{
  "fix": "ALAS2023-2026-1924",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1924",
  "summary": "ALAS2023-2026-1924, released July 6, 2026, fixes 100 CVEs across 18 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 18 packages",
  "released": "2026-07-06T09:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2026-53266, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 100,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00971,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1924.html",
  "appliesTo": [
    {
      "product": "bpftool",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "kernel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.1.176-220.358",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.176-220.358",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "perf",
      "productUrl": "https://patchblox.com/security/product/linux/perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.1.176-220.358.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-53266",
      "url": "https://patchblox.com/security/cve/CVE-2026-53266",
      "title": "netfilter: bridge: make ebt_snat ARP rewrite writable",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00934,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63984",
      "url": "https://patchblox.com/security/cve/CVE-2026-63984",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63913",
      "url": "https://patchblox.com/security/cve/CVE-2026-63913",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00971,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52929",
      "url": "https://patchblox.com/security/cve/CVE-2026-52929",
      "title": "sctp: stream: fully roll back denied add-stream state",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00873,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63887",
      "url": "https://patchblox.com/security/cve/CVE-2026-63887",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nscsi: target: iscsi: Bound iscsi_encode_text_outp...",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00778,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63888",
      "url": "https://patchblox.com/security/cve/CVE-2026-63888",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00778,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63912",
      "url": "https://patchblox.com/security/cve/CVE-2026-63912",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63922",
      "url": "https://patchblox.com/security/cve/CVE-2026-63922",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63924",
      "url": "https://patchblox.com/security/cve/CVE-2026-63924",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63886",
      "url": "https://patchblox.com/security/cve/CVE-2026-63886",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00711,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46195",
      "url": "https://patchblox.com/security/cve/CVE-2026-46195",
      "title": "smb: client: validate dacloffset before building DACL pointers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00675,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63968",
      "url": "https://patchblox.com/security/cve/CVE-2026-63968",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: fix possible infinite loop in fib6_select_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00665,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52924",
      "url": "https://patchblox.com/security/cve/CVE-2026-52924",
      "title": "sctp: purge outqueue on stale COOKIE-ECHO handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00659,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63919",
      "url": "https://patchblox.com/security/cve/CVE-2026-63919",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.0065,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53221",
      "url": "https://patchblox.com/security/cve/CVE-2026-53221",
      "title": "ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53228",
      "url": "https://patchblox.com/security/cve/CVE-2026-53228",
      "title": "ipv6: sit: reload inner IPv6 header after GSO offloads",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53225",
      "url": "https://patchblox.com/security/cve/CVE-2026-53225",
      "title": "sctp: fix uninit-value in __sctp_rcv_asconf_lookup()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53268",
      "url": "https://patchblox.com/security/cve/CVE-2026-53268",
      "title": "netfilter: conntrack_irc: fix possible out-of-bounds read",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63993",
      "url": "https://patchblox.com/security/cve/CVE-2026-63993",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nvxlan: do not reuse cached ip_hdr() value after s...",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63994",
      "url": "https://patchblox.com/security/cve/CVE-2026-63994",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64007",
      "url": "https://patchblox.com/security/cve/CVE-2026-64007",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63992",
      "url": "https://patchblox.com/security/cve/CVE-2026-63992",
      "title": "kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 9.1,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64116",
      "url": "https://patchblox.com/security/cve/CVE-2026-64116",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.00511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46052",
      "url": "https://patchblox.com/security/cve/CVE-2026-46052",
      "title": "ceph: only d_add() negative dentries when they are unhashed",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53199",
      "url": "https://patchblox.com/security/cve/CVE-2026-53199",
      "title": "hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53183",
      "url": "https://patchblox.com/security/cve/CVE-2026-53183",
      "title": "mptcp: allow subflow rcv wnd to shrink",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53184",
      "url": "https://patchblox.com/security/cve/CVE-2026-53184",
      "title": "udp: clear skb-\u003Edev before running a sockmap verdict",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53264",
      "url": "https://patchblox.com/security/cve/CVE-2026-53264",
      "title": "net/sched: act_api: use RCU with deferred freeing for action lifecycle",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00485,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46137",
      "url": "https://patchblox.com/security/cve/CVE-2026-46137",
      "title": "mptcp: pm: ADD_ADDR rtx: fix potential data-race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00477,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52946",
      "url": "https://patchblox.com/security/cve/CVE-2026-52946",
      "title": "fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53131",
      "url": "https://patchblox.com/security/cve/CVE-2026-53131",
      "title": "netfilter: require Ethernet MAC header before using eth_hdr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.4,
      "epss": 0.00435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63889",
      "url": "https://patchblox.com/security/cve/CVE-2026-63889",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00359,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63925",
      "url": "https://patchblox.com/security/cve/CVE-2026-63925",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.00347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31709",
      "url": "https://patchblox.com/security/cve/CVE-2026-31709",
      "title": "smb: client: validate the whole DACL before rewriting it in cifsacl",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00345,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52943",
      "url": "https://patchblox.com/security/cve/CVE-2026-52943",
      "title": "net: skbuff: fix missing zerocopy reference in pskb_carve helpers",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63867",
      "url": "https://patchblox.com/security/cve/CVE-2026-63867",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.2,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53275",
      "url": "https://patchblox.com/security/cve/CVE-2026-53275",
      "title": "ipv6: mcast: Fix use-after-free when processing MLD queries",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46320",
      "url": "https://patchblox.com/security/cve/CVE-2026-46320",
      "title": "tap: free page on error paths in tap_get_user_xdp()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.4,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52923",
      "url": "https://patchblox.com/security/cve/CVE-2026-52923",
      "title": "ipc: limit next_id allocation to the valid ID range",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53212",
      "url": "https://patchblox.com/security/cve/CVE-2026-53212",
      "title": "netfilter: nft_tunnel: fix use-after-free on object destroy",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63926",
      "url": "https://patchblox.com/security/cve/CVE-2026-63926",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45991",
      "url": "https://patchblox.com/security/cve/CVE-2026-45991",
      "title": "udf: fix partition descriptor append bookkeeping",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63875",
      "url": "https://patchblox.com/security/cve/CVE-2026-63875",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63884",
      "url": "https://patchblox.com/security/cve/CVE-2026-63884",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: m...",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63920",
      "url": "https://patchblox.com/security/cve/CVE-2026-63920",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43303",
      "url": "https://patchblox.com/security/cve/CVE-2026-43303",
      "title": "mm/page_alloc: clear page-\u003Eprivate in free_pages_prepare()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23171",
      "url": "https://patchblox.com/security/cve/CVE-2026-23171",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: L...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63917",
      "url": "https://patchblox.com/security/cve/CVE-2026-63917",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45850",
      "url": "https://patchblox.com/security/cve/CVE-2026-45850",
      "title": "ipvs: skip ipv6 extension headers for csum checks",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63921",
      "url": "https://patchblox.com/security/cve/CVE-2026-63921",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53270",
      "url": "https://patchblox.com/security/cve/CVE-2026-53270",
      "title": "ipvs: clear the svc scheduler ptr early on edit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63914",
      "url": "https://patchblox.com/security/cve/CVE-2026-63914",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.3,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64009",
      "url": "https://patchblox.com/security/cve/CVE-2026-64009",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52910",
      "url": "https://patchblox.com/security/cve/CVE-2026-52910",
      "title": "bpf: Free reuseport cBPF prog after RCU grace period.",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46021",
      "url": "https://patchblox.com/security/cve/CVE-2026-46021",
      "title": "thermal: core: Fix thermal zone governor cleanup issues",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46193",
      "url": "https://patchblox.com/security/cve/CVE-2026-46193",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53223",
      "url": "https://patchblox.com/security/cve/CVE-2026-53223",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnet: guard timestamp cmsgs to real error queue sk...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.1,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53356",
      "url": "https://patchblox.com/security/cve/CVE-2026-53356",
      "title": "drm/i915/gem: Fix phys BO pread/pwrite with offset",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46322",
      "url": "https://patchblox.com/security/cve/CVE-2026-46322",
      "title": "tun: free page on build_skb failure in tun_xdp_one()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46321",
      "url": "https://patchblox.com/security/cve/CVE-2026-46321",
      "title": "tun: free page on short-frame rejection in tun_xdp_one()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52942",
      "url": "https://patchblox.com/security/cve/CVE-2026-52942",
      "title": "netfilter: nf_log: validate MAC header was set before dumping it",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63971",
      "url": "https://patchblox.com/security/cve/CVE-2026-63971",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45999",
      "url": "https://patchblox.com/security/cve/CVE-2026-45999",
      "title": "erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53189",
      "url": "https://patchblox.com/security/cve/CVE-2026-53189",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64002",
      "url": "https://patchblox.com/security/cve/CVE-2026-64002",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv4: free net-\u003Eipv4.sysctl_local_reserved_ports...",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46116",
      "url": "https://patchblox.com/security/cve/CVE-2026-46116",
      "title": "xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46065",
      "url": "https://patchblox.com/security/cve/CVE-2026-46065",
      "title": "fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53133",
      "url": "https://patchblox.com/security/cve/CVE-2026-53133",
      "title": "RDMA/umem: Fix truncation for block sizes \u003E= 4G",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63985",
      "url": "https://patchblox.com/security/cve/CVE-2026-63985",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46086",
      "url": "https://patchblox.com/security/cve/CVE-2026-46086",
      "title": "net: bridge: use a stable FDB dst snapshot in RCU readers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53218",
      "url": "https://patchblox.com/security/cve/CVE-2026-53218",
      "title": "netfilter: nft_exthdr: fix register tracking for F_PRESENT flag",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53249",
      "url": "https://patchblox.com/security/cve/CVE-2026-53249",
      "title": "ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46160",
      "url": "https://patchblox.com/security/cve/CVE-2026-46160",
      "title": "btrfs: fix missing last_unlink_trans update when removing a directory",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53236",
      "url": "https://patchblox.com/security/cve/CVE-2026-53236",
      "title": "tcp: restrict SO_ATTACH_FILTER to priv users",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53168",
      "url": "https://patchblox.com/security/cve/CVE-2026-53168",
      "title": "fuse: reject fuse_notify() pagecache ops on directories",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52927",
      "url": "https://patchblox.com/security/cve/CVE-2026-52927",
      "title": "netfilter: ebtables: fix OOB read in compat_mtw_from_user",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53354",
      "url": "https://patchblox.com/security/cve/CVE-2026-53354",
      "title": "arm64: errata: Mitigate TLBI errata on various Arm CPUs",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53239",
      "url": "https://patchblox.com/security/cve/CVE-2026-53239",
      "title": "xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64005",
      "url": "https://patchblox.com/security/cve/CVE-2026-64005",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/smc: Do not re-initialize smc hashtables  IN...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63969",
      "url": "https://patchblox.com/security/cve/CVE-2026-63969",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: fix possible infinite loop in rt6_fill_nod...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43492",
      "url": "https://patchblox.com/security/cve/CVE-2026-43492",
      "title": "lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46196",
      "url": "https://patchblox.com/security/cve/CVE-2026-46196",
      "title": "tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53227",
      "url": "https://patchblox.com/security/cve/CVE-2026-53227",
      "title": "net: openvswitch: fix possible kfree_skb of ERR_PTR",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63990",
      "url": "https://patchblox.com/security/cve/CVE-2026-63990",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53134",
      "url": "https://patchblox.com/security/cve/CVE-2026-53134",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nft_fib: fix stale stack leak via the...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53219",
      "url": "https://patchblox.com/security/cve/CVE-2026-53219",
      "title": "netfilter: x_tables: avoid leaking percpu counter pointers",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46005",
      "url": "https://patchblox.com/security/cve/CVE-2026-46005",
      "title": "xfs: fix a resource leak in xfs_alloc_buftarg()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53245",
      "url": "https://patchblox.com/security/cve/CVE-2026-53245",
      "title": "net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46292",
      "url": "https://patchblox.com/security/cve/CVE-2026-46292",
      "title": "pmdomain: core: Fix detach procedure for virtual devices in genpd",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53238",
      "url": "https://patchblox.com/security/cve/CVE-2026-53238",
      "title": "netlabel: validate unlabeled address and mask attribute lengths",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53337",
      "url": "https://patchblox.com/security/cve/CVE-2026-53337",
      "title": "net: bonding: fix NULL pointer dereference in bond_do_ioctl()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64012",
      "url": "https://patchblox.com/security/cve/CVE-2026-64012",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64131",
      "url": "https://patchblox.com/security/cve/CVE-2026-64131",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/memory: fix spurious warning when unmapping d...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63868",
      "url": "https://patchblox.com/security/cve/CVE-2026-63868",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52930",
      "url": "https://patchblox.com/security/cve/CVE-2026-52930",
      "title": "ipc/shm: serialize orphan cleanup with shm_nattch updates",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53269",
      "url": "https://patchblox.com/security/cve/CVE-2026-53269",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: synproxy: add mutex to guard hook ref...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53349",
      "url": "https://patchblox.com/security/cve/CVE-2026-53349",
      "title": "netfilter: nf_conntrack: destroy stale expectfn expectations on unregister",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46159",
      "url": "https://patchblox.com/security/cve/CVE-2026-46159",
      "title": "btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00098,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53207",
      "url": "https://patchblox.com/security/cve/CVE-2026-53207",
      "title": "mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53352",
      "url": "https://patchblox.com/security/cve/CVE-2026-53352",
      "title": "signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}