      "url": "https://patchblox.com/security/cve/CVE-2026-52920",
      "title": "netfilter: xt_policy: fix strict mode inbound policy matching",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.3,
      "epss": 0.00299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46215",
      "url": "https://patchblox.com/security/cve/CVE-2026-46215",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ndrm: Set old handle to NULL before prime swap in...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52969",
      "url": "https://patchblox.com/security/cve/CVE-2026-52969",
      "title": "KVM: Reject wrapped offset in kvm_reset_dirty_gfn()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52973",
      "url": "https://patchblox.com/security/cve/CVE-2026-52973",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nfutex: Drop CLONE_THREAD requirement for private...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53000",
      "url": "https://patchblox.com/security/cve/CVE-2026-53000",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: nat: use kfree_rcu to release ops\nFlor...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63860",
      "url": "https://patchblox.com/security/cve/CVE-2026-63860",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53081",
      "url": "https://patchblox.com/security/cve/CVE-2026-53081",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Enforce regsafe base id consistency for BPF...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53085",
      "url": "https://patchblox.com/security/cve/CVE-2026-53085",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: fix mm lifecycle in open-coded task_vma ite...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53115",
      "url": "https://patchblox.com/security/cve/CVE-2026-53115",
      "title": "bus: fsl-mc: use generic driver_override infrastructure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53119",
      "url": "https://patchblox.com/security/cve/CVE-2026-53119",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  platform/wmi: use generic driver_override infras...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53120",
      "url": "https://patchblox.com/security/cve/CVE-2026-53120",
      "title": "PCI: use generic driver_override infrastructure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53067",
      "url": "https://patchblox.com/security/cve/CVE-2026-53067",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  PCI: endpoint: pci-ep-msi: Fix error unwind and...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53023",
      "url": "https://patchblox.com/security/cve/CVE-2026-53023",
      "title": "fs/ntfs3: terminate the cached volume label after UTF-8 conversion",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52972",
      "url": "https://patchblox.com/security/cve/CVE-2026-52972",
      "title": "crypto: af_alg - Cap AEAD AD length to 0x80000000",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46209",
      "url": "https://patchblox.com/security/cve/CVE-2026-46209",
      "title": "kernel-uek-core: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53059",
      "url": "https://patchblox.com/security/cve/CVE-2026-53059",
      "title": "dm log: fix out-of-bounds write due to region_count overflow",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52962",
      "url": "https://patchblox.com/security/cve/CVE-2026-52962",
      "title": "ceph: fix a buffer leak in __ceph_setxattr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46274",
      "url": "https://patchblox.com/security/cve/CVE-2026-46274",
      "title": "io-wq: check that the predecessor is hashed in io_wq_remove_pending()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53281",
      "url": "https://patchblox.com/security/cve/CVE-2026-53281",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\niommu/vt-d: Avoid NULL pointer dereference or ref...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45839",
      "url": "https://patchblox.com/security/cve/CVE-2026-45839",
      "title": "bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46164",
      "url": "https://patchblox.com/security/cve/CVE-2026-46164",
      "title": "btrfs: fix double free in create_space_info_sub_group() error path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53033",
      "url": "https://patchblox.com/security/cve/CVE-2026-53033",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf, sockmap: Take state lock for af_unix iter...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52953",
      "url": "https://patchblox.com/security/cve/CVE-2026-52953",
      "title": "iommu/vt-d: Fix oops due to out of scope access",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52970",
      "url": "https://patchblox.com/security/cve/CVE-2026-52970",
      "title": "netfilter: nft_ct: fix missing expect put in obj eval",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53092",
      "url": "https://patchblox.com/security/cve/CVE-2026-53092",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix linked reg delta tracking when src_reg...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45840",
      "url": "https://patchblox.com/security/cve/CVE-2026-45840",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46234",
      "url": "https://patchblox.com/security/cve/CVE-2026-46234",
      "title": "vsock: fix buffer size clamping order",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53011",
      "url": "https://patchblox.com/security/cve/CVE-2026-53011",
      "title": "net/sched: taprio: fix use-after-free in advance_sched() on schedule switch",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53004",
      "url": "https://patchblox.com/security/cve/CVE-2026-53004",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53031",
      "url": "https://patchblox.com/security/cve/CVE-2026-53031",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Validate node_id in arena_alloc_pages()  ar...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53094",
      "url": "https://patchblox.com/security/cve/CVE-2026-53094",
      "title": "bpf: Fix stale offload-\u003Eprog pointer after constant blinding",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53063",
      "url": "https://patchblox.com/security/cve/CVE-2026-53063",
      "title": "dm cache: fix write hang in passthrough mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53034",
      "url": "https://patchblox.com/security/cve/CVE-2026-53034",
      "title": "bpf, sockmap: Fix af_unix null-ptr-deref in proto update",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63865",
      "url": "https://patchblox.com/security/cve/CVE-2026-63865",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46324",
      "url": "https://patchblox.com/security/cve/CVE-2026-46324",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_tables: use list_del_rcu for netli...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53064",
      "url": "https://patchblox.com/security/cve/CVE-2026-53064",
      "title": "dm cache: fix null-deref with concurrent writes in passthrough mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53021",
      "url": "https://patchblox.com/security/cve/CVE-2026-53021",
      "title": "scsi: target: core: Fix integer overflow in UNMAP bounds check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53110",
      "url": "https://patchblox.com/security/cve/CVE-2026-53110",
      "title": "s390/bpf: Zero-extend bpf prog return values and kfunc arguments",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46154",
      "url": "https://patchblox.com/security/cve/CVE-2026-46154",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Read scx_root under scx_cgroup_ops_rw...",
      "priority": "High",
      "severity": "high",
      "cvss": 7,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53129",
      "url": "https://patchblox.com/security/cve/CVE-2026-53129",
      "title": "fs/mbcache: cancel shrink work before destroying the cache",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53076",
      "url": "https://patchblox.com/security/cve/CVE-2026-53076",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix OOB in pcpu_init_value  An out-of-bound...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52959",
      "url": "https://patchblox.com/security/cve/CVE-2026-52959",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  virt: sev-guest: Do not use host-controlled page...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00113,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52975",
      "url": "https://patchblox.com/security/cve/CVE-2026-52975",
      "title": "bonding: 3ad: implement proper RCU rules for port-\u003Eaggregator",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46227",
      "url": "https://patchblox.com/security/cve/CVE-2026-46227",
      "title": "sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53050",
      "url": "https://patchblox.com/security/cve/CVE-2026-53050",
      "title": "quota: Fix race of dquot_scan_active() with quota deactivation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53096",
      "url": "https://patchblox.com/security/cve/CVE-2026-53096",
      "title": "bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53047",
      "url": "https://patchblox.com/security/cve/CVE-2026-53047",
      "title": "efi/capsule-loader: fix incorrect sizeof in phys array reallocation",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52980",
      "url": "https://patchblox.com/security/cve/CVE-2026-52980",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched/fair: Clear rel_deadline when initializing...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53014",
      "url": "https://patchblox.com/security/cve/CVE-2026-53014",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: act_mirred: fix wrong device for mac_...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53038",
      "url": "https://patchblox.com/security/cve/CVE-2026-53038",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ima_fs: Correctly create securityfs files for un...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53083",
      "url": "https://patchblox.com/security/cve/CVE-2026-53083",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix RCU stall in bpf_fd_array_map_clear()...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53084",
      "url": "https://patchblox.com/security/cve/CVE-2026-53084",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: return VMA snapshot from task_vma iterator...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53128",
      "url": "https://patchblox.com/security/cve/CVE-2026-53128",
      "title": "drbd: Balance RCU calls in drbd_adm_dump_devices()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53288",
      "url": "https://patchblox.com/security/cve/CVE-2026-53288",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: Reserve an extra page for early kernel ma...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53321",
      "url": "https://patchblox.com/security/cve/CVE-2026-53321",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/napi: cap busy_poll_to 10 msec  Current...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52978",
      "url": "https://patchblox.com/security/cve/CVE-2026-52978",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: psp: require admin permission for dev-set a...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52997",
      "url": "https://patchblox.com/security/cve/CVE-2026-52997",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: sch_dualpi2: drain both C-queue and L...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53095",
      "url": "https://patchblox.com/security/cve/CVE-2026-53095",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix abuse of kprobe_write_ctx via freplace...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53121",
      "url": "https://patchblox.com/security/cve/CVE-2026-53121",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  amd-pstate: Fix memory leak in amd_pstate_epp_cp...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53282",
      "url": "https://patchblox.com/security/cve/CVE-2026-53282",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  x86/kexec: Push kjump return address even for no...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53283",
      "url": "https://patchblox.com/security/cve/CVE-2026-53283",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/amd: Bounds-check devid in __rlookup_amd_i...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53307",
      "url": "https://patchblox.com/security/cve/CVE-2026-53307",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  pinctrl: pinconf-generic: Fully validate \u0027pinmux...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52961",
      "url": "https://patchblox.com/security/cve/CVE-2026-52961",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ceph: fix BUG_ON in __ceph_build_xattrs_blob() d...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53012",
      "url": "https://patchblox.com/security/cve/CVE-2026-53012",
      "title": "nexthop: fix IPv6 route referencing IPv4 nexthop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53295",
      "url": "https://patchblox.com/security/cve/CVE-2026-53295",
      "title": "mailbox: add sanity check for channel array",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45841",
      "url": "https://patchblox.com/security/cve/CVE-2026-45841",
      "title": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45844",
      "url": "https://patchblox.com/security/cve/CVE-2026-45844",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46214",
      "url": "https://patchblox.com/security/cve/CVE-2026-46214",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45838",
      "url": "https://patchblox.com/security/cve/CVE-2026-45838",
      "title": "bpf: fix end-of-list detection in cgroup_storage_get_next_key()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45842",
      "url": "https://patchblox.com/security/cve/CVE-2026-45842",
      "title": "slip: reject VJ receive packets on instances with no rstate array",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53001",
      "url": "https://patchblox.com/security/cve/CVE-2026-53001",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52984",
      "url": "https://patchblox.com/security/cve/CVE-2026-52984",
      "title": "kernel-uek-container: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52990",
      "url": "https://patchblox.com/security/cve/CVE-2026-52990",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fsnotify: fix inode reference leak in fsnotify_r...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53060",
      "url": "https://patchblox.com/security/cve/CVE-2026-53060",
      "title": "dm cache metadata: fix memory leak on metadata abort retry",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45846",
      "url": "https://patchblox.com/security/cve/CVE-2026-45846",
      "title": "bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46207",
      "url": "https://patchblox.com/security/cve/CVE-2026-46207",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  vsock/virtio: fix empty payload in tap skb for n...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52994",
      "url": "https://patchblox.com/security/cve/CVE-2026-52994",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  vsock/virtio: fix MSG_ZEROCOPY pinned-pages acco...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53122",
      "url": "https://patchblox.com/security/cve/CVE-2026-53122",
      "title": "btrfs: fix deadlock between reflink and transaction commit when using flushoncommit",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52979",
      "url": "https://patchblox.com/security/cve/CVE-2026-52979",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: psp: check for device unregister when creat...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53125",
      "url": "https://patchblox.com/security/cve/CVE-2026-53125",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  md: fix array_state=clear sysfs deadlock  When \u0022...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53323",
      "url": "https://patchblox.com/security/cve/CVE-2026-53323",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: dsa: remove redundant netdev_lock_ops() fro...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52977",
      "url": "https://patchblox.com/security/cve/CVE-2026-52977",
      "title": "futex: Prevent lockup in requeue-PI during signal/ timeout wakeup",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52985",
      "url": "https://patchblox.com/security/cve/CVE-2026-52985",
      "title": "kernel-uek-debug-devel: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52995",
      "url": "https://patchblox.com/security/cve/CVE-2026-52995",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/rds: zero per-item info buffer before handin...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53015",
      "url": "https://patchblox.com/security/cve/CVE-2026-53015",
      "title": "erofs: unify lcn as u64 for 32-bit platforms",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53061",
      "url": "https://patchblox.com/security/cve/CVE-2026-53061",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dm cache: fix dirty mapping checking in passthro...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53287",
      "url": "https://patchblox.com/security/cve/CVE-2026-53287",
      "title": "audit: fix incorrect inheritable capability in CAPSET records",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53289",
      "url": "https://patchblox.com/security/cve/CVE-2026-53289",
      "title": "ice: fix NULL pointer dereference in ice_reset_all_vfs()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53013",
      "url": "https://patchblox.com/security/cve/CVE-2026-53013",
      "title": "macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53032",
      "url": "https://patchblox.com/security/cve/CVE-2026-53032",
      "title": "bpf: Fix NULL deref in map_kptr_match_type for scalar regs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53111",
      "url": "https://patchblox.com/security/cve/CVE-2026-53111",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: test_run: Fix the null pointer dereference...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46236",
      "url": "https://patchblox.com/security/cve/CVE-2026-46236",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  media: rc: xbox_remote: heed DMA restrictions  T...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53314",
      "url": "https://patchblox.com/security/cve/CVE-2026-53314",
      "title": "padata: Put CPU offline callback in ONLINE section to allow failure",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53123",
      "url": "https://patchblox.com/security/cve/CVE-2026-53123",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  md: wake raid456 reshape waiters before suspend...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53074",
      "url": "https://patchblox.com/security/cve/CVE-2026-53074",
      "title": "bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.4,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52925",
      "url": "https://patchblox.com/security/cve/CVE-2026-52925",
      "title": "vrf: Fix a potential NPD when removing a port from a VRF",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52936",
      "url": "https://patchblox.com/security/cve/CVE-2026-52936",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: jitterentropy - replace long-held spinlo...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53126",
      "url": "https://patchblox.com/security/cve/CVE-2026-53126",
      "title": "blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53114",
      "url": "https://patchblox.com/security/cve/CVE-2026-53114",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  perf/amd/ibs: Avoid calling perf_allow_kernel()...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00112,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53304",
      "url": "https://patchblox.com/security/cve/CVE-2026-53304",
      "title": "scsi: sg: Resolve soft lockup issue when opening /dev/sgX",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00101,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46159",
      "url": "https://patchblox.com/security/cve/CVE-2026-46159",
      "title": "btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00098,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53035",
      "url": "https://patchblox.com/security/cve/CVE-2026-53035",
      "title": "bpf, sockmap: Fix af_unix iter deadlock",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53037",
      "url": "https://patchblox.com/security/cve/CVE-2026-53037",
      "title": "HID: usbhid: fix deadlock in hid_post_reset()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}