# ALAS2023-2026-1894: Security update for 18 packages ALAS2023-2026-1894, released June 22, 2026, fixes 150 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1894 - Platform: Linux - Released: Jun 22, 2026 - Priority: Urgent (Closes CVE-2026-64047, rated Critical) - CVEs: 150, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1894.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel-livepatch-6.12.92-122.166](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.92-122.166.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | | [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.92-122.166.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-64046](https://patchblox.com/security/data/cve/CVE-2026-64046.md) | Urgent | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | | | [CVE-2026-64047](https://patchblox.com/security/data/cve/CVE-2026-64047.md) | Urgent | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | | | [CVE-2026-64061](https://patchblox.com/security/data/cve/CVE-2026-64061.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read... | 9.8 | 0.0047 | | | [CVE-2026-64232](https://patchblox.com/security/data/cve/CVE-2026-64232.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_in... | 9.8 | 0.0043 | | | [CVE-2026-52993](https://patchblox.com/security/data/cve/CVE-2026-52993.md) | Urgent | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 | | | [CVE-2026-52955](https://patchblox.com/security/data/cve/CVE-2026-52955.md) | Urgent | kernel-uek64k-core: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0038 | | | [CVE-2026-64025](https://patchblox.com/security/data/cve/CVE-2026-64025.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing wit... | 9.8 | 0.0037 | | | [CVE-2026-53002](https://patchblox.com/security/data/cve/CVE-2026-53002.md) | Urgent | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 | | | [CVE-2026-46316](https://patchblox.com/security/data/cve/CVE-2026-46316.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache... | 9.3 | 0.0034 | | | [CVE-2026-53075](https://patchblox.com/security/data/cve/CVE-2026-53075.md) | Urgent | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 | | | [CVE-2026-53009](https://patchblox.com/security/data/cve/CVE-2026-53009.md) | Urgent | ice: fix double-free of tx_buf skb | 9.8 | 0.0018 | | | [CVE-2026-64106](https://patchblox.com/security/data/cve/CVE-2026-64106.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with o... | 9.0 | 0.0015 | | | [CVE-2026-53036](https://patchblox.com/security/data/cve/CVE-2026-53036.md) | Urgent | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 | | | [CVE-2026-53053](https://patchblox.com/security/data/cve/CVE-2026-53053.md) | Urgent | iommu/amd: Fix clone_alias() to use the original device's devid | 9.8 | 0.0013 | | | [CVE-2026-53077](https://patchblox.com/security/data/cve/CVE-2026-53077.md) | Urgent | net/rds: Restrict use of RDS/IB to the initial network namespace | 9.8 | 0.0012 | | | [CVE-2026-53062](https://patchblox.com/security/data/cve/CVE-2026-53062.md) | Urgent | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 | | | [CVE-2026-52958](https://patchblox.com/security/data/cve/CVE-2026-52958.md) | High | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 | | | [CVE-2026-53003](https://patchblox.com/security/data/cve/CVE-2026-53003.md) | High | pppoe: drop PFC frames | 7.5 | 0.0072 | | | [CVE-2026-52986](https://patchblox.com/security/data/cve/CVE-2026-52986.md) | High | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | | | [CVE-2026-43083](https://patchblox.com/security/data/cve/CVE-2026-43083.md) | High | net: ioam6: fix OOB and missing lock | 9.1 | 0.0060 | | | [CVE-2026-52999](https://patchblox.com/security/data/cve/CVE-2026-52999.md) | High | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 | | | [CVE-2026-52998](https://patchblox.com/security/data/cve/CVE-2026-52998.md) | High | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 | | | [CVE-2026-52981](https://patchblox.com/security/data/cve/CVE-2026-52981.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: neigh: let neigh_xmit take skb ownership neigh_... | 7.5 | 0.0053 | | | [CVE-2026-64113](https://patchblox.com/security/data/cve/CVE-2026-64113.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0053 | | | [CVE-2026-52954](https://patchblox.com/security/data/cve/CVE-2026-52954.md) | High | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 | | | [CVE-2026-52957](https://patchblox.com/security/data/cve/CVE-2026-52957.md) | High | libceph: Fix potential null-ptr-deref in decode_choose_args() | 7.5 | 0.0052 | | | [CVE-2026-64116](https://patchblox.com/security/data/cve/CVE-2026-64116.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.5 | 0.0051 | | | [CVE-2026-52974](https://patchblox.com/security/data/cve/CVE-2026-52974.md) | High | net: tls: fix strparser anchor skb leak on offload RX setup failure | 7.5 | 0.0050 | | | [CVE-2026-64132](https://patchblox.com/security/data/cve/CVE-2026-64132.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0049 | | | [CVE-2026-46137](https://patchblox.com/security/data/cve/CVE-2026-46137.md) | High | mptcp: pm: ADD_ADDR rtx: fix potential data-race | 9.8 | 0.0048 | | | [CVE-2026-43245](https://patchblox.com/security/data/cve/CVE-2026-43245.md) | High | ntfs: ->d_compare() must not block | 7.5 | 0.0044 | | | [CVE-2026-46244](https://patchblox.com/security/data/cve/CVE-2026-46244.md) | High | netfilter: nft_inner: Fix IPv6 inner_thoff desync | 9.1 | 0.0042 | | | [CVE-2026-64136](https://patchblox.com/security/data/cve/CVE-2026-64136.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_f... | 9.8 | 0.0041 | | | [CVE-2026-45843](https://patchblox.com/security/data/cve/CVE-2026-45843.md) | High | slip: bound decode() reads against the compressed packet length | 8.2 | 0.0040 | | | [CVE-2026-53006](https://patchblox.com/security/data/cve/CVE-2026-53006.md) | High | ipv6: fix possible UAF in icmpv6_rcv() | 9.8 | 0.0039 | | | [CVE-2026-52967](https://patchblox.com/security/data/cve/CVE-2026-52967.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb/client: fix possible infinite loop and oob r... | 8.1 | 0.0039 | | | [CVE-2026-31613](https://patchblox.com/security/data/cve/CVE-2026-31613.md) | High | smb: client: fix OOB reads parsing symlink error response | 8.8 | 0.0039 | | | [CVE-2026-53069](https://patchblox.com/security/data/cve/CVE-2026-53069.md) | High | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.5 | 0.0038 | | | [CVE-2026-52920](https://patchblox.com/security/data/cve/CVE-2026-52920.md) | High | netfilter: xt_policy: fix strict mode inbound policy matching | 8.3 | 0.0030 | | | [CVE-2025-71289](https://patchblox.com/security/data/cve/CVE-2025-71289.md) | High | fs/ntfs3: handle attr_set_size() errors when truncating files | 7.1 | 0.0026 | | | [CVE-2026-31663](https://patchblox.com/security/data/cve/CVE-2026-31663.md) | High | xfrm: hold dev ref until after transport_finish NF_HOOK | 8.8 | 0.0022 | | | [CVE-2026-52969](https://patchblox.com/security/data/cve/CVE-2026-52969.md) | High | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 | | | [CVE-2026-63860](https://patchblox.com/security/data/cve/CVE-2026-63860.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.4 | 0.0018 | | | [CVE-2026-23272](https://patchblox.com/security/data/cve/CVE-2026-23272.md) | High | netfilter: nf_tables: unconditionally bump set->nelems before insertion | 7.8 | 0.0018 | | | [CVE-2026-53081](https://patchblox.com/security/data/cve/CVE-2026-53081.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce regsafe base id consistency for BPF... | 7.8 | 0.0018 | | | [CVE-2026-53085](https://patchblox.com/security/data/cve/CVE-2026-53085.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix mm lifecycle in open-coded task_vma ite... | 7.8 | 0.0018 | | | [CVE-2026-53119](https://patchblox.com/security/data/cve/CVE-2026-53119.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: platform/wmi: use generic driver_override infras... | 7.8 | 0.0018 | | | [CVE-2026-53120](https://patchblox.com/security/data/cve/CVE-2026-53120.md) | High | PCI: use generic driver_override infrastructure | 7.8 | 0.0018 | | | [CVE-2026-64226](https://patchblox.com/security/data/cve/CVE-2026-64226.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn()... | 7.8 | 0.0018 | | | [CVE-2026-64518](https://patchblox.com/security/data/cve/CVE-2026-64518.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao... | n/a | 0.0017 | | | [CVE-2026-64519](https://patchblox.com/security/data/cve/CVE-2026-64519.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocati... | n/a | 0.0017 | | | [CVE-2026-53023](https://patchblox.com/security/data/cve/CVE-2026-53023.md) | High | fs/ntfs3: terminate the cached volume label after UTF-8 conversion | 7.1 | 0.0016 | | | [CVE-2026-52912](https://patchblox.com/security/data/cve/CVE-2026-52912.md) | High | netfilter: nf_queue: hold bridge skb->dev while queued | 7.8 | 0.0016 | | | [CVE-2026-64015](https://patchblox.com/security/data/cve/CVE-2026-64015.md) | High | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0016 | | | [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 | | | [CVE-2026-53059](https://patchblox.com/security/data/cve/CVE-2026-53059.md) | High | dm log: fix out-of-bounds write due to region_count overflow | 7.8 | 0.0014 | | | [CVE-2026-64153](https://patchblox.com/security/data/cve/CVE-2026-64153.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.8 | 0.0014 | | | [CVE-2026-52962](https://patchblox.com/security/data/cve/CVE-2026-52962.md) | High | ceph: fix a buffer leak in __ceph_setxattr() | 7.8 | 0.0014 | | | [CVE-2026-46274](https://patchblox.com/security/data/cve/CVE-2026-46274.md) | High | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | 7.8 | 0.0014 | | | [CVE-2026-64114](https://patchblox.com/security/data/cve/CVE-2026-64114.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0014 | | | [CVE-2026-45839](https://patchblox.com/security/data/cve/CVE-2026-45839.md) | High | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | 7.8 | 0.0014 | | | [CVE-2026-64111](https://patchblox.com/security/data/cve/CVE-2026-64111.md) | High | kernel-zfcpdump-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0014 | | | [CVE-2026-64115](https://patchblox.com/security/data/cve/CVE-2026-64115.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0014 | | | [CVE-2026-53033](https://patchblox.com/security/data/cve/CVE-2026-53033.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Take state lock for af_unix iter... | 7.8 | 0.0014 | | | [CVE-2026-52970](https://patchblox.com/security/data/cve/CVE-2026-52970.md) | High | netfilter: nft_ct: fix missing expect put in obj eval | 7.0 | 0.0013 | | | [CVE-2026-64032](https://patchblox.com/security/data/cve/CVE-2026-64032.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0013 | | | [CVE-2026-64073](https://patchblox.com/security/data/cve/CVE-2026-64073.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_single(... | 7.8 | 0.0013 | | | [CVE-2026-45840](https://patchblox.com/security/data/cve/CVE-2026-45840.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.0 | 0.0013 | | | [CVE-2026-64109](https://patchblox.com/security/data/cve/CVE-2026-64109.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail->len in unix_strea... | 8.8 | 0.0013 | | | [CVE-2026-64053](https://patchblox.com/security/data/cve/CVE-2026-64053.md) | High | kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.3 | 0.0013 | | | [CVE-2026-53004](https://patchblox.com/security/data/cve/CVE-2026-53004.md) | High | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0013 | | | [CVE-2026-53031](https://patchblox.com/security/data/cve/CVE-2026-53031.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Validate node_id in arena_alloc_pages() ar... | 7.8 | 0.0013 | | | [CVE-2026-53094](https://patchblox.com/security/data/cve/CVE-2026-53094.md) | High | bpf: Fix stale offload->prog pointer after constant blinding | 7.8 | 0.0013 | | | [CVE-2026-64063](https://patchblox.com/security/data/cve/CVE-2026-64063.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In... | 7.8 | 0.0013 | | | [CVE-2026-64108](https://patchblox.com/security/data/cve/CVE-2026-64108.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Sin... | 7.8 | 0.0013 | | | [CVE-2026-64217](https://patchblox.com/security/data/cve/CVE-2026-64217.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_i... | 7.8 | 0.0013 | | | [CVE-2026-53063](https://patchblox.com/security/data/cve/CVE-2026-53063.md) | High | dm cache: fix write hang in passthrough mode | 7.1 | 0.0013 | | | [CVE-2026-46158](https://patchblox.com/security/data/cve/CVE-2026-46158.md) | High | mptcp: pm: ADD_ADDR rtx: always decrease sk refcount | 7.0 | 0.0013 | | | [CVE-2026-46160](https://patchblox.com/security/data/cve/CVE-2026-46160.md) | High | btrfs: fix missing last_unlink_trans update when removing a directory | 7.0 | 0.0013 | | | [CVE-2026-46170](https://patchblox.com/security/data/cve/CVE-2026-46170.md) | High | mptcp: pm: ADD_ADDR rtx: free sk if last | 7.0 | 0.0013 | | | [CVE-2026-53034](https://patchblox.com/security/data/cve/CVE-2026-53034.md) | High | bpf, sockmap: Fix af_unix null-ptr-deref in proto update | 7.0 | 0.0013 | | | [CVE-2026-63865](https://patchblox.com/security/data/cve/CVE-2026-63865.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.8 | 0.0013 | | | [CVE-2026-52915](https://patchblox.com/security/data/cve/CVE-2026-52915.md) | High | netfilter: ip6t_hbh: reject oversized option lists | 7.1 | 0.0013 | | | [CVE-2026-64121](https://patchblox.com/security/data/cve/CVE-2026-64121.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queue... | 7.1 | 0.0013 | | | [CVE-2026-53064](https://patchblox.com/security/data/cve/CVE-2026-53064.md) | High | dm cache: fix null-deref with concurrent writes in passthrough mode | 7.1 | 0.0012 | | | [CVE-2026-53021](https://patchblox.com/security/data/cve/CVE-2026-53021.md) | High | scsi: target: core: Fix integer overflow in UNMAP bounds check | 7.0 | 0.0012 | | | [CVE-2026-31692](https://patchblox.com/security/data/cve/CVE-2026-31692.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: rtnetlink: add missing netlink_ns_capable() check... | 7.8 | 0.0012 | | | [CVE-2026-53129](https://patchblox.com/security/data/cve/CVE-2026-53129.md) | High | fs/mbcache: cancel shrink work before destroying the cache | 7.8 | 0.0012 | | | [CVE-2026-53076](https://patchblox.com/security/data/cve/CVE-2026-53076.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix OOB in pcpu_init_value An out-of-bound... | 7.1 | 0.0012 | | | [CVE-2026-64098](https://patchblox.com/security/data/cve/CVE-2026-64098.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0011 | | | [CVE-2026-53050](https://patchblox.com/security/data/cve/CVE-2026-53050.md) | High | quota: Fix race of dquot_scan_active() with quota deactivation | 7.8 | 0.0010 | | | [CVE-2026-53096](https://patchblox.com/security/data/cve/CVE-2026-53096.md) | High | bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path | 7.8 | 0.0010 | | | [CVE-2026-43116](https://patchblox.com/security/data/cve/CVE-2026-43116.md) | High | netfilter: ctnetlink: ensure safe access to master conntrack | 8.8 | 0.0010 | | | [CVE-2026-64112](https://patchblox.com/security/data/cve/CVE-2026-64112.md) | High | rbd: eliminate a race in lock_dwork draining on unmap | 7.8 | 0.0010 | | | [CVE-2026-64158](https://patchblox.com/security/data/cve/CVE-2026-64158.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix write streaming disablement if fd ope... | 7.3 | n/a | | | [CVE-2026-52980](https://patchblox.com/security/data/cve/CVE-2026-52980.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched/fair: Clear rel_deadline when initializing... | 5.5 | 0.0016 | | | [CVE-2026-53014](https://patchblox.com/security/data/cve/CVE-2026-53014.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: fix wrong device for mac_... | 5.5 | 0.0016 | | | [CVE-2026-53038](https://patchblox.com/security/data/cve/CVE-2026-53038.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ima_fs: Correctly create securityfs files for un... | 5.5 | 0.0016 | | | [CVE-2026-53083](https://patchblox.com/security/data/cve/CVE-2026-53083.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix RCU stall in bpf_fd_array_map_clear()... | 5.5 | 0.0016 | | | [CVE-2026-53084](https://patchblox.com/security/data/cve/CVE-2026-53084.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: return VMA snapshot from task_vma iterator... | 5.5 | 0.0016 | | | [CVE-2026-53128](https://patchblox.com/security/data/cve/CVE-2026-53128.md) | Routine | drbd: Balance RCU calls in drbd_adm_dump_devices() | 5.5 | 0.0016 | | | [CVE-2026-53288](https://patchblox.com/security/data/cve/CVE-2026-53288.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: arm64: Reserve an extra page for early kernel ma... | 5.5 | 0.0016 | | | [CVE-2026-64059](https://patchblox.com/security/data/cve/CVE-2026-64059.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio->private handling in netfs_perf... | 5.5 | 0.0016 | | | [CVE-2026-64065](https://patchblox.com/security/data/cve/CVE-2026-64065.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_writ... | 5.5 | 0.0016 | | | [CVE-2026-64105](https://patchblox.com/security/data/cve/CVE-2026-64105.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Free private_irqs when init fa... | 5.5 | 0.0016 | | | [CVE-2026-64157](https://patchblox.com/security/data/cve/CVE-2026-64157.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-wri... | 5.5 | 0.0016 | | | [CVE-2026-52961](https://patchblox.com/security/data/cve/CVE-2026-52961.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix BUG_ON in __ceph_build_xattrs_blob() d... | 5.5 | 0.0015 | | | [CVE-2026-53012](https://patchblox.com/security/data/cve/CVE-2026-53012.md) | Routine | nexthop: fix IPv6 route referencing IPv4 nexthop | 5.5 | 0.0014 | | | [CVE-2026-53295](https://patchblox.com/security/data/cve/CVE-2026-53295.md) | Routine | mailbox: add sanity check for channel array | 5.5 | 0.0013 | | | [CVE-2026-45841](https://patchblox.com/security/data/cve/CVE-2026-45841.md) | Routine | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 5.5 | 0.0013 | | | [CVE-2026-45838](https://patchblox.com/security/data/cve/CVE-2026-45838.md) | Routine | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 5.5 | 0.0013 | | | [CVE-2026-45842](https://patchblox.com/security/data/cve/CVE-2026-45842.md) | Routine | slip: reject VJ receive packets on instances with no rstate array | 5.5 | 0.0013 | | | [CVE-2026-53001](https://patchblox.com/security/data/cve/CVE-2026-53001.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-52984](https://patchblox.com/security/data/cve/CVE-2026-52984.md) | Routine | kernel-uek-container: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-52990](https://patchblox.com/security/data/cve/CVE-2026-52990.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fsnotify: fix inode reference leak in fsnotify_r... | 5.5 | 0.0013 | | | [CVE-2026-53060](https://patchblox.com/security/data/cve/CVE-2026-53060.md) | Routine | dm cache metadata: fix memory leak on metadata abort retry | 5.5 | 0.0013 | | | [CVE-2026-53122](https://patchblox.com/security/data/cve/CVE-2026-53122.md) | Routine | btrfs: fix deadlock between reflink and transaction commit when using flushoncommit | 5.5 | 0.0013 | | | [CVE-2026-52977](https://patchblox.com/security/data/cve/CVE-2026-52977.md) | Routine | futex: Prevent lockup in requeue-PI during signal/ timeout wakeup | 5.5 | 0.0012 | | | [CVE-2026-52985](https://patchblox.com/security/data/cve/CVE-2026-52985.md) | Routine | kernel-uek-debug-devel: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0012 | | | [CVE-2026-52995](https://patchblox.com/security/data/cve/CVE-2026-52995.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/rds: zero per-item info buffer before handin... | 5.5 | 0.0012 | | | [CVE-2026-53015](https://patchblox.com/security/data/cve/CVE-2026-53015.md) | Routine | erofs: unify lcn as u64 for 32-bit platforms | 5.5 | 0.0012 | | | [CVE-2026-53061](https://patchblox.com/security/data/cve/CVE-2026-53061.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix dirty mapping checking in passthro... | 5.5 | 0.0012 | | | [CVE-2026-53287](https://patchblox.com/security/data/cve/CVE-2026-53287.md) | Routine | audit: fix incorrect inheritable capability in CAPSET records | 5.5 | 0.0012 | | | [CVE-2026-53289](https://patchblox.com/security/data/cve/CVE-2026-53289.md) | Routine | ice: fix NULL pointer dereference in ice_reset_all_vfs() | 5.5 | 0.0012 | | | [CVE-2026-64220](https://patchblox.com/security/data/cve/CVE-2026-64220.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL i... | 5.5 | 0.0012 | | | [CVE-2026-53013](https://patchblox.com/security/data/cve/CVE-2026-53013.md) | Routine | macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF | 5.5 | 0.0012 | | | [CVE-2026-53032](https://patchblox.com/security/data/cve/CVE-2026-53032.md) | Routine | bpf: Fix NULL deref in map_kptr_match_type for scalar regs | 5.5 | 0.0012 | | | [CVE-2026-64052](https://patchblox.com/security/data/cve/CVE-2026-64052.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: block: bio-integrity: Fix null-ptr-deref in bio_... | 5.5 | 0.0012 | | | [CVE-2026-64064](https://patchblox.com/security/data/cve/CVE-2026-64064.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_invalidate_folio() to clear dir... | 5.5 | 0.0012 | | | [CVE-2026-53111](https://patchblox.com/security/data/cve/CVE-2026-53111.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: test_run: Fix the null pointer dereference... | 5.5 | 0.0012 | | | [CVE-2026-64163](https://patchblox.com/security/data/cve/CVE-2026-64163.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: test_kprobes: clear kprobes between test runs R... | 5.5 | 0.0012 | | | [CVE-2026-64166](https://patchblox.com/security/data/cve/CVE-2026-64166.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table... | 5.5 | 0.0012 | | | [CVE-2026-64183](https://patchblox.com/security/data/cve/CVE-2026-64183.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init... | 5.5 | 0.0012 | | | [CVE-2026-53314](https://patchblox.com/security/data/cve/CVE-2026-53314.md) | Routine | padata: Put CPU offline callback in ONLINE section to allow failure | 5.5 | 0.0012 | | | [CVE-2026-64185](https://patchblox.com/security/data/cve/CVE-2026-64185.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update... | 5.5 | 0.0012 | | | [CVE-2026-53123](https://patchblox.com/security/data/cve/CVE-2026-53123.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: md: wake raid456 reshape waiters before suspend... | 5.5 | 0.0012 | | | [CVE-2026-53074](https://patchblox.com/security/data/cve/CVE-2026-53074.md) | Routine | bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb | 6.4 | 0.0011 | | | [CVE-2026-46315](https://patchblox.com/security/data/cve/CVE-2026-46315.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copyin... | 5.5 | 0.0011 | | | [CVE-2026-52921](https://patchblox.com/security/data/cve/CVE-2026-52921.md) | Routine | netfilter: ipset: stop hash:* range iteration at end | 5.5 | 0.0011 | | | [CVE-2026-52925](https://patchblox.com/security/data/cve/CVE-2026-52925.md) | Routine | vrf: Fix a potential NPD when removing a port from a VRF | 5.5 | 0.0011 | | | [CVE-2026-52936](https://patchblox.com/security/data/cve/CVE-2026-52936.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: jitterentropy - replace long-held spinlo... | 5.5 | 0.0011 | | | [CVE-2026-53126](https://patchblox.com/security/data/cve/CVE-2026-53126.md) | Routine | blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() | 5.5 | 0.0011 | | | [CVE-2026-64164](https://patchblox.com/security/data/cve/CVE-2026-64164.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic co... | 5.5 | 0.0011 | | | [CVE-2026-64180](https://patchblox.com/security/data/cve/CVE-2026-64180.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference le... | 5.5 | 0.0011 | | | [CVE-2026-64182](https://patchblox.com/security/data/cve/CVE-2026-64182.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference... | 5.5 | 0.0011 | | | [CVE-2026-64184](https://patchblox.com/security/data/cve/CVE-2026-64184.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing mem_cgroup_... | 5.5 | 0.0011 | | | [CVE-2026-53304](https://patchblox.com/security/data/cve/CVE-2026-53304.md) | Routine | scsi: sg: Resolve soft lockup issue when opening /dev/sgX | 5.5 | 0.0010 | | | [CVE-2026-53035](https://patchblox.com/security/data/cve/CVE-2026-53035.md) | Routine | bpf, sockmap: Fix af_unix iter deadlock | 5.5 | 0.0010 | | | [CVE-2026-53037](https://patchblox.com/security/data/cve/CVE-2026-53037.md) | Routine | HID: usbhid: fix deadlock in hid_post_reset() | 5.5 | 0.0010 | | | [CVE-2026-64062](https://patchblox.com/security/data/cve/CVE-2026-64062.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through m... | 5.5 | 0.0009 | | --- Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.