# ALAS2023-2026-1881: Security update for 19 packages ALAS2023-2026-1881, released June 22, 2026, fixes 164 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1881 - Platform: Linux - Released: Jun 22, 2026 - Priority: Urgent (Closes CVE-2026-64150, rated Critical) - CVEs: 164, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1881.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.18](https://patchblox.com/security/data/product/linux/bpftool6.18.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [bpftool6.18-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.18-debuginfo.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel-livepatch-6.18.35-68.127](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.18.35-68.127.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.18](https://patchblox.com/security/data/product/linux/kernel6.18.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-devel](https://patchblox.com/security/data/product/linux/kernel6.18-devel.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-headers](https://patchblox.com/security/data/product/linux/kernel6.18-headers.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra-common.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-tools](https://patchblox.com/security/data/product/linux/kernel6.18-tools.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-tools-debuginfo.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [kernel6.18-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.18-tools-devel.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [microvm-kernel6.18](https://patchblox.com/security/data/product/linux/microvm-kernel6.18.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [perf6.18](https://patchblox.com/security/data/product/linux/perf6.18.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [python3-perf6.18](https://patchblox.com/security/data/product/linux/python3-perf6.18.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | | [python3-perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.35-68.127.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-64066](https://patchblox.com/security/data/cve/CVE-2026-64066.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on... | 9.8 | 0.0065 | | | [CVE-2026-64069](https://patchblox.com/security/data/cve/CVE-2026-64069.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read... | 9.8 | 0.0065 | | | [CVE-2026-64150](https://patchblox.com/security/data/cve/CVE-2026-64150.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: release local_lock before... | 9.8 | 0.0065 | | | [CVE-2026-64122](https://patchblox.com/security/data/cve/CVE-2026-64122.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_report... | 9.8 | 0.0063 | | | [CVE-2026-63984](https://patchblox.com/security/data/cve/CVE-2026-63984.md) | Urgent | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | | | [CVE-2026-64046](https://patchblox.com/security/data/cve/CVE-2026-64046.md) | Urgent | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | | | [CVE-2026-64047](https://patchblox.com/security/data/cve/CVE-2026-64047.md) | Urgent | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | | | [CVE-2026-64061](https://patchblox.com/security/data/cve/CVE-2026-64061.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read... | 9.8 | 0.0047 | | | [CVE-2026-64216](https://patchblox.com/security/data/cve/CVE-2026-64216.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandon... | 9.8 | 0.0046 | | | [CVE-2026-64232](https://patchblox.com/security/data/cve/CVE-2026-64232.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_in... | 9.8 | 0.0043 | | | [CVE-2026-64025](https://patchblox.com/security/data/cve/CVE-2026-64025.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing wit... | 9.8 | 0.0037 | | | [CVE-2026-46316](https://patchblox.com/security/data/cve/CVE-2026-46316.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache... | 9.3 | 0.0034 | | | [CVE-2026-63939](https://patchblox.com/security/data/cve/CVE-2026-63939.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the... | 9.3 | 0.0020 | | | [CVE-2026-64080](https://patchblox.com/security/data/cve/CVE-2026-64080.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks u... | 9.3 | 0.0020 | | | [CVE-2026-63938](https://patchblox.com/security/data/cve/CVE-2026-63938.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the... | 9.3 | 0.0020 | | | [CVE-2026-64106](https://patchblox.com/security/data/cve/CVE-2026-64106.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with o... | 9.0 | 0.0015 | | | [CVE-2026-64076](https://patchblox.com/security/data/cve/CVE-2026-64076.md) | Urgent | netfilter: bridge: eb_tables: close module init race | 9.8 | 0.0014 | | | [CVE-2026-64078](https://patchblox.com/security/data/cve/CVE-2026-64078.md) | Urgent | netfilter: x_tables: add and use xtables_unregister_table_exit | 9.8 | 0.0013 | | | [CVE-2026-63999](https://patchblox.com/security/data/cve/CVE-2026-63999.md) | Urgent | ethtool: rss: fix indir_table and hkey leak on get_rxfh failure | 9.8 | 0.0012 | | | [CVE-2026-63913](https://patchblox.com/security/data/cve/CVE-2026-63913.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 8.8 | 0.0097 | | | [CVE-2026-63887](https://patchblox.com/security/data/cve/CVE-2026-63887.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_outp... | 9.8 | 0.0078 | | | [CVE-2026-63888](https://patchblox.com/security/data/cve/CVE-2026-63888.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 9.8 | 0.0078 | | | [CVE-2026-63912](https://patchblox.com/security/data/cve/CVE-2026-63912.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0071 | | | [CVE-2026-63922](https://patchblox.com/security/data/cve/CVE-2026-63922.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0071 | | | [CVE-2026-63924](https://patchblox.com/security/data/cve/CVE-2026-63924.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0071 | | | [CVE-2026-63886](https://patchblox.com/security/data/cve/CVE-2026-63886.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 9.8 | 0.0071 | | | [CVE-2026-63968](https://patchblox.com/security/data/cve/CVE-2026-63968.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_select_... | 7.5 | 0.0067 | | | [CVE-2026-63919](https://patchblox.com/security/data/cve/CVE-2026-63919.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0065 | | | [CVE-2026-52932](https://patchblox.com/security/data/cve/CVE-2026-52932.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: ipcomp: Free destination pages on acomp er... | 7.5 | 0.0061 | | | [CVE-2026-64113](https://patchblox.com/security/data/cve/CVE-2026-64113.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0053 | | | [CVE-2026-63993](https://patchblox.com/security/data/cve/CVE-2026-63993.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after s... | 9.8 | 0.0051 | | | [CVE-2026-63994](https://patchblox.com/security/data/cve/CVE-2026-63994.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0051 | | | [CVE-2026-64007](https://patchblox.com/security/data/cve/CVE-2026-64007.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 9.8 | 0.0051 | | | [CVE-2026-63992](https://patchblox.com/security/data/cve/CVE-2026-63992.md) | High | kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.1 | 0.0051 | | | [CVE-2026-64522](https://patchblox.com/security/data/cve/CVE-2026-64522.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix eswitch mode block underflow on I... | 8.8 | 0.0051 | | | [CVE-2026-64116](https://patchblox.com/security/data/cve/CVE-2026-64116.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.5 | 0.0051 | | | [CVE-2026-64132](https://patchblox.com/security/data/cve/CVE-2026-64132.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0049 | | | [CVE-2026-64035](https://patchblox.com/security/data/cve/CVE-2026-64035.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0044 | | | [CVE-2026-64003](https://patchblox.com/security/data/cve/CVE-2026-64003.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Run queues for all non-SDEV_DEL devi... | 7.5 | 0.0044 | | | [CVE-2026-46244](https://patchblox.com/security/data/cve/CVE-2026-46244.md) | High | netfilter: nft_inner: Fix IPv6 inner_thoff desync | 9.1 | 0.0042 | | | [CVE-2026-64136](https://patchblox.com/security/data/cve/CVE-2026-64136.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_f... | 9.8 | 0.0041 | | | [CVE-2026-63889](https://patchblox.com/security/data/cve/CVE-2026-63889.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0036 | | | [CVE-2026-63925](https://patchblox.com/security/data/cve/CVE-2026-63925.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0035 | | | [CVE-2026-31709](https://patchblox.com/security/data/cve/CVE-2026-31709.md) | High | smb: client: validate the whole DACL before rewriting it in cifsacl | 8.8 | 0.0035 | | | [CVE-2026-63980](https://patchblox.com/security/data/cve/CVE-2026-63980.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/handshake: Use spin_lock_bh for hn_lock nvm... | 7.5 | 0.0034 | | | [CVE-2026-64235](https://patchblox.com/security/data/cve/CVE-2026-64235.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs i... | 8.1 | 0.0033 | | | [CVE-2026-64024](https://patchblox.com/security/data/cve/CVE-2026-64024.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.4 | 0.0031 | | | [CVE-2026-52943](https://patchblox.com/security/data/cve/CVE-2026-52943.md) | High | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 | | | [CVE-2026-53360](https://patchblox.com/security/data/cve/CVE-2026-53360.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2... | 8.8 | 0.0030 | | | [CVE-2025-71289](https://patchblox.com/security/data/cve/CVE-2025-71289.md) | High | fs/ntfs3: handle attr_set_size() errors when truncating files | 7.1 | 0.0026 | | | [CVE-2026-52923](https://patchblox.com/security/data/cve/CVE-2026-52923.md) | High | ipc: limit next_id allocation to the valid ID range | 7.8 | 0.0022 | | | [CVE-2026-63896](https://patchblox.com/security/data/cve/CVE-2026-63896.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix integer underflow in... | n/a | 0.0021 | | | [CVE-2026-53365](https://patchblox.com/security/data/cve/CVE-2026-53365.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-... | 8.8 | 0.0020 | | | [CVE-2026-64172](https://patchblox.com/security/data/cve/CVE-2026-64172.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hyg... | 7.1 | 0.0020 | | | [CVE-2026-64045](https://patchblox.com/security/data/cve/CVE-2026-64045.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - use cached peer pointer in ovpn_tcp_... | 8.4 | 0.0019 | | | [CVE-2026-64081](https://patchblox.com/security/data/cve/CVE-2026-64081.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Validate framework notificati... | 8.4 | 0.0019 | | | [CVE-2026-63940](https://patchblox.com/security/data/cve/CVE-2026-63940.md) | High | KVM: SEV: Ignore Port I/O requests of length '0' | 9.3 | 0.0019 | | | [CVE-2026-63926](https://patchblox.com/security/data/cve/CVE-2026-63926.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.4 | 0.0019 | | | [CVE-2026-64044](https://patchblox.com/security/data/cve/CVE-2026-64044.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ovpn: respect peer refcount in CMD_NEW_PEER erro... | 7.8 | 0.0018 | | | [CVE-2026-63875](https://patchblox.com/security/data/cve/CVE-2026-63875.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0018 | | | [CVE-2026-63970](https://patchblox.com/security/data/cve/CVE-2026-63970.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy... | 8.8 | 0.0018 | | | [CVE-2026-63884](https://patchblox.com/security/data/cve/CVE-2026-63884.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... | 7.8 | 0.0018 | | | [CVE-2026-64226](https://patchblox.com/security/data/cve/CVE-2026-64226.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn()... | 7.8 | 0.0018 | | | [CVE-2026-64124](https://patchblox.com/security/data/cve/CVE-2026-64124.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-a... | 8.8 | 0.0017 | | | [CVE-2026-63950](https://patchblox.com/security/data/cve/CVE-2026-63950.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/rmap: initialize nr_pages to 1 at loop start... | 7.8 | 0.0017 | | | [CVE-2026-64074](https://patchblox.com/security/data/cve/CVE-2026-64074.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/statmount: fix slab out-of-bounds write in st... | 7.8 | 0.0017 | | | [CVE-2026-64181](https://patchblox.com/security/data/cve/CVE-2026-64181.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing sup... | 7.8 | 0.0017 | | | [CVE-2026-63920](https://patchblox.com/security/data/cve/CVE-2026-63920.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0017 | | | [CVE-2026-63917](https://patchblox.com/security/data/cve/CVE-2026-63917.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0017 | | | [CVE-2026-64104](https://patchblox.com/security/data/cve/CVE-2026-64104.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Explicitly leak pages in unknow... | 8.7 | 0.0017 | | | [CVE-2026-64075](https://patchblox.com/security/data/cve/CVE-2026-64075.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fprobe: Fix unregister_fprobe() to wait for RCU... | 7.8 | 0.0017 | | | [CVE-2026-64518](https://patchblox.com/security/data/cve/CVE-2026-64518.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao... | n/a | 0.0017 | | | [CVE-2026-64519](https://patchblox.com/security/data/cve/CVE-2026-64519.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocati... | n/a | 0.0017 | | | [CVE-2026-64186](https://patchblox.com/security/data/cve/CVE-2026-64186.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Remove latent out-of-bounds access in... | 7.1 | 0.0016 | | | [CVE-2026-63962](https://patchblox.com/security/data/cve/CVE-2026-63962.md) | High | usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() | 8.8 | 0.0016 | | | [CVE-2026-63921](https://patchblox.com/security/data/cve/CVE-2026-63921.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0016 | | | [CVE-2026-52912](https://patchblox.com/security/data/cve/CVE-2026-52912.md) | High | netfilter: nf_queue: hold bridge skb->dev while queued | 7.8 | 0.0016 | | | [CVE-2026-64015](https://patchblox.com/security/data/cve/CVE-2026-64015.md) | High | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0016 | | | [CVE-2026-64526](https://patchblox.com/security/data/cve/CVE-2026-64526.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnl_ops_complet... | n/a | 0.0016 | | | [CVE-2026-63914](https://patchblox.com/security/data/cve/CVE-2026-63914.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.3 | 0.0015 | | | [CVE-2026-64009](https://patchblox.com/security/data/cve/CVE-2026-64009.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0014 | | | [CVE-2026-64153](https://patchblox.com/security/data/cve/CVE-2026-64153.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.8 | 0.0014 | | | [CVE-2026-64114](https://patchblox.com/security/data/cve/CVE-2026-64114.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0014 | | | [CVE-2026-64077](https://patchblox.com/security/data/cve/CVE-2026-64077.md) | High | netfilter: ebtables: move to two-stage removal scheme | 7.8 | 0.0014 | | | [CVE-2026-63937](https://patchblox.com/security/data/cve/CVE-2026-63937.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when reading entries/i... | 8.8 | 0.0014 | | | [CVE-2026-64111](https://patchblox.com/security/data/cve/CVE-2026-64111.md) | High | kernel-zfcpdump-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0014 | | | [CVE-2026-64115](https://patchblox.com/security/data/cve/CVE-2026-64115.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0014 | | | [CVE-2026-63885](https://patchblox.com/security/data/cve/CVE-2026-63885.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/gem: fix race between change_handle and hand... | 8.8 | 0.0013 | | | [CVE-2026-46322](https://patchblox.com/security/data/cve/CVE-2026-46322.md) | High | tun: free page on build_skb failure in tun_xdp_one() | 7.1 | 0.0013 | | | [CVE-2026-64032](https://patchblox.com/security/data/cve/CVE-2026-64032.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0013 | | | [CVE-2026-64071](https://patchblox.com/security/data/cve/CVE-2026-64071.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_m... | 7.8 | 0.0013 | | | [CVE-2026-64073](https://patchblox.com/security/data/cve/CVE-2026-64073.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_single(... | 7.8 | 0.0013 | | | [CVE-2026-46321](https://patchblox.com/security/data/cve/CVE-2026-46321.md) | High | tun: free page on short-frame rejection in tun_xdp_one() | 7.1 | 0.0013 | | | [CVE-2026-63971](https://patchblox.com/security/data/cve/CVE-2026-63971.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0013 | | | [CVE-2026-64520](https://patchblox.com/security/data/cve/CVE-2026-64520.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS... | 8.4 | 0.0013 | | | [CVE-2026-64002](https://patchblox.com/security/data/cve/CVE-2026-64002.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports... | 8.8 | 0.0013 | | | [CVE-2026-63985](https://patchblox.com/security/data/cve/CVE-2026-63985.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0013 | | | [CVE-2026-64036](https://patchblox.com/security/data/cve/CVE-2026-64036.md) | High | cgroup/rstat: validate cpu before css_rstat_cpu() access | 7.8 | 0.0013 | | | [CVE-2026-64109](https://patchblox.com/security/data/cve/CVE-2026-64109.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail->len in unix_strea... | 8.8 | 0.0013 | | | [CVE-2026-64053](https://patchblox.com/security/data/cve/CVE-2026-64053.md) | High | kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.3 | 0.0013 | | | [CVE-2026-63987](https://patchblox.com/security/data/cve/CVE-2026-63987.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0013 | | | [CVE-2026-63995](https://patchblox.com/security/data/cve/CVE-2026-63995.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: validate start_cmd_payload_size f... | 7.8 | 0.0013 | | | [CVE-2026-63996](https://patchblox.com/security/data/cve/CVE-2026-63996.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0013 | | | [CVE-2026-64058](https://patchblox.com/security/data/cve/CVE-2026-64058.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_folio() to wait on writeba... | 7.8 | 0.0013 | | | [CVE-2026-64063](https://patchblox.com/security/data/cve/CVE-2026-64063.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In... | 7.8 | 0.0013 | | | [CVE-2026-64108](https://patchblox.com/security/data/cve/CVE-2026-64108.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Sin... | 7.8 | 0.0013 | | | [CVE-2026-64217](https://patchblox.com/security/data/cve/CVE-2026-64217.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_i... | 7.8 | 0.0013 | | | [CVE-2026-63952](https://patchblox.com/security/data/cve/CVE-2026-63952.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.4 | 0.0013 | | | [CVE-2026-64054](https://patchblox.com/security/data/cve/CVE-2026-64054.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: shaper: reject duplicate leaves in GROUP re... | 7.8 | 0.0013 | | | [CVE-2026-46317](https://patchblox.com/security/data/cve/CVE-2026-46317.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 8.8 | 0.0013 | | | [CVE-2026-52915](https://patchblox.com/security/data/cve/CVE-2026-52915.md) | High | netfilter: ip6t_hbh: reject oversized option lists | 7.1 | 0.0013 | | | [CVE-2026-64121](https://patchblox.com/security/data/cve/CVE-2026-64121.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queue... | 7.1 | 0.0013 | | | [CVE-2026-64239](https://patchblox.com/security/data/cve/CVE-2026-64239.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in r... | 7.8 | 0.0012 | | | [CVE-2026-64098](https://patchblox.com/security/data/cve/CVE-2026-64098.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0011 | | | [CVE-2026-53277](https://patchblox.com/security/data/cve/CVE-2026-53277.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table wal... | 8.8 | 0.0011 | | | [CVE-2026-64005](https://patchblox.com/security/data/cve/CVE-2026-64005.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: Do not re-initialize smc hashtables IN... | 7.8 | 0.0010 | | | [CVE-2026-64112](https://patchblox.com/security/data/cve/CVE-2026-64112.md) | High | rbd: eliminate a race in lock_dwork draining on unmap | 7.8 | 0.0010 | | | [CVE-2026-64027](https://patchblox.com/security/data/cve/CVE-2026-64027.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0010 | | | [CVE-2026-64031](https://patchblox.com/security/data/cve/CVE-2026-64031.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: erofs: fix managed cache race for unaligned exte... | 7.8 | 0.0010 | | | [CVE-2026-64158](https://patchblox.com/security/data/cve/CVE-2026-64158.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix write streaming disablement if fd ope... | 7.3 | n/a | | | [CVE-2026-63969](https://patchblox.com/security/data/cve/CVE-2026-63969.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in rt6_fill_nod... | 5.5 | 0.0021 | | | [CVE-2026-63876](https://patchblox.com/security/data/cve/CVE-2026-63876.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: serial: zs: Convert to use a platform device Pr... | 5.5 | 0.0017 | | | [CVE-2026-63877](https://patchblox.com/security/data/cve/CVE-2026-63877.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: serial: dz: Convert to use a platform device Pr... | 5.5 | 0.0017 | | | [CVE-2026-64059](https://patchblox.com/security/data/cve/CVE-2026-64059.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio->private handling in netfs_perf... | 5.5 | 0.0016 | | | [CVE-2026-64065](https://patchblox.com/security/data/cve/CVE-2026-64065.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_writ... | 5.5 | 0.0016 | | | [CVE-2026-64105](https://patchblox.com/security/data/cve/CVE-2026-64105.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Free private_irqs when init fa... | 5.5 | 0.0016 | | | [CVE-2026-64157](https://patchblox.com/security/data/cve/CVE-2026-64157.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-wri... | 5.5 | 0.0016 | | | [CVE-2026-53311](https://patchblox.com/security/data/cve/CVE-2026-53311.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fuse: fix uninit-value in fuse_dentry_revalidate... | 5.5 | 0.0016 | | | [CVE-2026-64072](https://patchblox.com/security/data/cve/CVE-2026-64072.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nvme: fix bio leak on mapping failure The local... | 5.5 | 0.0016 | | | [CVE-2026-64110](https://patchblox.com/security/data/cve/CVE-2026-64110.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igc_fpe_xmit_smd_... | 5.5 | 0.0016 | | | [CVE-2026-64120](https://patchblox.com/security/data/cve/CVE-2026-64120.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix NULL pointer dereference in ph... | 5.5 | 0.0016 | | | [CVE-2026-64130](https://patchblox.com/security/data/cve/CVE-2026-64130.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix initialization of tags of the... | 5.5 | 0.0016 | | | [CVE-2026-64149](https://patchblox.com/security/data/cve/CVE-2026-64149.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dma-mapping: move dma_map_resource() sanity chec... | 5.5 | 0.0016 | | | [CVE-2026-64156](https://patchblox.com/security/data/cve/CVE-2026-64156.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs, afs: Fix write skipping in dir/link write... | 5.5 | 0.0016 | | | [CVE-2026-64228](https://patchblox.com/security/data/cve/CVE-2026-64228.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY dri... | 5.5 | 0.0016 | | | [CVE-2026-64229](https://patchblox.com/security/data/cve/CVE-2026-64229.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is... | 5.5 | 0.0016 | | | [CVE-2026-64302](https://patchblox.com/security/data/cve/CVE-2026-64302.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix freeing of PMD-sized vmemmap pages... | 5.5 | 0.0016 | | | [CVE-2026-64525](https://patchblox.com/security/data/cve/CVE-2026-64525.md) | Routine | xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit | 5.5 | 0.0016 | | | [CVE-2026-63990](https://patchblox.com/security/data/cve/CVE-2026-63990.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-64006](https://patchblox.com/security/data/cve/CVE-2026-64006.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix dst corruption in same... | 5.5 | 0.0013 | | | [CVE-2026-63988](https://patchblox.com/security/data/cve/CVE-2026-63988.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in sysfs pat... | 5.5 | 0.0012 | | | [CVE-2026-63989](https://patchblox.com/security/data/cve/CVE-2026-63989.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bridge: Fix sleep in atomic context in netlink p... | 5.5 | 0.0012 | | | [CVE-2026-64012](https://patchblox.com/security/data/cve/CVE-2026-64012.md) | Routine | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0012 | | | [CVE-2026-64131](https://patchblox.com/security/data/cve/CVE-2026-64131.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious warning when unmapping d... | 5.5 | 0.0012 | | | [CVE-2026-64220](https://patchblox.com/security/data/cve/CVE-2026-64220.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL i... | 5.5 | 0.0012 | | | [CVE-2026-63997](https://patchblox.com/security/data/cve/CVE-2026-63997.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on m... | 5.5 | 0.0012 | | | [CVE-2026-63998](https://patchblox.com/security/data/cve/CVE-2026-63998.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnl_ops_complete() on mo... | 5.5 | 0.0012 | | | [CVE-2026-64052](https://patchblox.com/security/data/cve/CVE-2026-64052.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in bio_... | 5.5 | 0.0012 | | | [CVE-2026-64060](https://patchblox.com/security/data/cve/CVE-2026-64060.md) | Routine | netfs: Fix leak of request in netfs_write_begin() error handling | 5.5 | 0.0012 | | | [CVE-2026-64064](https://patchblox.com/security/data/cve/CVE-2026-64064.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_invalidate_folio() to clear dir... | 5.5 | 0.0012 | | | [CVE-2026-63986](https://patchblox.com/security/data/cve/CVE-2026-63986.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: tsinfo: don't pass ERR_PTR to genlmsg_c... | 5.5 | 0.0012 | | | [CVE-2026-64163](https://patchblox.com/security/data/cve/CVE-2026-64163.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: test_kprobes: clear kprobes between test runs R... | 5.5 | 0.0012 | | | [CVE-2026-64166](https://patchblox.com/security/data/cve/CVE-2026-64166.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table... | 5.5 | 0.0012 | | | [CVE-2026-64183](https://patchblox.com/security/data/cve/CVE-2026-64183.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init... | 5.5 | 0.0012 | | | [CVE-2026-64190](https://patchblox.com/security/data/cve/CVE-2026-64190.md) | Routine | net: team: fix NULL pointer dereference in team_xmit during mode change | 5.5 | 0.0012 | | | [CVE-2026-64185](https://patchblox.com/security/data/cve/CVE-2026-64185.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update... | 5.5 | 0.0012 | | | [CVE-2026-52937](https://patchblox.com/security/data/cve/CVE-2026-52937.md) | Routine | tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR | 5.5 | 0.0012 | | | [CVE-2026-46315](https://patchblox.com/security/data/cve/CVE-2026-46315.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copyin... | 5.5 | 0.0011 | | | [CVE-2026-52921](https://patchblox.com/security/data/cve/CVE-2026-52921.md) | Routine | netfilter: ipset: stop hash:* range iteration at end | 5.5 | 0.0011 | | | [CVE-2026-64164](https://patchblox.com/security/data/cve/CVE-2026-64164.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic co... | 5.5 | 0.0011 | | | [CVE-2026-64180](https://patchblox.com/security/data/cve/CVE-2026-64180.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference le... | 5.5 | 0.0011 | | | [CVE-2026-64182](https://patchblox.com/security/data/cve/CVE-2026-64182.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference... | 5.5 | 0.0011 | | | [CVE-2026-64184](https://patchblox.com/security/data/cve/CVE-2026-64184.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing mem_cgroup_... | 5.5 | 0.0011 | | | [CVE-2026-64062](https://patchblox.com/security/data/cve/CVE-2026-64062.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through m... | 5.5 | 0.0009 | | --- Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.