# ALAS2023-2026-2045: Security update for 19 packages ALAS2023-2026-2045, released August 3, 2026, fixes 110 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-2045 - Platform: Linux - Released: Aug 3, 2026 - Priority: Urgent (Closes CVE-2026-64459, rated Critical) - CVEs: 110, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-2045.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.18](https://patchblox.com/security/data/product/linux/bpftool6.18.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [bpftool6.18-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.18-debuginfo.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [kernel-livepatch-6.18.39-79.141](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.18.39-79.141.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.18](https://patchblox.com/security/data/product/linux/kernel6.18.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [kernel6.18-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [kernel6.18-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [kernel6.18-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.18-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [kernel6.18-devel](https://patchblox.com/security/data/product/linux/kernel6.18-devel.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [kernel6.18-headers](https://patchblox.com/security/data/product/linux/kernel6.18-headers.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [kernel6.18-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [kernel6.18-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.18-modules-extra-common.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [kernel6.18-tools](https://patchblox.com/security/data/product/linux/kernel6.18-tools.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [kernel6.18-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.18-tools-debuginfo.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [kernel6.18-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.18-tools-devel.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [microvm-kernel6.18](https://patchblox.com/security/data/product/linux/microvm-kernel6.18.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [perf6.18](https://patchblox.com/security/data/product/linux/perf6.18.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [python3-perf6.18](https://patchblox.com/security/data/product/linux/python3-perf6.18.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | | [python3-perf6.18-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.18-debuginfo.md) | amzn 2023 | 1:6.18.39-79.141.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-64459](https://patchblox.com/security/data/cve/CVE-2026-64459.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: restore RCU grace period in tcp_ao_destroy_... | 9.8 | 0.0065 | | | [CVE-2026-64450](https://patchblox.com/security/data/cve/CVE-2026-64450.md) | High | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 9.1 | 0.0054 | | | [CVE-2026-64355](https://patchblox.com/security/data/cve/CVE-2026-64355.md) | High | bpf: Reject fragmented frames in devmap | 9.8 | 0.0051 | | | [CVE-2026-64312](https://patchblox.com/security/data/cve/CVE-2026-64312.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall... | 7.5 | 0.0050 | | | [CVE-2026-64448](https://patchblox.com/security/data/cve/CVE-2026-64448.md) | High | smb: client: restrict implied bcc[0] exemption to responses without data area | 8.2 | 0.0046 | | | [CVE-2026-64383](https://patchblox.com/security/data/cve/CVE-2026-64383.md) | High | smb: client: fix double-free in SMB2_flush() replay | 9.8 | 0.0046 | | | [CVE-2026-64384](https://patchblox.com/security/data/cve/CVE-2026-64384.md) | High | smb: client: fix change notify replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64385](https://patchblox.com/security/data/cve/CVE-2026-64385.md) | High | smb: client: fix double-free in SMB2_ioctl() replay | 9.8 | 0.0046 | | | [CVE-2026-64386](https://patchblox.com/security/data/cve/CVE-2026-64386.md) | High | smb: client: fix query_info() replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64387](https://patchblox.com/security/data/cve/CVE-2026-64387.md) | High | smb: client: fix query directory replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64380](https://patchblox.com/security/data/cve/CVE-2026-64380.md) | High | smb: client: harden POSIX SID length parsing | 8.2 | 0.0044 | | | [CVE-2026-64414](https://patchblox.com/security/data/cve/CVE-2026-64414.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko repo... | 7.8 | 0.0044 | | | [CVE-2026-64368](https://patchblox.com/security/data/cve/CVE-2026-64368.md) | High | mm/slab: do not limit zeroing to orig_size when only red zoning is enabled | 8.1 | 0.0042 | | | [CVE-2026-64374](https://patchblox.com/security/data/cve/CVE-2026-64374.md) | High | sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT | 7.5 | 0.0039 | | | [CVE-2026-64597](https://patchblox.com/security/data/cve/CVE-2026-64597.md) | High | smb: client: fix double-free in SMB2_close() replay | 9.8 | 0.0036 | | | [CVE-2026-64313](https://patchblox.com/security/data/cve/CVE-2026-64313.md) | High | crypto: ecc - Fix carry overflow in vli multiplication | 8.8 | 0.0036 | | | [CVE-2026-64364](https://patchblox.com/security/data/cve/CVE-2026-64364.md) | High | HID: multitouch: fix out-of-bounds bit access on mt_io_flags | 8.8 | 0.0036 | | | [CVE-2026-64382](https://patchblox.com/security/data/cve/CVE-2026-64382.md) | High | smb: client: fix double-free in SMB2_open() replay | 8.8 | 0.0035 | | | [CVE-2026-64435](https://patchblox.com/security/data/cve/CVE-2026-64435.md) | High | audit: Fix data races of skb_queue_len() readers on audit_queue | 8.2 | 0.0033 | | | [CVE-2026-64598](https://patchblox.com/security/data/cve/CVE-2026-64598.md) | High | smb/client: Fix error code in smb2_aead_req_alloc() | 8.8 | 0.0028 | | | [CVE-2026-64507](https://patchblox.com/security/data/cve/CVE-2026-64507.md) | High | x86/bugs: Enable IBPB flush on BPF JIT allocation | 7.8 | 0.0023 | | | [CVE-2026-64591](https://patchblox.com/security/data/cve/CVE-2026-64591.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path Th... | n/a | 0.0022 | | | [CVE-2026-64464](https://patchblox.com/security/data/cve/CVE-2026-64464.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: fix ring sg table pages leak xh... | n/a | 0.0021 | | | [CVE-2026-64596](https://patchblox.com/security/data/cve/CVE-2026-64596.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: libfs: set SB_I_NOEXEC and SB_I_NODEV by default... | n/a | 0.0021 | | | [CVE-2026-64508](https://patchblox.com/security/data/cve/CVE-2026-64508.md) | High | bpf: Support for hardening against JIT spraying | 7.8 | 0.0019 | | | [CVE-2026-64300](https://patchblox.com/security/data/cve/CVE-2026-64300.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in map_range() map_range... | 7.8 | 0.0018 | | | [CVE-2026-64513](https://patchblox.com/security/data/cve/CVE-2026-64513.md) | High | KVM: x86: Unconditionally recompute CR8 intercept on PPR update | 8.4 | 0.0018 | | | [CVE-2026-64514](https://patchblox.com/security/data/cve/CVE-2026-64514.md) | High | userfaultfd: gate must_wait writability check on pte_present() | 7.1 | 0.0018 | | | [CVE-2026-64286](https://patchblox.com/security/data/cve/CVE-2026-64286.md) | High | KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU | 8.2 | 0.0018 | | | [CVE-2026-68461](https://patchblox.com/security/data/cve/CVE-2026-68461.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields... | 7.8 | 0.0018 | | | [CVE-2026-64473](https://patchblox.com/security/data/cve/CVE-2026-64473.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing dev... | 7.0 | 0.0018 | | | [CVE-2026-64293](https://patchblox.com/security/data/cve/CVE-2026-64293.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommufd: Use sizeof(*hdr) instead of sizeof(hdr)... | 7.8 | 0.0017 | | | [CVE-2026-64588](https://patchblox.com/security/data/cve/CVE-2026-64588.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix data races on ring->ready On we... | 7.8 | 0.0017 | | | [CVE-2026-64265](https://patchblox.com/security/data/cve/CVE-2026-64265.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_r... | 7.8 | 0.0017 | | | [CVE-2026-64317](https://patchblox.com/security/data/cve/CVE-2026-64317.md) | High | isofs: bound Rock Ridge symlink components to the SL record | 7.1 | 0.0017 | | | [CVE-2026-64604](https://patchblox.com/security/data/cve/CVE-2026-64604.md) | High | KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode | 8.4 | 0.0017 | | | [CVE-2026-53402](https://patchblox.com/security/data/cve/CVE-2026-53402.md) | High | fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | 7.1 | 0.0017 | | | [CVE-2026-64271](https://patchblox.com/security/data/cve/CVE-2026-64271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on ever... | 7.8 | 0.0017 | | | [CVE-2026-64296](https://patchblox.com/security/data/cve/CVE-2026-64296.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_e... | 7.8 | 0.0017 | | | [CVE-2026-64322](https://patchblox.com/security/data/cve/CVE-2026-64322.md) | High | udf: validate sparing table length as an entry count, not a byte count | 7.8 | 0.0017 | | | [CVE-2026-64259](https://patchblox.com/security/data/cve/CVE-2026-64259.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fuse-uring: make a fuse_req on SQE commit only f... | 7.8 | 0.0017 | | | [CVE-2026-64261](https://patchblox.com/security/data/cve/CVE-2026-64261.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid use-after-free in fuse_uring_a... | 7.8 | 0.0017 | | | [CVE-2026-64593](https://patchblox.com/security/data/cve/CVE-2026-64593.md) | High | btrfs: do not trim a device which is not writeable | 9.8 | 0.0017 | | | [CVE-2026-64299](https://patchblox.com/security/data/cve/CVE-2026-64299.md) | High | tracing: Prevent out-of-bounds read in glob matching | 7.1 | 0.0017 | | | [CVE-2026-64323](https://patchblox.com/security/data/cve/CVE-2026-64323.md) | High | udf: validate VAT header length against the VAT inode size | 7.1 | 0.0017 | | | [CVE-2026-64556](https://patchblox.com/security/data/cve/CVE-2026-64556.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_... | 8.8 | 0.0016 | | | [CVE-2026-64324](https://patchblox.com/security/data/cve/CVE-2026-64324.md) | High | udf: validate free block extents against the partition length | 7.8 | 0.0016 | | | [CVE-2026-64294](https://patchblox.com/security/data/cve/CVE-2026-64294.md) | High | mm: do file ownership checks with the proper mount idmap | 7.1 | 0.0016 | | | [CVE-2026-64306](https://patchblox.com/security/data/cve/CVE-2026-64306.md) | High | crypto: drbg - Fix returning success on failure in CTR_DRBG | 7.0 | 0.0016 | | | [CVE-2026-64589](https://patchblox.com/security/data/cve/CVE-2026-64589.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registratio... | n/a | 0.0016 | | | [CVE-2026-64603](https://patchblox.com/security/data/cve/CVE-2026-64603.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify han... | n/a | 0.0016 | | | [CVE-2026-68086](https://patchblox.com/security/data/cve/CVE-2026-68086.md) | High | mm/khugepaged: write all dirty file folios when collapsing | 8.8 | 0.0015 | | | [CVE-2026-64456](https://patchblox.com/security/data/cve/CVE-2026-64456.md) | High | hwrng: virtio: clamp device-reported used.len at copy_data() | 8.4 | 0.0015 | | | [CVE-2026-64298](https://patchblox.com/security/data/cve/CVE-2026-64298.md) | High | NFSv4: include MAY_WRITE in open permission mask for O_TRUNC | 8.8 | 0.0015 | | | [CVE-2026-64460](https://patchblox.com/security/data/cve/CVE-2026-64460.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Skip VF Resizable BAR restore on read e... | 7.0 | 0.0014 | | | [CVE-2026-64475](https://patchblox.com/security/data/cve/CVE-2026-64475.md) | High | vfio/pci: Release the VGA arbiter client on register_device() failure | 8.8 | 0.0014 | | | [CVE-2026-64422](https://patchblox.com/security/data/cve/CVE-2026-64422.md) | High | net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes | 7.1 | 0.0014 | | | [CVE-2026-64432](https://patchblox.com/security/data/cve/CVE-2026-64432.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in... | 7.8 | 0.0014 | | | [CVE-2026-45945](https://patchblox.com/security/data/cve/CVE-2026-45945.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix race condition during PASID entr... | 8.8 | 0.0013 | | | [CVE-2026-64260](https://patchblox.com/security/data/cve/CVE-2026-64260.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fuse-uring: Avoid queue->stopped races and set/r... | 7.8 | 0.0013 | | | [CVE-2026-64279](https://patchblox.com/security/data/cve/CVE-2026-64279.md) | High | i2c: core: fix adapter deregistration race | 7.8 | 0.0013 | | | [CVE-2026-64423](https://patchblox.com/security/data/cve/CVE-2026-64423.md) | High | ipv4: igmp: remove multicast group from hash table on device destruction | 7.8 | 0.0013 | | | [CVE-2026-64284](https://patchblox.com/security/data/cve/CVE-2026-64284.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor's exit handler runs befo... | 7.1 | 0.0013 | | | [CVE-2026-64411](https://patchblox.com/security/data/cve/CVE-2026-64411.md) | High | netfilter: ebtables: terminate table name before find_table_lock() | 7.1 | 0.0013 | | | [CVE-2026-64412](https://patchblox.com/security/data/cve/CVE-2026-64412.md) | High | netfilter: ebtables: module names must be null-terminated | 7.1 | 0.0013 | | | [CVE-2026-64348](https://patchblox.com/security/data/cve/CVE-2026-64348.md) | High | usb: free iso schedules on failed submit | 7.8 | 0.0013 | | | [CVE-2026-64354](https://patchblox.com/security/data/cve/CVE-2026-64354.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before e... | 7.8 | 0.0013 | | | [CVE-2026-64381](https://patchblox.com/security/data/cve/CVE-2026-64381.md) | High | smb: client: Fix next buffer leak in receive_encrypted_standard() | 7.8 | 0.0013 | | | [CVE-2026-64436](https://patchblox.com/security/data/cve/CVE-2026-64436.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_key_len for IPComp s... | 7.1 | 0.0013 | | | [CVE-2026-64413](https://patchblox.com/security/data/cve/CVE-2026-64413.md) | High | netfilter: ebtables: zero chainstack array | 7.0 | 0.0013 | | | [CVE-2026-64266](https://patchblox.com/security/data/cve/CVE-2026-64266.md) | High | fuse: re-lock request before returning from fuse_ref_folio() | 7.8 | 0.0013 | | | [CVE-2026-64189](https://patchblox.com/security/data/cve/CVE-2026-64189.md) | High | netfilter: ipset: fix race between dump and ip_set_list resize | 8.8 | 0.0013 | | | [CVE-2026-64372](https://patchblox.com/security/data/cve/CVE-2026-64372.md) | High | cpufreq: pcc: fix use-after-free and double free in _OSC evaluation | 7.8 | 0.0013 | | | [CVE-2026-64401](https://patchblox.com/security/data/cve/CVE-2026-64401.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registra... | 7.8 | 0.0013 | | | [CVE-2026-53027](https://patchblox.com/security/data/cve/CVE-2026-53027.md) | High | fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() | 7.1 | 0.0012 | | | [CVE-2026-64378](https://patchblox.com/security/data/cve/CVE-2026-64378.md) | High | writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() | 8.8 | 0.0010 | | | [CVE-2026-64418](https://patchblox.com/security/data/cve/CVE-2026-64418.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_info teardown race wi... | 8.8 | 0.0010 | | | [CVE-2026-68092](https://patchblox.com/security/data/cve/CVE-2026-68092.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource befor... | 5.5 | 0.0021 | | | [CVE-2026-64465](https://patchblox.com/security/data/cve/CVE-2026-64465.md) | Routine | usb: xhci: Fix sleep in atomic context in xhci_free_streams() | 5.5 | 0.0018 | | | [CVE-2026-64356](https://patchblox.com/security/data/cve/CVE-2026-64356.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix memory leak in xfs_dqinode_metadir_crea... | 5.5 | 0.0018 | | | [CVE-2026-64458](https://patchblox.com/security/data/cve/CVE-2026-64458.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in... | 5.5 | 0.0018 | | | [CVE-2026-64476](https://patchblox.com/security/data/cve/CVE-2026-64476.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle_d3 per device When... | 5.5 | 0.0018 | | | [CVE-2026-68090](https://patchblox.com/security/data/cve/CVE-2026-68090.md) | Routine | debugobjects: Plug race against a concurrent OOM disable | 5.5 | 0.0018 | | | [CVE-2026-64474](https://patchblox.com/security/data/cve/CVE-2026-64474.md) | Routine | vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc | 5.5 | 0.0018 | | | [CVE-2026-64457](https://patchblox.com/security/data/cve/CVE-2026-64457.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: virtio_pci: fix vq info pointer lookup via wrong... | 5.5 | 0.0018 | | | [CVE-2026-64512](https://patchblox.com/security/data/cve/CVE-2026-64512.md) | Routine | ACPI: CPPC: Suppress UBSAN warning caused by field misuse | 5.5 | 0.0017 | | | [CVE-2026-64357](https://patchblox.com/security/data/cve/CVE-2026-64357.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfs_e... | 5.5 | 0.0016 | | | [CVE-2026-64258](https://patchblox.com/security/data/cve/CVE-2026-64258.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fuse-uring: remove request-less entries from ent... | 5.5 | 0.0016 | | | [CVE-2026-64262](https://patchblox.com/security/data/cve/CVE-2026-64262.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fuse-uring: end fuse_req on io-uring cancel task... | 5.5 | 0.0016 | | | [CVE-2026-64263](https://patchblox.com/security/data/cve/CVE-2026-64263.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix moving cancelled entry to ent_in... | 5.5 | 0.0016 | | | [CVE-2026-64264](https://patchblox.com/security/data/cve/CVE-2026-64264.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix EFAULT clobber in fuse_uring_com... | 5.5 | 0.0016 | | | [CVE-2026-64267](https://patchblox.com/security/data/cve/CVE-2026-64267.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fuse: avoid 32-bit prune notification count wrap... | 5.5 | 0.0016 | | | [CVE-2026-64288](https://patchblox.com/security/data/cve/CVE-2026-64288.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Avoid dereferencing NULL VNCR ps... | 5.5 | 0.0016 | | | [CVE-2026-64291](https://patchblox.com/security/data/cve/CVE-2026-64291.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: iommufd: Set veventq_depth upper bound iommufd_... | 5.5 | 0.0016 | | | [CVE-2026-64295](https://patchblox.com/security/data/cve/CVE-2026-64295.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm: page_ext: add count limit to page_ext_iter_n... | 5.5 | 0.0016 | | | [CVE-2026-64314](https://patchblox.com/security/data/cve/CVE-2026-64314.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: chacha20poly1305 - validate poly1305 tem... | 5.5 | 0.0016 | | | [CVE-2026-64426](https://patchblox.com/security/data/cve/CVE-2026-64426.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/nop: fix file reference leak with IOSQE... | 5.5 | 0.0016 | | | [CVE-2026-64256](https://patchblox.com/security/data/cve/CVE-2026-64256.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xfs: don't wrap around quota ids in dqiterate L... | 5.5 | 0.0016 | | | [CVE-2026-64289](https://patchblox.com/security/data/cve/CVE-2026-64289.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: iommufd: Set upper bounds on cache invalidation... | 5.5 | 0.0016 | | | [CVE-2026-64326](https://patchblox.com/security/data/cve/CVE-2026-64326.md) | Routine | block: skip sync_blockdev() on surprise removal in bdev_mark_dead() | 5.5 | 0.0016 | | | [CVE-2026-64370](https://patchblox.com/security/data/cve/CVE-2026-64370.md) | Routine | posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path | 5.5 | 0.0013 | | | [CVE-2026-64425](https://patchblox.com/security/data/cve/CVE-2026-64425.md) | Routine | io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item | 5.5 | 0.0013 | | | [CVE-2026-64205](https://patchblox.com/security/data/cve/CVE-2026-64205.md) | Routine | i2c: i801: fix hardware state machine corruption in error path | 5.5 | 0.0013 | | | [CVE-2026-64376](https://patchblox.com/security/data/cve/CVE-2026-64376.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: firmware_loader: fix device reference leak in fi... | 5.5 | 0.0012 | | | [CVE-2026-64419](https://patchblox.com/security/data/cve/CVE-2026-64419.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: do not hold RCU lock in shrinker_de... | 5.5 | 0.0012 | | | [CVE-2026-64416](https://patchblox.com/security/data/cve/CVE-2026-64416.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm: swap_cgroup: fix NULL deref in lookup_swap_c... | 5.5 | 0.0012 | | | [CVE-2026-64187](https://patchblox.com/security/data/cve/CVE-2026-64187.md) | Routine | xfs: fail recovery on a committed log item with no regions | 5.5 | 0.0011 | | | [CVE-2026-64282](https://patchblox.com/security/data/cve/CVE-2026-64282.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't leak PFN when kvm_translate_vn... | 4.7 | 0.0011 | | | [CVE-2026-64415](https://patchblox.com/security/data/cve/CVE-2026-64415.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() in swap_reclaim_full... | 5.5 | 0.0009 | | | [CVE-2026-64373](https://patchblox.com/security/data/cve/CVE-2026-64373.md) | Routine | cpufreq: Fix hotplug-suspend race during reboot | 5.5 | 0.0009 | | --- Data as of 2026-11-10T07:50:38Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.