{ "fix": "ALAS2023-2026-2058", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2058", "summary": "ALAS2023-2026-2058, released August 17, 2026, fixes 207 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 18 packages", "released": "2026-08-17T09:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-72194, rated Critical", "supported": true, "cveCount": 207, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00798, "maxCvss": 10, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-2058.html", "appliesTo": [ { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "bpftool-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "kernel", "productUrl": "https://patchblox.com/security/product/linux/kernel", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "kernel-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "kernel-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "kernel-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel-headers", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.1.180-225.360", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.180-225.360", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "kernel-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "kernel-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "kernel-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "kernel-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "perf", "productUrl": "https://patchblox.com/security/product/linux/perf", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "python3-perf", "productUrl": "https://patchblox.com/security/product/linux/python3-perf", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true }, { "product": "python3-perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.180-225.360.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-72194", "url": "https://patchblox.com/security/cve/CVE-2026-72194", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add depth limit to indx_find_buffer to...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00798, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80630", "url": "https://patchblox.com/security/cve/CVE-2026-80630", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00755, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72084", "url": "https://patchblox.com/security/cve/CVE-2026-72084", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72319", "url": "https://patchblox.com/security/cve/CVE-2026-72319", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72351", "url": "https://patchblox.com/security/cve/CVE-2026-72351", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72192", "url": "https://patchblox.com/security/cve/CVE-2026-72192", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound to_move in indx_insert_into_root be...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72466", "url": "https://patchblox.com/security/cve/CVE-2026-72466", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72296", "url": "https://patchblox.com/security/cve/CVE-2026-72296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00735, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72322", "url": "https://patchblox.com/security/cve/CVE-2026-72322", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed wo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72014", "url": "https://patchblox.com/security/cve/CVE-2026-72014", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range p...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00723, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68477", "url": "https://patchblox.com/security/cve/CVE-2026-68477", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72020", "url": "https://patchblox.com/security/cve/CVE-2026-72020", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72251", "url": "https://patchblox.com/security/cve/CVE-2026-72251", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74267", "url": "https://patchblox.com/security/cve/CVE-2026-74267", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_red...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72436", "url": "https://patchblox.com/security/cve/CVE-2026-72436", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don\u0027t use test_bit() in lockle...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00712, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72348", "url": "https://patchblox.com/security/cve/CVE-2026-72348", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extens...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00626, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80603", "url": "https://patchblox.com/security/cve/CVE-2026-80603", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00595, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72318", "url": "https://patchblox.com/security/cve/CVE-2026-72318", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets pars...", "priority": "Urgent", "severity": "critical", "cvss": 9.4, "epss": 0.00586, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72421", "url": "https://patchblox.com/security/cve/CVE-2026-72421", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don\u0027t ignore error route in local/mai...", "priority": "Urgent", "severity": "critical", "cvss": 10, "epss": 0.00571, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74384", "url": "https://patchblox.com/security/cve/CVE-2026-74384", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nv...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74398", "url": "https://patchblox.com/security/cve/CVE-2026-74398", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad_failure when sta...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74406", "url": "https://patchblox.com/security/cve/CVE-2026-74406", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64551", "url": "https://patchblox.com/security/cve/CVE-2026-64551", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74287", "url": "https://patchblox.com/security/cve/CVE-2026-74287", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74376", "url": "https://patchblox.com/security/cve/CVE-2026-74376", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio f...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74255", "url": "https://patchblox.com/security/cve/CVE-2026-74255", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc_l2_send_msg() Syzbot repo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74310", "url": "https://patchblox.com/security/cve/CVE-2026-74310", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vhost/net: complete zerocopy ubufs only once vh...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72083", "url": "https://patchblox.com/security/cve/CVE-2026-72083", "title": "kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72418", "url": "https://patchblox.com/security/cve/CVE-2026-72418", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: prevent connlimit drops...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72502", "url": "https://patchblox.com/security/cve/CVE-2026-72502", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74321", "url": "https://patchblox.com/security/cve/CVE-2026-74321", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrf...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80646", "url": "https://patchblox.com/security/cve/CVE-2026-80646", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72247", "url": "https://patchblox.com/security/cve/CVE-2026-72247", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74282", "url": "https://patchblox.com/security/cve/CVE-2026-74282", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74281", "url": "https://patchblox.com/security/cve/CVE-2026-74281", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer b...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0068, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64530", "url": "https://patchblox.com/security/cve/CVE-2026-64530", "title": "net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00655, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72310", "url": "https://patchblox.com/security/cve/CVE-2026-72310", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl b...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00643, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72021", "url": "https://patchblox.com/security/cve/CVE-2026-72021", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64545", "url": "https://patchblox.com/security/cve/CVE-2026-64545", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_re...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64450", "url": "https://patchblox.com/security/cve/CVE-2026-64450", "title": "tipc: fix out-of-bounds read in broadcast Gap ACK blocks", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53392", "url": "https://patchblox.com/security/cve/CVE-2026-53392", "title": "NFSv4/flexfiles: reject zero filehandle version count", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00529, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64355", "url": "https://patchblox.com/security/cve/CVE-2026-64355", "title": "bpf: Reject fragmented frames in devmap", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64560", "url": "https://patchblox.com/security/cve/CVE-2026-64560", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-lead...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00503, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64312", "url": "https://patchblox.com/security/cve/CVE-2026-64312", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64448", "url": "https://patchblox.com/security/cve/CVE-2026-64448", "title": "smb: client: restrict implied bcc[0] exemption to responses without data area", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64380", "url": "https://patchblox.com/security/cve/CVE-2026-64380", "title": "smb: client: harden POSIX SID length parsing", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80604", "url": "https://patchblox.com/security/cve/CVE-2026-80604", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_get_report for nu...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64374", "url": "https://patchblox.com/security/cve/CVE-2026-64374", "title": "sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64313", "url": "https://patchblox.com/security/cve/CVE-2026-64313", "title": "crypto: ecc - Fix carry overflow in vli multiplication", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64364", "url": "https://patchblox.com/security/cve/CVE-2026-64364", "title": "HID: multitouch: fix out-of-bounds bit access on mt_io_flags", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64435", "url": "https://patchblox.com/security/cve/CVE-2026-64435", "title": "audit: Fix data races of skb_queue_len() readers on audit_queue", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00331, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64561", "url": "https://patchblox.com/security/cve/CVE-2026-64561", "title": "KVM: x86: Check for invalid/obsolete root *after* making MMU pages available", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00273, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72108", "url": "https://patchblox.com/security/cve/CVE-2026-72108", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consiste...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80867", "url": "https://patchblox.com/security/cve/CVE-2026-80867", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: alpha/PCI: Add security_locked_down() check to p...", "priority": "High", "severity": "important", "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80875", "url": "https://patchblox.com/security/cve/CVE-2026-80875", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state l...", "priority": "High", "severity": "important", "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80876", "url": "https://patchblox.com/security/cve/CVE-2026-80876", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix event length with forced 8-byte...", "priority": "High", "severity": "important", "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72218", "url": "https://patchblox.com/security/cve/CVE-2026-72218", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file refcount leak on cached nlm...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72219", "url": "https://patchblox.com/security/cve/CVE-2026-72219", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fa...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74271", "url": "https://patchblox.com/security/cve/CVE-2026-74271", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix supplied_from allocatio...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72097", "url": "https://patchblox.com/security/cve/CVE-2026-72097", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereferen...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72193", "url": "https://patchblox.com/security/cve/CVE-2026-72193", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: cap RESTART_TABLE free-chain walker at rt...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72274", "url": "https://patchblox.com/security/cve/CVE-2026-72274", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: hecubafb: fix potential memory leak in he...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72275", "url": "https://patchblox.com/security/cve/CVE-2026-72275", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: broadsheetfb: fix potential memory leak i...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72276", "url": "https://patchblox.com/security/cve/CVE-2026-72276", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: metronomefb: fix potential memory leak in...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72290", "url": "https://patchblox.com/security/cve/CVE-2026-72290", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix GISC refcount leak on AIF en...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80620", "url": "https://patchblox.com/security/cve/CVE-2026-80620", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Revert \u0022PCI/MSI: Unmap MSI-X region on error\u0022 T...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80669", "url": "https://patchblox.com/security/cve/CVE-2026-80669", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrm_decode_session hook attachment...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63810", "url": "https://patchblox.com/security/cve/CVE-2026-63810", "title": "block: Avoid mounting the bdev pseudo-filesystem in userspace", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72342", "url": "https://patchblox.com/security/cve/CVE-2026-72342", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72343", "url": "https://patchblox.com/security/cve/CVE-2026-72343", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer a...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72478", "url": "https://patchblox.com/security/cve/CVE-2026-72478", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add bounds check to run_get_highest_vc...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72284", "url": "https://patchblox.com/security/cve/CVE-2026-72284", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72289", "url": "https://patchblox.com/security/cve/CVE-2026-72289", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72196", "url": "https://patchblox.com/security/cve/CVE-2026-72196", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp-\u003Epage_lcns[] index...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72197", "url": "https://patchblox.com/security/cve/CVE-2026-72197", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation memmo...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74256", "url": "https://patchblox.com/security/cve/CVE-2026-74256", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_po...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74262", "url": "https://patchblox.com/security/cve/CVE-2026-74262", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITE_ONCE() when changing lower socket...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72487", "url": "https://patchblox.com/security/cve/CVE-2026-72487", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr be...", "priority": "High", "severity": "high", "cvss": 7.7, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72066", "url": "https://patchblox.com/security/cve/CVE-2026-72066", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72067", "url": "https://patchblox.com/security/cve/CVE-2026-72067", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback err...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72225", "url": "https://patchblox.com/security/cve/CVE-2026-72225", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2_journal_init...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64514", "url": "https://patchblox.com/security/cve/CVE-2026-64514", "title": "userfaultfd: gate must_wait writability check on pte_present()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72255", "url": "https://patchblox.com/security/cve/CVE-2026-72255", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74380", "url": "https://patchblox.com/security/cve/CVE-2026-74380", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return valu...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68461", "url": "https://patchblox.com/security/cve/CVE-2026-68461", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72282", "url": "https://patchblox.com/security/cve/CVE-2026-72282", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsib...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72350", "url": "https://patchblox.com/security/cve/CVE-2026-72350", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72400", "url": "https://patchblox.com/security/cve/CVE-2026-72400", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed f...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72419", "url": "https://patchblox.com/security/cve/CVE-2026-72419", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: avoid invalid nat_net pointer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74296", "url": "https://patchblox.com/security/cve/CVE-2026-74296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW\u2011provided UAR index rat...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74297", "url": "https://patchblox.com/security/cve/CVE-2026-74297", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE si...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74305", "url": "https://patchblox.com/security/cve/CVE-2026-74305", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for pr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80598", "url": "https://patchblox.com/security/cve/CVE-2026-80598", "title": "ntfs3: fix out-of-bounds read in decompress_lznt", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80677", "url": "https://patchblox.com/security/cve/CVE-2026-80677", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: driver core: use READ_ONCE() for dev-\u003Edriver in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72390", "url": "https://patchblox.com/security/cve/CVE-2026-72390", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: Introduce slaves_lock to av...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72347", "url": "https://patchblox.com/security/cve/CVE-2026-72347", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift par...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74346", "url": "https://patchblox.com/security/cve/CVE-2026-74346", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registrati...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72072", "url": "https://patchblox.com/security/cve/CVE-2026-72072", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadat...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64317", "url": "https://patchblox.com/security/cve/CVE-2026-64317", "title": "isofs: bound Rock Ridge symlink components to the SL record", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64604", "url": "https://patchblox.com/security/cve/CVE-2026-64604", "title": "KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72476", "url": "https://patchblox.com/security/cve/CVE-2026-72476", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma_r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53402", "url": "https://patchblox.com/security/cve/CVE-2026-53402", "title": "fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63826", "url": "https://patchblox.com/security/cve/CVE-2026-63826", "title": "fbdev: fix use-after-free in store_modes()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74283", "url": "https://patchblox.com/security/cve/CVE-2026-74283", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ntipc: require net admin for TIPCv2 netlink mutato...", "priority": "High", "severity": "moderate", "cvss": 9.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72102", "url": "https://patchblox.com/security/cve/CVE-2026-72102", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_re...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72136", "url": "https://patchblox.com/security/cve/CVE-2026-72136", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in t...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64296", "url": "https://patchblox.com/security/cve/CVE-2026-64296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_e...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64322", "url": "https://patchblox.com/security/cve/CVE-2026-64322", "title": "udf: validate sparing table length as an entry count, not a byte count", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72036", "url": "https://patchblox.com/security/cve/CVE-2026-72036", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue ca...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72105", "url": "https://patchblox.com/security/cve/CVE-2026-72105", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit mach...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72120", "url": "https://patchblox.com/security/cve/CVE-2026-72120", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu list annotations and o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72123", "url": "https://patchblox.com/security/cve/CVE-2026-72123", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ncan: bcm: defer rx_op deallocation to workqueue t...", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72135", "url": "https://patchblox.com/security/cve/CVE-2026-72135", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72195", "url": "https://patchblox.com/security/cve/CVE-2026-72195", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attr_off in UpdateResidentValue...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72250", "url": "https://patchblox.com/security/cve/CVE-2026-72250", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_reasm: guard mac_header...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72435", "url": "https://patchblox.com/security/cve/CVE-2026-72435", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72450", "url": "https://patchblox.com/security/cve/CVE-2026-72450", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen dur...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72243", "url": "https://patchblox.com/security/cve/CVE-2026-72243", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TC...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64593", "url": "https://patchblox.com/security/cve/CVE-2026-64593", "title": "btrfs: do not trim a device which is not writeable", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64299", "url": "https://patchblox.com/security/cve/CVE-2026-64299", "title": "tracing: Prevent out-of-bounds read in glob matching", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64323", "url": "https://patchblox.com/security/cve/CVE-2026-64323", "title": "udf: validate VAT header length against the VAT inode size", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72389", "url": "https://patchblox.com/security/cve/CVE-2026-72389", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bridge: stp: Fix a potential use-after-free when...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72122", "url": "https://patchblox.com/security/cve/CVE-2026-72122", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix lockless bound/ifindex race and si...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64324", "url": "https://patchblox.com/security/cve/CVE-2026-64324", "title": "udf: validate free block extents against the partition length", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80865", "url": "https://patchblox.com/security/cve/CVE-2026-80865", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Add missing access_ok call to copy_user_sym...", "priority": "High", "severity": "important", "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80880", "url": "https://patchblox.com/security/cve/CVE-2026-80880", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP rereg_mr...", "priority": "High", "severity": "important", "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64306", "url": "https://patchblox.com/security/cve/CVE-2026-64306", "title": "crypto: drbg - Fix returning success on failure in CTR_DRBG", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72061", "url": "https://patchblox.com/security/cve/CVE-2026-72061", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAP_NET_ADMIN in the device ne...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63806", "url": "https://patchblox.com/security/cve/CVE-2026-63806", "title": "KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72052", "url": "https://patchblox.com/security/cve/CVE-2026-72052", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the devic...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72053", "url": "https://patchblox.com/security/cve/CVE-2026-72053", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAP_NET_ADMIN in the device n...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72054", "url": "https://patchblox.com/security/cve/CVE-2026-72054", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip_vti: require CAP_NET_ADMIN in the device...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72055", "url": "https://patchblox.com/security/cve/CVE-2026-72055", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the devic...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64456", "url": "https://patchblox.com/security/cve/CVE-2026-64456", "title": "hwrng: virtio: clamp device-reported used.len at copy_data()", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63829", "url": "https://patchblox.com/security/cve/CVE-2026-63829", "title": "net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64298", "url": "https://patchblox.com/security/cve/CVE-2026-64298", "title": "NFSv4: include MAY_WRITE in open permission mask for O_TRUNC", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74578", "url": "https://patchblox.com/security/cve/CVE-2026-74578", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force synchronous proce...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64548", "url": "https://patchblox.com/security/cve/CVE-2026-64548", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy \u002B len in b...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64552", "url": "https://patchblox.com/security/cve/CVE-2026-64552", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() rece...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64533", "url": "https://patchblox.com/security/cve/CVE-2026-64533", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay con...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64475", "url": "https://patchblox.com/security/cve/CVE-2026-64475", "title": "vfio/pci: Release the VGA arbiter client on register_device() failure", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64422", "url": "https://patchblox.com/security/cve/CVE-2026-64422", "title": "net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53400", "url": "https://patchblox.com/security/cve/CVE-2026-53400", "title": "i2c: core: fix adapter registration race", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64077", "url": "https://patchblox.com/security/cve/CVE-2026-64077", "title": "netfilter: ebtables: move to two-stage removal scheme", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64432", "url": "https://patchblox.com/security/cve/CVE-2026-64432", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate Dirty Page Table capacity in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64279", "url": "https://patchblox.com/security/cve/CVE-2026-64279", "title": "i2c: core: fix adapter deregistration race", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64532", "url": "https://patchblox.com/security/cve/CVE-2026-64532", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateR...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64423", "url": "https://patchblox.com/security/cve/CVE-2026-64423", "title": "ipv4: igmp: remove multicast group from hash table on device destruction", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74365", "url": "https://patchblox.com/security/cve/CVE-2026-74365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Handle preemption in BTT lane acquis...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64411", "url": "https://patchblox.com/security/cve/CVE-2026-64411", "title": "netfilter: ebtables: terminate table name before find_table_lock()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64412", "url": "https://patchblox.com/security/cve/CVE-2026-64412", "title": "netfilter: ebtables: module names must be null-terminated", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64546", "url": "https://patchblox.com/security/cve/CVE-2026-64546", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block(...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64352", "url": "https://patchblox.com/security/cve/CVE-2026-64352", "title": "bpf: Allow LPM map access from sleepable BPF programs", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64381", "url": "https://patchblox.com/security/cve/CVE-2026-64381", "title": "smb: client: Fix next buffer leak in receive_encrypted_standard()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72444", "url": "https://patchblox.com/security/cve/CVE-2026-72444", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: flow_dissector: check device type before reading...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74288", "url": "https://patchblox.com/security/cve/CVE-2026-74288", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don\u0027t dump dying fib_rule in fib...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74330", "url": "https://patchblox.com/security/cve/CVE-2026-74330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -\u003Es_childre...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80613", "url": "https://patchblox.com/security/cve/CVE-2026-80613", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path Du...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53393", "url": "https://patchblox.com/security/cve/CVE-2026-53393", "title": "nfsd: reset write verifier on deferred writeback errors", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64371", "url": "https://patchblox.com/security/cve/CVE-2026-64371", "title": "proc: protect ptrace_may_access() with exec_update_lock (part 1)", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64436", "url": "https://patchblox.com/security/cve/CVE-2026-64436", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_key_len for IPComp s...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64413", "url": "https://patchblox.com/security/cve/CVE-2026-64413", "title": "netfilter: ebtables: zero chainstack array", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64266", "url": "https://patchblox.com/security/cve/CVE-2026-64266", "title": "fuse: re-lock request before returning from fuse_ref_folio()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80664", "url": "https://patchblox.com/security/cve/CVE-2026-80664", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nat: reject unsupported target fam...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64189", "url": "https://patchblox.com/security/cve/CVE-2026-64189", "title": "netfilter: ipset: fix race between dump and ip_set_list resize", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64372", "url": "https://patchblox.com/security/cve/CVE-2026-64372", "title": "cpufreq: pcc: fix use-after-free and double free in _OSC evaluation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74359", "url": "https://patchblox.com/security/cve/CVE-2026-74359", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: configfs_lookup(): don\u0027t leave -\u003Es_dentry dangli...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74363", "url": "https://patchblox.com/security/cve/CVE-2026-74363", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix UAF by restoring RCU-delayed inode free...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64375", "url": "https://patchblox.com/security/cve/CVE-2026-64375", "title": "proc: protect ptrace_may_access() with exec_update_lock (FD links)", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64378", "url": "https://patchblox.com/security/cve/CVE-2026-64378", "title": "writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74259", "url": "https://patchblox.com/security/cve/CVE-2026-74259", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: remove all cifs files before kill super C...", "priority": "High", "severity": "high", "cvss": 8.4, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74331", "url": "https://patchblox.com/security/cve/CVE-2026-74331", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix recursive lock in device_ca...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72010", "url": "https://patchblox.com/security/cve/CVE-2026-72010", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effective_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72068", "url": "https://patchblox.com/security/cve/CVE-2026-72068", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in upda...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72223", "url": "https://patchblox.com/security/cve/CVE-2026-72223", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discov...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72224", "url": "https://patchblox.com/security/cve/CVE-2026-72224", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on btt_init() error path...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72326", "url": "https://patchblox.com/security/cve/CVE-2026-72326", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cake: reject overhead values that und...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72349", "url": "https://patchblox.com/security/cve/CVE-2026-72349", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72447", "url": "https://patchblox.com/security/cve/CVE-2026-72447", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74395", "url": "https://patchblox.com/security/cve/CVE-2026-74395", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix devx subscribe-event unwind NULL...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72428", "url": "https://patchblox.com/security/cve/CVE-2026-72428", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks chec...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72138", "url": "https://patchblox.com/security/cve/CVE-2026-72138", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gn...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72152", "url": "https://patchblox.com/security/cve/CVE-2026-72152", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_tis_spi: Use wait_woken() in wait_for_t...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72256", "url": "https://patchblox.com/security/cve/CVE-2026-72256", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_cluster: reject template conntrack...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72433", "url": "https://patchblox.com/security/cve/CVE-2026-72433", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIF...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74284", "url": "https://patchblox.com/security/cve/CVE-2026-74284", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: Don\u0027t make class passive tw...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72177", "url": "https://patchblox.com/security/cve/CVE-2026-72177", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in ac...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72437", "url": "https://patchblox.com/security/cve/CVE-2026-72437", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid1: free r1_bio when REQ_NOWAIT is set and...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74327", "url": "https://patchblox.com/security/cve/CVE-2026-74327", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in is_vm_a...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74329", "url": "https://patchblox.com/security/cve/CVE-2026-74329", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unr...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74399", "url": "https://patchblox.com/security/cve/CVE-2026-74399", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evm_xattrs read buf...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64538", "url": "https://patchblox.com/security/cve/CVE-2026-64538", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change()", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74382", "url": "https://patchblox.com/security/cve/CVE-2026-74382", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_bpf: prevent unbounded recursion...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64465", "url": "https://patchblox.com/security/cve/CVE-2026-64465", "title": "usb: xhci: Fix sleep in atomic context in xhci_free_streams()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64472", "url": "https://patchblox.com/security/cve/CVE-2026-64472", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64458", "url": "https://patchblox.com/security/cve/CVE-2026-64458", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: handle extreme intervals in...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64476", "url": "https://patchblox.com/security/cve/CVE-2026-64476", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle_d3 per device When...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64544", "url": "https://patchblox.com/security/cve/CVE-2026-64544", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - fix OOB read in pefile...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64553", "url": "https://patchblox.com/security/cve/CVE-2026-64553", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLE_ATTR_DATA...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64512", "url": "https://patchblox.com/security/cve/CVE-2026-64512", "title": "ACPI: CPPC: Suppress UBSAN warning caused by field misuse", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74290", "url": "https://patchblox.com/security/cve/CVE-2026-74290", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: Dont expose folded kernel p...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74379", "url": "https://patchblox.com/security/cve/CVE-2026-74379", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous reso...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74424", "url": "https://patchblox.com/security/cve/CVE-2026-74424", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbcon: fix NULL pointer dereference for a consol...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64370", "url": "https://patchblox.com/security/cve/CVE-2026-64370", "title": "posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64425", "url": "https://patchblox.com/security/cve/CVE-2026-64425", "title": "io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64187", "url": "https://patchblox.com/security/cve/CVE-2026-64187", "title": "xfs: fail recovery on a committed log item with no regions", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64373", "url": "https://patchblox.com/security/cve/CVE-2026-64373", "title": "cpufreq: Fix hotplug-suspend race during reboot", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00089, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T13:56:55Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }