{ "fix": "ALAS2023-2026-1925", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1925", "summary": "ALAS2023-2026-1925, released July 6, 2026, fixes 84 CVEs across 19 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.", "platform": "linux", "type": "advisory", "title": "Security update for 19 packages", "released": "2026-07-06T09:00:00Z", "priority": "Patch now", "priorityTier": 1, "priorityReason": "Closes CVE-2026-53266, exploited (CISA KEV)", "supported": true, "cveCount": 84, "exploitedCveCount": 1, "kevCveCount": 1, "ransomwareCveCount": 0, "maxEpss": 0.00934, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1925.html", "appliesTo": [ { "product": "bpftool6.18", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "bpftool6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.18.36-69.134", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.18.36-69.134", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel6.18", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "kernel6.18-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "kernel6.18-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-headers", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "kernel6.18-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "kernel6.18-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "kernel6.18-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "kernel6.18-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "kernel6.18-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "microvm-kernel6.18", "productUrl": "https://patchblox.com/security/product/linux/microvm-kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "perf6.18", "productUrl": "https://patchblox.com/security/product/linux/perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "perf6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "python3-perf6.18", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true }, { "product": "python3-perf6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.36-69.134.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-53266", "url": "https://patchblox.com/security/cve/CVE-2026-53266", "title": "netfilter: bridge: make ebt_snat ARP rewrite writable", "priority": "Patch now", "severity": "Moderate", "cvss": 8.8, "epss": 0.00934, "kev": true, "ransomware": false, "exploited": true, "disclosed": false }, { "cveId": "CVE-2026-53224", "url": "https://patchblox.com/security/cve/CVE-2026-53224", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address l...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00574, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53175", "url": "https://patchblox.com/security/cve/CVE-2026-53175", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the fq...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00313, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52929", "url": "https://patchblox.com/security/cve/CVE-2026-52929", "title": "sctp: stream: fully roll back denied add-stream state", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00873, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52924", "url": "https://patchblox.com/security/cve/CVE-2026-52924", "title": "sctp: purge outqueue on stale COOKIE-ECHO handling", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00659, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46331", "url": "https://patchblox.com/security/cve/CVE-2026-46331", "title": "net/sched: fix pedit partial COW leading to page cache corruption", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00639, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53221", "url": "https://patchblox.com/security/cve/CVE-2026-53221", "title": "ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53228", "url": "https://patchblox.com/security/cve/CVE-2026-53228", "title": "ipv6: sit: reload inner IPv6 header after GSO offloads", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53225", "url": "https://patchblox.com/security/cve/CVE-2026-53225", "title": "sctp: fix uninit-value in __sctp_rcv_asconf_lookup()", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53268", "url": "https://patchblox.com/security/cve/CVE-2026-53268", "title": "netfilter: conntrack_irc: fix possible out-of-bounds read", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53183", "url": "https://patchblox.com/security/cve/CVE-2026-53183", "title": "mptcp: allow subflow rcv wnd to shrink", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53184", "url": "https://patchblox.com/security/cve/CVE-2026-53184", "title": "udp: clear skb-\u003Edev before running a sockmap verdict", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53264", "url": "https://patchblox.com/security/cve/CVE-2026-53264", "title": "net/sched: act_api: use RCU with deferred freeing for action lifecycle", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00485, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53229", "url": "https://patchblox.com/security/cve/CVE-2026-53229", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XD...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52946", "url": "https://patchblox.com/security/cve/CVE-2026-52946", "title": "fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53246", "url": "https://patchblox.com/security/cve/CVE-2026-53246", "title": "sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00442, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53235", "url": "https://patchblox.com/security/cve/CVE-2026-53235", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: add pskb_may_pull() to skb_gro_receive_list...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53131", "url": "https://patchblox.com/security/cve/CVE-2026-53131", "title": "netfilter: require Ethernet MAC header before using eth_hdr()", "priority": "High", "severity": "Moderate", "cvss": 9.4, "epss": 0.00435, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53180", "url": "https://patchblox.com/security/cve/CVE-2026-53180", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock in tmigr_handle_r...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0034, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63867", "url": "https://patchblox.com/security/cve/CVE-2026-63867", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.2, "epss": 0.00274, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53275", "url": "https://patchblox.com/security/cve/CVE-2026-53275", "title": "ipv6: mcast: Fix use-after-free when processing MLD queries", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00262, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53232", "url": "https://patchblox.com/security/cve/CVE-2026-53232", "title": "net: phy: clean the sfp upstream if phy probing fails", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46320", "url": "https://patchblox.com/security/cve/CVE-2026-46320", "title": "tap: free page on error paths in tap_get_user_xdp()", "priority": "High", "severity": "Important", "cvss": 7.4, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53212", "url": "https://patchblox.com/security/cve/CVE-2026-53212", "title": "netfilter: nft_tunnel: fix use-after-free on object destroy", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53191", "url": "https://patchblox.com/security/cve/CVE-2026-53191", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: inherit IORING_CQE_F_BUF_MORE acro...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53233", "url": "https://patchblox.com/security/cve/CVE-2026-53233", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netdev: fix double-free in netdev_nl_bind_rx_doi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53162", "url": "https://patchblox.com/security/cve/CVE-2026-53162", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: memcg: use round-robin victim selection in refil...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45850", "url": "https://patchblox.com/security/cve/CVE-2026-45850", "title": "ipvs: skip ipv6 extension headers for csum checks", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53187", "url": "https://patchblox.com/security/cve/CVE-2026-53187", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate cpu_id against nr_cpu_ids in...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53270", "url": "https://patchblox.com/security/cve/CVE-2026-53270", "title": "ipvs: clear the svc scheduler ptr early on edit", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53188", "url": "https://patchblox.com/security/cve/CVE-2026-53188", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Validate the passed in fops for ib_ge...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52910", "url": "https://patchblox.com/security/cve/CVE-2026-52910", "title": "bpf: Free reuseport cBPF prog after RCU grace period.", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53132", "url": "https://patchblox.com/security/cve/CVE-2026-53132", "title": "vsock/virtio: fix potential unbounded skb queue", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53223", "url": "https://patchblox.com/security/cve/CVE-2026-53223", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnet: guard timestamp cmsgs to real error queue sk...", "priority": "High", "severity": "moderate", "cvss": 8.1, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53145", "url": "https://patchblox.com/security/cve/CVE-2026-53145", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/gem: Try to fix change_handle ioctl, attempt...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53356", "url": "https://patchblox.com/security/cve/CVE-2026-53356", "title": "drm/i915/gem: Fix phys BO pread/pwrite with offset", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52942", "url": "https://patchblox.com/security/cve/CVE-2026-52942", "title": "netfilter: nf_log: validate MAC header was set before dumping it", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53189", "url": "https://patchblox.com/security/cve/CVE-2026-53189", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53133", "url": "https://patchblox.com/security/cve/CVE-2026-53133", "title": "RDMA/umem: Fix truncation for block sizes \u003E= 4G", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53167", "url": "https://patchblox.com/security/cve/CVE-2026-53167", "title": "fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53218", "url": "https://patchblox.com/security/cve/CVE-2026-53218", "title": "netfilter: nft_exthdr: fix register tracking for F_PRESENT flag", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53249", "url": "https://patchblox.com/security/cve/CVE-2026-53249", "title": "ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53341", "url": "https://patchblox.com/security/cve/CVE-2026-53341", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53230", "url": "https://patchblox.com/security/cve/CVE-2026-53230", "title": "net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53236", "url": "https://patchblox.com/security/cve/CVE-2026-53236", "title": "tcp: restrict SO_ATTACH_FILTER to priv users", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53156", "url": "https://patchblox.com/security/cve/CVE-2026-53156", "title": "nvmem: core: fix use-after-free bugs in error paths", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53168", "url": "https://patchblox.com/security/cve/CVE-2026-53168", "title": "fuse: reject fuse_notify() pagecache ops on directories", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46054", "url": "https://patchblox.com/security/cve/CVE-2026-46054", "title": "selinux: fix overlayfs mmap() and mprotect() access checks", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53267", "url": "https://patchblox.com/security/cve/CVE-2026-53267", "title": "netfilter: nft_ct: bail out on template ct in get eval", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52908", "url": "https://patchblox.com/security/cve/CVE-2026-52908", "title": "RDMA: During rereg_mr ensure that REREG_ACCESS is compatible", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53272", "url": "https://patchblox.com/security/cve/CVE-2026-53272", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: erofs: fix use-after-free on sbi-\u003Esync_decompres...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53259", "url": "https://patchblox.com/security/cve/CVE-2026-53259", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv6: anycast: insert aca into global hash under...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52909", "url": "https://patchblox.com/security/cve/CVE-2026-52909", "title": "ip6_vti: set netns_immutable on the fallback device.", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00113, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53250", "url": "https://patchblox.com/security/cve/CVE-2026-53250", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xsk: cache csum_start/csum_offset to fix TOCTOU...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53354", "url": "https://patchblox.com/security/cve/CVE-2026-53354", "title": "arm64: errata: Mitigate TLBI errata on various Arm CPUs", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53239", "url": "https://patchblox.com/security/cve/CVE-2026-53239", "title": "xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53153", "url": "https://patchblox.com/security/cve/CVE-2026-53153", "title": "kernel-rt-64k: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00099, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53265", "url": "https://patchblox.com/security/cve/CVE-2026-53265", "title": "dm cache policy smq: check allocation under invalidate lock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00098, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53334", "url": "https://patchblox.com/security/cve/CVE-2026-53334", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/reclaim: handle ctx allocation failure...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53335", "url": "https://patchblox.com/security/cve/CVE-2026-53335", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/lru_sort: handle ctx allocation failure...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53328", "url": "https://patchblox.com/security/cve/CVE-2026-53328", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don\u0027t warn on NULL cgrp_moving_from i...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52940", "url": "https://patchblox.com/security/cve/CVE-2026-52940", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tun: zero the whole vnet header in tun_put_user(...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53164", "url": "https://patchblox.com/security/cve/CVE-2026-53164", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/dma: Do not try to iommu_map a 0 length re...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53333", "url": "https://patchblox.com/security/cve/CVE-2026-53333", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/mincore: handle non-swap entries before !CONF...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53342", "url": "https://patchblox.com/security/cve/CVE-2026-53342", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: arm64: mm: call pagetable dtor when freeing hot-...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53227", "url": "https://patchblox.com/security/cve/CVE-2026-53227", "title": "net: openvswitch: fix possible kfree_skb of ERR_PTR", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53134", "url": "https://patchblox.com/security/cve/CVE-2026-53134", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: fix stale stack leak via the...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53245", "url": "https://patchblox.com/security/cve/CVE-2026-53245", "title": "net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53163", "url": "https://patchblox.com/security/cve/CVE-2026-53163", "title": "locking/rtmutex: Skip remove_waiter() when waiter is not enqueued", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53220", "url": "https://patchblox.com/security/cve/CVE-2026-53220", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: revalidate bridge ports ebt_redirect...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53238", "url": "https://patchblox.com/security/cve/CVE-2026-53238", "title": "netlabel: validate unlabeled address and mask attribute lengths", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53337", "url": "https://patchblox.com/security/cve/CVE-2026-53337", "title": "net: bonding: fix NULL pointer dereference in bond_do_ioctl()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53154", "url": "https://patchblox.com/security/cve/CVE-2026-53154", "title": "mm/hugetlb: restore reservation on error in hugetlb folio copy paths", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53190", "url": "https://patchblox.com/security/cve/CVE-2026-53190", "title": "drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53214", "url": "https://patchblox.com/security/cve/CVE-2026-53214", "title": "ipv6: Fix a potential NPD in cleanup_prefix_route()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63868", "url": "https://patchblox.com/security/cve/CVE-2026-63868", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53345", "url": "https://patchblox.com/security/cve/CVE-2026-53345", "title": "KVM: Don\u0027t WARN if memory is dirtied without a vCPU when the VM is dying", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52930", "url": "https://patchblox.com/security/cve/CVE-2026-52930", "title": "ipc/shm: serialize orphan cleanup with shm_nattch updates", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53269", "url": "https://patchblox.com/security/cve/CVE-2026-53269", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: add mutex to guard hook ref...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53347", "url": "https://patchblox.com/security/cve/CVE-2026-53347", "title": "drm/virtio: Fix driver removal with disabled KMS", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53349", "url": "https://patchblox.com/security/cve/CVE-2026-53349", "title": "netfilter: nf_conntrack: destroy stale expectfn expectations on unregister", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53261", "url": "https://patchblox.com/security/cve/CVE-2026-53261", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: devlink: Release nested relation on devlink free...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53207", "url": "https://patchblox.com/security/cve/CVE-2026-53207", "title": "mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53352", "url": "https://patchblox.com/security/cve/CVE-2026-53352", "title": "signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-08T13:06:02Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }