# ALAS2023-2026-1924: Security update for 18 packages

ALAS2023-2026-1924, released July 6, 2026, fixes 100 CVEs across 18 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2026-1924
- Platform: Linux
- Released: Jul 6, 2026
- Priority: Patch now (Closes CVE-2026-53266, exploited (CISA KEV))
- CVEs: 100, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-1924.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [kernel-livepatch-6.1.176-220.358](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.176-220.358.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 1:6.1.176-220.358.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-53266](https://patchblox.com/security/data/cve/CVE-2026-53266.md) | Patch now | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | CISA KEV |
| [CVE-2026-63984](https://patchblox.com/security/data/cve/CVE-2026-63984.md) | Urgent | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 9.8 | 0.0051 |  |
| [CVE-2026-63913](https://patchblox.com/security/data/cve/CVE-2026-63913.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: s... | 8.8 | 0.0097 |  |
| [CVE-2026-52929](https://patchblox.com/security/data/cve/CVE-2026-52929.md) | High | sctp: stream: fully roll back denied add-stream state | 9.8 | 0.0087 |  |
| [CVE-2026-63887](https://patchblox.com/security/data/cve/CVE-2026-63887.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_outp... | 9.8 | 0.0078 |  |
| [CVE-2026-63888](https://patchblox.com/security/data/cve/CVE-2026-63888.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: n... | 9.8 | 0.0078 |  |
| [CVE-2026-63912](https://patchblox.com/security/data/cve/CVE-2026-63912.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0071 |  |
| [CVE-2026-63922](https://patchblox.com/security/data/cve/CVE-2026-63922.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: t... | 9.8 | 0.0071 |  |
| [CVE-2026-63924](https://patchblox.com/security/data/cve/CVE-2026-63924.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: t... | 9.8 | 0.0071 |  |
| [CVE-2026-63886](https://patchblox.com/security/data/cve/CVE-2026-63886.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: s... | 9.8 | 0.0071 |  |
| [CVE-2026-46195](https://patchblox.com/security/data/cve/CVE-2026-46195.md) | High | smb: client: validate dacloffset before building DACL pointers | 9.8 | 0.0068 |  |
| [CVE-2026-63968](https://patchblox.com/security/data/cve/CVE-2026-63968.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: fix possible infinite loop in fib6_select_... | 7.5 | 0.0067 |  |
| [CVE-2026-52924](https://patchblox.com/security/data/cve/CVE-2026-52924.md) | High | sctp: purge outqueue on stale COOKIE-ECHO handling | 9.8 | 0.0066 |  |
| [CVE-2026-63919](https://patchblox.com/security/data/cve/CVE-2026-63919.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0065 |  |
| [CVE-2026-53221](https://patchblox.com/security/data/cve/CVE-2026-53221.md) | High | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | 9.8 | 0.0058 |  |
| [CVE-2026-53228](https://patchblox.com/security/data/cve/CVE-2026-53228.md) | High | ipv6: sit: reload inner IPv6 header after GSO offloads | 9.8 | 0.0058 |  |
| [CVE-2026-53225](https://patchblox.com/security/data/cve/CVE-2026-53225.md) | High | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 9.1 | 0.0058 |  |
| [CVE-2026-53268](https://patchblox.com/security/data/cve/CVE-2026-53268.md) | High | netfilter: conntrack_irc: fix possible out-of-bounds read | 8.2 | 0.0052 |  |
| [CVE-2026-63993](https://patchblox.com/security/data/cve/CVE-2026-63993.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after s... | 9.8 | 0.0051 |  |
| [CVE-2026-63994](https://patchblox.com/security/data/cve/CVE-2026-63994.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0051 |  |
| [CVE-2026-64007](https://patchblox.com/security/data/cve/CVE-2026-64007.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: n... | 9.8 | 0.0051 |  |
| [CVE-2026-63992](https://patchblox.com/security/data/cve/CVE-2026-63992.md) | High | kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.1 | 0.0051 |  |
| [CVE-2026-64116](https://patchblox.com/security/data/cve/CVE-2026-64116.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 7.5 | 0.0051 |  |
| [CVE-2026-46052](https://patchblox.com/security/data/cve/CVE-2026-46052.md) | High | ceph: only d_add() negative dentries when they are unhashed | 7.5 | 0.0050 |  |
| [CVE-2026-53199](https://patchblox.com/security/data/cve/CVE-2026-53199.md) | High | hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf | 7.5 | 0.0050 |  |
| [CVE-2026-53183](https://patchblox.com/security/data/cve/CVE-2026-53183.md) | High | mptcp: allow subflow rcv wnd to shrink | 7.5 | 0.0049 |  |
| [CVE-2026-53184](https://patchblox.com/security/data/cve/CVE-2026-53184.md) | High | udp: clear skb->dev before running a sockmap verdict | 7.5 | 0.0049 |  |
| [CVE-2026-53264](https://patchblox.com/security/data/cve/CVE-2026-53264.md) | High | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 7.8 | 0.0049 |  |
| [CVE-2026-46137](https://patchblox.com/security/data/cve/CVE-2026-46137.md) | High | mptcp: pm: ADD_ADDR rtx: fix potential data-race | 9.8 | 0.0048 |  |
| [CVE-2026-52946](https://patchblox.com/security/data/cve/CVE-2026-52946.md) | High | fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling | 7.5 | 0.0047 |  |
| [CVE-2026-53131](https://patchblox.com/security/data/cve/CVE-2026-53131.md) | High | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 |  |
| [CVE-2026-63889](https://patchblox.com/security/data/cve/CVE-2026-63889.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0036 |  |
| [CVE-2026-63925](https://patchblox.com/security/data/cve/CVE-2026-63925.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0035 |  |
| [CVE-2026-31709](https://patchblox.com/security/data/cve/CVE-2026-31709.md) | High | smb: client: validate the whole DACL before rewriting it in cifsacl | 8.8 | 0.0035 |  |
| [CVE-2026-52943](https://patchblox.com/security/data/cve/CVE-2026-52943.md) | High | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 |  |
| [CVE-2026-63867](https://patchblox.com/security/data/cve/CVE-2026-63867.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 8.2 | 0.0027 |  |
| [CVE-2026-53275](https://patchblox.com/security/data/cve/CVE-2026-53275.md) | High | ipv6: mcast: Fix use-after-free when processing MLD queries | 8.8 | 0.0026 |  |
| [CVE-2026-46320](https://patchblox.com/security/data/cve/CVE-2026-46320.md) | High | tap: free page on error paths in tap_get_user_xdp() | 7.4 | 0.0025 |  |
| [CVE-2026-52923](https://patchblox.com/security/data/cve/CVE-2026-52923.md) | High | ipc: limit next_id allocation to the valid ID range | 7.8 | 0.0022 |  |
| [CVE-2026-53212](https://patchblox.com/security/data/cve/CVE-2026-53212.md) | High | netfilter: nft_tunnel: fix use-after-free on object destroy | 7.8 | 0.0019 |  |
| [CVE-2026-63926](https://patchblox.com/security/data/cve/CVE-2026-63926.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 8.4 | 0.0019 |  |
| [CVE-2026-45991](https://patchblox.com/security/data/cve/CVE-2026-45991.md) | High | udf: fix partition descriptor append bookkeeping | 7.8 | 0.0018 |  |
| [CVE-2026-63875](https://patchblox.com/security/data/cve/CVE-2026-63875.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0018 |  |
| [CVE-2026-63884](https://patchblox.com/security/data/cve/CVE-2026-63884.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: m... | 7.8 | 0.0018 |  |
| [CVE-2026-63920](https://patchblox.com/security/data/cve/CVE-2026-63920.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0017 |  |
| [CVE-2026-43303](https://patchblox.com/security/data/cve/CVE-2026-43303.md) | High | mm/page_alloc: clear page->private in free_pages_prepare() | 7.8 | 0.0017 |  |
| [CVE-2026-23171](https://patchblox.com/security/data/cve/CVE-2026-23171.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: L... | 7.8 | 0.0017 |  |
| [CVE-2026-63917](https://patchblox.com/security/data/cve/CVE-2026-63917.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0017 |  |
| [CVE-2026-45850](https://patchblox.com/security/data/cve/CVE-2026-45850.md) | High | ipvs: skip ipv6 extension headers for csum checks | 7.5 | 0.0016 |  |
| [CVE-2026-63921](https://patchblox.com/security/data/cve/CVE-2026-63921.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0016 |  |
| [CVE-2026-53270](https://patchblox.com/security/data/cve/CVE-2026-53270.md) | High | ipvs: clear the svc scheduler ptr early on edit | 9.8 | 0.0016 |  |
| [CVE-2026-63914](https://patchblox.com/security/data/cve/CVE-2026-63914.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 7.3 | 0.0015 |  |
| [CVE-2026-64009](https://patchblox.com/security/data/cve/CVE-2026-64009.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0014 |  |
| [CVE-2026-52910](https://patchblox.com/security/data/cve/CVE-2026-52910.md) | High | bpf: Free reuseport cBPF prog after RCU grace period. | 7.8 | 0.0014 |  |
| [CVE-2026-46021](https://patchblox.com/security/data/cve/CVE-2026-46021.md) | High | thermal: core: Fix thermal zone governor cleanup issues | 7.0 | 0.0014 |  |
| [CVE-2026-46193](https://patchblox.com/security/data/cve/CVE-2026-46193.md) | High | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 7.0 | 0.0014 |  |
| [CVE-2026-53223](https://patchblox.com/security/data/cve/CVE-2026-53223.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue sk... | 8.1 | 0.0014 |  |
| [CVE-2026-53356](https://patchblox.com/security/data/cve/CVE-2026-53356.md) | High | drm/i915/gem: Fix phys BO pread/pwrite with offset | 7.8 | 0.0013 |  |
| [CVE-2026-46322](https://patchblox.com/security/data/cve/CVE-2026-46322.md) | High | tun: free page on build_skb failure in tun_xdp_one() | 7.1 | 0.0013 |  |
| [CVE-2026-46321](https://patchblox.com/security/data/cve/CVE-2026-46321.md) | High | tun: free page on short-frame rejection in tun_xdp_one() | 7.1 | 0.0013 |  |
| [CVE-2026-52942](https://patchblox.com/security/data/cve/CVE-2026-52942.md) | High | netfilter: nf_log: validate MAC header was set before dumping it | 7.1 | 0.0013 |  |
| [CVE-2026-63971](https://patchblox.com/security/data/cve/CVE-2026-63971.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0013 |  |
| [CVE-2026-45999](https://patchblox.com/security/data/cve/CVE-2026-45999.md) | High | erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() | 7.1 | 0.0013 |  |
| [CVE-2026-53189](https://patchblox.com/security/data/cve/CVE-2026-53189.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: n... | 8.8 | 0.0013 |  |
| [CVE-2026-64002](https://patchblox.com/security/data/cve/CVE-2026-64002.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports... | 8.8 | 0.0013 |  |
| [CVE-2026-46116](https://patchblox.com/security/data/cve/CVE-2026-46116.md) | High | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete | 8.4 | 0.0013 |  |
| [CVE-2026-46065](https://patchblox.com/security/data/cve/CVE-2026-46065.md) | High | fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info | 7.8 | 0.0013 |  |
| [CVE-2026-53133](https://patchblox.com/security/data/cve/CVE-2026-53133.md) | High | RDMA/umem: Fix truncation for block sizes >= 4G | 7.8 | 0.0013 |  |
| [CVE-2026-63985](https://patchblox.com/security/data/cve/CVE-2026-63985.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 7.8 | 0.0013 |  |
| [CVE-2026-46086](https://patchblox.com/security/data/cve/CVE-2026-46086.md) | High | net: bridge: use a stable FDB dst snapshot in RCU readers | 7.8 | 0.0013 |  |
| [CVE-2026-53218](https://patchblox.com/security/data/cve/CVE-2026-53218.md) | High | netfilter: nft_exthdr: fix register tracking for F_PRESENT flag | 7.0 | 0.0013 |  |
| [CVE-2026-53249](https://patchblox.com/security/data/cve/CVE-2026-53249.md) | High | ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | 7.0 | 0.0013 |  |
| [CVE-2026-46160](https://patchblox.com/security/data/cve/CVE-2026-46160.md) | High | btrfs: fix missing last_unlink_trans update when removing a directory | 7.0 | 0.0013 |  |
| [CVE-2026-53236](https://patchblox.com/security/data/cve/CVE-2026-53236.md) | High | tcp: restrict SO_ATTACH_FILTER to priv users | 8.8 | 0.0013 |  |
| [CVE-2026-53168](https://patchblox.com/security/data/cve/CVE-2026-53168.md) | High | fuse: reject fuse_notify() pagecache ops on directories | 7.0 | 0.0013 |  |
| [CVE-2026-52927](https://patchblox.com/security/data/cve/CVE-2026-52927.md) | High | netfilter: ebtables: fix OOB read in compat_mtw_from_user | 7.8 | 0.0012 |  |
| [CVE-2026-53354](https://patchblox.com/security/data/cve/CVE-2026-53354.md) | High | arm64: errata: Mitigate TLBI errata on various Arm CPUs | 8.8 | 0.0010 |  |
| [CVE-2026-53239](https://patchblox.com/security/data/cve/CVE-2026-53239.md) | High | xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() | 8.8 | 0.0010 |  |
| [CVE-2026-64005](https://patchblox.com/security/data/cve/CVE-2026-64005.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net/smc: Do not re-initialize smc hashtables  IN... | 7.8 | 0.0010 |  |
| [CVE-2026-63969](https://patchblox.com/security/data/cve/CVE-2026-63969.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: fix possible infinite loop in rt6_fill_nod... | 5.5 | 0.0021 |  |
| [CVE-2026-43492](https://patchblox.com/security/data/cve/CVE-2026-43492.md) | Routine | lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() | 5.5 | 0.0016 |  |
| [CVE-2026-46196](https://patchblox.com/security/data/cve/CVE-2026-46196.md) | Routine | tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() | 5.5 | 0.0013 |  |
| [CVE-2026-53227](https://patchblox.com/security/data/cve/CVE-2026-53227.md) | Routine | net: openvswitch: fix possible kfree_skb of ERR_PTR | 5.5 | 0.0013 |  |
| [CVE-2026-63990](https://patchblox.com/security/data/cve/CVE-2026-63990.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 5.5 | 0.0013 |  |
| [CVE-2026-53134](https://patchblox.com/security/data/cve/CVE-2026-53134.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nft_fib: fix stale stack leak via the... | 5.5 | 0.0013 |  |
| [CVE-2026-53219](https://patchblox.com/security/data/cve/CVE-2026-53219.md) | Routine | netfilter: x_tables: avoid leaking percpu counter pointers | 5.5 | 0.0013 |  |
| [CVE-2026-46005](https://patchblox.com/security/data/cve/CVE-2026-46005.md) | Routine | xfs: fix a resource leak in xfs_alloc_buftarg() | 5.5 | 0.0013 |  |
| [CVE-2026-53245](https://patchblox.com/security/data/cve/CVE-2026-53245.md) | Routine | net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr | 5.5 | 0.0013 |  |
| [CVE-2026-46292](https://patchblox.com/security/data/cve/CVE-2026-46292.md) | Routine | pmdomain: core: Fix detach procedure for virtual devices in genpd | 5.5 | 0.0012 |  |
| [CVE-2026-53238](https://patchblox.com/security/data/cve/CVE-2026-53238.md) | Routine | netlabel: validate unlabeled address and mask attribute lengths | 5.5 | 0.0012 |  |
| [CVE-2026-53337](https://patchblox.com/security/data/cve/CVE-2026-53337.md) | Routine | net: bonding: fix NULL pointer dereference in bond_do_ioctl() | 5.5 | 0.0012 |  |
| [CVE-2026-64012](https://patchblox.com/security/data/cve/CVE-2026-64012.md) | Routine | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 5.5 | 0.0012 |  |
| [CVE-2026-64131](https://patchblox.com/security/data/cve/CVE-2026-64131.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/memory: fix spurious warning when unmapping d... | 5.5 | 0.0012 |  |
| [CVE-2026-63868](https://patchblox.com/security/data/cve/CVE-2026-63868.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 5.5 | 0.0012 |  |
| [CVE-2026-52930](https://patchblox.com/security/data/cve/CVE-2026-52930.md) | Routine | ipc/shm: serialize orphan cleanup with shm_nattch updates | 5.5 | 0.0012 |  |
| [CVE-2026-53269](https://patchblox.com/security/data/cve/CVE-2026-53269.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: synproxy: add mutex to guard hook ref... | 5.5 | 0.0012 |  |
| [CVE-2026-53349](https://patchblox.com/security/data/cve/CVE-2026-53349.md) | Routine | netfilter: nf_conntrack: destroy stale expectfn expectations on unregister | 5.5 | 0.0012 |  |
| [CVE-2026-46159](https://patchblox.com/security/data/cve/CVE-2026-46159.md) | Routine | btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak | 5.5 | 0.0010 |  |
| [CVE-2026-53207](https://patchblox.com/security/data/cve/CVE-2026-53207.md) | Routine | mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison | 5.5 | 0.0010 |  |
| [CVE-2026-53352](https://patchblox.com/security/data/cve/CVE-2026-53352.md) | Routine | signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() | 5.5 | 0.0010 |  |

---

Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.