{ "fix": "ALAS2023-2026-1881", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881", "summary": "ALAS2023-2026-1881, released June 22, 2026, fixes 164 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 19 packages", "released": "2026-06-22T09:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-64150, rated Critical", "supported": true, "cveCount": 164, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00971, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1881.html", "appliesTo": [ { "product": "bpftool6.18", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "bpftool6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.18.35-68.127", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.18.35-68.127", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel6.18", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "kernel6.18-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "kernel6.18-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-headers", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "kernel6.18-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "kernel6.18-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "kernel6.18-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "kernel6.18-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "kernel6.18-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "microvm-kernel6.18", "productUrl": "https://patchblox.com/security/product/linux/microvm-kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "perf6.18", "productUrl": "https://patchblox.com/security/product/linux/perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "perf6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "python3-perf6.18", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true }, { "product": "python3-perf6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.35-68.127.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-64066", "url": "https://patchblox.com/security/cve/CVE-2026-64066", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00649, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64069", "url": "https://patchblox.com/security/cve/CVE-2026-64069", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00649, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64150", "url": "https://patchblox.com/security/cve/CVE-2026-64150", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00649, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64122", "url": "https://patchblox.com/security/cve/CVE-2026-64122", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_report...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00631, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63984", "url": "https://patchblox.com/security/cve/CVE-2026-63984", "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64046", "url": "https://patchblox.com/security/cve/CVE-2026-64046", "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64047", "url": "https://patchblox.com/security/cve/CVE-2026-64047", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64061", "url": "https://patchblox.com/security/cve/CVE-2026-64061", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64216", "url": "https://patchblox.com/security/cve/CVE-2026-64216", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandon...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64232", "url": "https://patchblox.com/security/cve/CVE-2026-64232", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_in...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00431, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64025", "url": "https://patchblox.com/security/cve/CVE-2026-64025", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing wit...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00369, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46316", "url": "https://patchblox.com/security/cve/CVE-2026-46316", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00337, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63939", "url": "https://patchblox.com/security/cve/CVE-2026-63939", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64080", "url": "https://patchblox.com/security/cve/CVE-2026-64080", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks u...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63938", "url": "https://patchblox.com/security/cve/CVE-2026-63938", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64106", "url": "https://patchblox.com/security/cve/CVE-2026-64106", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with o...", "priority": "Urgent", "severity": "critical", "cvss": 9, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64076", "url": "https://patchblox.com/security/cve/CVE-2026-64076", "title": "netfilter: bridge: eb_tables: close module init race", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64078", "url": "https://patchblox.com/security/cve/CVE-2026-64078", "title": "netfilter: x_tables: add and use xtables_unregister_table_exit", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63999", "url": "https://patchblox.com/security/cve/CVE-2026-63999", "title": "ethtool: rss: fix indir_table and hkey leak on get_rxfh failure", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63913", "url": "https://patchblox.com/security/cve/CVE-2026-63913", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00971, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63887", "url": "https://patchblox.com/security/cve/CVE-2026-63887", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nscsi: target: iscsi: Bound iscsi_encode_text_outp...", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00778, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63888", "url": "https://patchblox.com/security/cve/CVE-2026-63888", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00778, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63912", "url": "https://patchblox.com/security/cve/CVE-2026-63912", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63922", "url": "https://patchblox.com/security/cve/CVE-2026-63922", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63924", "url": "https://patchblox.com/security/cve/CVE-2026-63924", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63886", "url": "https://patchblox.com/security/cve/CVE-2026-63886", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00711, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63968", "url": "https://patchblox.com/security/cve/CVE-2026-63968", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_select_...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00665, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63919", "url": "https://patchblox.com/security/cve/CVE-2026-63919", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.0065, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52932", "url": "https://patchblox.com/security/cve/CVE-2026-52932", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp er...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00609, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64113", "url": "https://patchblox.com/security/cve/CVE-2026-64113", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63993", "url": "https://patchblox.com/security/cve/CVE-2026-63993", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nvxlan: do not reuse cached ip_hdr() value after s...", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63994", "url": "https://patchblox.com/security/cve/CVE-2026-63994", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64007", "url": "https://patchblox.com/security/cve/CVE-2026-64007", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63992", "url": "https://patchblox.com/security/cve/CVE-2026-63992", "title": "kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64522", "url": "https://patchblox.com/security/cve/CVE-2026-64522", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on I...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64116", "url": "https://patchblox.com/security/cve/CVE-2026-64116", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.5, "epss": 0.00511, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64132", "url": "https://patchblox.com/security/cve/CVE-2026-64132", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64035", "url": "https://patchblox.com/security/cve/CVE-2026-64035", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00442, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64003", "url": "https://patchblox.com/security/cve/CVE-2026-64003", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Run queues for all non-SDEV_DEL devi...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46244", "url": "https://patchblox.com/security/cve/CVE-2026-46244", "title": "netfilter: nft_inner: Fix IPv6 inner_thoff desync", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00418, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64136", "url": "https://patchblox.com/security/cve/CVE-2026-64136", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nsmb: client: protect tc_count increment in smb2_f...", "priority": "High", "severity": "moderate", "cvss": 9.8, "epss": 0.00407, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63889", "url": "https://patchblox.com/security/cve/CVE-2026-63889", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00359, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63925", "url": "https://patchblox.com/security/cve/CVE-2026-63925", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31709", "url": "https://patchblox.com/security/cve/CVE-2026-31709", "title": "smb: client: validate the whole DACL before rewriting it in cifsacl", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00345, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63980", "url": "https://patchblox.com/security/cve/CVE-2026-63980", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/handshake: Use spin_lock_bh for hn_lock nvm...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0034, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64235", "url": "https://patchblox.com/security/cve/CVE-2026-64235", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs i...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00327, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64024", "url": "https://patchblox.com/security/cve/CVE-2026-64024", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.4, "epss": 0.00308, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52943", "url": "https://patchblox.com/security/cve/CVE-2026-52943", "title": "net: skbuff: fix missing zerocopy reference in pskb_carve helpers", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00302, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53360", "url": "https://patchblox.com/security/cve/CVE-2026-53360", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nKVM: SEV: Require in-GHCB scratch area if GHCB v2...", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00297, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71289", "url": "https://patchblox.com/security/cve/CVE-2025-71289", "title": "fs/ntfs3: handle attr_set_size() errors when truncating files", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52923", "url": "https://patchblox.com/security/cve/CVE-2026-52923", "title": "ipc: limit next_id allocation to the valid ID range", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63896", "url": "https://patchblox.com/security/cve/CVE-2026-63896", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix integer underflow in...", "priority": "High", "severity": "important", "epss": 0.00214, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53365", "url": "https://patchblox.com/security/cve/CVE-2026-53365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-...", "priority": "High", "severity": "medium", "cvss": 8.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64172", "url": "https://patchblox.com/security/cve/CVE-2026-64172", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hyg...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64045", "url": "https://patchblox.com/security/cve/CVE-2026-64045", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer pointer in ovpn_tcp_...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64081", "url": "https://patchblox.com/security/cve/CVE-2026-64081", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Validate framework notificati...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63940", "url": "https://patchblox.com/security/cve/CVE-2026-63940", "title": "KVM: SEV: Ignore Port I/O requests of length \u00270\u0027", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63926", "url": "https://patchblox.com/security/cve/CVE-2026-63926", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64044", "url": "https://patchblox.com/security/cve/CVE-2026-64044", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in CMD_NEW_PEER erro...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63875", "url": "https://patchblox.com/security/cve/CVE-2026-63875", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63970", "url": "https://patchblox.com/security/cve/CVE-2026-63970", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63884", "url": "https://patchblox.com/security/cve/CVE-2026-63884", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: m...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64226", "url": "https://patchblox.com/security/cve/CVE-2026-64226", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn()...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64124", "url": "https://patchblox.com/security/cve/CVE-2026-64124", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-a...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63950", "url": "https://patchblox.com/security/cve/CVE-2026-63950", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nr_pages to 1 at loop start...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64074", "url": "https://patchblox.com/security/cve/CVE-2026-64074", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/statmount: fix slab out-of-bounds write in st...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64181", "url": "https://patchblox.com/security/cve/CVE-2026-64181", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing sup...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63920", "url": "https://patchblox.com/security/cve/CVE-2026-63920", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63917", "url": "https://patchblox.com/security/cve/CVE-2026-63917", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64104", "url": "https://patchblox.com/security/cve/CVE-2026-64104", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Explicitly leak pages in unknow...", "priority": "High", "severity": "high", "cvss": 8.7, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64075", "url": "https://patchblox.com/security/cve/CVE-2026-64075", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregister_fprobe() to wait for RCU...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64518", "url": "https://patchblox.com/security/cve/CVE-2026-64518", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64519", "url": "https://patchblox.com/security/cve/CVE-2026-64519", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocati...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64186", "url": "https://patchblox.com/security/cve/CVE-2026-64186", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Remove latent out-of-bounds access in...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63962", "url": "https://patchblox.com/security/cve/CVE-2026-63962", "title": "usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63921", "url": "https://patchblox.com/security/cve/CVE-2026-63921", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52912", "url": "https://patchblox.com/security/cve/CVE-2026-52912", "title": "netfilter: nf_queue: hold bridge skb-\u003Edev while queued", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64015", "url": "https://patchblox.com/security/cve/CVE-2026-64015", "title": "kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64526", "url": "https://patchblox.com/security/cve/CVE-2026-64526", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnl_ops_complet...", "priority": "High", "severity": "important", "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63914", "url": "https://patchblox.com/security/cve/CVE-2026-63914", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.3, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64009", "url": "https://patchblox.com/security/cve/CVE-2026-64009", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64153", "url": "https://patchblox.com/security/cve/CVE-2026-64153", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64114", "url": "https://patchblox.com/security/cve/CVE-2026-64114", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64077", "url": "https://patchblox.com/security/cve/CVE-2026-64077", "title": "netfilter: ebtables: move to two-stage removal scheme", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63937", "url": "https://patchblox.com/security/cve/CVE-2026-63937", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when reading entries/i...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64111", "url": "https://patchblox.com/security/cve/CVE-2026-64111", "title": "kernel-zfcpdump-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64115", "url": "https://patchblox.com/security/cve/CVE-2026-64115", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63885", "url": "https://patchblox.com/security/cve/CVE-2026-63885", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/gem: fix race between change_handle and hand...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46322", "url": "https://patchblox.com/security/cve/CVE-2026-46322", "title": "tun: free page on build_skb failure in tun_xdp_one()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64032", "url": "https://patchblox.com/security/cve/CVE-2026-64032", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64071", "url": "https://patchblox.com/security/cve/CVE-2026-64071", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_m...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64073", "url": "https://patchblox.com/security/cve/CVE-2026-64073", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_single(...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46321", "url": "https://patchblox.com/security/cve/CVE-2026-46321", "title": "tun: free page on short-frame rejection in tun_xdp_one()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63971", "url": "https://patchblox.com/security/cve/CVE-2026-63971", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64520", "url": "https://patchblox.com/security/cve/CVE-2026-64520", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64002", "url": "https://patchblox.com/security/cve/CVE-2026-64002", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv4: free net-\u003Eipv4.sysctl_local_reserved_ports...", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63985", "url": "https://patchblox.com/security/cve/CVE-2026-63985", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64036", "url": "https://patchblox.com/security/cve/CVE-2026-64036", "title": "cgroup/rstat: validate cpu before css_rstat_cpu() access", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64109", "url": "https://patchblox.com/security/cve/CVE-2026-64109", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail-\u003Elen in unix_strea...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64053", "url": "https://patchblox.com/security/cve/CVE-2026-64053", "title": "kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.3, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63987", "url": "https://patchblox.com/security/cve/CVE-2026-63987", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63995", "url": "https://patchblox.com/security/cve/CVE-2026-63995", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: validate start_cmd_payload_size f...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63996", "url": "https://patchblox.com/security/cve/CVE-2026-63996", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64058", "url": "https://patchblox.com/security/cve/CVE-2026-64058", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_folio() to wait on writeba...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64063", "url": "https://patchblox.com/security/cve/CVE-2026-64063", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64108", "url": "https://patchblox.com/security/cve/CVE-2026-64108", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Sin...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64217", "url": "https://patchblox.com/security/cve/CVE-2026-64217", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_i...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63952", "url": "https://patchblox.com/security/cve/CVE-2026-63952", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64054", "url": "https://patchblox.com/security/cve/CVE-2026-64054", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP re...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46317", "url": "https://patchblox.com/security/cve/CVE-2026-46317", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52915", "url": "https://patchblox.com/security/cve/CVE-2026-52915", "title": "netfilter: ip6t_hbh: reject oversized option lists", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64121", "url": "https://patchblox.com/security/cve/CVE-2026-64121", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queue...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64239", "url": "https://patchblox.com/security/cve/CVE-2026-64239", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00116, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64098", "url": "https://patchblox.com/security/cve/CVE-2026-64098", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00113, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53277", "url": "https://patchblox.com/security/cve/CVE-2026-53277", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nKVM: arm64: Take the SRCU lock for page table wal...", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64005", "url": "https://patchblox.com/security/cve/CVE-2026-64005", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables IN...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64112", "url": "https://patchblox.com/security/cve/CVE-2026-64112", "title": "rbd: eliminate a race in lock_dwork draining on unmap", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64027", "url": "https://patchblox.com/security/cve/CVE-2026-64027", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00099, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64031", "url": "https://patchblox.com/security/cve/CVE-2026-64031", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned exte...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00099, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64158", "url": "https://patchblox.com/security/cve/CVE-2026-64158", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix write streaming disablement if fd ope...", "priority": "High", "severity": "high", "cvss": 7.3, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63969", "url": "https://patchblox.com/security/cve/CVE-2026-63969", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in rt6_fill_nod...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63876", "url": "https://patchblox.com/security/cve/CVE-2026-63876", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Pr...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63877", "url": "https://patchblox.com/security/cve/CVE-2026-63877", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Pr...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64059", "url": "https://patchblox.com/security/cve/CVE-2026-64059", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio-\u003Eprivate handling in netfs_perf...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64065", "url": "https://patchblox.com/security/cve/CVE-2026-64065", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_writ...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64105", "url": "https://patchblox.com/security/cve/CVE-2026-64105", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Free private_irqs when init fa...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64157", "url": "https://patchblox.com/security/cve/CVE-2026-64157", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-wri...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53311", "url": "https://patchblox.com/security/cve/CVE-2026-53311", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: fix uninit-value in fuse_dentry_revalidate...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64072", "url": "https://patchblox.com/security/cve/CVE-2026-64072", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64110", "url": "https://patchblox.com/security/cve/CVE-2026-64110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igc_fpe_xmit_smd_...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64120", "url": "https://patchblox.com/security/cve/CVE-2026-64120", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix NULL pointer dereference in ph...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64130", "url": "https://patchblox.com/security/cve/CVE-2026-64130", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix initialization of tags of the...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64149", "url": "https://patchblox.com/security/cve/CVE-2026-64149", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dma_map_resource() sanity chec...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64156", "url": "https://patchblox.com/security/cve/CVE-2026-64156", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs, afs: Fix write skipping in dir/link write...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64228", "url": "https://patchblox.com/security/cve/CVE-2026-64228", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY dri...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64229", "url": "https://patchblox.com/security/cve/CVE-2026-64229", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64302", "url": "https://patchblox.com/security/cve/CVE-2026-64302", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix freeing of PMD-sized vmemmap pages...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64525", "url": "https://patchblox.com/security/cve/CVE-2026-64525", "title": "xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63990", "url": "https://patchblox.com/security/cve/CVE-2026-63990", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64006", "url": "https://patchblox.com/security/cve/CVE-2026-64006", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix dst corruption in same...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63988", "url": "https://patchblox.com/security/cve/CVE-2026-63988", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in sysfs pat...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63989", "url": "https://patchblox.com/security/cve/CVE-2026-63989", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in netlink p...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64012", "url": "https://patchblox.com/security/cve/CVE-2026-64012", "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64131", "url": "https://patchblox.com/security/cve/CVE-2026-64131", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious warning when unmapping d...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64220", "url": "https://patchblox.com/security/cve/CVE-2026-64220", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-\u003Esecondary to NULL i...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63997", "url": "https://patchblox.com/security/cve/CVE-2026-63997", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on m...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63998", "url": "https://patchblox.com/security/cve/CVE-2026-63998", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnl_ops_complete() on mo...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64052", "url": "https://patchblox.com/security/cve/CVE-2026-64052", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in bio_...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64060", "url": "https://patchblox.com/security/cve/CVE-2026-64060", "title": "netfs: Fix leak of request in netfs_write_begin() error handling", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64064", "url": "https://patchblox.com/security/cve/CVE-2026-64064", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_invalidate_folio() to clear dir...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63986", "url": "https://patchblox.com/security/cve/CVE-2026-63986", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: tsinfo: don\u0027t pass ERR_PTR to genlmsg_c...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64163", "url": "https://patchblox.com/security/cve/CVE-2026-64163", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: test_kprobes: clear kprobes between test runs R...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64166", "url": "https://patchblox.com/security/cve/CVE-2026-64166", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64183", "url": "https://patchblox.com/security/cve/CVE-2026-64183", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64190", "url": "https://patchblox.com/security/cve/CVE-2026-64190", "title": "net: team: fix NULL pointer dereference in team_xmit during mode change", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64185", "url": "https://patchblox.com/security/cve/CVE-2026-64185", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sysfs: don\u0027t remove existing directory on update...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52937", "url": "https://patchblox.com/security/cve/CVE-2026-52937", "title": "tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46315", "url": "https://patchblox.com/security/cve/CVE-2026-46315", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copyin...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52921", "url": "https://patchblox.com/security/cve/CVE-2026-52921", "title": "netfilter: ipset: stop hash:* range iteration at end", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64164", "url": "https://patchblox.com/security/cve/CVE-2026-64164", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic co...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64180", "url": "https://patchblox.com/security/cve/CVE-2026-64180", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference le...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64182", "url": "https://patchblox.com/security/cve/CVE-2026-64182", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64184", "url": "https://patchblox.com/security/cve/CVE-2026-64184", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing mem_cgroup_...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64062", "url": "https://patchblox.com/security/cve/CVE-2026-64062", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through m...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00094, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T20:03:11Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }