# ALAS2023-2026-1866: Security update for 18 packages ALAS2023-2026-1866, released June 22, 2026, fixes 130 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1866 - Platform: Linux - Released: Jun 22, 2026 - Priority: Urgent (Closes CVE-2026-52993, rated Critical) - CVEs: 130, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1866.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.18](https://patchblox.com/security/data/product/linux/bpftool6.18.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [bpftool6.18-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.18-debuginfo.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel-livepatch-6.18.33-63.124](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.18.33-63.124.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.18](https://patchblox.com/security/data/product/linux/kernel6.18.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-devel](https://patchblox.com/security/data/product/linux/kernel6.18-devel.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-headers](https://patchblox.com/security/data/product/linux/kernel6.18-headers.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra-common.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-tools](https://patchblox.com/security/data/product/linux/kernel6.18-tools.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-tools-debuginfo.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [kernel6.18-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.18-tools-devel.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [perf6.18](https://patchblox.com/security/data/product/linux/perf6.18.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [python3-perf6.18](https://patchblox.com/security/data/product/linux/python3-perf6.18.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | | [python3-perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.33-63.124.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-52993](https://patchblox.com/security/data/cve/CVE-2026-52993.md) | Urgent | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 | | | [CVE-2026-52955](https://patchblox.com/security/data/cve/CVE-2026-52955.md) | Urgent | kernel-uek64k-core: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0038 | | | [CVE-2026-53002](https://patchblox.com/security/data/cve/CVE-2026-53002.md) | Urgent | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 | | | [CVE-2026-53075](https://patchblox.com/security/data/cve/CVE-2026-53075.md) | Urgent | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 | | | [CVE-2026-53009](https://patchblox.com/security/data/cve/CVE-2026-53009.md) | Urgent | ice: fix double-free of tx_buf skb | 9.8 | 0.0018 | | | [CVE-2026-52991](https://patchblox.com/security/data/cve/CVE-2026-52991.md) | Urgent | sched/psi: fix race between file release and pressure write | 9.8 | 0.0015 | | | [CVE-2026-53036](https://patchblox.com/security/data/cve/CVE-2026-53036.md) | Urgent | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 | | | [CVE-2026-53053](https://patchblox.com/security/data/cve/CVE-2026-53053.md) | Urgent | iommu/amd: Fix clone_alias() to use the original device's devid | 9.8 | 0.0013 | | | [CVE-2026-53077](https://patchblox.com/security/data/cve/CVE-2026-53077.md) | Urgent | net/rds: Restrict use of RDS/IB to the initial network namespace | 9.8 | 0.0012 | | | [CVE-2026-53062](https://patchblox.com/security/data/cve/CVE-2026-53062.md) | Urgent | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 | | | [CVE-2026-46242](https://patchblox.com/security/data/cve/CVE-2026-46242.md) | High | kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 7.8 | 0.0458 | | | [CVE-2026-52958](https://patchblox.com/security/data/cve/CVE-2026-52958.md) | High | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 | | | [CVE-2026-53003](https://patchblox.com/security/data/cve/CVE-2026-53003.md) | High | pppoe: drop PFC frames | 7.5 | 0.0072 | | | [CVE-2026-52986](https://patchblox.com/security/data/cve/CVE-2026-52986.md) | High | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | | | [CVE-2026-52999](https://patchblox.com/security/data/cve/CVE-2026-52999.md) | High | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 | | | [CVE-2026-52998](https://patchblox.com/security/data/cve/CVE-2026-52998.md) | High | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 | | | [CVE-2026-52981](https://patchblox.com/security/data/cve/CVE-2026-52981.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: neigh: let neigh_xmit take skb ownership neigh_... | 7.5 | 0.0053 | | | [CVE-2026-52954](https://patchblox.com/security/data/cve/CVE-2026-52954.md) | High | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 | | | [CVE-2026-52957](https://patchblox.com/security/data/cve/CVE-2026-52957.md) | High | libceph: Fix potential null-ptr-deref in decode_choose_args() | 7.5 | 0.0052 | | | [CVE-2026-52974](https://patchblox.com/security/data/cve/CVE-2026-52974.md) | High | net: tls: fix strparser anchor skb leak on offload RX setup failure | 7.5 | 0.0050 | | | [CVE-2026-53284](https://patchblox.com/security/data/cve/CVE-2026-53284.md) | High | btrfs: only release the dirty pages io tree after successful writes | 7.5 | 0.0048 | | | [CVE-2026-53026](https://patchblox.com/security/data/cve/CVE-2026-53026.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: NFSD: fix nfs4_file access extra count in nfsd4_a... | 8.8 | 0.0043 | | | [CVE-2026-45843](https://patchblox.com/security/data/cve/CVE-2026-45843.md) | High | slip: bound decode() reads against the compressed packet length | 8.2 | 0.0040 | | | [CVE-2026-53006](https://patchblox.com/security/data/cve/CVE-2026-53006.md) | High | ipv6: fix possible UAF in icmpv6_rcv() | 9.8 | 0.0039 | | | [CVE-2026-52967](https://patchblox.com/security/data/cve/CVE-2026-52967.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb/client: fix possible infinite loop and oob r... | 8.1 | 0.0039 | | | [CVE-2026-53069](https://patchblox.com/security/data/cve/CVE-2026-53069.md) | High | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.5 | 0.0038 | | | [CVE-2026-64379](https://patchblox.com/security/data/cve/CVE-2026-64379.md) | High | smb: client: mask server-provided mode to 07777 in modefromsid | 7.8 | 0.0031 | | | [CVE-2026-52920](https://patchblox.com/security/data/cve/CVE-2026-52920.md) | High | netfilter: xt_policy: fix strict mode inbound policy matching | 8.3 | 0.0030 | | | [CVE-2026-46215](https://patchblox.com/security/data/cve/CVE-2026-46215.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm: Set old handle to NULL before prime swap in... | 7.8 | 0.0023 | | | [CVE-2026-52969](https://patchblox.com/security/data/cve/CVE-2026-52969.md) | High | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 | | | [CVE-2026-52973](https://patchblox.com/security/data/cve/CVE-2026-52973.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: futex: Drop CLONE_THREAD requirement for private... | 7.8 | 0.0018 | | | [CVE-2026-53000](https://patchblox.com/security/data/cve/CVE-2026-53000.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Flor... | 7.8 | 0.0018 | | | [CVE-2026-63860](https://patchblox.com/security/data/cve/CVE-2026-63860.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.4 | 0.0018 | | | [CVE-2026-53081](https://patchblox.com/security/data/cve/CVE-2026-53081.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce regsafe base id consistency for BPF... | 7.8 | 0.0018 | | | [CVE-2026-53085](https://patchblox.com/security/data/cve/CVE-2026-53085.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix mm lifecycle in open-coded task_vma ite... | 7.8 | 0.0018 | | | [CVE-2026-53115](https://patchblox.com/security/data/cve/CVE-2026-53115.md) | High | bus: fsl-mc: use generic driver_override infrastructure | 7.8 | 0.0018 | | | [CVE-2026-53119](https://patchblox.com/security/data/cve/CVE-2026-53119.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: platform/wmi: use generic driver_override infras... | 7.8 | 0.0018 | | | [CVE-2026-53120](https://patchblox.com/security/data/cve/CVE-2026-53120.md) | High | PCI: use generic driver_override infrastructure | 7.8 | 0.0018 | | | [CVE-2026-53067](https://patchblox.com/security/data/cve/CVE-2026-53067.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: pci-ep-msi: Fix error unwind and... | 7.8 | 0.0017 | | | [CVE-2026-53023](https://patchblox.com/security/data/cve/CVE-2026-53023.md) | High | fs/ntfs3: terminate the cached volume label after UTF-8 conversion | 7.1 | 0.0016 | | | [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 | | | [CVE-2026-46209](https://patchblox.com/security/data/cve/CVE-2026-46209.md) | High | kernel-uek-core: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.4 | 0.0014 | | | [CVE-2026-53059](https://patchblox.com/security/data/cve/CVE-2026-53059.md) | High | dm log: fix out-of-bounds write due to region_count overflow | 7.8 | 0.0014 | | | [CVE-2026-52962](https://patchblox.com/security/data/cve/CVE-2026-52962.md) | High | ceph: fix a buffer leak in __ceph_setxattr() | 7.8 | 0.0014 | | | [CVE-2026-46274](https://patchblox.com/security/data/cve/CVE-2026-46274.md) | High | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | 7.8 | 0.0014 | | | [CVE-2026-53281](https://patchblox.com/security/data/cve/CVE-2026-53281.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or ref... | 8.8 | 0.0014 | | | [CVE-2026-45839](https://patchblox.com/security/data/cve/CVE-2026-45839.md) | High | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | 7.8 | 0.0014 | | | [CVE-2026-46164](https://patchblox.com/security/data/cve/CVE-2026-46164.md) | High | btrfs: fix double free in create_space_info_sub_group() error path | 7.0 | 0.0014 | | | [CVE-2026-53033](https://patchblox.com/security/data/cve/CVE-2026-53033.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Take state lock for af_unix iter... | 7.8 | 0.0014 | | | [CVE-2026-52953](https://patchblox.com/security/data/cve/CVE-2026-52953.md) | High | iommu/vt-d: Fix oops due to out of scope access | 7.1 | 0.0013 | | | [CVE-2026-52970](https://patchblox.com/security/data/cve/CVE-2026-52970.md) | High | netfilter: nft_ct: fix missing expect put in obj eval | 7.0 | 0.0013 | | | [CVE-2026-53092](https://patchblox.com/security/data/cve/CVE-2026-53092.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg... | 7.8 | 0.0013 | | | [CVE-2026-45840](https://patchblox.com/security/data/cve/CVE-2026-45840.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.0 | 0.0013 | | | [CVE-2026-46234](https://patchblox.com/security/data/cve/CVE-2026-46234.md) | High | vsock: fix buffer size clamping order | 7.8 | 0.0013 | | | [CVE-2026-53011](https://patchblox.com/security/data/cve/CVE-2026-53011.md) | High | net/sched: taprio: fix use-after-free in advance_sched() on schedule switch | 8.8 | 0.0013 | | | [CVE-2026-53004](https://patchblox.com/security/data/cve/CVE-2026-53004.md) | High | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0013 | | | [CVE-2026-53031](https://patchblox.com/security/data/cve/CVE-2026-53031.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Validate node_id in arena_alloc_pages() ar... | 7.8 | 0.0013 | | | [CVE-2026-53094](https://patchblox.com/security/data/cve/CVE-2026-53094.md) | High | bpf: Fix stale offload->prog pointer after constant blinding | 7.8 | 0.0013 | | | [CVE-2026-53063](https://patchblox.com/security/data/cve/CVE-2026-53063.md) | High | dm cache: fix write hang in passthrough mode | 7.1 | 0.0013 | | | [CVE-2026-53034](https://patchblox.com/security/data/cve/CVE-2026-53034.md) | High | bpf, sockmap: Fix af_unix null-ptr-deref in proto update | 7.0 | 0.0013 | | | [CVE-2026-63865](https://patchblox.com/security/data/cve/CVE-2026-63865.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.8 | 0.0013 | | | [CVE-2026-46324](https://patchblox.com/security/data/cve/CVE-2026-46324.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netli... | 7.8 | 0.0013 | | | [CVE-2026-53064](https://patchblox.com/security/data/cve/CVE-2026-53064.md) | High | dm cache: fix null-deref with concurrent writes in passthrough mode | 7.1 | 0.0012 | | | [CVE-2026-53021](https://patchblox.com/security/data/cve/CVE-2026-53021.md) | High | scsi: target: core: Fix integer overflow in UNMAP bounds check | 7.0 | 0.0012 | | | [CVE-2026-53110](https://patchblox.com/security/data/cve/CVE-2026-53110.md) | High | s390/bpf: Zero-extend bpf prog return values and kfunc arguments | 7.8 | 0.0012 | | | [CVE-2026-46154](https://patchblox.com/security/data/cve/CVE-2026-46154.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Read scx_root under scx_cgroup_ops_rw... | 7.0 | 0.0012 | | | [CVE-2026-53129](https://patchblox.com/security/data/cve/CVE-2026-53129.md) | High | fs/mbcache: cancel shrink work before destroying the cache | 7.8 | 0.0012 | | | [CVE-2026-53076](https://patchblox.com/security/data/cve/CVE-2026-53076.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix OOB in pcpu_init_value An out-of-bound... | 7.1 | 0.0012 | | | [CVE-2026-52959](https://patchblox.com/security/data/cve/CVE-2026-52959.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Do not use host-controlled page... | 7.8 | 0.0011 | | | [CVE-2026-52975](https://patchblox.com/security/data/cve/CVE-2026-52975.md) | High | bonding: 3ad: implement proper RCU rules for port->aggregator | 7.8 | 0.0011 | | | [CVE-2026-46227](https://patchblox.com/security/data/cve/CVE-2026-46227.md) | High | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 | | | [CVE-2026-53050](https://patchblox.com/security/data/cve/CVE-2026-53050.md) | High | quota: Fix race of dquot_scan_active() with quota deactivation | 7.8 | 0.0010 | | | [CVE-2026-53096](https://patchblox.com/security/data/cve/CVE-2026-53096.md) | High | bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path | 7.8 | 0.0010 | | | [CVE-2026-53047](https://patchblox.com/security/data/cve/CVE-2026-53047.md) | Routine | efi/capsule-loader: fix incorrect sizeof in phys array reallocation | 5.5 | 0.0018 | | | [CVE-2026-52980](https://patchblox.com/security/data/cve/CVE-2026-52980.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched/fair: Clear rel_deadline when initializing... | 5.5 | 0.0016 | | | [CVE-2026-53014](https://patchblox.com/security/data/cve/CVE-2026-53014.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: fix wrong device for mac_... | 5.5 | 0.0016 | | | [CVE-2026-53038](https://patchblox.com/security/data/cve/CVE-2026-53038.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ima_fs: Correctly create securityfs files for un... | 5.5 | 0.0016 | | | [CVE-2026-53083](https://patchblox.com/security/data/cve/CVE-2026-53083.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix RCU stall in bpf_fd_array_map_clear()... | 5.5 | 0.0016 | | | [CVE-2026-53084](https://patchblox.com/security/data/cve/CVE-2026-53084.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: return VMA snapshot from task_vma iterator... | 5.5 | 0.0016 | | | [CVE-2026-53128](https://patchblox.com/security/data/cve/CVE-2026-53128.md) | Routine | drbd: Balance RCU calls in drbd_adm_dump_devices() | 5.5 | 0.0016 | | | [CVE-2026-53288](https://patchblox.com/security/data/cve/CVE-2026-53288.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: arm64: Reserve an extra page for early kernel ma... | 5.5 | 0.0016 | | | [CVE-2026-53321](https://patchblox.com/security/data/cve/CVE-2026-53321.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: cap busy_poll_to 10 msec Current... | 5.5 | 0.0016 | | | [CVE-2026-52978](https://patchblox.com/security/data/cve/CVE-2026-52978.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: psp: require admin permission for dev-set a... | 5.5 | 0.0016 | | | [CVE-2026-52997](https://patchblox.com/security/data/cve/CVE-2026-52997.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_dualpi2: drain both C-queue and L... | 5.5 | 0.0016 | | | [CVE-2026-53095](https://patchblox.com/security/data/cve/CVE-2026-53095.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix abuse of kprobe_write_ctx via freplace... | 5.5 | 0.0016 | | | [CVE-2026-53121](https://patchblox.com/security/data/cve/CVE-2026-53121.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: amd-pstate: Fix memory leak in amd_pstate_epp_cp... | 5.5 | 0.0016 | | | [CVE-2026-53282](https://patchblox.com/security/data/cve/CVE-2026-53282.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Push kjump return address even for no... | 5.5 | 0.0016 | | | [CVE-2026-53283](https://patchblox.com/security/data/cve/CVE-2026-53283.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bounds-check devid in __rlookup_amd_i... | 5.5 | 0.0016 | | | [CVE-2026-53307](https://patchblox.com/security/data/cve/CVE-2026-53307.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: pinctrl: pinconf-generic: Fully validate 'pinmux... | 5.5 | 0.0016 | | | [CVE-2026-52961](https://patchblox.com/security/data/cve/CVE-2026-52961.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix BUG_ON in __ceph_build_xattrs_blob() d... | 5.5 | 0.0015 | | | [CVE-2026-53012](https://patchblox.com/security/data/cve/CVE-2026-53012.md) | Routine | nexthop: fix IPv6 route referencing IPv4 nexthop | 5.5 | 0.0014 | | | [CVE-2026-53295](https://patchblox.com/security/data/cve/CVE-2026-53295.md) | Routine | mailbox: add sanity check for channel array | 5.5 | 0.0013 | | | [CVE-2026-45841](https://patchblox.com/security/data/cve/CVE-2026-45841.md) | Routine | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 5.5 | 0.0013 | | | [CVE-2026-45844](https://patchblox.com/security/data/cve/CVE-2026-45844.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-46214](https://patchblox.com/security/data/cve/CVE-2026-46214.md) | Routine | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-45838](https://patchblox.com/security/data/cve/CVE-2026-45838.md) | Routine | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 5.5 | 0.0013 | | | [CVE-2026-45842](https://patchblox.com/security/data/cve/CVE-2026-45842.md) | Routine | slip: reject VJ receive packets on instances with no rstate array | 5.5 | 0.0013 | | | [CVE-2026-53001](https://patchblox.com/security/data/cve/CVE-2026-53001.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-52984](https://patchblox.com/security/data/cve/CVE-2026-52984.md) | Routine | kernel-uek-container: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-52990](https://patchblox.com/security/data/cve/CVE-2026-52990.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotify_r... | 5.5 | 0.0013 | | | [CVE-2026-53060](https://patchblox.com/security/data/cve/CVE-2026-53060.md) | Routine | dm cache metadata: fix memory leak on metadata abort retry | 5.5 | 0.0013 | | | [CVE-2026-45846](https://patchblox.com/security/data/cve/CVE-2026-45846.md) | Routine | bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() | 5.5 | 0.0013 | | | [CVE-2026-46207](https://patchblox.com/security/data/cve/CVE-2026-46207.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix empty payload in tap skb for n... | 5.5 | 0.0013 | | | [CVE-2026-52994](https://patchblox.com/security/data/cve/CVE-2026-52994.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix MSG_ZEROCOPY pinned-pages acco... | 5.5 | 0.0013 | | | [CVE-2026-53122](https://patchblox.com/security/data/cve/CVE-2026-53122.md) | Routine | btrfs: fix deadlock between reflink and transaction commit when using flushoncommit | 5.5 | 0.0013 | | | [CVE-2026-52979](https://patchblox.com/security/data/cve/CVE-2026-52979.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: psp: check for device unregister when creat... | 5.5 | 0.0012 | | | [CVE-2026-53125](https://patchblox.com/security/data/cve/CVE-2026-53125.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: md: fix array_state=clear sysfs deadlock When "... | 5.5 | 0.0012 | | | [CVE-2026-53323](https://patchblox.com/security/data/cve/CVE-2026-53323.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: dsa: remove redundant netdev_lock_ops() fro... | 5.5 | 0.0012 | | | [CVE-2026-52977](https://patchblox.com/security/data/cve/CVE-2026-52977.md) | Routine | futex: Prevent lockup in requeue-PI during signal/ timeout wakeup | 5.5 | 0.0012 | | | [CVE-2026-52985](https://patchblox.com/security/data/cve/CVE-2026-52985.md) | Routine | kernel-uek-debug-devel: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0012 | | | [CVE-2026-52995](https://patchblox.com/security/data/cve/CVE-2026-52995.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/rds: zero per-item info buffer before handin... | 5.5 | 0.0012 | | | [CVE-2026-53015](https://patchblox.com/security/data/cve/CVE-2026-53015.md) | Routine | erofs: unify lcn as u64 for 32-bit platforms | 5.5 | 0.0012 | | | [CVE-2026-53061](https://patchblox.com/security/data/cve/CVE-2026-53061.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix dirty mapping checking in passthro... | 5.5 | 0.0012 | | | [CVE-2026-53287](https://patchblox.com/security/data/cve/CVE-2026-53287.md) | Routine | audit: fix incorrect inheritable capability in CAPSET records | 5.5 | 0.0012 | | | [CVE-2026-53289](https://patchblox.com/security/data/cve/CVE-2026-53289.md) | Routine | ice: fix NULL pointer dereference in ice_reset_all_vfs() | 5.5 | 0.0012 | | | [CVE-2026-53013](https://patchblox.com/security/data/cve/CVE-2026-53013.md) | Routine | macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF | 5.5 | 0.0012 | | | [CVE-2026-53032](https://patchblox.com/security/data/cve/CVE-2026-53032.md) | Routine | bpf: Fix NULL deref in map_kptr_match_type for scalar regs | 5.5 | 0.0012 | | | [CVE-2026-53111](https://patchblox.com/security/data/cve/CVE-2026-53111.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: test_run: Fix the null pointer dereference... | 5.5 | 0.0012 | | | [CVE-2026-46236](https://patchblox.com/security/data/cve/CVE-2026-46236.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: media: rc: xbox_remote: heed DMA restrictions T... | 5.5 | 0.0012 | | | [CVE-2026-53314](https://patchblox.com/security/data/cve/CVE-2026-53314.md) | Routine | padata: Put CPU offline callback in ONLINE section to allow failure | 5.5 | 0.0012 | | | [CVE-2026-53123](https://patchblox.com/security/data/cve/CVE-2026-53123.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: md: wake raid456 reshape waiters before suspend... | 5.5 | 0.0012 | | | [CVE-2026-53074](https://patchblox.com/security/data/cve/CVE-2026-53074.md) | Routine | bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb | 6.4 | 0.0011 | | | [CVE-2026-52925](https://patchblox.com/security/data/cve/CVE-2026-52925.md) | Routine | vrf: Fix a potential NPD when removing a port from a VRF | 5.5 | 0.0011 | | | [CVE-2026-52936](https://patchblox.com/security/data/cve/CVE-2026-52936.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: jitterentropy - replace long-held spinlo... | 5.5 | 0.0011 | | | [CVE-2026-53126](https://patchblox.com/security/data/cve/CVE-2026-53126.md) | Routine | blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() | 5.5 | 0.0011 | | | [CVE-2026-53114](https://patchblox.com/security/data/cve/CVE-2026-53114.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: perf/amd/ibs: Avoid calling perf_allow_kernel()... | 5.5 | 0.0011 | | | [CVE-2026-53304](https://patchblox.com/security/data/cve/CVE-2026-53304.md) | Routine | scsi: sg: Resolve soft lockup issue when opening /dev/sgX | 5.5 | 0.0010 | | | [CVE-2026-46159](https://patchblox.com/security/data/cve/CVE-2026-46159.md) | Routine | btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak | 5.5 | 0.0010 | | | [CVE-2026-53035](https://patchblox.com/security/data/cve/CVE-2026-53035.md) | Routine | bpf, sockmap: Fix af_unix iter deadlock | 5.5 | 0.0010 | | | [CVE-2026-53037](https://patchblox.com/security/data/cve/CVE-2026-53037.md) | Routine | HID: usbhid: fix deadlock in hid_post_reset() | 5.5 | 0.0010 | | --- Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.