{ "fix": "ALAS2023-2026-2057", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2057", "summary": "ALAS2023-2026-2057, released August 17, 2026, fixes 315 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 18 packages", "released": "2026-08-17T09:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-72194, rated Critical", "supported": true, "cveCount": 315, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00798, "maxCvss": 10, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-2057.html", "appliesTo": [ { "product": "bpftool6.12", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "bpftool6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.12.100-125.179", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.100-125.179", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel6.12", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "kernel6.12-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "kernel6.12-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "kernel6.12-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "kernel6.12-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "kernel6.12-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "kernel6.12-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "kernel6.12-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "perf6.12", "productUrl": "https://patchblox.com/security/product/linux/perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "perf6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "python3-perf6.12", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true }, { "product": "python3-perf6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.100-125.179.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-72194", "url": "https://patchblox.com/security/cve/CVE-2026-72194", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add depth limit to indx_find_buffer to...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00798, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80630", "url": "https://patchblox.com/security/cve/CVE-2026-80630", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00755, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72084", "url": "https://patchblox.com/security/cve/CVE-2026-72084", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72319", "url": "https://patchblox.com/security/cve/CVE-2026-72319", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72351", "url": "https://patchblox.com/security/cve/CVE-2026-72351", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72192", "url": "https://patchblox.com/security/cve/CVE-2026-72192", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound to_move in indx_insert_into_root be...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72466", "url": "https://patchblox.com/security/cve/CVE-2026-72466", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72296", "url": "https://patchblox.com/security/cve/CVE-2026-72296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00735, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72322", "url": "https://patchblox.com/security/cve/CVE-2026-72322", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed wo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72323", "url": "https://patchblox.com/security/cve/CVE-2026-72323", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72014", "url": "https://patchblox.com/security/cve/CVE-2026-72014", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range p...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00723, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68476", "url": "https://patchblox.com/security/cve/CVE-2026-68476", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68477", "url": "https://patchblox.com/security/cve/CVE-2026-68477", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72020", "url": "https://patchblox.com/security/cve/CVE-2026-72020", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72041", "url": "https://patchblox.com/security/cve/CVE-2026-72041", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: espintcp: use sk_msg_free_partial to fix partial...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72251", "url": "https://patchblox.com/security/cve/CVE-2026-72251", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74267", "url": "https://patchblox.com/security/cve/CVE-2026-74267", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_red...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72436", "url": "https://patchblox.com/security/cve/CVE-2026-72436", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don\u0027t use test_bit() in lockle...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00712, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72191", "url": "https://patchblox.com/security/cve/CVE-2026-72191", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx_inser...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72451", "url": "https://patchblox.com/security/cve/CVE-2026-72451", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The x...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00671, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72317", "url": "https://patchblox.com/security/cve/CVE-2026-72317", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connec...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00644, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72217", "url": "https://patchblox.com/security/cve/CVE-2026-72217", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores bef...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72221", "url": "https://patchblox.com/security/cve/CVE-2026-72221", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callbac...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72222", "url": "https://patchblox.com/security/cve/CVE-2026-72222", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72348", "url": "https://patchblox.com/security/cve/CVE-2026-72348", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extens...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00626, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80603", "url": "https://patchblox.com/security/cve/CVE-2026-80603", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00595, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72318", "url": "https://patchblox.com/security/cve/CVE-2026-72318", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets pars...", "priority": "Urgent", "severity": "critical", "cvss": 9.4, "epss": 0.00586, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80637", "url": "https://patchblox.com/security/cve/CVE-2026-80637", "title": "netfilter: synproxy: fix unaligned memory access in timestamp adjustment", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00585, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72421", "url": "https://patchblox.com/security/cve/CVE-2026-72421", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don\u0027t ignore error route in local/mai...", "priority": "Urgent", "severity": "critical", "cvss": 10, "epss": 0.00571, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74384", "url": "https://patchblox.com/security/cve/CVE-2026-74384", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nv...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74398", "url": "https://patchblox.com/security/cve/CVE-2026-74398", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad_failure when sta...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74406", "url": "https://patchblox.com/security/cve/CVE-2026-74406", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64551", "url": "https://patchblox.com/security/cve/CVE-2026-64551", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74287", "url": "https://patchblox.com/security/cve/CVE-2026-74287", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74376", "url": "https://patchblox.com/security/cve/CVE-2026-74376", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio f...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74255", "url": "https://patchblox.com/security/cve/CVE-2026-74255", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc_l2_send_msg() Syzbot repo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74439", "url": "https://patchblox.com/security/cve/CVE-2026-74439", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing dow...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74310", "url": "https://patchblox.com/security/cve/CVE-2026-74310", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vhost/net: complete zerocopy ubufs only once vh...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72083", "url": "https://patchblox.com/security/cve/CVE-2026-72083", "title": "kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72418", "url": "https://patchblox.com/security/cve/CVE-2026-72418", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: prevent connlimit drops...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72502", "url": "https://patchblox.com/security/cve/CVE-2026-72502", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74321", "url": "https://patchblox.com/security/cve/CVE-2026-74321", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrf...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80646", "url": "https://patchblox.com/security/cve/CVE-2026-80646", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72242", "url": "https://patchblox.com/security/cve/CVE-2026-72242", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72247", "url": "https://patchblox.com/security/cve/CVE-2026-72247", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74282", "url": "https://patchblox.com/security/cve/CVE-2026-74282", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74281", "url": "https://patchblox.com/security/cve/CVE-2026-74281", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer b...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0068, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64530", "url": "https://patchblox.com/security/cve/CVE-2026-64530", "title": "net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00655, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72472", "url": "https://patchblox.com/security/cve/CVE-2026-72472", "title": "nfs: use nfsi-\u003Erwsem to protect traversal of the file lock list", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00652, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72420", "url": "https://patchblox.com/security/cve/CVE-2026-72420", "title": "md/raid5: avoid R5_Overlap races while breaking stripe batches", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00648, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72310", "url": "https://patchblox.com/security/cve/CVE-2026-72310", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl b...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00643, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72356", "url": "https://patchblox.com/security/cve/CVE-2026-72356", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in c...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0063, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74316", "url": "https://patchblox.com/security/cve/CVE-2026-74316", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4_drop_revoked_s...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0063, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72330", "url": "https://patchblox.com/security/cve/CVE-2026-72330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_re...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00622, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72021", "url": "https://patchblox.com/security/cve/CVE-2026-72021", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72035", "url": "https://patchblox.com/security/cve/CVE-2026-72035", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: Replace direct dequeue ca...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72057", "url": "https://patchblox.com/security/cve/CVE-2026-72057", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across def...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00585, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64545", "url": "https://patchblox.com/security/cve/CVE-2026-64545", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_re...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72320", "url": "https://patchblox.com/security/cve/CVE-2026-72320", "title": "netfilter: nft_lookup: fix catchall element handling with inverted lookups", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00569, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72099", "url": "https://patchblox.com/security/cve/CVE-2026-72099", "title": "kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00546, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64450", "url": "https://patchblox.com/security/cve/CVE-2026-64450", "title": "tipc: fix out-of-bounds read in broadcast Gap ACK blocks", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53392", "url": "https://patchblox.com/security/cve/CVE-2026-53392", "title": "NFSv4/flexfiles: reject zero filehandle version count", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00529, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64355", "url": "https://patchblox.com/security/cve/CVE-2026-64355", "title": "bpf: Reject fragmented frames in devmap", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64560", "url": "https://patchblox.com/security/cve/CVE-2026-64560", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-lead...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00503, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64312", "url": "https://patchblox.com/security/cve/CVE-2026-64312", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72100", "url": "https://patchblox.com/security/cve/CVE-2026-72100", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of lim...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00464, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64448", "url": "https://patchblox.com/security/cve/CVE-2026-64448", "title": "smb: client: restrict implied bcc[0] exemption to responses without data area", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64383", "url": "https://patchblox.com/security/cve/CVE-2026-64383", "title": "smb: client: fix double-free in SMB2_flush() replay", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64384", "url": "https://patchblox.com/security/cve/CVE-2026-64384", "title": "smb: client: fix change notify replay double-free", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64385", "url": "https://patchblox.com/security/cve/CVE-2026-64385", "title": "smb: client: fix double-free in SMB2_ioctl() replay", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64386", "url": "https://patchblox.com/security/cve/CVE-2026-64386", "title": "smb: client: fix query_info() replay double-free", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64387", "url": "https://patchblox.com/security/cve/CVE-2026-64387", "title": "smb: client: fix query directory replay double-free", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64380", "url": "https://patchblox.com/security/cve/CVE-2026-64380", "title": "smb: client: harden POSIX SID length parsing", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64414", "url": "https://patchblox.com/security/cve/CVE-2026-64414", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko repo...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64368", "url": "https://patchblox.com/security/cve/CVE-2026-64368", "title": "mm/slab: do not limit zeroing to orig_size when only red zoning is enabled", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00417, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80604", "url": "https://patchblox.com/security/cve/CVE-2026-80604", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_get_report for nu...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64374", "url": "https://patchblox.com/security/cve/CVE-2026-64374", "title": "sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64597", "url": "https://patchblox.com/security/cve/CVE-2026-64597", "title": "smb: client: fix double-free in SMB2_close() replay", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00359, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64313", "url": "https://patchblox.com/security/cve/CVE-2026-64313", "title": "crypto: ecc - Fix carry overflow in vli multiplication", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64364", "url": "https://patchblox.com/security/cve/CVE-2026-64364", "title": "HID: multitouch: fix out-of-bounds bit access on mt_io_flags", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64382", "url": "https://patchblox.com/security/cve/CVE-2026-64382", "title": "smb: client: fix double-free in SMB2_open() replay", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64435", "url": "https://patchblox.com/security/cve/CVE-2026-64435", "title": "audit: Fix data races of skb_queue_len() readers on audit_queue", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00331, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72227", "url": "https://patchblox.com/security/cve/CVE-2026-72227", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num_dests h...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00331, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64024", "url": "https://patchblox.com/security/cve/CVE-2026-64024", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.4, "epss": 0.00308, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64598", "url": "https://patchblox.com/security/cve/CVE-2026-64598", "title": "smb/client: Fix error code in smb2_aead_req_alloc()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64561", "url": "https://patchblox.com/security/cve/CVE-2026-64561", "title": "KVM: x86: Check for invalid/obsolete root *after* making MMU pages available", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00273, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72108", "url": "https://patchblox.com/security/cve/CVE-2026-72108", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consiste...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74356", "url": "https://patchblox.com/security/cve/CVE-2026-74356", "title": "vhost: fix vhost_get_avail_idx for a non empty ring", "priority": "High", "severity": "Moderate", "cvss": 7.4, "epss": 0.00247, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64507", "url": "https://patchblox.com/security/cve/CVE-2026-64507", "title": "x86/bugs: Enable IBPB flush on BPF JIT allocation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80867", "url": "https://patchblox.com/security/cve/CVE-2026-80867", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: alpha/PCI: Add security_locked_down() check to p...", "priority": "High", "severity": "important", "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80875", "url": "https://patchblox.com/security/cve/CVE-2026-80875", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state l...", "priority": "High", "severity": "important", "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80876", "url": "https://patchblox.com/security/cve/CVE-2026-80876", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix event length with forced 8-byte...", "priority": "High", "severity": "important", "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72218", "url": "https://patchblox.com/security/cve/CVE-2026-72218", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file refcount leak on cached nlm...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72219", "url": "https://patchblox.com/security/cve/CVE-2026-72219", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fa...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74271", "url": "https://patchblox.com/security/cve/CVE-2026-74271", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix supplied_from allocatio...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72097", "url": "https://patchblox.com/security/cve/CVE-2026-72097", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereferen...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72193", "url": "https://patchblox.com/security/cve/CVE-2026-72193", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: cap RESTART_TABLE free-chain walker at rt...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72274", "url": "https://patchblox.com/security/cve/CVE-2026-72274", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: hecubafb: fix potential memory leak in he...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72275", "url": "https://patchblox.com/security/cve/CVE-2026-72275", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: broadsheetfb: fix potential memory leak i...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72276", "url": "https://patchblox.com/security/cve/CVE-2026-72276", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: metronomefb: fix potential memory leak in...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72290", "url": "https://patchblox.com/security/cve/CVE-2026-72290", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix GISC refcount leak on AIF en...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80602", "url": "https://patchblox.com/security/cve/CVE-2026-80602", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80620", "url": "https://patchblox.com/security/cve/CVE-2026-80620", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Revert \u0022PCI/MSI: Unmap MSI-X region on error\u0022 T...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80669", "url": "https://patchblox.com/security/cve/CVE-2026-80669", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrm_decode_session hook attachment...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80636", "url": "https://patchblox.com/security/cve/CVE-2026-80636", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid...", "priority": "High", "severity": "important", "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80667", "url": "https://patchblox.com/security/cve/CVE-2026-80667", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete() on...", "priority": "High", "severity": "important", "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53365", "url": "https://patchblox.com/security/cve/CVE-2026-53365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-...", "priority": "High", "severity": "medium", "cvss": 8.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72151", "url": "https://patchblox.com/security/cve/CVE-2026-72151", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completio...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72342", "url": "https://patchblox.com/security/cve/CVE-2026-72342", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72343", "url": "https://patchblox.com/security/cve/CVE-2026-72343", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer a...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72478", "url": "https://patchblox.com/security/cve/CVE-2026-72478", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add bounds check to run_get_highest_vc...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72284", "url": "https://patchblox.com/security/cve/CVE-2026-72284", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64508", "url": "https://patchblox.com/security/cve/CVE-2026-64508", "title": "bpf: Support for hardening against JIT spraying", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72280", "url": "https://patchblox.com/security/cve/CVE-2026-72280", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72289", "url": "https://patchblox.com/security/cve/CVE-2026-72289", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72196", "url": "https://patchblox.com/security/cve/CVE-2026-72196", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp-\u003Epage_lcns[] index...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72197", "url": "https://patchblox.com/security/cve/CVE-2026-72197", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation memmo...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74256", "url": "https://patchblox.com/security/cve/CVE-2026-74256", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_po...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74262", "url": "https://patchblox.com/security/cve/CVE-2026-74262", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITE_ONCE() when changing lower socket...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72487", "url": "https://patchblox.com/security/cve/CVE-2026-72487", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr be...", "priority": "High", "severity": "high", "cvss": 7.7, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72425", "url": "https://patchblox.com/security/cve/CVE-2026-72425", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_rese...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72066", "url": "https://patchblox.com/security/cve/CVE-2026-72066", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72067", "url": "https://patchblox.com/security/cve/CVE-2026-72067", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback err...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72225", "url": "https://patchblox.com/security/cve/CVE-2026-72225", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2_journal_init...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64514", "url": "https://patchblox.com/security/cve/CVE-2026-64514", "title": "userfaultfd: gate must_wait writability check on pte_present()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63970", "url": "https://patchblox.com/security/cve/CVE-2026-63970", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72255", "url": "https://patchblox.com/security/cve/CVE-2026-72255", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74380", "url": "https://patchblox.com/security/cve/CVE-2026-74380", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return valu...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64286", "url": "https://patchblox.com/security/cve/CVE-2026-64286", "title": "KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64287", "url": "https://patchblox.com/security/cve/CVE-2026-64287", "title": "KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68461", "url": "https://patchblox.com/security/cve/CVE-2026-68461", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72282", "url": "https://patchblox.com/security/cve/CVE-2026-72282", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsib...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72350", "url": "https://patchblox.com/security/cve/CVE-2026-72350", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72400", "url": "https://patchblox.com/security/cve/CVE-2026-72400", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed f...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72419", "url": "https://patchblox.com/security/cve/CVE-2026-72419", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: avoid invalid nat_net pointer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72470", "url": "https://patchblox.com/security/cve/CVE-2026-72470", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log-\u003Eone_page_buf when adopting...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74296", "url": "https://patchblox.com/security/cve/CVE-2026-74296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW\u2011provided UAR index rat...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74297", "url": "https://patchblox.com/security/cve/CVE-2026-74297", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE si...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74305", "url": "https://patchblox.com/security/cve/CVE-2026-74305", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for pr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74417", "url": "https://patchblox.com/security/cve/CVE-2026-74417", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeon_align...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80598", "url": "https://patchblox.com/security/cve/CVE-2026-80598", "title": "ntfs3: fix out-of-bounds read in decompress_lznt", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80677", "url": "https://patchblox.com/security/cve/CVE-2026-80677", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: driver core: use READ_ONCE() for dev-\u003Edriver in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72286", "url": "https://patchblox.com/security/cve/CVE-2026-72286", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirr...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72027", "url": "https://patchblox.com/security/cve/CVE-2026-72027", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle free_pages_prepare() prope...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72034", "url": "https://patchblox.com/security/cve/CVE-2026-72034", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fhandle: reject detached mounts in capable_wrt_m...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72352", "url": "https://patchblox.com/security/cve/CVE-2026-72352", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix hid_bpf_get_data() range check hi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72452", "url": "https://patchblox.com/security/cve/CVE-2026-72452", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after d...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72390", "url": "https://patchblox.com/security/cve/CVE-2026-72390", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: Introduce slaves_lock to av...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72347", "url": "https://patchblox.com/security/cve/CVE-2026-72347", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift par...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72416", "url": "https://patchblox.com/security/cve/CVE-2026-72416", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_compat: ebtables emulation must r...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74346", "url": "https://patchblox.com/security/cve/CVE-2026-74346", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registrati...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64265", "url": "https://patchblox.com/security/cve/CVE-2026-64265", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72072", "url": "https://patchblox.com/security/cve/CVE-2026-72072", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadat...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64317", "url": "https://patchblox.com/security/cve/CVE-2026-64317", "title": "isofs: bound Rock Ridge symlink components to the SL record", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64604", "url": "https://patchblox.com/security/cve/CVE-2026-64604", "title": "KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72476", "url": "https://patchblox.com/security/cve/CVE-2026-72476", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma_r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53402", "url": "https://patchblox.com/security/cve/CVE-2026-53402", "title": "fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72364", "url": "https://patchblox.com/security/cve/CVE-2026-72364", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writeback error handling Fix the err...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72071", "url": "https://patchblox.com/security/cve/CVE-2026-72071", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Fix use-after-free in user_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72427", "url": "https://patchblox.com/security/cve/CVE-2026-72427", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF_F_P...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74283", "url": "https://patchblox.com/security/cve/CVE-2026-74283", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ntipc: require net admin for TIPCv2 netlink mutato...", "priority": "High", "severity": "moderate", "cvss": 9.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72102", "url": "https://patchblox.com/security/cve/CVE-2026-72102", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_re...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72136", "url": "https://patchblox.com/security/cve/CVE-2026-72136", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in t...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64296", "url": "https://patchblox.com/security/cve/CVE-2026-64296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_e...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64322", "url": "https://patchblox.com/security/cve/CVE-2026-64322", "title": "udf: validate sparing table length as an entry count, not a byte count", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72036", "url": "https://patchblox.com/security/cve/CVE-2026-72036", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue ca...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72105", "url": "https://patchblox.com/security/cve/CVE-2026-72105", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit mach...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72110", "url": "https://patchblox.com/security/cve/CVE-2026-72110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe -\u003Ebpf_storage before bailouts tha...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72120", "url": "https://patchblox.com/security/cve/CVE-2026-72120", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu list annotations and o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72123", "url": "https://patchblox.com/security/cve/CVE-2026-72123", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ncan: bcm: defer rx_op deallocation to workqueue t...", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72135", "url": "https://patchblox.com/security/cve/CVE-2026-72135", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72172", "url": "https://patchblox.com/security/cve/CVE-2026-72172", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for Z...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72195", "url": "https://patchblox.com/security/cve/CVE-2026-72195", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attr_off in UpdateResidentValue...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72250", "url": "https://patchblox.com/security/cve/CVE-2026-72250", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_reasm: guard mac_header...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72252", "url": "https://patchblox.com/security/cve/CVE-2026-72252", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: don\u0027t leak bad clone...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72435", "url": "https://patchblox.com/security/cve/CVE-2026-72435", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72450", "url": "https://patchblox.com/security/cve/CVE-2026-72450", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen dur...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72434", "url": "https://patchblox.com/security/cve/CVE-2026-72434", "title": "netfilter: ipset: make sure gc is properly stopped", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74286", "url": "https://patchblox.com/security/cve/CVE-2026-74286", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: pfcp: allocate per-cpu tstats for PFCP netd...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72338", "url": "https://patchblox.com/security/cve/CVE-2026-72338", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_pedit: fix TOCTOU heap OOB write...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72243", "url": "https://patchblox.com/security/cve/CVE-2026-72243", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TC...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64593", "url": "https://patchblox.com/security/cve/CVE-2026-64593", "title": "btrfs: do not trim a device which is not writeable", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64299", "url": "https://patchblox.com/security/cve/CVE-2026-64299", "title": "tracing: Prevent out-of-bounds read in glob matching", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64323", "url": "https://patchblox.com/security/cve/CVE-2026-64323", "title": "udf: validate VAT header length against the VAT inode size", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72389", "url": "https://patchblox.com/security/cve/CVE-2026-72389", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bridge: stp: Fix a potential use-after-free when...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72122", "url": "https://patchblox.com/security/cve/CVE-2026-72122", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix lockless bound/ifindex race and si...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64556", "url": "https://patchblox.com/security/cve/CVE-2026-64556", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64227", "url": "https://patchblox.com/security/cve/CVE-2026-64227", "title": "ACPI: driver: Check ACPI_COMPANION() against NULL during probe", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64324", "url": "https://patchblox.com/security/cve/CVE-2026-64324", "title": "udf: validate free block extents against the partition length", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80865", "url": "https://patchblox.com/security/cve/CVE-2026-80865", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Add missing access_ok call to copy_user_sym...", "priority": "High", "severity": "important", "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80880", "url": "https://patchblox.com/security/cve/CVE-2026-80880", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP rereg_mr...", "priority": "High", "severity": "important", "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64294", "url": "https://patchblox.com/security/cve/CVE-2026-64294", "title": "mm: do file ownership checks with the proper mount idmap", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64306", "url": "https://patchblox.com/security/cve/CVE-2026-64306", "title": "crypto: drbg - Fix returning success on failure in CTR_DRBG", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72061", "url": "https://patchblox.com/security/cve/CVE-2026-72061", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAP_NET_ADMIN in the device ne...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64589", "url": "https://patchblox.com/security/cve/CVE-2026-64589", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registratio...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72052", "url": "https://patchblox.com/security/cve/CVE-2026-72052", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the devic...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72053", "url": "https://patchblox.com/security/cve/CVE-2026-72053", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAP_NET_ADMIN in the device n...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72054", "url": "https://patchblox.com/security/cve/CVE-2026-72054", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip_vti: require CAP_NET_ADMIN in the device...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72055", "url": "https://patchblox.com/security/cve/CVE-2026-72055", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the devic...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68086", "url": "https://patchblox.com/security/cve/CVE-2026-68086", "title": "mm/khugepaged: write all dirty file folios when collapsing", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64456", "url": "https://patchblox.com/security/cve/CVE-2026-64456", "title": "hwrng: virtio: clamp device-reported used.len at copy_data()", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64298", "url": "https://patchblox.com/security/cve/CVE-2026-64298", "title": "NFSv4: include MAY_WRITE in open permission mask for O_TRUNC", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74578", "url": "https://patchblox.com/security/cve/CVE-2026-74578", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force synchronous proce...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64548", "url": "https://patchblox.com/security/cve/CVE-2026-64548", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy \u002B len in b...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64552", "url": "https://patchblox.com/security/cve/CVE-2026-64552", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() rece...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64533", "url": "https://patchblox.com/security/cve/CVE-2026-64533", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay con...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64475", "url": "https://patchblox.com/security/cve/CVE-2026-64475", "title": "vfio/pci: Release the VGA arbiter client on register_device() failure", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64422", "url": "https://patchblox.com/security/cve/CVE-2026-64422", "title": "net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64077", "url": "https://patchblox.com/security/cve/CVE-2026-64077", "title": "netfilter: ebtables: move to two-stage removal scheme", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53005", "url": "https://patchblox.com/security/cve/CVE-2026-53005", "title": "af_unix: Drop all SCM attributes for SOCKMAP.", "priority": "High", "severity": "Important", "cvss": 8.3, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64432", "url": "https://patchblox.com/security/cve/CVE-2026-64432", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72405", "url": "https://patchblox.com/security/cve/CVE-2026-72405", "title": "net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64279", "url": "https://patchblox.com/security/cve/CVE-2026-64279", "title": "i2c: core: fix adapter deregistration race", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64532", "url": "https://patchblox.com/security/cve/CVE-2026-64532", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateR...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64423", "url": "https://patchblox.com/security/cve/CVE-2026-64423", "title": "ipv4: igmp: remove multicast group from hash table on device destruction", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74365", "url": "https://patchblox.com/security/cve/CVE-2026-74365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Handle preemption in BTT lane acquis...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64284", "url": "https://patchblox.com/security/cve/CVE-2026-64284", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor\u0027s exit handler runs befo...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64411", "url": "https://patchblox.com/security/cve/CVE-2026-64411", "title": "netfilter: ebtables: terminate table name before find_table_lock()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64412", "url": "https://patchblox.com/security/cve/CVE-2026-64412", "title": "netfilter: ebtables: module names must be null-terminated", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72012", "url": "https://patchblox.com/security/cve/CVE-2026-72012", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronize_rcu() when unr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68454", "url": "https://patchblox.com/security/cve/CVE-2026-68454", "title": "KVM: s390: pci: Fix handling of AIF enable without AISB", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74397", "url": "https://patchblox.com/security/cve/CVE-2026-74397", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64546", "url": "https://patchblox.com/security/cve/CVE-2026-64546", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block(...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64555", "url": "https://patchblox.com/security/cve/CVE-2026-64555", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46093", "url": "https://patchblox.com/security/cve/CVE-2026-46093", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker de...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64352", "url": "https://patchblox.com/security/cve/CVE-2026-64352", "title": "bpf: Allow LPM map access from sleepable BPF programs", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64354", "url": "https://patchblox.com/security/cve/CVE-2026-64354", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before e...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64381", "url": "https://patchblox.com/security/cve/CVE-2026-64381", "title": "smb: client: Fix next buffer leak in receive_encrypted_standard()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72444", "url": "https://patchblox.com/security/cve/CVE-2026-72444", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: flow_dissector: check device type before reading...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74270", "url": "https://patchblox.com/security/cve/CVE-2026-74270", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: handshake: Require admin permission for DONE com...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74288", "url": "https://patchblox.com/security/cve/CVE-2026-74288", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don\u0027t dump dying fib_rule in fib...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74330", "url": "https://patchblox.com/security/cve/CVE-2026-74330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -\u003Es_childre...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80613", "url": "https://patchblox.com/security/cve/CVE-2026-80613", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path Du...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64371", "url": "https://patchblox.com/security/cve/CVE-2026-64371", "title": "proc: protect ptrace_may_access() with exec_update_lock (part 1)", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64436", "url": "https://patchblox.com/security/cve/CVE-2026-64436", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_key_len for IPComp s...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64413", "url": "https://patchblox.com/security/cve/CVE-2026-64413", "title": "netfilter: ebtables: zero chainstack array", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64266", "url": "https://patchblox.com/security/cve/CVE-2026-64266", "title": "fuse: re-lock request before returning from fuse_ref_folio()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80664", "url": "https://patchblox.com/security/cve/CVE-2026-80664", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nat: reject unsupported target fam...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64189", "url": "https://patchblox.com/security/cve/CVE-2026-64189", "title": "netfilter: ipset: fix race between dump and ip_set_list resize", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64372", "url": "https://patchblox.com/security/cve/CVE-2026-64372", "title": "cpufreq: pcc: fix use-after-free and double free in _OSC evaluation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64543", "url": "https://patchblox.com/security/cve/CVE-2026-64543", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in ti...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74359", "url": "https://patchblox.com/security/cve/CVE-2026-74359", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: configfs_lookup(): don\u0027t leave -\u003Es_dentry dangli...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74363", "url": "https://patchblox.com/security/cve/CVE-2026-74363", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix UAF by restoring RCU-delayed inode free...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45944", "url": "https://patchblox.com/security/cve/CVE-2026-45944", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing dow...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53027", "url": "https://patchblox.com/security/cve/CVE-2026-53027", "title": "fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64192", "url": "https://patchblox.com/security/cve/CVE-2026-64192", "title": "bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64375", "url": "https://patchblox.com/security/cve/CVE-2026-64375", "title": "proc: protect ptrace_may_access() with exec_update_lock (FD links)", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64418", "url": "https://patchblox.com/security/cve/CVE-2026-64418", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_info teardown race wi...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74259", "url": "https://patchblox.com/security/cve/CVE-2026-74259", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: remove all cifs files before kill super C...", "priority": "High", "severity": "high", "cvss": 8.4, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74331", "url": "https://patchblox.com/security/cve/CVE-2026-74331", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix recursive lock in device_ca...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72106", "url": "https://patchblox.com/security/cve/CVE-2026-72106", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in list_versio...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72325", "url": "https://patchblox.com/security/cve/CVE-2026-72325", "title": "perf/x86/amd/core: Avoid enabling BRS from the SVM reload path", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72010", "url": "https://patchblox.com/security/cve/CVE-2026-72010", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effective_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72063", "url": "https://patchblox.com/security/cve/CVE-2026-72063", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gpio: tegra: do not call pinctrl for GPIO direct...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72068", "url": "https://patchblox.com/security/cve/CVE-2026-72068", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in upda...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72223", "url": "https://patchblox.com/security/cve/CVE-2026-72223", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discov...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72224", "url": "https://patchblox.com/security/cve/CVE-2026-72224", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on btt_init() error path...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72326", "url": "https://patchblox.com/security/cve/CVE-2026-72326", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cake: reject overhead values that und...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72349", "url": "https://patchblox.com/security/cve/CVE-2026-72349", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72447", "url": "https://patchblox.com/security/cve/CVE-2026-72447", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74395", "url": "https://patchblox.com/security/cve/CVE-2026-74395", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix devx subscribe-event unwind NULL...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72428", "url": "https://patchblox.com/security/cve/CVE-2026-72428", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks chec...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72096", "url": "https://patchblox.com/security/cve/CVE-2026-72096", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72138", "url": "https://patchblox.com/security/cve/CVE-2026-72138", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gn...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72152", "url": "https://patchblox.com/security/cve/CVE-2026-72152", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_tis_spi: Use wait_woken() in wait_for_t...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72155", "url": "https://patchblox.com/security/cve/CVE-2026-72155", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experien...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72256", "url": "https://patchblox.com/security/cve/CVE-2026-72256", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_cluster: reject template conntrack...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72392", "url": "https://patchblox.com/security/cve/CVE-2026-72392", "title": "ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72433", "url": "https://patchblox.com/security/cve/CVE-2026-72433", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIF...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74284", "url": "https://patchblox.com/security/cve/CVE-2026-74284", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: Don\u0027t make class passive tw...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72177", "url": "https://patchblox.com/security/cve/CVE-2026-72177", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in ac...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72379", "url": "https://patchblox.com/security/cve/CVE-2026-72379", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs: refuse O_TMPFILE creation with an unmapped f...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72437", "url": "https://patchblox.com/security/cve/CVE-2026-72437", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid1: free r1_bio when REQ_NOWAIT is set and...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74327", "url": "https://patchblox.com/security/cve/CVE-2026-74327", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in is_vm_a...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74329", "url": "https://patchblox.com/security/cve/CVE-2026-74329", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unr...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74399", "url": "https://patchblox.com/security/cve/CVE-2026-74399", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evm_xattrs read buf...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68092", "url": "https://patchblox.com/security/cve/CVE-2026-68092", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource befor...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72127", "url": "https://patchblox.com/security/cve/CVE-2026-72127", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netdev-genl: report NAPI thread PID in the calle...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72132", "url": "https://patchblox.com/security/cve/CVE-2026-72132", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFS: Charge unstable writes by request size, not...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72176", "url": "https://patchblox.com/security/cve/CVE-2026-72176", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: put stats for scheme_add...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72266", "url": "https://patchblox.com/security/cve/CVE-2026-72266", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: vesafb: fix memory leak in vesafb_probe()...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72273", "url": "https://patchblox.com/security/cve/CVE-2026-72273", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: fix memory leak in efifb_probe()...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74393", "url": "https://patchblox.com/security/cve/CVE-2026-74393", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: Fix memory leak in drm_syncobj_find...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80676", "url": "https://patchblox.com/security/cve/CVE-2026-80676", "title": "Drivers: hv: vmbus: use generic driver_override infrastructure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72178", "url": "https://patchblox.com/security/cve/CVE-2026-72178", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: always put unsuccessfully committ...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72174", "url": "https://patchblox.com/security/cve/CVE-2026-72174", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix hugetlb self-deadlock in p...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72212", "url": "https://patchblox.com/security/cve/CVE-2026-72212", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix incorrect altmap passing...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64538", "url": "https://patchblox.com/security/cve/CVE-2026-64538", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change()", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74382", "url": "https://patchblox.com/security/cve/CVE-2026-74382", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_bpf: prevent unbounded recursion...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64465", "url": "https://patchblox.com/security/cve/CVE-2026-64465", "title": "usb: xhci: Fix sleep in atomic context in xhci_free_streams()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64472", "url": "https://patchblox.com/security/cve/CVE-2026-64472", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64458", "url": "https://patchblox.com/security/cve/CVE-2026-64458", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64476", "url": "https://patchblox.com/security/cve/CVE-2026-64476", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle_d3 per device When...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74307", "url": "https://patchblox.com/security/cve/CVE-2026-74307", "title": "ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74318", "url": "https://patchblox.com/security/cve/CVE-2026-74318", "title": "btrfs: fix deadlock cloning inline extent when using flushoncommit", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64544", "url": "https://patchblox.com/security/cve/CVE-2026-64544", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - fix OOB read in pefile...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64553", "url": "https://patchblox.com/security/cve/CVE-2026-64553", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLE_ATTR_DATA...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68090", "url": "https://patchblox.com/security/cve/CVE-2026-68090", "title": "debugobjects: Plug race against a concurrent OOM disable", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64474", "url": "https://patchblox.com/security/cve/CVE-2026-64474", "title": "vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64457", "url": "https://patchblox.com/security/cve/CVE-2026-64457", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio_pci: fix vq info pointer lookup via wrong...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64512", "url": "https://patchblox.com/security/cve/CVE-2026-64512", "title": "ACPI: CPPC: Suppress UBSAN warning caused by field misuse", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64542", "url": "https://patchblox.com/security/cve/CVE-2026-64542", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in accept_untracked_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74290", "url": "https://patchblox.com/security/cve/CVE-2026-74290", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: Dont expose folded kernel p...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74308", "url": "https://patchblox.com/security/cve/CVE-2026-74308", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4_write_inline_data_e...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74379", "url": "https://patchblox.com/security/cve/CVE-2026-74379", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous reso...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80611", "url": "https://patchblox.com/security/cve/CVE-2026-80611", "title": "ACPI: processor_idle: Mark LPI enter functions as __cpuidle", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64357", "url": "https://patchblox.com/security/cve/CVE-2026-64357", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfs_e...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74424", "url": "https://patchblox.com/security/cve/CVE-2026-74424", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbcon: fix NULL pointer dereference for a consol...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64326", "url": "https://patchblox.com/security/cve/CVE-2026-64326", "title": "block: skip sync_blockdev() on surprise removal in bdev_mark_dead()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64370", "url": "https://patchblox.com/security/cve/CVE-2026-64370", "title": "posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64425", "url": "https://patchblox.com/security/cve/CVE-2026-64425", "title": "io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64416", "url": "https://patchblox.com/security/cve/CVE-2026-64416", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm: swap_cgroup: fix NULL deref in lookup_swap_c...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64187", "url": "https://patchblox.com/security/cve/CVE-2026-64187", "title": "xfs: fail recovery on a committed log item with no regions", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64415", "url": "https://patchblox.com/security/cve/CVE-2026-64415", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() in swap_reclaim_full...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00094, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64373", "url": "https://patchblox.com/security/cve/CVE-2026-64373", "title": "cpufreq: Fix hotplug-suspend race during reboot", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00089, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T20:03:11Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }