# ALAS2023-2026-2057: Security update for 18 packages ALAS2023-2026-2057, released August 17, 2026, fixes 315 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/alas2023-2026-2057 - Platform: Linux - Released: Aug 17, 2026 - Priority: Urgent (Closes CVE-2026-72194, rated Critical) - CVEs: 315, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-2057.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool6.12](https://patchblox.com/security/data/product/linux/bpftool6.12.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [bpftool6.12-debuginfo](https://patchblox.com/security/data/product/linux/bpftool6.12-debuginfo.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [kernel-livepatch-6.12.100-125.179](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.12.100-125.179.md) | amzn 2023 | 1:1.0-0.amzn2023 | | [kernel6.12](https://patchblox.com/security/data/product/linux/kernel6.12.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [kernel6.12-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [kernel6.12-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [kernel6.12-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel6.12-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [kernel6.12-devel](https://patchblox.com/security/data/product/linux/kernel6.12-devel.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [kernel6.12-headers](https://patchblox.com/security/data/product/linux/kernel6.12-headers.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [kernel6.12-modules-extra](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [kernel6.12-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel6.12-modules-extra-common.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [kernel6.12-tools](https://patchblox.com/security/data/product/linux/kernel6.12-tools.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [kernel6.12-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel6.12-tools-debuginfo.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [kernel6.12-tools-devel](https://patchblox.com/security/data/product/linux/kernel6.12-tools-devel.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [perf6.12](https://patchblox.com/security/data/product/linux/perf6.12.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [python3-perf6.12](https://patchblox.com/security/data/product/linux/python3-perf6.12.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | | [python3-perf6.12-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf6.12-debuginfo.md) | amzn 2023 | 1:6.12.100-125.179.amzn2023 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-72194](https://patchblox.com/security/data/cve/CVE-2026-72194.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add depth limit to indx_find_buffer to... | 9.8 | 0.0080 | | | [CVE-2026-80630](https://patchblox.com/security/data/cve/CVE-2026-80630.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_... | 9.8 | 0.0076 | | | [CVE-2026-72084](https://patchblox.com/security/data/cve/CVE-2026-72084.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t... | 9.8 | 0.0075 | | | [CVE-2026-72319](https://patchblox.com/security/data/cve/CVE-2026-72319.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in... | 9.8 | 0.0075 | | | [CVE-2026-72351](https://patchblox.com/security/data/cve/CVE-2026-72351.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE... | 9.8 | 0.0075 | | | [CVE-2026-72192](https://patchblox.com/security/data/cve/CVE-2026-72192.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound to_move in indx_insert_into_root be... | 9.8 | 0.0074 | | | [CVE-2026-72466](https://patchblox.com/security/data/cve/CVE-2026-72466.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek... | 9.8 | 0.0074 | | | [CVE-2026-72296](https://patchblox.com/security/data/cve/CVE-2026-72296.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife... | 9.1 | 0.0074 | | | [CVE-2026-72322](https://patchblox.com/security/data/cve/CVE-2026-72322.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed wo... | 9.8 | 0.0072 | | | [CVE-2026-72323](https://patchblox.com/security/data/cve/CVE-2026-72323.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t... | 9.8 | 0.0072 | | | [CVE-2026-72014](https://patchblox.com/security/data/cve/CVE-2026-72014.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range p... | 9.8 | 0.0072 | | | [CVE-2026-68476](https://patchblox.com/security/data/cve/CVE-2026-68476.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation... | 9.8 | 0.0071 | | | [CVE-2026-68477](https://patchblox.com/security/data/cve/CVE-2026-68477.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport... | 9.8 | 0.0071 | | | [CVE-2026-72020](https://patchblox.com/security/data/cve/CVE-2026-72020.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn... | 9.8 | 0.0071 | | | [CVE-2026-72041](https://patchblox.com/security/data/cve/CVE-2026-72041.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: espintcp: use sk_msg_free_partial to fix partial... | 9.8 | 0.0071 | | | [CVE-2026-72251](https://patchblox.com/security/data/cve/CVE-2026-72251.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat... | 9.8 | 0.0071 | | | [CVE-2026-74267](https://patchblox.com/security/data/cve/CVE-2026-74267.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_red... | 9.8 | 0.0071 | | | [CVE-2026-72436](https://patchblox.com/security/data/cve/CVE-2026-72436.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don't use test_bit() in lockle... | 9.8 | 0.0071 | | | [CVE-2026-72191](https://patchblox.com/security/data/cve/CVE-2026-72191.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx_inser... | 9.8 | 0.0070 | | | [CVE-2026-72451](https://patchblox.com/security/data/cve/CVE-2026-72451.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The x... | 9.8 | 0.0067 | | | [CVE-2026-72317](https://patchblox.com/security/data/cve/CVE-2026-72317.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connec... | 9.8 | 0.0064 | | | [CVE-2026-72217](https://patchblox.com/security/data/cve/CVE-2026-72217.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores bef... | 9.8 | 0.0064 | | | [CVE-2026-72221](https://patchblox.com/security/data/cve/CVE-2026-72221.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callbac... | 9.8 | 0.0064 | | | [CVE-2026-72222](https://patchblox.com/security/data/cve/CVE-2026-72222.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS... | 9.8 | 0.0064 | | | [CVE-2026-72348](https://patchblox.com/security/data/cve/CVE-2026-72348.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extens... | 9.1 | 0.0063 | | | [CVE-2026-80603](https://patchblox.com/security/data/cve/CVE-2026-80603.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off... | 9.1 | 0.0060 | | | [CVE-2026-72318](https://patchblox.com/security/data/cve/CVE-2026-72318.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets pars... | 9.4 | 0.0059 | | | [CVE-2026-80637](https://patchblox.com/security/data/cve/CVE-2026-80637.md) | Urgent | netfilter: synproxy: fix unaligned memory access in timestamp adjustment | 9.8 | 0.0059 | | | [CVE-2026-72421](https://patchblox.com/security/data/cve/CVE-2026-72421.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/mai... | 10.0 | 0.0057 | | | [CVE-2026-74384](https://patchblox.com/security/data/cve/CVE-2026-74384.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nv... | 9.8 | 0.0051 | | | [CVE-2026-74398](https://patchblox.com/security/data/cve/CVE-2026-74398.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad_failure when sta... | 9.8 | 0.0051 | | | [CVE-2026-74406](https://patchblox.com/security/data/cve/CVE-2026-74406.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro... | 9.8 | 0.0051 | | | [CVE-2026-64551](https://patchblox.com/security/data/cve/CVE-2026-64551.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before... | 9.1 | 0.0051 | | | [CVE-2026-74287](https://patchblox.com/security/data/cve/CVE-2026-74287.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length... | 9.1 | 0.0051 | | | [CVE-2026-74376](https://patchblox.com/security/data/cve/CVE-2026-74376.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio f... | 9.8 | 0.0050 | | | [CVE-2026-74255](https://patchblox.com/security/data/cve/CVE-2026-74255.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc_l2_send_msg() Syzbot repo... | 9.8 | 0.0050 | | | [CVE-2026-74439](https://patchblox.com/security/data/cve/CVE-2026-74439.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing dow... | 9.3 | 0.0020 | | | [CVE-2026-74310](https://patchblox.com/security/data/cve/CVE-2026-74310.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: vhost/net: complete zerocopy ubufs only once vh... | 9.3 | 0.0014 | | | [CVE-2026-72083](https://patchblox.com/security/data/cve/CVE-2026-72083.md) | High | kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 9.8 | 0.0072 | | | [CVE-2026-72418](https://patchblox.com/security/data/cve/CVE-2026-72418.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: prevent connlimit drops... | 7.5 | 0.0072 | | | [CVE-2026-72502](https://patchblox.com/security/data/cve/CVE-2026-72502.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid... | 7.5 | 0.0072 | | | [CVE-2026-74321](https://patchblox.com/security/data/cve/CVE-2026-74321.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrf... | 7.5 | 0.0072 | | | [CVE-2026-80646](https://patchblox.com/security/data/cve/CVE-2026-80646.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6... | 7.5 | 0.0072 | | | [CVE-2026-72242](https://patchblox.com/security/data/cve/CVE-2026-72242.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_... | 8.8 | 0.0070 | | | [CVE-2026-72247](https://patchblox.com/security/data/cve/CVE-2026-72247.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in... | 7.5 | 0.0070 | | | [CVE-2026-74282](https://patchblox.com/security/data/cve/CVE-2026-74282.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK... | 7.5 | 0.0070 | | | [CVE-2026-74281](https://patchblox.com/security/data/cve/CVE-2026-74281.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer b... | 7.5 | 0.0068 | | | [CVE-2026-64530](https://patchblox.com/security/data/cve/CVE-2026-64530.md) | High | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle | 9.8 | 0.0066 | | | [CVE-2026-72472](https://patchblox.com/security/data/cve/CVE-2026-72472.md) | High | nfs: use nfsi->rwsem to protect traversal of the file lock list | 9.8 | 0.0065 | | | [CVE-2026-72420](https://patchblox.com/security/data/cve/CVE-2026-72420.md) | High | md/raid5: avoid R5_Overlap races while breaking stripe batches | 8.8 | 0.0065 | | | [CVE-2026-72310](https://patchblox.com/security/data/cve/CVE-2026-72310.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl b... | 8.1 | 0.0064 | | | [CVE-2026-72356](https://patchblox.com/security/data/cve/CVE-2026-72356.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in c... | 7.5 | 0.0063 | | | [CVE-2026-74316](https://patchblox.com/security/data/cve/CVE-2026-74316.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4_drop_revoked_s... | 7.5 | 0.0063 | | | [CVE-2026-72330](https://patchblox.com/security/data/cve/CVE-2026-72330.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_re... | 7.5 | 0.0062 | | | [CVE-2026-72021](https://patchblox.com/security/data/cve/CVE-2026-72021.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state... | 8.2 | 0.0059 | | | [CVE-2026-72035](https://patchblox.com/security/data/cve/CVE-2026-72035.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: Replace direct dequeue ca... | 8.2 | 0.0059 | | | [CVE-2026-72057](https://patchblox.com/security/data/cve/CVE-2026-72057.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across def... | 8.2 | 0.0059 | | | [CVE-2026-64545](https://patchblox.com/security/data/cve/CVE-2026-64545.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_re... | 7.5 | 0.0058 | | | [CVE-2026-72320](https://patchblox.com/security/data/cve/CVE-2026-72320.md) | High | netfilter: nft_lookup: fix catchall element handling with inverted lookups | 9.1 | 0.0057 | | | [CVE-2026-72099](https://patchblox.com/security/data/cve/CVE-2026-72099.md) | High | kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0055 | | | [CVE-2026-64450](https://patchblox.com/security/data/cve/CVE-2026-64450.md) | High | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 9.1 | 0.0054 | | | [CVE-2026-53392](https://patchblox.com/security/data/cve/CVE-2026-53392.md) | High | NFSv4/flexfiles: reject zero filehandle version count | 8.8 | 0.0053 | | | [CVE-2026-64355](https://patchblox.com/security/data/cve/CVE-2026-64355.md) | High | bpf: Reject fragmented frames in devmap | 9.8 | 0.0051 | | | [CVE-2026-64560](https://patchblox.com/security/data/cve/CVE-2026-64560.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-lead... | 7.8 | 0.0050 | | | [CVE-2026-64312](https://patchblox.com/security/data/cve/CVE-2026-64312.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall... | 7.5 | 0.0050 | | | [CVE-2026-72100](https://patchblox.com/security/data/cve/CVE-2026-72100.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of lim... | 8.8 | 0.0046 | | | [CVE-2026-64448](https://patchblox.com/security/data/cve/CVE-2026-64448.md) | High | smb: client: restrict implied bcc[0] exemption to responses without data area | 8.2 | 0.0046 | | | [CVE-2026-64383](https://patchblox.com/security/data/cve/CVE-2026-64383.md) | High | smb: client: fix double-free in SMB2_flush() replay | 9.8 | 0.0046 | | | [CVE-2026-64384](https://patchblox.com/security/data/cve/CVE-2026-64384.md) | High | smb: client: fix change notify replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64385](https://patchblox.com/security/data/cve/CVE-2026-64385.md) | High | smb: client: fix double-free in SMB2_ioctl() replay | 9.8 | 0.0046 | | | [CVE-2026-64386](https://patchblox.com/security/data/cve/CVE-2026-64386.md) | High | smb: client: fix query_info() replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64387](https://patchblox.com/security/data/cve/CVE-2026-64387.md) | High | smb: client: fix query directory replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64380](https://patchblox.com/security/data/cve/CVE-2026-64380.md) | High | smb: client: harden POSIX SID length parsing | 8.2 | 0.0044 | | | [CVE-2026-64414](https://patchblox.com/security/data/cve/CVE-2026-64414.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko repo... | 7.8 | 0.0044 | | | [CVE-2026-64368](https://patchblox.com/security/data/cve/CVE-2026-64368.md) | High | mm/slab: do not limit zeroing to orig_size when only red zoning is enabled | 8.1 | 0.0042 | | | [CVE-2026-80604](https://patchblox.com/security/data/cve/CVE-2026-80604.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_get_report for nu... | 8.8 | 0.0041 | | | [CVE-2026-64374](https://patchblox.com/security/data/cve/CVE-2026-64374.md) | High | sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT | 7.5 | 0.0039 | | | [CVE-2026-64597](https://patchblox.com/security/data/cve/CVE-2026-64597.md) | High | smb: client: fix double-free in SMB2_close() replay | 9.8 | 0.0036 | | | [CVE-2026-64313](https://patchblox.com/security/data/cve/CVE-2026-64313.md) | High | crypto: ecc - Fix carry overflow in vli multiplication | 8.8 | 0.0036 | | | [CVE-2026-64364](https://patchblox.com/security/data/cve/CVE-2026-64364.md) | High | HID: multitouch: fix out-of-bounds bit access on mt_io_flags | 8.8 | 0.0036 | | | [CVE-2026-64382](https://patchblox.com/security/data/cve/CVE-2026-64382.md) | High | smb: client: fix double-free in SMB2_open() replay | 8.8 | 0.0035 | | | [CVE-2026-64435](https://patchblox.com/security/data/cve/CVE-2026-64435.md) | High | audit: Fix data races of skb_queue_len() readers on audit_queue | 8.2 | 0.0033 | | | [CVE-2026-72227](https://patchblox.com/security/data/cve/CVE-2026-72227.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num_dests h... | 8.1 | 0.0033 | | | [CVE-2026-64024](https://patchblox.com/security/data/cve/CVE-2026-64024.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.4 | 0.0031 | | | [CVE-2026-64598](https://patchblox.com/security/data/cve/CVE-2026-64598.md) | High | smb/client: Fix error code in smb2_aead_req_alloc() | 8.8 | 0.0028 | | | [CVE-2026-64561](https://patchblox.com/security/data/cve/CVE-2026-64561.md) | High | KVM: x86: Check for invalid/obsolete root *after* making MMU pages available | 8.8 | 0.0027 | | | [CVE-2026-72108](https://patchblox.com/security/data/cve/CVE-2026-72108.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consiste... | 7.8 | 0.0026 | | | [CVE-2026-74356](https://patchblox.com/security/data/cve/CVE-2026-74356.md) | High | vhost: fix vhost_get_avail_idx for a non empty ring | 7.4 | 0.0025 | | | [CVE-2026-64507](https://patchblox.com/security/data/cve/CVE-2026-64507.md) | High | x86/bugs: Enable IBPB flush on BPF JIT allocation | 7.8 | 0.0023 | | | [CVE-2026-80867](https://patchblox.com/security/data/cve/CVE-2026-80867.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: alpha/PCI: Add security_locked_down() check to p... | n/a | 0.0022 | | | [CVE-2026-80875](https://patchblox.com/security/data/cve/CVE-2026-80875.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state l... | n/a | 0.0022 | | | [CVE-2026-80876](https://patchblox.com/security/data/cve/CVE-2026-80876.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix event length with forced 8-byte... | n/a | 0.0022 | | | [CVE-2026-72218](https://patchblox.com/security/data/cve/CVE-2026-72218.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file refcount leak on cached nlm... | 7.0 | 0.0022 | | | [CVE-2026-72219](https://patchblox.com/security/data/cve/CVE-2026-72219.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fa... | 7.0 | 0.0022 | | | [CVE-2026-74271](https://patchblox.com/security/data/cve/CVE-2026-74271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix supplied_from allocatio... | 7.0 | 0.0022 | | | [CVE-2026-72097](https://patchblox.com/security/data/cve/CVE-2026-72097.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereferen... | n/a | 0.0022 | | | [CVE-2026-72193](https://patchblox.com/security/data/cve/CVE-2026-72193.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: cap RESTART_TABLE free-chain walker at rt... | n/a | 0.0022 | | | [CVE-2026-72274](https://patchblox.com/security/data/cve/CVE-2026-72274.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: hecubafb: fix potential memory leak in he... | n/a | 0.0022 | | | [CVE-2026-72275](https://patchblox.com/security/data/cve/CVE-2026-72275.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: broadsheetfb: fix potential memory leak i... | n/a | 0.0022 | | | [CVE-2026-72276](https://patchblox.com/security/data/cve/CVE-2026-72276.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: metronomefb: fix potential memory leak in... | n/a | 0.0022 | | | [CVE-2026-72290](https://patchblox.com/security/data/cve/CVE-2026-72290.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix GISC refcount leak on AIF en... | n/a | 0.0022 | | | [CVE-2026-80602](https://patchblox.com/security/data/cve/CVE-2026-80602.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A... | n/a | 0.0022 | | | [CVE-2026-80620](https://patchblox.com/security/data/cve/CVE-2026-80620.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" T... | n/a | 0.0022 | | | [CVE-2026-80669](https://patchblox.com/security/data/cve/CVE-2026-80669.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrm_decode_session hook attachment... | n/a | 0.0022 | | | [CVE-2026-80636](https://patchblox.com/security/data/cve/CVE-2026-80636.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid... | n/a | 0.0021 | | | [CVE-2026-80667](https://patchblox.com/security/data/cve/CVE-2026-80667.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete() on... | n/a | 0.0021 | | | [CVE-2026-53365](https://patchblox.com/security/data/cve/CVE-2026-53365.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-... | 8.8 | 0.0020 | | | [CVE-2026-72151](https://patchblox.com/security/data/cve/CVE-2026-72151.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completio... | 8.4 | 0.0020 | | | [CVE-2026-72342](https://patchblox.com/security/data/cve/CVE-2026-72342.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration... | 8.4 | 0.0020 | | | [CVE-2026-72343](https://patchblox.com/security/data/cve/CVE-2026-72343.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer a... | 8.4 | 0.0020 | | | [CVE-2026-72478](https://patchblox.com/security/data/cve/CVE-2026-72478.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add bounds check to run_get_highest_vc... | 8.4 | 0.0020 | | | [CVE-2026-72284](https://patchblox.com/security/data/cve/CVE-2026-72284.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has... | 7.1 | 0.0019 | | | [CVE-2026-64508](https://patchblox.com/security/data/cve/CVE-2026-64508.md) | High | bpf: Support for hardening against JIT spraying | 7.8 | 0.0019 | | | [CVE-2026-72280](https://patchblox.com/security/data/cve/CVE-2026-72280.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR... | 7.1 | 0.0019 | | | [CVE-2026-72289](https://patchblox.com/security/data/cve/CVE-2026-72289.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.3 | 0.0019 | | | [CVE-2026-72196](https://patchblox.com/security/data/cve/CVE-2026-72196.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp->page_lcns[] index... | 8.4 | 0.0019 | | | [CVE-2026-72197](https://patchblox.com/security/data/cve/CVE-2026-72197.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation memmo... | 8.4 | 0.0019 | | | [CVE-2026-74256](https://patchblox.com/security/data/cve/CVE-2026-74256.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_po... | 8.4 | 0.0019 | | | [CVE-2026-74262](https://patchblox.com/security/data/cve/CVE-2026-74262.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITE_ONCE() when changing lower socket... | 7.8 | 0.0019 | | | [CVE-2026-72487](https://patchblox.com/security/data/cve/CVE-2026-72487.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr be... | 7.7 | 0.0019 | | | [CVE-2026-72425](https://patchblox.com/security/data/cve/CVE-2026-72425.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_rese... | 7.1 | 0.0018 | | | [CVE-2026-72066](https://patchblox.com/security/data/cve/CVE-2026-72066.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output... | 7.8 | 0.0018 | | | [CVE-2026-72067](https://patchblox.com/security/data/cve/CVE-2026-72067.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback err... | 7.8 | 0.0018 | | | [CVE-2026-72225](https://patchblox.com/security/data/cve/CVE-2026-72225.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2_journal_init... | 7.8 | 0.0018 | | | [CVE-2026-64514](https://patchblox.com/security/data/cve/CVE-2026-64514.md) | High | userfaultfd: gate must_wait writability check on pte_present() | 7.1 | 0.0018 | | | [CVE-2026-63970](https://patchblox.com/security/data/cve/CVE-2026-63970.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy... | 8.8 | 0.0018 | | | [CVE-2026-72255](https://patchblox.com/security/data/cve/CVE-2026-72255.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 8.8 | 0.0018 | | | [CVE-2026-74380](https://patchblox.com/security/data/cve/CVE-2026-74380.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return valu... | 8.8 | 0.0018 | | | [CVE-2026-64286](https://patchblox.com/security/data/cve/CVE-2026-64286.md) | High | KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU | 8.2 | 0.0018 | | | [CVE-2026-64287](https://patchblox.com/security/data/cve/CVE-2026-64287.md) | High | KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU | 8.2 | 0.0018 | | | [CVE-2026-68461](https://patchblox.com/security/data/cve/CVE-2026-68461.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields... | 7.8 | 0.0018 | | | [CVE-2026-72282](https://patchblox.com/security/data/cve/CVE-2026-72282.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsib... | 7.8 | 0.0018 | | | [CVE-2026-72350](https://patchblox.com/security/data/cve/CVE-2026-72350.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts... | 7.8 | 0.0018 | | | [CVE-2026-72400](https://patchblox.com/security/data/cve/CVE-2026-72400.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed f... | 7.8 | 0.0018 | | | [CVE-2026-72419](https://patchblox.com/security/data/cve/CVE-2026-72419.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: avoid invalid nat_net pointer... | 7.8 | 0.0018 | | | [CVE-2026-72470](https://patchblox.com/security/data/cve/CVE-2026-72470.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log->one_page_buf when adopting... | 7.8 | 0.0018 | | | [CVE-2026-74296](https://patchblox.com/security/data/cve/CVE-2026-74296.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW‑provided UAR index rat... | 7.8 | 0.0018 | | | [CVE-2026-74297](https://patchblox.com/security/data/cve/CVE-2026-74297.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE si... | 7.8 | 0.0018 | | | [CVE-2026-74305](https://patchblox.com/security/data/cve/CVE-2026-74305.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for pr... | 7.8 | 0.0018 | | | [CVE-2026-74417](https://patchblox.com/security/data/cve/CVE-2026-74417.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeon_align... | 7.8 | 0.0018 | | | [CVE-2026-80598](https://patchblox.com/security/data/cve/CVE-2026-80598.md) | High | ntfs3: fix out-of-bounds read in decompress_lznt | 7.8 | 0.0018 | | | [CVE-2026-80677](https://patchblox.com/security/data/cve/CVE-2026-80677.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: driver core: use READ_ONCE() for dev->driver in... | 7.8 | 0.0018 | | | [CVE-2026-72286](https://patchblox.com/security/data/cve/CVE-2026-72286.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirr... | 8.8 | 0.0018 | | | [CVE-2026-72027](https://patchblox.com/security/data/cve/CVE-2026-72027.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle free_pages_prepare() prope... | 7.8 | 0.0018 | | | [CVE-2026-72034](https://patchblox.com/security/data/cve/CVE-2026-72034.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fhandle: reject detached mounts in capable_wrt_m... | 7.8 | 0.0018 | | | [CVE-2026-72352](https://patchblox.com/security/data/cve/CVE-2026-72352.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix hid_bpf_get_data() range check hi... | 7.8 | 0.0018 | | | [CVE-2026-72452](https://patchblox.com/security/data/cve/CVE-2026-72452.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after d... | 7.8 | 0.0018 | | | [CVE-2026-72390](https://patchblox.com/security/data/cve/CVE-2026-72390.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: Introduce slaves_lock to av... | 7.8 | 0.0017 | | | [CVE-2026-72347](https://patchblox.com/security/data/cve/CVE-2026-72347.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift par... | 7.3 | 0.0017 | | | [CVE-2026-72416](https://patchblox.com/security/data/cve/CVE-2026-72416.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_compat: ebtables emulation must r... | 7.3 | 0.0017 | | | [CVE-2026-74346](https://patchblox.com/security/data/cve/CVE-2026-74346.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registrati... | n/a | 0.0017 | | | [CVE-2026-64265](https://patchblox.com/security/data/cve/CVE-2026-64265.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_r... | 7.8 | 0.0017 | | | [CVE-2026-72072](https://patchblox.com/security/data/cve/CVE-2026-72072.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadat... | 7.8 | 0.0017 | | | [CVE-2026-64317](https://patchblox.com/security/data/cve/CVE-2026-64317.md) | High | isofs: bound Rock Ridge symlink components to the SL record | 7.1 | 0.0017 | | | [CVE-2026-64604](https://patchblox.com/security/data/cve/CVE-2026-64604.md) | High | KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode | 8.4 | 0.0017 | | | [CVE-2026-72476](https://patchblox.com/security/data/cve/CVE-2026-72476.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma_r... | 7.8 | 0.0017 | | | [CVE-2026-53402](https://patchblox.com/security/data/cve/CVE-2026-53402.md) | High | fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | 7.1 | 0.0017 | | | [CVE-2026-72364](https://patchblox.com/security/data/cve/CVE-2026-72364.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writeback error handling Fix the err... | 7.1 | 0.0017 | | | [CVE-2026-72071](https://patchblox.com/security/data/cve/CVE-2026-72071.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Fix use-after-free in user_... | 7.8 | 0.0017 | | | [CVE-2026-72427](https://patchblox.com/security/data/cve/CVE-2026-72427.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF_F_P... | 7.8 | 0.0017 | | | [CVE-2026-74283](https://patchblox.com/security/data/cve/CVE-2026-74283.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutato... | 9.8 | 0.0017 | | | [CVE-2026-72102](https://patchblox.com/security/data/cve/CVE-2026-72102.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_re... | 8.8 | 0.0017 | | | [CVE-2026-72136](https://patchblox.com/security/data/cve/CVE-2026-72136.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in t... | 8.8 | 0.0017 | | | [CVE-2026-64296](https://patchblox.com/security/data/cve/CVE-2026-64296.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_e... | 7.8 | 0.0017 | | | [CVE-2026-64322](https://patchblox.com/security/data/cve/CVE-2026-64322.md) | High | udf: validate sparing table length as an entry count, not a byte count | 7.8 | 0.0017 | | | [CVE-2026-72036](https://patchblox.com/security/data/cve/CVE-2026-72036.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue ca... | 7.8 | 0.0017 | | | [CVE-2026-72105](https://patchblox.com/security/data/cve/CVE-2026-72105.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit mach... | 7.8 | 0.0017 | | | [CVE-2026-72110](https://patchblox.com/security/data/cve/CVE-2026-72110.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe ->bpf_storage before bailouts tha... | 7.8 | 0.0017 | | | [CVE-2026-72120](https://patchblox.com/security/data/cve/CVE-2026-72120.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu list annotations and o... | 7.8 | 0.0017 | | | [CVE-2026-72123](https://patchblox.com/security/data/cve/CVE-2026-72123.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: can: bcm: defer rx_op deallocation to workqueue t... | 7.8 | 0.0017 | | | [CVE-2026-72135](https://patchblox.com/security/data/cve/CVE-2026-72135.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable... | 7.8 | 0.0017 | | | [CVE-2026-72172](https://patchblox.com/security/data/cve/CVE-2026-72172.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for Z... | 7.8 | 0.0017 | | | [CVE-2026-72195](https://patchblox.com/security/data/cve/CVE-2026-72195.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attr_off in UpdateResidentValue... | 7.8 | 0.0017 | | | [CVE-2026-72250](https://patchblox.com/security/data/cve/CVE-2026-72250.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_reasm: guard mac_header... | 7.8 | 0.0017 | | | [CVE-2026-72252](https://patchblox.com/security/data/cve/CVE-2026-72252.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: don't leak bad clone... | 7.8 | 0.0017 | | | [CVE-2026-72435](https://patchblox.com/security/data/cve/CVE-2026-72435.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and r... | 7.8 | 0.0017 | | | [CVE-2026-72450](https://patchblox.com/security/data/cve/CVE-2026-72450.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen dur... | 7.8 | 0.0017 | | | [CVE-2026-72434](https://patchblox.com/security/data/cve/CVE-2026-72434.md) | High | netfilter: ipset: make sure gc is properly stopped | 7.8 | 0.0017 | | | [CVE-2026-74286](https://patchblox.com/security/data/cve/CVE-2026-74286.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: pfcp: allocate per-cpu tstats for PFCP netd... | n/a | 0.0017 | | | [CVE-2026-72338](https://patchblox.com/security/data/cve/CVE-2026-72338.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_pedit: fix TOCTOU heap OOB write... | 7.8 | 0.0017 | | | [CVE-2026-72243](https://patchblox.com/security/data/cve/CVE-2026-72243.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TC... | 8.8 | 0.0017 | | | [CVE-2026-64593](https://patchblox.com/security/data/cve/CVE-2026-64593.md) | High | btrfs: do not trim a device which is not writeable | 9.8 | 0.0017 | | | [CVE-2026-64299](https://patchblox.com/security/data/cve/CVE-2026-64299.md) | High | tracing: Prevent out-of-bounds read in glob matching | 7.1 | 0.0017 | | | [CVE-2026-64323](https://patchblox.com/security/data/cve/CVE-2026-64323.md) | High | udf: validate VAT header length against the VAT inode size | 7.1 | 0.0017 | | | [CVE-2026-72389](https://patchblox.com/security/data/cve/CVE-2026-72389.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bridge: stp: Fix a potential use-after-free when... | 7.8 | 0.0016 | | | [CVE-2026-72122](https://patchblox.com/security/data/cve/CVE-2026-72122.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix lockless bound/ifindex race and si... | 7.3 | 0.0016 | | | [CVE-2026-64556](https://patchblox.com/security/data/cve/CVE-2026-64556.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_... | 8.8 | 0.0016 | | | [CVE-2026-64227](https://patchblox.com/security/data/cve/CVE-2026-64227.md) | High | ACPI: driver: Check ACPI_COMPANION() against NULL during probe | 7.1 | 0.0016 | | | [CVE-2026-64324](https://patchblox.com/security/data/cve/CVE-2026-64324.md) | High | udf: validate free block extents against the partition length | 7.8 | 0.0016 | | | [CVE-2026-80865](https://patchblox.com/security/data/cve/CVE-2026-80865.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Add missing access_ok call to copy_user_sym... | n/a | 0.0016 | | | [CVE-2026-80880](https://patchblox.com/security/data/cve/CVE-2026-80880.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP rereg_mr... | n/a | 0.0016 | | | [CVE-2026-64294](https://patchblox.com/security/data/cve/CVE-2026-64294.md) | High | mm: do file ownership checks with the proper mount idmap | 7.1 | 0.0016 | | | [CVE-2026-64306](https://patchblox.com/security/data/cve/CVE-2026-64306.md) | High | crypto: drbg - Fix returning success on failure in CTR_DRBG | 7.0 | 0.0016 | | | [CVE-2026-72061](https://patchblox.com/security/data/cve/CVE-2026-72061.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAP_NET_ADMIN in the device ne... | 8.8 | 0.0016 | | | [CVE-2026-64589](https://patchblox.com/security/data/cve/CVE-2026-64589.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registratio... | n/a | 0.0016 | | | [CVE-2026-72052](https://patchblox.com/security/data/cve/CVE-2026-72052.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the devic... | 8.8 | 0.0015 | | | [CVE-2026-72053](https://patchblox.com/security/data/cve/CVE-2026-72053.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAP_NET_ADMIN in the device n... | 8.8 | 0.0015 | | | [CVE-2026-72054](https://patchblox.com/security/data/cve/CVE-2026-72054.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ip_vti: require CAP_NET_ADMIN in the device... | 8.8 | 0.0015 | | | [CVE-2026-72055](https://patchblox.com/security/data/cve/CVE-2026-72055.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the devic... | 8.8 | 0.0015 | | | [CVE-2026-68086](https://patchblox.com/security/data/cve/CVE-2026-68086.md) | High | mm/khugepaged: write all dirty file folios when collapsing | 8.8 | 0.0015 | | | [CVE-2026-64456](https://patchblox.com/security/data/cve/CVE-2026-64456.md) | High | hwrng: virtio: clamp device-reported used.len at copy_data() | 8.4 | 0.0015 | | | [CVE-2026-64298](https://patchblox.com/security/data/cve/CVE-2026-64298.md) | High | NFSv4: include MAY_WRITE in open permission mask for O_TRUNC | 8.8 | 0.0015 | | | [CVE-2026-74578](https://patchblox.com/security/data/cve/CVE-2026-74578.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force synchronous proce... | 7.1 | 0.0015 | | | [CVE-2026-64548](https://patchblox.com/security/data/cve/CVE-2026-64548.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in b... | 8.4 | 0.0014 | | | [CVE-2026-64552](https://patchblox.com/security/data/cve/CVE-2026-64552.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() rece... | 8.4 | 0.0014 | | | [CVE-2026-64533](https://patchblox.com/security/data/cve/CVE-2026-64533.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay con... | 7.8 | 0.0014 | | | [CVE-2026-64475](https://patchblox.com/security/data/cve/CVE-2026-64475.md) | High | vfio/pci: Release the VGA arbiter client on register_device() failure | 8.8 | 0.0014 | | | [CVE-2026-64422](https://patchblox.com/security/data/cve/CVE-2026-64422.md) | High | net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes | 7.1 | 0.0014 | | | [CVE-2026-64077](https://patchblox.com/security/data/cve/CVE-2026-64077.md) | High | netfilter: ebtables: move to two-stage removal scheme | 7.8 | 0.0014 | | | [CVE-2026-53005](https://patchblox.com/security/data/cve/CVE-2026-53005.md) | High | af_unix: Drop all SCM attributes for SOCKMAP. | 8.3 | 0.0014 | | | [CVE-2026-64432](https://patchblox.com/security/data/cve/CVE-2026-64432.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in... | 7.8 | 0.0014 | | | [CVE-2026-72405](https://patchblox.com/security/data/cve/CVE-2026-72405.md) | High | net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync | 7.8 | 0.0014 | | | [CVE-2026-64279](https://patchblox.com/security/data/cve/CVE-2026-64279.md) | High | i2c: core: fix adapter deregistration race | 7.8 | 0.0013 | | | [CVE-2026-64532](https://patchblox.com/security/data/cve/CVE-2026-64532.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateR... | 7.8 | 0.0013 | | | [CVE-2026-64423](https://patchblox.com/security/data/cve/CVE-2026-64423.md) | High | ipv4: igmp: remove multicast group from hash table on device destruction | 7.8 | 0.0013 | | | [CVE-2026-74365](https://patchblox.com/security/data/cve/CVE-2026-74365.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Handle preemption in BTT lane acquis... | 7.3 | 0.0013 | | | [CVE-2026-64284](https://patchblox.com/security/data/cve/CVE-2026-64284.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ensure vendor's exit handler runs befo... | 7.1 | 0.0013 | | | [CVE-2026-64411](https://patchblox.com/security/data/cve/CVE-2026-64411.md) | High | netfilter: ebtables: terminate table name before find_table_lock() | 7.1 | 0.0013 | | | [CVE-2026-64412](https://patchblox.com/security/data/cve/CVE-2026-64412.md) | High | netfilter: ebtables: module names must be null-terminated | 7.1 | 0.0013 | | | [CVE-2026-72012](https://patchblox.com/security/data/cve/CVE-2026-72012.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronize_rcu() when unr... | 7.8 | 0.0013 | | | [CVE-2026-68454](https://patchblox.com/security/data/cve/CVE-2026-68454.md) | High | KVM: s390: pci: Fix handling of AIF enable without AISB | 8.8 | 0.0013 | | | [CVE-2026-74397](https://patchblox.com/security/data/cve/CVE-2026-74397.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initi... | 7.8 | 0.0013 | | | [CVE-2026-64546](https://patchblox.com/security/data/cve/CVE-2026-64546.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block(... | 7.1 | 0.0013 | | | [CVE-2026-64555](https://patchblox.com/security/data/cve/CVE-2026-64555.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_... | 8.8 | 0.0013 | | | [CVE-2026-46093](https://patchblox.com/security/data/cve/CVE-2026-46093.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker de... | 7.8 | 0.0013 | | | [CVE-2026-64352](https://patchblox.com/security/data/cve/CVE-2026-64352.md) | High | bpf: Allow LPM map access from sleepable BPF programs | 7.8 | 0.0013 | | | [CVE-2026-64354](https://patchblox.com/security/data/cve/CVE-2026-64354.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before e... | 7.8 | 0.0013 | | | [CVE-2026-64381](https://patchblox.com/security/data/cve/CVE-2026-64381.md) | High | smb: client: Fix next buffer leak in receive_encrypted_standard() | 7.8 | 0.0013 | | | [CVE-2026-72444](https://patchblox.com/security/data/cve/CVE-2026-72444.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: flow_dissector: check device type before reading... | 7.8 | 0.0013 | | | [CVE-2026-74270](https://patchblox.com/security/data/cve/CVE-2026-74270.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: handshake: Require admin permission for DONE com... | 7.8 | 0.0013 | | | [CVE-2026-74288](https://patchblox.com/security/data/cve/CVE-2026-74288.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don't dump dying fib_rule in fib... | 7.8 | 0.0013 | | | [CVE-2026-74330](https://patchblox.com/security/data/cve/CVE-2026-74330.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of ->s_childre... | 7.8 | 0.0013 | | | [CVE-2026-80613](https://patchblox.com/security/data/cve/CVE-2026-80613.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path Du... | 7.8 | 0.0013 | | | [CVE-2026-64371](https://patchblox.com/security/data/cve/CVE-2026-64371.md) | High | proc: protect ptrace_may_access() with exec_update_lock (part 1) | 7.0 | 0.0013 | | | [CVE-2026-64436](https://patchblox.com/security/data/cve/CVE-2026-64436.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_key_len for IPComp s... | 7.1 | 0.0013 | | | [CVE-2026-64413](https://patchblox.com/security/data/cve/CVE-2026-64413.md) | High | netfilter: ebtables: zero chainstack array | 7.0 | 0.0013 | | | [CVE-2026-64266](https://patchblox.com/security/data/cve/CVE-2026-64266.md) | High | fuse: re-lock request before returning from fuse_ref_folio() | 7.8 | 0.0013 | | | [CVE-2026-80664](https://patchblox.com/security/data/cve/CVE-2026-80664.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nat: reject unsupported target fam... | 7.3 | 0.0013 | | | [CVE-2026-64189](https://patchblox.com/security/data/cve/CVE-2026-64189.md) | High | netfilter: ipset: fix race between dump and ip_set_list resize | 8.8 | 0.0013 | | | [CVE-2026-64372](https://patchblox.com/security/data/cve/CVE-2026-64372.md) | High | cpufreq: pcc: fix use-after-free and double free in _OSC evaluation | 7.8 | 0.0013 | | | [CVE-2026-64543](https://patchblox.com/security/data/cve/CVE-2026-64543.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in ti... | 7.8 | 0.0013 | | | [CVE-2026-74359](https://patchblox.com/security/data/cve/CVE-2026-74359.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: configfs_lookup(): don't leave ->s_dentry dangli... | 7.8 | 0.0013 | | | [CVE-2026-74363](https://patchblox.com/security/data/cve/CVE-2026-74363.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix UAF by restoring RCU-delayed inode free... | 7.8 | 0.0013 | | | [CVE-2026-45944](https://patchblox.com/security/data/cve/CVE-2026-45944.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing dow... | 7.5 | 0.0012 | | | [CVE-2026-53027](https://patchblox.com/security/data/cve/CVE-2026-53027.md) | High | fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() | 7.1 | 0.0012 | | | [CVE-2026-64192](https://patchblox.com/security/data/cve/CVE-2026-64192.md) | High | bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized | 7.8 | 0.0012 | | | [CVE-2026-64375](https://patchblox.com/security/data/cve/CVE-2026-64375.md) | High | proc: protect ptrace_may_access() with exec_update_lock (FD links) | 7.8 | 0.0011 | | | [CVE-2026-64418](https://patchblox.com/security/data/cve/CVE-2026-64418.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_info teardown race wi... | 8.8 | 0.0010 | | | [CVE-2026-74259](https://patchblox.com/security/data/cve/CVE-2026-74259.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: remove all cifs files before kill super C... | 8.4 | n/a | | | [CVE-2026-74331](https://patchblox.com/security/data/cve/CVE-2026-74331.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix recursive lock in device_ca... | 5.5 | 0.0024 | | | [CVE-2026-72106](https://patchblox.com/security/data/cve/CVE-2026-72106.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in list_versio... | 5.5 | 0.0023 | | | [CVE-2026-72325](https://patchblox.com/security/data/cve/CVE-2026-72325.md) | Routine | perf/x86/amd/core: Avoid enabling BRS from the SVM reload path | 5.5 | 0.0022 | | | [CVE-2026-72010](https://patchblox.com/security/data/cve/CVE-2026-72010.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effective_... | 5.5 | 0.0022 | | | [CVE-2026-72063](https://patchblox.com/security/data/cve/CVE-2026-72063.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: gpio: tegra: do not call pinctrl for GPIO direct... | 5.5 | 0.0022 | | | [CVE-2026-72068](https://patchblox.com/security/data/cve/CVE-2026-72068.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in upda... | 5.5 | 0.0022 | | | [CVE-2026-72223](https://patchblox.com/security/data/cve/CVE-2026-72223.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discov... | 5.5 | 0.0022 | | | [CVE-2026-72224](https://patchblox.com/security/data/cve/CVE-2026-72224.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on btt_init() error path... | 5.5 | 0.0022 | | | [CVE-2026-72326](https://patchblox.com/security/data/cve/CVE-2026-72326.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cake: reject overhead values that und... | 5.5 | 0.0022 | | | [CVE-2026-72349](https://patchblox.com/security/data/cve/CVE-2026-72349.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_... | 5.5 | 0.0022 | | | [CVE-2026-72447](https://patchblox.com/security/data/cve/CVE-2026-72447.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in... | 5.5 | 0.0022 | | | [CVE-2026-74395](https://patchblox.com/security/data/cve/CVE-2026-74395.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix devx subscribe-event unwind NULL... | 5.5 | 0.0022 | | | [CVE-2026-72428](https://patchblox.com/security/data/cve/CVE-2026-72428.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks chec... | 5.5 | 0.0022 | | | [CVE-2026-72096](https://patchblox.com/security/data/cve/CVE-2026-72096.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error... | 5.5 | 0.0022 | | | [CVE-2026-72138](https://patchblox.com/security/data/cve/CVE-2026-72138.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gn... | 5.5 | 0.0022 | | | [CVE-2026-72152](https://patchblox.com/security/data/cve/CVE-2026-72152.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_tis_spi: Use wait_woken() in wait_for_t... | 5.5 | 0.0022 | | | [CVE-2026-72155](https://patchblox.com/security/data/cve/CVE-2026-72155.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experien... | 5.5 | 0.0022 | | | [CVE-2026-72256](https://patchblox.com/security/data/cve/CVE-2026-72256.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_cluster: reject template conntrack... | 5.5 | 0.0022 | | | [CVE-2026-72392](https://patchblox.com/security/data/cve/CVE-2026-72392.md) | Routine | ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump | 5.5 | 0.0022 | | | [CVE-2026-72433](https://patchblox.com/security/data/cve/CVE-2026-72433.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIF... | 5.5 | 0.0022 | | | [CVE-2026-74284](https://patchblox.com/security/data/cve/CVE-2026-74284.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: Don't make class passive tw... | 5.5 | 0.0022 | | | [CVE-2026-72177](https://patchblox.com/security/data/cve/CVE-2026-72177.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in ac... | 5.5 | 0.0022 | | | [CVE-2026-72379](https://patchblox.com/security/data/cve/CVE-2026-72379.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fs: refuse O_TMPFILE creation with an unmapped f... | 5.5 | 0.0022 | | | [CVE-2026-72437](https://patchblox.com/security/data/cve/CVE-2026-72437.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: md/raid1: free r1_bio when REQ_NOWAIT is set and... | 5.5 | 0.0022 | | | [CVE-2026-74327](https://patchblox.com/security/data/cve/CVE-2026-74327.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in is_vm_a... | 5.5 | 0.0022 | | | [CVE-2026-74329](https://patchblox.com/security/data/cve/CVE-2026-74329.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unr... | 5.5 | 0.0022 | | | [CVE-2026-74399](https://patchblox.com/security/data/cve/CVE-2026-74399.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evm_xattrs read buf... | 5.5 | 0.0022 | | | [CVE-2026-68092](https://patchblox.com/security/data/cve/CVE-2026-68092.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource befor... | 5.5 | 0.0021 | | | [CVE-2026-72127](https://patchblox.com/security/data/cve/CVE-2026-72127.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netdev-genl: report NAPI thread PID in the calle... | 5.5 | 0.0021 | | | [CVE-2026-72132](https://patchblox.com/security/data/cve/CVE-2026-72132.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: NFS: Charge unstable writes by request size, not... | 5.5 | 0.0021 | | | [CVE-2026-72176](https://patchblox.com/security/data/cve/CVE-2026-72176.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: put stats for scheme_add... | 5.5 | 0.0021 | | | [CVE-2026-72266](https://patchblox.com/security/data/cve/CVE-2026-72266.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: vesafb: fix memory leak in vesafb_probe()... | 5.5 | 0.0021 | | | [CVE-2026-72273](https://patchblox.com/security/data/cve/CVE-2026-72273.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: fix memory leak in efifb_probe()... | 5.5 | 0.0021 | | | [CVE-2026-74393](https://patchblox.com/security/data/cve/CVE-2026-74393.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: Fix memory leak in drm_syncobj_find... | 5.5 | 0.0021 | | | [CVE-2026-80676](https://patchblox.com/security/data/cve/CVE-2026-80676.md) | Routine | Drivers: hv: vmbus: use generic driver_override infrastructure | 5.5 | 0.0021 | | | [CVE-2026-72178](https://patchblox.com/security/data/cve/CVE-2026-72178.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: always put unsuccessfully committ... | 4.7 | 0.0021 | | | [CVE-2026-72174](https://patchblox.com/security/data/cve/CVE-2026-72174.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix hugetlb self-deadlock in p... | 5.5 | 0.0021 | | | [CVE-2026-72212](https://patchblox.com/security/data/cve/CVE-2026-72212.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix incorrect altmap passing... | 5.5 | 0.0021 | | | [CVE-2026-64538](https://patchblox.com/security/data/cve/CVE-2026-64538.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change() | 5.3 | 0.0020 | | | [CVE-2026-74382](https://patchblox.com/security/data/cve/CVE-2026-74382.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_bpf: prevent unbounded recursion... | 5.5 | 0.0020 | | | [CVE-2026-64465](https://patchblox.com/security/data/cve/CVE-2026-64465.md) | Routine | usb: xhci: Fix sleep in atomic context in xhci_free_streams() | 5.5 | 0.0018 | | | [CVE-2026-64472](https://patchblox.com/security/data/cve/CVE-2026-64472.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct... | 5.5 | 0.0018 | | | [CVE-2026-64458](https://patchblox.com/security/data/cve/CVE-2026-64458.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in... | 5.5 | 0.0018 | | | [CVE-2026-64476](https://patchblox.com/security/data/cve/CVE-2026-64476.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle_d3 per device When... | 5.5 | 0.0018 | | | [CVE-2026-74307](https://patchblox.com/security/data/cve/CVE-2026-74307.md) | Routine | ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT | 5.5 | 0.0018 | | | [CVE-2026-74318](https://patchblox.com/security/data/cve/CVE-2026-74318.md) | Routine | btrfs: fix deadlock cloning inline extent when using flushoncommit | 5.5 | 0.0018 | | | [CVE-2026-64544](https://patchblox.com/security/data/cve/CVE-2026-64544.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - fix OOB read in pefile... | 5.5 | 0.0018 | | | [CVE-2026-64553](https://patchblox.com/security/data/cve/CVE-2026-64553.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLE_ATTR_DATA... | 5.5 | 0.0018 | | | [CVE-2026-68090](https://patchblox.com/security/data/cve/CVE-2026-68090.md) | Routine | debugobjects: Plug race against a concurrent OOM disable | 5.5 | 0.0018 | | | [CVE-2026-64474](https://patchblox.com/security/data/cve/CVE-2026-64474.md) | Routine | vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc | 5.5 | 0.0018 | | | [CVE-2026-64457](https://patchblox.com/security/data/cve/CVE-2026-64457.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: virtio_pci: fix vq info pointer lookup via wrong... | 5.5 | 0.0018 | | | [CVE-2026-64512](https://patchblox.com/security/data/cve/CVE-2026-64512.md) | Routine | ACPI: CPPC: Suppress UBSAN warning caused by field misuse | 5.5 | 0.0017 | | | [CVE-2026-64542](https://patchblox.com/security/data/cve/CVE-2026-64542.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in accept_untracked_... | 5.5 | 0.0017 | | | [CVE-2026-74290](https://patchblox.com/security/data/cve/CVE-2026-74290.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: Dont expose folded kernel p... | 5.5 | 0.0017 | | | [CVE-2026-74308](https://patchblox.com/security/data/cve/CVE-2026-74308.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4_write_inline_data_e... | 5.5 | 0.0017 | | | [CVE-2026-74379](https://patchblox.com/security/data/cve/CVE-2026-74379.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous reso... | 5.5 | 0.0017 | | | [CVE-2026-80611](https://patchblox.com/security/data/cve/CVE-2026-80611.md) | Routine | ACPI: processor_idle: Mark LPI enter functions as __cpuidle | 5.5 | 0.0017 | | | [CVE-2026-64357](https://patchblox.com/security/data/cve/CVE-2026-64357.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchmaps reservation limit check xfs_e... | 5.5 | 0.0016 | | | [CVE-2026-74424](https://patchblox.com/security/data/cve/CVE-2026-74424.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: fbcon: fix NULL pointer dereference for a consol... | 5.5 | 0.0016 | | | [CVE-2026-64326](https://patchblox.com/security/data/cve/CVE-2026-64326.md) | Routine | block: skip sync_blockdev() on surprise removal in bdev_mark_dead() | 5.5 | 0.0016 | | | [CVE-2026-64370](https://patchblox.com/security/data/cve/CVE-2026-64370.md) | Routine | posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path | 5.5 | 0.0013 | | | [CVE-2026-64425](https://patchblox.com/security/data/cve/CVE-2026-64425.md) | Routine | io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item | 5.5 | 0.0013 | | | [CVE-2026-64416](https://patchblox.com/security/data/cve/CVE-2026-64416.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm: swap_cgroup: fix NULL deref in lookup_swap_c... | 5.5 | 0.0012 | | | [CVE-2026-64187](https://patchblox.com/security/data/cve/CVE-2026-64187.md) | Routine | xfs: fail recovery on a committed log item with no regions | 5.5 | 0.0011 | | | [CVE-2026-64415](https://patchblox.com/security/data/cve/CVE-2026-64415.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond_resched() in swap_reclaim_full... | 5.5 | 0.0009 | | | [CVE-2026-64373](https://patchblox.com/security/data/cve/CVE-2026-64373.md) | Routine | cpufreq: Fix hotplug-suspend race during reboot | 5.5 | 0.0009 | | --- Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.