{
  "fix": "ALAS2023-2026-1894",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
  "summary": "ALAS2023-2026-1894, released June 22, 2026, fixes 150 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 18 packages",
  "released": "2026-06-22T09:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-64047, rated Critical",
  "supported": true,
  "cveCount": 150,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00735,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1894.html",
  "appliesTo": [
    {
      "product": "bpftool6.12",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.12.92-122.166",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.92-122.166",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-64046",
      "url": "https://patchblox.com/security/cve/CVE-2026-64046",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64047",
      "url": "https://patchblox.com/security/cve/CVE-2026-64047",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64061",
      "url": "https://patchblox.com/security/cve/CVE-2026-64061",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix early put of sink folio in netfs_read...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00469,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64232",
      "url": "https://patchblox.com/security/cve/CVE-2026-64232",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  block: recompute nr_integrity_segments in blk_in...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00431,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52993",
      "url": "https://patchblox.com/security/cve/CVE-2026-52993",
      "title": "tipc: fix double-free in tipc_buf_append()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52955",
      "url": "https://patchblox.com/security/cve/CVE-2026-52955",
      "title": "kernel-uek64k-core: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64025",
      "url": "https://patchblox.com/security/cve/CVE-2026-64025",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf, skmsg: fix verdict sk_data_ready racing wit...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00369,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53002",
      "url": "https://patchblox.com/security/cve/CVE-2026-53002",
      "title": "netfilter: conntrack: remove sprintf usage",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46316",
      "url": "https://patchblox.com/security/cve/CVE-2026-46316",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: arm64: vgic-its: Drop the translation cache...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.3,
      "epss": 0.00337,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53075",
      "url": "https://patchblox.com/security/cve/CVE-2026-53075",
      "title": "ppp: require CAP_NET_ADMIN in target netns for unattached ioctls",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53009",
      "url": "https://patchblox.com/security/cve/CVE-2026-53009",
      "title": "ice: fix double-free of tx_buf skb",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64106",
      "url": "https://patchblox.com/security/cve/CVE-2026-64106",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: arm64: vgic-its: Reject restored DTE with o...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53036",
      "url": "https://patchblox.com/security/cve/CVE-2026-53036",
      "title": "bpf, arm64: Fix off-by-one in check_imm signed range check",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53053",
      "url": "https://patchblox.com/security/cve/CVE-2026-53053",
      "title": "iommu/amd: Fix clone_alias() to use the original device\u0027s devid",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53077",
      "url": "https://patchblox.com/security/cve/CVE-2026-53077",
      "title": "net/rds: Restrict use of RDS/IB to the initial network namespace",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53062",
      "url": "https://patchblox.com/security/cve/CVE-2026-53062",
      "title": "dm cache policy smq: fix missing locks in invalidating cache blocks",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52958",
      "url": "https://patchblox.com/security/cve/CVE-2026-52958",
      "title": "libceph: Fix potential out-of-bounds access in osdmap_decode()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00735,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53003",
      "url": "https://patchblox.com/security/cve/CVE-2026-53003",
      "title": "pppoe: drop PFC frames",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00716,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52986",
      "url": "https://patchblox.com/security/cve/CVE-2026-52986",
      "title": "netfilter: nf_conntrack_sip: don\u0027t use simple_strtoul",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00634,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43083",
      "url": "https://patchblox.com/security/cve/CVE-2026-43083",
      "title": "net: ioam6: fix OOB and missing lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.006,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52999",
      "url": "https://patchblox.com/security/cve/CVE-2026-52999",
      "title": "netfilter: nfnetlink_osf: fix out-of-bounds read on option matching",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00591,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52998",
      "url": "https://patchblox.com/security/cve/CVE-2026-52998",
      "title": "netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00579,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52981",
      "url": "https://patchblox.com/security/cve/CVE-2026-52981",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  neigh: let neigh_xmit take skb ownership  neigh_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00532,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64113",
      "url": "https://patchblox.com/security/cve/CVE-2026-64113",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00527,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52954",
      "url": "https://patchblox.com/security/cve/CVE-2026-52954",
      "title": "libceph: handle rbtree insertion error in decode_choose_args()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52957",
      "url": "https://patchblox.com/security/cve/CVE-2026-52957",
      "title": "libceph: Fix potential null-ptr-deref in decode_choose_args()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64116",
      "url": "https://patchblox.com/security/cve/CVE-2026-64116",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.00511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52974",
      "url": "https://patchblox.com/security/cve/CVE-2026-52974",
      "title": "net: tls: fix strparser anchor skb leak on offload RX setup failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64132",
      "url": "https://patchblox.com/security/cve/CVE-2026-64132",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46137",
      "url": "https://patchblox.com/security/cve/CVE-2026-46137",
      "title": "mptcp: pm: ADD_ADDR rtx: fix potential data-race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00477,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43245",
      "url": "https://patchblox.com/security/cve/CVE-2026-43245",
      "title": "ntfs: -\u003Ed_compare() must not block",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46244",
      "url": "https://patchblox.com/security/cve/CVE-2026-46244",
      "title": "netfilter: nft_inner: Fix IPv6 inner_thoff desync",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.1,
      "epss": 0.00418,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64136",
      "url": "https://patchblox.com/security/cve/CVE-2026-64136",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nsmb: client: protect tc_count increment in smb2_f...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 9.8,
      "epss": 0.00407,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45843",
      "url": "https://patchblox.com/security/cve/CVE-2026-45843",
      "title": "slip: bound decode() reads against the compressed packet length",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53006",
      "url": "https://patchblox.com/security/cve/CVE-2026-53006",
      "title": "ipv6: fix possible UAF in icmpv6_rcv()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00394,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52967",
      "url": "https://patchblox.com/security/cve/CVE-2026-52967",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  smb/client: fix possible infinite loop and oob r...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00393,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31613",
      "url": "https://patchblox.com/security/cve/CVE-2026-31613",
      "title": "smb: client: fix OOB reads parsing symlink error response",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00387,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53069",
      "url": "https://patchblox.com/security/cve/CVE-2026-53069",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52920",
      "url": "https://patchblox.com/security/cve/CVE-2026-52920",
      "title": "netfilter: xt_policy: fix strict mode inbound policy matching",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.3,
      "epss": 0.00299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71289",
      "url": "https://patchblox.com/security/cve/CVE-2025-71289",
      "title": "fs/ntfs3: handle attr_set_size() errors when truncating files",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31663",
      "url": "https://patchblox.com/security/cve/CVE-2026-31663",
      "title": "xfrm: hold dev ref until after transport_finish NF_HOOK",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00224,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52969",
      "url": "https://patchblox.com/security/cve/CVE-2026-52969",
      "title": "KVM: Reject wrapped offset in kvm_reset_dirty_gfn()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63860",
      "url": "https://patchblox.com/security/cve/CVE-2026-63860",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23272",
      "url": "https://patchblox.com/security/cve/CVE-2026-23272",
      "title": "netfilter: nf_tables: unconditionally bump set-\u003Enelems before insertion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53081",
      "url": "https://patchblox.com/security/cve/CVE-2026-53081",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Enforce regsafe base id consistency for BPF...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53085",
      "url": "https://patchblox.com/security/cve/CVE-2026-53085",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: fix mm lifecycle in open-coded task_vma ite...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53119",
      "url": "https://patchblox.com/security/cve/CVE-2026-53119",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  platform/wmi: use generic driver_override infras...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53120",
      "url": "https://patchblox.com/security/cve/CVE-2026-53120",
      "title": "PCI: use generic driver_override infrastructure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64226",
      "url": "https://patchblox.com/security/cve/CVE-2026-64226",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Avoid UAF in scx_root_enable_workfn()...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64518",
      "url": "https://patchblox.com/security/cve/CVE-2026-64518",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: Fix out-of-bounds access for twsk in tcp_ao...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64519",
      "url": "https://patchblox.com/security/cve/CVE-2026-64519",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  NFSD: Fix infinite loop in layout state revocati...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53023",
      "url": "https://patchblox.com/security/cve/CVE-2026-53023",
      "title": "fs/ntfs3: terminate the cached volume label after UTF-8 conversion",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52912",
      "url": "https://patchblox.com/security/cve/CVE-2026-52912",
      "title": "netfilter: nf_queue: hold bridge skb-\u003Edev while queued",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64015",
      "url": "https://patchblox.com/security/cve/CVE-2026-64015",
      "title": "kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52972",
      "url": "https://patchblox.com/security/cve/CVE-2026-52972",
      "title": "crypto: af_alg - Cap AEAD AD length to 0x80000000",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53059",
      "url": "https://patchblox.com/security/cve/CVE-2026-53059",
      "title": "dm log: fix out-of-bounds write due to region_count overflow",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64153",
      "url": "https://patchblox.com/security/cve/CVE-2026-64153",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52962",
      "url": "https://patchblox.com/security/cve/CVE-2026-52962",
      "title": "ceph: fix a buffer leak in __ceph_setxattr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46274",
      "url": "https://patchblox.com/security/cve/CVE-2026-46274",
      "title": "io-wq: check that the predecessor is hashed in io_wq_remove_pending()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64114",
      "url": "https://patchblox.com/security/cve/CVE-2026-64114",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45839",
      "url": "https://patchblox.com/security/cve/CVE-2026-45839",
      "title": "bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64111",
      "url": "https://patchblox.com/security/cve/CVE-2026-64111",
      "title": "kernel-zfcpdump-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64115",
      "url": "https://patchblox.com/security/cve/CVE-2026-64115",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53033",
      "url": "https://patchblox.com/security/cve/CVE-2026-53033",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf, sockmap: Take state lock for af_unix iter...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52970",
      "url": "https://patchblox.com/security/cve/CVE-2026-52970",
      "title": "netfilter: nft_ct: fix missing expect put in obj eval",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64032",
      "url": "https://patchblox.com/security/cve/CVE-2026-64032",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64073",
      "url": "https://patchblox.com/security/cve/CVE-2026-64073",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  irq_work: Fix use-after-free in irq_work_single(...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45840",
      "url": "https://patchblox.com/security/cve/CVE-2026-45840",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64109",
      "url": "https://patchblox.com/security/cve/CVE-2026-64109",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  af_unix: Fix UAF read of tail-\u003Elen in unix_strea...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64053",
      "url": "https://patchblox.com/security/cve/CVE-2026-64053",
      "title": "kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.3,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53004",
      "url": "https://patchblox.com/security/cve/CVE-2026-53004",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53031",
      "url": "https://patchblox.com/security/cve/CVE-2026-53031",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Validate node_id in arena_alloc_pages()  ar...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53094",
      "url": "https://patchblox.com/security/cve/CVE-2026-53094",
      "title": "bpf: Fix stale offload-\u003Eprog pointer after constant blinding",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64063",
      "url": "https://patchblox.com/security/cve/CVE-2026-64063",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix streaming write being overwritten  In...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64108",
      "url": "https://patchblox.com/security/cve/CVE-2026-64108",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: Fix busy dentry used after unmounting  Sin...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64217",
      "url": "https://patchblox.com/security/cve/CVE-2026-64217",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix overrun check in netfs_extract_user_i...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53063",
      "url": "https://patchblox.com/security/cve/CVE-2026-53063",
      "title": "dm cache: fix write hang in passthrough mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46158",
      "url": "https://patchblox.com/security/cve/CVE-2026-46158",
      "title": "mptcp: pm: ADD_ADDR rtx: always decrease sk refcount",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46160",
      "url": "https://patchblox.com/security/cve/CVE-2026-46160",
      "title": "btrfs: fix missing last_unlink_trans update when removing a directory",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46170",
      "url": "https://patchblox.com/security/cve/CVE-2026-46170",
      "title": "mptcp: pm: ADD_ADDR rtx: free sk if last",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53034",
      "url": "https://patchblox.com/security/cve/CVE-2026-53034",
      "title": "bpf, sockmap: Fix af_unix null-ptr-deref in proto update",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63865",
      "url": "https://patchblox.com/security/cve/CVE-2026-63865",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52915",
      "url": "https://patchblox.com/security/cve/CVE-2026-52915",
      "title": "netfilter: ip6t_hbh: reject oversized option lists",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64121",
      "url": "https://patchblox.com/security/cve/CVE-2026-64121",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: ifb: report ethtool stats over num_tx_queue...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53064",
      "url": "https://patchblox.com/security/cve/CVE-2026-53064",
      "title": "dm cache: fix null-deref with concurrent writes in passthrough mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53021",
      "url": "https://patchblox.com/security/cve/CVE-2026-53021",
      "title": "scsi: target: core: Fix integer overflow in UNMAP bounds check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31692",
      "url": "https://patchblox.com/security/cve/CVE-2026-31692",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nrtnetlink: add missing netlink_ns_capable() check...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53129",
      "url": "https://patchblox.com/security/cve/CVE-2026-53129",
      "title": "fs/mbcache: cancel shrink work before destroying the cache",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53076",
      "url": "https://patchblox.com/security/cve/CVE-2026-53076",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix OOB in pcpu_init_value  An out-of-bound...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64098",
      "url": "https://patchblox.com/security/cve/CVE-2026-64098",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00113,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53050",
      "url": "https://patchblox.com/security/cve/CVE-2026-53050",
      "title": "quota: Fix race of dquot_scan_active() with quota deactivation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53096",
      "url": "https://patchblox.com/security/cve/CVE-2026-53096",
      "title": "bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43116",
      "url": "https://patchblox.com/security/cve/CVE-2026-43116",
      "title": "netfilter: ctnetlink: ensure safe access to master conntrack",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00101,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64112",
      "url": "https://patchblox.com/security/cve/CVE-2026-64112",
      "title": "rbd: eliminate a race in lock_dwork draining on unmap",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64158",
      "url": "https://patchblox.com/security/cve/CVE-2026-64158",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix write streaming disablement if fd ope...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.3,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52980",
      "url": "https://patchblox.com/security/cve/CVE-2026-52980",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched/fair: Clear rel_deadline when initializing...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53014",
      "url": "https://patchblox.com/security/cve/CVE-2026-53014",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: act_mirred: fix wrong device for mac_...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53038",
      "url": "https://patchblox.com/security/cve/CVE-2026-53038",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ima_fs: Correctly create securityfs files for un...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53083",
      "url": "https://patchblox.com/security/cve/CVE-2026-53083",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix RCU stall in bpf_fd_array_map_clear()...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53084",
      "url": "https://patchblox.com/security/cve/CVE-2026-53084",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: return VMA snapshot from task_vma iterator...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53128",
      "url": "https://patchblox.com/security/cve/CVE-2026-53128",
      "title": "drbd: Balance RCU calls in drbd_adm_dump_devices()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53288",
      "url": "https://patchblox.com/security/cve/CVE-2026-53288",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: Reserve an extra page for early kernel ma...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64059",
      "url": "https://patchblox.com/security/cve/CVE-2026-64059",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix folio-\u003Eprivate handling in netfs_perf...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64065",
      "url": "https://patchblox.com/security/cve/CVE-2026-64065",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: fix VM_BUG_ON_FOLIO() issue in netfs_writ...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64105",
      "url": "https://patchblox.com/security/cve/CVE-2026-64105",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: arm64: vgic: Free private_irqs when init fa...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64157",
      "url": "https://patchblox.com/security/cve/CVE-2026-64157",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix partial invalidation of streaming-wri...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52961",
      "url": "https://patchblox.com/security/cve/CVE-2026-52961",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ceph: fix BUG_ON in __ceph_build_xattrs_blob() d...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53012",
      "url": "https://patchblox.com/security/cve/CVE-2026-53012",
      "title": "nexthop: fix IPv6 route referencing IPv4 nexthop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53295",
      "url": "https://patchblox.com/security/cve/CVE-2026-53295",
      "title": "mailbox: add sanity check for channel array",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45841",
      "url": "https://patchblox.com/security/cve/CVE-2026-45841",
      "title": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45838",
      "url": "https://patchblox.com/security/cve/CVE-2026-45838",
      "title": "bpf: fix end-of-list detection in cgroup_storage_get_next_key()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45842",
      "url": "https://patchblox.com/security/cve/CVE-2026-45842",
      "title": "slip: reject VJ receive packets on instances with no rstate array",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53001",
      "url": "https://patchblox.com/security/cve/CVE-2026-53001",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52984",
      "url": "https://patchblox.com/security/cve/CVE-2026-52984",
      "title": "kernel-uek-container: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52990",
      "url": "https://patchblox.com/security/cve/CVE-2026-52990",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fsnotify: fix inode reference leak in fsnotify_r...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53060",
      "url": "https://patchblox.com/security/cve/CVE-2026-53060",
      "title": "dm cache metadata: fix memory leak on metadata abort retry",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53122",
      "url": "https://patchblox.com/security/cve/CVE-2026-53122",
      "title": "btrfs: fix deadlock between reflink and transaction commit when using flushoncommit",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52977",
      "url": "https://patchblox.com/security/cve/CVE-2026-52977",
      "title": "futex: Prevent lockup in requeue-PI during signal/ timeout wakeup",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52985",
      "url": "https://patchblox.com/security/cve/CVE-2026-52985",
      "title": "kernel-uek-debug-devel: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52995",
      "url": "https://patchblox.com/security/cve/CVE-2026-52995",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/rds: zero per-item info buffer before handin...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53015",
      "url": "https://patchblox.com/security/cve/CVE-2026-53015",
      "title": "erofs: unify lcn as u64 for 32-bit platforms",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53061",
      "url": "https://patchblox.com/security/cve/CVE-2026-53061",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dm cache: fix dirty mapping checking in passthro...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53287",
      "url": "https://patchblox.com/security/cve/CVE-2026-53287",
      "title": "audit: fix incorrect inheritable capability in CAPSET records",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53289",
      "url": "https://patchblox.com/security/cve/CVE-2026-53289",
      "title": "ice: fix NULL pointer dereference in ice_reset_all_vfs()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64220",
      "url": "https://patchblox.com/security/cve/CVE-2026-64220",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  device property: set fwnode-\u003Esecondary to NULL i...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53013",
      "url": "https://patchblox.com/security/cve/CVE-2026-53013",
      "title": "macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53032",
      "url": "https://patchblox.com/security/cve/CVE-2026-53032",
      "title": "bpf: Fix NULL deref in map_kptr_match_type for scalar regs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64052",
      "url": "https://patchblox.com/security/cve/CVE-2026-64052",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  block: bio-integrity: Fix null-ptr-deref in bio_...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64064",
      "url": "https://patchblox.com/security/cve/CVE-2026-64064",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix netfs_invalidate_folio() to clear dir...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53111",
      "url": "https://patchblox.com/security/cve/CVE-2026-53111",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: test_run: Fix the null pointer dereference...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64163",
      "url": "https://patchblox.com/security/cve/CVE-2026-64163",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  test_kprobes: clear kprobes between test runs  R...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64166",
      "url": "https://patchblox.com/security/cve/CVE-2026-64166",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  firmware: arm_ffa: Check for NULL FF-A ID table...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64183",
      "url": "https://patchblox.com/security/cve/CVE-2026-64183",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  efi: Allocate runtime workqueue before ACPI init...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53314",
      "url": "https://patchblox.com/security/cve/CVE-2026-53314",
      "title": "padata: Put CPU offline callback in ONLINE section to allow failure",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64185",
      "url": "https://patchblox.com/security/cve/CVE-2026-64185",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sysfs: don\u0027t remove existing directory on update...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53123",
      "url": "https://patchblox.com/security/cve/CVE-2026-53123",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  md: wake raid456 reshape waiters before suspend...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53074",
      "url": "https://patchblox.com/security/cve/CVE-2026-53074",
      "title": "bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.4,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46315",
      "url": "https://patchblox.com/security/cve/CVE-2026-46315",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/waitid: clear waitid info before copyin...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52921",
      "url": "https://patchblox.com/security/cve/CVE-2026-52921",
      "title": "netfilter: ipset: stop hash:* range iteration at end",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52925",
      "url": "https://patchblox.com/security/cve/CVE-2026-52925",
      "title": "vrf: Fix a potential NPD when removing a port from a VRF",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52936",
      "url": "https://patchblox.com/security/cve/CVE-2026-52936",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: jitterentropy - replace long-held spinlo...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53126",
      "url": "https://patchblox.com/security/cve/CVE-2026-53126",
      "title": "blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64164",
      "url": "https://patchblox.com/security/cve/CVE-2026-64164",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: tracepoints: fix sleep while in atomic co...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64180",
      "url": "https://patchblox.com/security/cve/CVE-2026-64180",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/memory_hotplug: fix memory block reference le...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64182",
      "url": "https://patchblox.com/security/cve/CVE-2026-64182",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drivers/base/memory: fix memory block reference...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64184",
      "url": "https://patchblox.com/security/cve/CVE-2026-64184",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/sysfs-schemes: call missing mem_cgroup_...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53304",
      "url": "https://patchblox.com/security/cve/CVE-2026-53304",
      "title": "scsi: sg: Resolve soft lockup issue when opening /dev/sgX",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00101,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53035",
      "url": "https://patchblox.com/security/cve/CVE-2026-53035",
      "title": "bpf, sockmap: Fix af_unix iter deadlock",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53037",
      "url": "https://patchblox.com/security/cve/CVE-2026-53037",
      "title": "HID: usbhid: fix deadlock in hid_post_reset()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64062",
      "url": "https://patchblox.com/security/cve/CVE-2026-64062",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix potential deadlock in write-through m...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}