{
  "fix": "ALAS2023-2026-1968",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1968",
  "summary": "ALAS2023-2026-1968, released July 20, 2026, fixes 125 CVEs across 18 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 18 packages",
  "released": "2026-07-20T09:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2026-53266, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 125,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.04576,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-1968.html",
  "appliesTo": [
    {
      "product": "bpftool6.12",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.12.94-123.174",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.94-123.174",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.12-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.12-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.94-123.174.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-53266",
      "url": "https://patchblox.com/security/cve/CVE-2026-53266",
      "title": "netfilter: bridge: make ebt_snat ARP rewrite writable",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00934,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63984",
      "url": "https://patchblox.com/security/cve/CVE-2026-63984",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63939",
      "url": "https://patchblox.com/security/cve/CVE-2026-63939",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: SEV: Compute the correct max length of the...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.3,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63938",
      "url": "https://patchblox.com/security/cve/CVE-2026-63938",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: SEV: Check PSC request indices against the...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.3,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63983",
      "url": "https://patchblox.com/security/cve/CVE-2026-63983",
      "title": "net/sched: fix packet loop on netem when duplicate is on",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46242",
      "url": "https://patchblox.com/security/cve/CVE-2026-46242",
      "title": "kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.04576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63913",
      "url": "https://patchblox.com/security/cve/CVE-2026-63913",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00971,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52929",
      "url": "https://patchblox.com/security/cve/CVE-2026-52929",
      "title": "sctp: stream: fully roll back denied add-stream state",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00873,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63887",
      "url": "https://patchblox.com/security/cve/CVE-2026-63887",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nscsi: target: iscsi: Bound iscsi_encode_text_outp...",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00778,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63888",
      "url": "https://patchblox.com/security/cve/CVE-2026-63888",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00778,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63912",
      "url": "https://patchblox.com/security/cve/CVE-2026-63912",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63922",
      "url": "https://patchblox.com/security/cve/CVE-2026-63922",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63924",
      "url": "https://patchblox.com/security/cve/CVE-2026-63924",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63886",
      "url": "https://patchblox.com/security/cve/CVE-2026-63886",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00711,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63968",
      "url": "https://patchblox.com/security/cve/CVE-2026-63968",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: fix possible infinite loop in fib6_select_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00665,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52924",
      "url": "https://patchblox.com/security/cve/CVE-2026-52924",
      "title": "sctp: purge outqueue on stale COOKIE-ECHO handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00659,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63919",
      "url": "https://patchblox.com/security/cve/CVE-2026-63919",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.0065,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46331",
      "url": "https://patchblox.com/security/cve/CVE-2026-46331",
      "title": "net/sched: fix pedit partial COW leading to page cache corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00639,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53221",
      "url": "https://patchblox.com/security/cve/CVE-2026-53221",
      "title": "ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53228",
      "url": "https://patchblox.com/security/cve/CVE-2026-53228",
      "title": "ipv6: sit: reload inner IPv6 header after GSO offloads",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53225",
      "url": "https://patchblox.com/security/cve/CVE-2026-53225",
      "title": "sctp: fix uninit-value in __sctp_rcv_asconf_lookup()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53268",
      "url": "https://patchblox.com/security/cve/CVE-2026-53268",
      "title": "netfilter: conntrack_irc: fix possible out-of-bounds read",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63993",
      "url": "https://patchblox.com/security/cve/CVE-2026-63993",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nvxlan: do not reuse cached ip_hdr() value after s...",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63994",
      "url": "https://patchblox.com/security/cve/CVE-2026-63994",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64007",
      "url": "https://patchblox.com/security/cve/CVE-2026-64007",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63992",
      "url": "https://patchblox.com/security/cve/CVE-2026-63992",
      "title": "kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 9.1,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53199",
      "url": "https://patchblox.com/security/cve/CVE-2026-53199",
      "title": "hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63978",
      "url": "https://patchblox.com/security/cve/CVE-2026-63978",
      "title": "net/handshake: Drain pending requests at net namespace exit",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53183",
      "url": "https://patchblox.com/security/cve/CVE-2026-53183",
      "title": "mptcp: allow subflow rcv wnd to shrink",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53184",
      "url": "https://patchblox.com/security/cve/CVE-2026-53184",
      "title": "udp: clear skb-\u003Edev before running a sockmap verdict",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53264",
      "url": "https://patchblox.com/security/cve/CVE-2026-53264",
      "title": "net/sched: act_api: use RCU with deferred freeing for action lifecycle",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00485,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53229",
      "url": "https://patchblox.com/security/cve/CVE-2026-53229",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: xsk: Fix DMA and xdp_frame leak on XD...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52946",
      "url": "https://patchblox.com/security/cve/CVE-2026-52946",
      "title": "fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64523",
      "url": "https://patchblox.com/security/cve/CVE-2026-64523",
      "title": "net/handshake: Take a long-lived file reference at submit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.0045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53235",
      "url": "https://patchblox.com/security/cve/CVE-2026-53235",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: add pskb_may_pull() to skb_gro_receive_list...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64003",
      "url": "https://patchblox.com/security/cve/CVE-2026-64003",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: core: Run queues for all non-SDEV_DEL devi...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53131",
      "url": "https://patchblox.com/security/cve/CVE-2026-53131",
      "title": "netfilter: require Ethernet MAC header before using eth_hdr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.4,
      "epss": 0.00435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63889",
      "url": "https://patchblox.com/security/cve/CVE-2026-63889",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00359,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63925",
      "url": "https://patchblox.com/security/cve/CVE-2026-63925",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.00347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53180",
      "url": "https://patchblox.com/security/cve/CVE-2026-53180",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  timers/migration: Fix livelock in tmigr_handle_r...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.0034,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63980",
      "url": "https://patchblox.com/security/cve/CVE-2026-63980",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/handshake: Use spin_lock_bh for hn_lock  nvm...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.0034,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64235",
      "url": "https://patchblox.com/security/cve/CVE-2026-64235",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  x86/ftrace: Relocate %rip-relative percpu refs i...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00327,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52943",
      "url": "https://patchblox.com/security/cve/CVE-2026-52943",
      "title": "net: skbuff: fix missing zerocopy reference in pskb_carve helpers",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63867",
      "url": "https://patchblox.com/security/cve/CVE-2026-63867",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.2,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53275",
      "url": "https://patchblox.com/security/cve/CVE-2026-53275",
      "title": "ipv6: mcast: Fix use-after-free when processing MLD queries",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53232",
      "url": "https://patchblox.com/security/cve/CVE-2026-53232",
      "title": "net: phy: clean the sfp upstream if phy probing fails",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00257,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46320",
      "url": "https://patchblox.com/security/cve/CVE-2026-46320",
      "title": "tap: free page on error paths in tap_get_user_xdp()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.4,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52923",
      "url": "https://patchblox.com/security/cve/CVE-2026-52923",
      "title": "ipc: limit next_id allocation to the valid ID range",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63896",
      "url": "https://patchblox.com/security/cve/CVE-2026-63896",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  usb: gadget: composite: fix integer underflow in...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53212",
      "url": "https://patchblox.com/security/cve/CVE-2026-53212",
      "title": "netfilter: nft_tunnel: fix use-after-free on object destroy",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63926",
      "url": "https://patchblox.com/security/cve/CVE-2026-63926",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63875",
      "url": "https://patchblox.com/security/cve/CVE-2026-63875",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63884",
      "url": "https://patchblox.com/security/cve/CVE-2026-63884",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: m...",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53191",
      "url": "https://patchblox.com/security/cve/CVE-2026-53191",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/net: inherit IORING_CQE_F_BUF_MORE acro...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53233",
      "url": "https://patchblox.com/security/cve/CVE-2026-53233",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netdev: fix double-free in netdev_nl_bind_rx_doi...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63920",
      "url": "https://patchblox.com/security/cve/CVE-2026-63920",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.1,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43303",
      "url": "https://patchblox.com/security/cve/CVE-2026-43303",
      "title": "mm/page_alloc: clear page-\u003Eprivate in free_pages_prepare()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63917",
      "url": "https://patchblox.com/security/cve/CVE-2026-63917",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45850",
      "url": "https://patchblox.com/security/cve/CVE-2026-45850",
      "title": "ipvs: skip ipv6 extension headers for csum checks",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63962",
      "url": "https://patchblox.com/security/cve/CVE-2026-63962",
      "title": "usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63921",
      "url": "https://patchblox.com/security/cve/CVE-2026-63921",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53270",
      "url": "https://patchblox.com/security/cve/CVE-2026-53270",
      "title": "ipvs: clear the svc scheduler ptr early on edit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63914",
      "url": "https://patchblox.com/security/cve/CVE-2026-63914",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.3,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64009",
      "url": "https://patchblox.com/security/cve/CVE-2026-64009",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52910",
      "url": "https://patchblox.com/security/cve/CVE-2026-52910",
      "title": "bpf: Free reuseport cBPF prog after RCU grace period.",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53132",
      "url": "https://patchblox.com/security/cve/CVE-2026-53132",
      "title": "vsock/virtio: fix potential unbounded skb queue",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53223",
      "url": "https://patchblox.com/security/cve/CVE-2026-53223",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnet: guard timestamp cmsgs to real error queue sk...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.1,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63937",
      "url": "https://patchblox.com/security/cve/CVE-2026-63937",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: SEV: Use READ_ONCE() when reading entries/i...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53356",
      "url": "https://patchblox.com/security/cve/CVE-2026-53356",
      "title": "drm/i915/gem: Fix phys BO pread/pwrite with offset",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46322",
      "url": "https://patchblox.com/security/cve/CVE-2026-46322",
      "title": "tun: free page on build_skb failure in tun_xdp_one()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46321",
      "url": "https://patchblox.com/security/cve/CVE-2026-46321",
      "title": "tun: free page on short-frame rejection in tun_xdp_one()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52942",
      "url": "https://patchblox.com/security/cve/CVE-2026-52942",
      "title": "netfilter: nf_log: validate MAC header was set before dumping it",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63971",
      "url": "https://patchblox.com/security/cve/CVE-2026-63971",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53189",
      "url": "https://patchblox.com/security/cve/CVE-2026-53189",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64002",
      "url": "https://patchblox.com/security/cve/CVE-2026-64002",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv4: free net-\u003Eipv4.sysctl_local_reserved_ports...",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53133",
      "url": "https://patchblox.com/security/cve/CVE-2026-53133",
      "title": "RDMA/umem: Fix truncation for block sizes \u003E= 4G",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63985",
      "url": "https://patchblox.com/security/cve/CVE-2026-63985",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63987",
      "url": "https://patchblox.com/security/cve/CVE-2026-63987",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63995",
      "url": "https://patchblox.com/security/cve/CVE-2026-63995",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ethtool: cmis: validate start_cmd_payload_size f...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63996",
      "url": "https://patchblox.com/security/cve/CVE-2026-63996",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53218",
      "url": "https://patchblox.com/security/cve/CVE-2026-53218",
      "title": "netfilter: nft_exthdr: fix register tracking for F_PRESENT flag",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53249",
      "url": "https://patchblox.com/security/cve/CVE-2026-53249",
      "title": "ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63952",
      "url": "https://patchblox.com/security/cve/CVE-2026-63952",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53230",
      "url": "https://patchblox.com/security/cve/CVE-2026-53230",
      "title": "net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53236",
      "url": "https://patchblox.com/security/cve/CVE-2026-53236",
      "title": "tcp: restrict SO_ATTACH_FILTER to priv users",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53156",
      "url": "https://patchblox.com/security/cve/CVE-2026-53156",
      "title": "nvmem: core: fix use-after-free bugs in error paths",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53168",
      "url": "https://patchblox.com/security/cve/CVE-2026-53168",
      "title": "fuse: reject fuse_notify() pagecache ops on directories",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46054",
      "url": "https://patchblox.com/security/cve/CVE-2026-46054",
      "title": "selinux: fix overlayfs mmap() and mprotect() access checks",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52927",
      "url": "https://patchblox.com/security/cve/CVE-2026-52927",
      "title": "netfilter: ebtables: fix OOB read in compat_mtw_from_user",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53267",
      "url": "https://patchblox.com/security/cve/CVE-2026-53267",
      "title": "netfilter: nft_ct: bail out on template ct in get eval",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52908",
      "url": "https://patchblox.com/security/cve/CVE-2026-52908",
      "title": "RDMA: During rereg_mr ensure that REREG_ACCESS is compatible",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53272",
      "url": "https://patchblox.com/security/cve/CVE-2026-53272",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: fix use-after-free on sbi-\u003Esync_decompres...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64239",
      "url": "https://patchblox.com/security/cve/CVE-2026-64239",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/sysfs-schemes: delete tried region in r...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53354",
      "url": "https://patchblox.com/security/cve/CVE-2026-53354",
      "title": "arm64: errata: Mitigate TLBI errata on various Arm CPUs",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53239",
      "url": "https://patchblox.com/security/cve/CVE-2026-53239",
      "title": "xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64378",
      "url": "https://patchblox.com/security/cve/CVE-2026-64378",
      "title": "writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64005",
      "url": "https://patchblox.com/security/cve/CVE-2026-64005",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/smc: Do not re-initialize smc hashtables  IN...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63969",
      "url": "https://patchblox.com/security/cve/CVE-2026-63969",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: fix possible infinite loop in rt6_fill_nod...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63876",
      "url": "https://patchblox.com/security/cve/CVE-2026-63876",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  serial: zs: Convert to use a platform device  Pr...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63877",
      "url": "https://patchblox.com/security/cve/CVE-2026-63877",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  serial: dz: Convert to use a platform device  Pr...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53328",
      "url": "https://patchblox.com/security/cve/CVE-2026-53328",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Don\u0027t warn on NULL cgrp_moving_from i...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64525",
      "url": "https://patchblox.com/security/cve/CVE-2026-64525",
      "title": "xfrm: move policy_bydst RCU sync from per-netns .exit to .pre_exit",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53227",
      "url": "https://patchblox.com/security/cve/CVE-2026-53227",
      "title": "net: openvswitch: fix possible kfree_skb of ERR_PTR",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63990",
      "url": "https://patchblox.com/security/cve/CVE-2026-63990",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53134",
      "url": "https://patchblox.com/security/cve/CVE-2026-53134",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nft_fib: fix stale stack leak via the...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53219",
      "url": "https://patchblox.com/security/cve/CVE-2026-53219",
      "title": "netfilter: x_tables: avoid leaking percpu counter pointers",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53245",
      "url": "https://patchblox.com/security/cve/CVE-2026-53245",
      "title": "net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53220",
      "url": "https://patchblox.com/security/cve/CVE-2026-53220",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: revalidate bridge ports  ebt_redirect...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53238",
      "url": "https://patchblox.com/security/cve/CVE-2026-53238",
      "title": "netlabel: validate unlabeled address and mask attribute lengths",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53337",
      "url": "https://patchblox.com/security/cve/CVE-2026-53337",
      "title": "net: bonding: fix NULL pointer dereference in bond_do_ioctl()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64012",
      "url": "https://patchblox.com/security/cve/CVE-2026-64012",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64131",
      "url": "https://patchblox.com/security/cve/CVE-2026-64131",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/memory: fix spurious warning when unmapping d...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53154",
      "url": "https://patchblox.com/security/cve/CVE-2026-53154",
      "title": "mm/hugetlb: restore reservation on error in hugetlb folio copy paths",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53190",
      "url": "https://patchblox.com/security/cve/CVE-2026-53190",
      "title": "drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53214",
      "url": "https://patchblox.com/security/cve/CVE-2026-53214",
      "title": "ipv6: Fix a potential NPD in cleanup_prefix_route()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63997",
      "url": "https://patchblox.com/security/cve/CVE-2026-63997",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ethtool: module: avoid leaking a netdev ref on m...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63868",
      "url": "https://patchblox.com/security/cve/CVE-2026-63868",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53345",
      "url": "https://patchblox.com/security/cve/CVE-2026-53345",
      "title": "KVM: Don\u0027t WARN if memory is dirtied without a vCPU when the VM is dying",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52930",
      "url": "https://patchblox.com/security/cve/CVE-2026-52930",
      "title": "ipc/shm: serialize orphan cleanup with shm_nattch updates",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53269",
      "url": "https://patchblox.com/security/cve/CVE-2026-53269",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: synproxy: add mutex to guard hook ref...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53347",
      "url": "https://patchblox.com/security/cve/CVE-2026-53347",
      "title": "drm/virtio: Fix driver removal with disabled KMS",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53349",
      "url": "https://patchblox.com/security/cve/CVE-2026-53349",
      "title": "netfilter: nf_conntrack: destroy stale expectfn expectations on unregister",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53261",
      "url": "https://patchblox.com/security/cve/CVE-2026-53261",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  devlink: Release nested relation on devlink free...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53207",
      "url": "https://patchblox.com/security/cve/CVE-2026-53207",
      "title": "mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53352",
      "url": "https://patchblox.com/security/cve/CVE-2026-53352",
      "title": "signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-09T19:38:12Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}