{
  "fix": "ALAS2023-2026-2045",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045",
  "summary": "ALAS2023-2026-2045, released August 3, 2026, fixes 110 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 19 packages",
  "released": "2026-08-03T09:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-64459, rated Critical",
  "supported": true,
  "cveCount": 110,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00649,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-2045.html",
  "appliesTo": [
    {
      "product": "bpftool6.18",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.18.39-79.141",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.18.39-79.141",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "microvm-kernel6.18",
      "productUrl": "https://patchblox.com/security/product/linux/microvm-kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.18",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.18",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.39-79.141.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-64459",
      "url": "https://patchblox.com/security/cve/CVE-2026-64459",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: restore RCU grace period in tcp_ao_destroy_...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00649,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64450",
      "url": "https://patchblox.com/security/cve/CVE-2026-64450",
      "title": "tipc: fix out-of-bounds read in broadcast Gap ACK blocks",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00537,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64355",
      "url": "https://patchblox.com/security/cve/CVE-2026-64355",
      "title": "bpf: Reject fragmented frames in devmap",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00513,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64312",
      "url": "https://patchblox.com/security/cve/CVE-2026-64312",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: pcrypt - restore callback for non-parall...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64448",
      "url": "https://patchblox.com/security/cve/CVE-2026-64448",
      "title": "smb: client: restrict implied bcc[0] exemption to responses without data area",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64383",
      "url": "https://patchblox.com/security/cve/CVE-2026-64383",
      "title": "smb: client: fix double-free in SMB2_flush() replay",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64384",
      "url": "https://patchblox.com/security/cve/CVE-2026-64384",
      "title": "smb: client: fix change notify replay double-free",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64385",
      "url": "https://patchblox.com/security/cve/CVE-2026-64385",
      "title": "smb: client: fix double-free in SMB2_ioctl() replay",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64386",
      "url": "https://patchblox.com/security/cve/CVE-2026-64386",
      "title": "smb: client: fix query_info() replay double-free",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64387",
      "url": "https://patchblox.com/security/cve/CVE-2026-64387",
      "title": "smb: client: fix query directory replay double-free",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64380",
      "url": "https://patchblox.com/security/cve/CVE-2026-64380",
      "title": "smb: client: harden POSIX SID length parsing",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00443,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64414",
      "url": "https://patchblox.com/security/cve/CVE-2026-64414",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: handle unreadable frags  sashiko repo...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64368",
      "url": "https://patchblox.com/security/cve/CVE-2026-64368",
      "title": "mm/slab: do not limit zeroing to orig_size when only red zoning is enabled",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00417,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64374",
      "url": "https://patchblox.com/security/cve/CVE-2026-64374",
      "title": "sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00387,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64597",
      "url": "https://patchblox.com/security/cve/CVE-2026-64597",
      "title": "smb: client: fix double-free in SMB2_close() replay",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00359,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64313",
      "url": "https://patchblox.com/security/cve/CVE-2026-64313",
      "title": "crypto: ecc - Fix carry overflow in vli multiplication",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00355,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64364",
      "url": "https://patchblox.com/security/cve/CVE-2026-64364",
      "title": "HID: multitouch: fix out-of-bounds bit access on mt_io_flags",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00355,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64382",
      "url": "https://patchblox.com/security/cve/CVE-2026-64382",
      "title": "smb: client: fix double-free in SMB2_open() replay",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00354,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64435",
      "url": "https://patchblox.com/security/cve/CVE-2026-64435",
      "title": "audit: Fix data races of skb_queue_len() readers on audit_queue",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00331,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64598",
      "url": "https://patchblox.com/security/cve/CVE-2026-64598",
      "title": "smb/client: Fix error code in smb2_aead_req_alloc()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64507",
      "url": "https://patchblox.com/security/cve/CVE-2026-64507",
      "title": "x86/bugs: Enable IBPB flush on BPF JIT allocation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00231,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64591",
      "url": "https://patchblox.com/security/cve/CVE-2026-64591",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Avoid WARNING in sva unbind path  Th...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64464",
      "url": "https://patchblox.com/security/cve/CVE-2026-64464",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xhci: sideband: fix ring sg table pages leak  xh...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64596",
      "url": "https://patchblox.com/security/cve/CVE-2026-64596",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  libfs: set SB_I_NOEXEC and SB_I_NODEV by default...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64508",
      "url": "https://patchblox.com/security/cve/CVE-2026-64508",
      "title": "bpf: Support for hardening against JIT spraying",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00189,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64300",
      "url": "https://patchblox.com/security/cve/CVE-2026-64300",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  perf/aux: Fix page UAF in map_range()  map_range...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64513",
      "url": "https://patchblox.com/security/cve/CVE-2026-64513",
      "title": "KVM: x86: Unconditionally recompute CR8 intercept on PPR update",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64514",
      "url": "https://patchblox.com/security/cve/CVE-2026-64514",
      "title": "userfaultfd: gate must_wait writability check on pte_present()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64286",
      "url": "https://patchblox.com/security/cve/CVE-2026-64286",
      "title": "KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68461",
      "url": "https://patchblox.com/security/cve/CVE-2026-68461",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  device property: initialize the remaining fields...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64473",
      "url": "https://patchblox.com/security/cve/CVE-2026-64473",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  vfio: Remove device debugfs before releasing dev...",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64293",
      "url": "https://patchblox.com/security/cve/CVE-2026-64293",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommufd: Use sizeof(*hdr) instead of sizeof(hdr)...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64588",
      "url": "https://patchblox.com/security/cve/CVE-2026-64588",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fuse-uring: fix data races on ring-\u003Eready  On we...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64265",
      "url": "https://patchblox.com/security/cve/CVE-2026-64265",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fuse: clear intr_entry in fuse_resend and fuse_r...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64317",
      "url": "https://patchblox.com/security/cve/CVE-2026-64317",
      "title": "isofs: bound Rock Ridge symlink components to the SL record",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64604",
      "url": "https://patchblox.com/security/cve/CVE-2026-64604",
      "title": "KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53402",
      "url": "https://patchblox.com/security/cve/CVE-2026-53402",
      "title": "fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64271",
      "url": "https://patchblox.com/security/cve/CVE-2026-64271",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  Input: touchwin - reset the packet index on ever...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64296",
      "url": "https://patchblox.com/security/cve/CVE-2026-64296",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  exfat: bound uniname advance in exfat_find_dir_e...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64322",
      "url": "https://patchblox.com/security/cve/CVE-2026-64322",
      "title": "udf: validate sparing table length as an entry count, not a byte count",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64259",
      "url": "https://patchblox.com/security/cve/CVE-2026-64259",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fuse-uring: make a fuse_req on SQE commit only f...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64261",
      "url": "https://patchblox.com/security/cve/CVE-2026-64261",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fuse-uring: Avoid use-after-free in fuse_uring_a...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64593",
      "url": "https://patchblox.com/security/cve/CVE-2026-64593",
      "title": "btrfs: do not trim a device which is not writeable",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64299",
      "url": "https://patchblox.com/security/cve/CVE-2026-64299",
      "title": "tracing: Prevent out-of-bounds read in glob matching",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64323",
      "url": "https://patchblox.com/security/cve/CVE-2026-64323",
      "title": "udf: validate VAT header length against the VAT inode size",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64556",
      "url": "https://patchblox.com/security/cve/CVE-2026-64556",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  perf/core: Detach event groups during remove_on_...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64324",
      "url": "https://patchblox.com/security/cve/CVE-2026-64324",
      "title": "udf: validate free block extents against the partition length",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64294",
      "url": "https://patchblox.com/security/cve/CVE-2026-64294",
      "title": "mm: do file ownership checks with the proper mount idmap",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64306",
      "url": "https://patchblox.com/security/cve/CVE-2026-64306",
      "title": "crypto: drbg - Fix returning success on failure in CTR_DRBG",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64589",
      "url": "https://patchblox.com/security/cve/CVE-2026-64589",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  i2c: core: fix NULL-deref on adapter registratio...",
      "priority": "High",
      "severity": "IMPORTANT",
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64603",
      "url": "https://patchblox.com/security/cve/CVE-2026-64603",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  platform/x86: intel-hid: Protect ACPI notify han...",
      "priority": "High",
      "severity": "IMPORTANT",
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68086",
      "url": "https://patchblox.com/security/cve/CVE-2026-68086",
      "title": "mm/khugepaged: write all dirty file folios when collapsing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0015,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64456",
      "url": "https://patchblox.com/security/cve/CVE-2026-64456",
      "title": "hwrng: virtio: clamp device-reported used.len at copy_data()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64298",
      "url": "https://patchblox.com/security/cve/CVE-2026-64298",
      "title": "NFSv4: include MAY_WRITE in open permission mask for O_TRUNC",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64460",
      "url": "https://patchblox.com/security/cve/CVE-2026-64460",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  PCI/IOV: Skip VF Resizable BAR restore on read e...",
      "priority": "High",
      "severity": "high",
      "cvss": 7,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64475",
      "url": "https://patchblox.com/security/cve/CVE-2026-64475",
      "title": "vfio/pci: Release the VGA arbiter client on register_device() failure",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64422",
      "url": "https://patchblox.com/security/cve/CVE-2026-64422",
      "title": "net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64432",
      "url": "https://patchblox.com/security/cve/CVE-2026-64432",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: validate Dirty Page Table capacity in...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45945",
      "url": "https://patchblox.com/security/cve/CVE-2026-45945",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Fix race condition during PASID entr...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64260",
      "url": "https://patchblox.com/security/cve/CVE-2026-64260",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fuse-uring: Avoid queue-\u003Estopped races and set/r...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64279",
      "url": "https://patchblox.com/security/cve/CVE-2026-64279",
      "title": "i2c: core: fix adapter deregistration race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64423",
      "url": "https://patchblox.com/security/cve/CVE-2026-64423",
      "title": "ipv4: igmp: remove multicast group from hash table on device destruction",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64284",
      "url": "https://patchblox.com/security/cve/CVE-2026-64284",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: x86: Ensure vendor\u0027s exit handler runs befo...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64411",
      "url": "https://patchblox.com/security/cve/CVE-2026-64411",
      "title": "netfilter: ebtables: terminate table name before find_table_lock()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64412",
      "url": "https://patchblox.com/security/cve/CVE-2026-64412",
      "title": "netfilter: ebtables: module names must be null-terminated",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64348",
      "url": "https://patchblox.com/security/cve/CVE-2026-64348",
      "title": "usb: free iso schedules on failed submit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64354",
      "url": "https://patchblox.com/security/cve/CVE-2026-64354",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Validate BTF repeated field counts before e...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64381",
      "url": "https://patchblox.com/security/cve/CVE-2026-64381",
      "title": "smb: client: Fix next buffer leak in receive_encrypted_standard()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64436",
      "url": "https://patchblox.com/security/cve/CVE-2026-64436",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: af_key: initialize alg_key_len for IPComp s...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64413",
      "url": "https://patchblox.com/security/cve/CVE-2026-64413",
      "title": "netfilter: ebtables: zero chainstack array",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64266",
      "url": "https://patchblox.com/security/cve/CVE-2026-64266",
      "title": "fuse: re-lock request before returning from fuse_ref_folio()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64189",
      "url": "https://patchblox.com/security/cve/CVE-2026-64189",
      "title": "netfilter: ipset: fix race between dump and ip_set_list resize",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64372",
      "url": "https://patchblox.com/security/cve/CVE-2026-64372",
      "title": "cpufreq: pcc: fix use-after-free and double free in _OSC evaluation",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64401",
      "url": "https://patchblox.com/security/cve/CVE-2026-64401",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: resolve SWN tcon from live registra...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53027",
      "url": "https://patchblox.com/security/cve/CVE-2026-53027",
      "title": "fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64378",
      "url": "https://patchblox.com/security/cve/CVE-2026-64378",
      "title": "writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64418",
      "url": "https://patchblox.com/security/cve/CVE-2026-64418",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm: shrinker: fix shrinker_info teardown race wi...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68092",
      "url": "https://patchblox.com/security/cve/CVE-2026-68092",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  time/jiffies: Register jiffies clocksource befor...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64465",
      "url": "https://patchblox.com/security/cve/CVE-2026-64465",
      "title": "usb: xhci: Fix sleep in atomic context in xhci_free_streams()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64356",
      "url": "https://patchblox.com/security/cve/CVE-2026-64356",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: fix memory leak in xfs_dqinode_metadir_crea...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64458",
      "url": "https://patchblox.com/security/cve/CVE-2026-64458",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/ops-common: handle extreme intervals in...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64476",
      "url": "https://patchblox.com/security/cve/CVE-2026-64476",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  vfio/pci: Latch disable_idle_d3 per device  When...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68090",
      "url": "https://patchblox.com/security/cve/CVE-2026-68090",
      "title": "debugobjects: Plug race against a concurrent OOM disable",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64474",
      "url": "https://patchblox.com/security/cve/CVE-2026-64474",
      "title": "vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64457",
      "url": "https://patchblox.com/security/cve/CVE-2026-64457",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  virtio_pci: fix vq info pointer lookup via wrong...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64512",
      "url": "https://patchblox.com/security/cve/CVE-2026-64512",
      "title": "ACPI: CPPC: Suppress UBSAN warning caused by field misuse",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64357",
      "url": "https://patchblox.com/security/cve/CVE-2026-64357",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: fix exchmaps reservation limit check  xfs_e...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64258",
      "url": "https://patchblox.com/security/cve/CVE-2026-64258",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fuse-uring: remove request-less entries from ent...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64262",
      "url": "https://patchblox.com/security/cve/CVE-2026-64262",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fuse-uring: end fuse_req on io-uring cancel task...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64263",
      "url": "https://patchblox.com/security/cve/CVE-2026-64263",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fuse-uring: fix moving cancelled entry to ent_in...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64264",
      "url": "https://patchblox.com/security/cve/CVE-2026-64264",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fuse-uring: fix EFAULT clobber in fuse_uring_com...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64267",
      "url": "https://patchblox.com/security/cve/CVE-2026-64267",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fuse: avoid 32-bit prune notification count wrap...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64288",
      "url": "https://patchblox.com/security/cve/CVE-2026-64288",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: arm64: nv: Avoid dereferencing NULL VNCR ps...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64291",
      "url": "https://patchblox.com/security/cve/CVE-2026-64291",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommufd: Set veventq_depth upper bound  iommufd_...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64295",
      "url": "https://patchblox.com/security/cve/CVE-2026-64295",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm: page_ext: add count limit to page_ext_iter_n...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64314",
      "url": "https://patchblox.com/security/cve/CVE-2026-64314",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: chacha20poly1305 - validate poly1305 tem...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64426",
      "url": "https://patchblox.com/security/cve/CVE-2026-64426",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/nop: fix file reference leak with IOSQE...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64256",
      "url": "https://patchblox.com/security/cve/CVE-2026-64256",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: don\u0027t wrap around quota ids in dqiterate  L...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64289",
      "url": "https://patchblox.com/security/cve/CVE-2026-64289",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommufd: Set upper bounds on cache invalidation...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64326",
      "url": "https://patchblox.com/security/cve/CVE-2026-64326",
      "title": "block: skip sync_blockdev() on surprise removal in bdev_mark_dead()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64370",
      "url": "https://patchblox.com/security/cve/CVE-2026-64370",
      "title": "posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64425",
      "url": "https://patchblox.com/security/cve/CVE-2026-64425",
      "title": "io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64205",
      "url": "https://patchblox.com/security/cve/CVE-2026-64205",
      "title": "i2c: i801: fix hardware state machine corruption in error path",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64376",
      "url": "https://patchblox.com/security/cve/CVE-2026-64376",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  firmware_loader: fix device reference leak in fi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64419",
      "url": "https://patchblox.com/security/cve/CVE-2026-64419",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/shrinker: do not hold RCU lock in shrinker_de...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64416",
      "url": "https://patchblox.com/security/cve/CVE-2026-64416",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm: swap_cgroup: fix NULL deref in lookup_swap_c...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64187",
      "url": "https://patchblox.com/security/cve/CVE-2026-64187",
      "title": "xfs: fail recovery on a committed log item with no regions",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64282",
      "url": "https://patchblox.com/security/cve/CVE-2026-64282",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: arm64: Don\u0027t leak PFN when kvm_translate_vn...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.7,
      "epss": 0.00109,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64415",
      "url": "https://patchblox.com/security/cve/CVE-2026-64415",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/swap: add cond_resched() in swap_reclaim_full...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64373",
      "url": "https://patchblox.com/security/cve/CVE-2026-64373",
      "title": "cpufreq: Fix hotplug-suspend race during reboot",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00089,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T07:50:38Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}