{ "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "summary": "ALAS2023-2026-2071, released August 31, 2026, fixes 293 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 19 packages", "released": "2026-08-31T09:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-72194, rated Critical", "supported": true, "cveCount": 293, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00803, "maxCvss": 10, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-2071.html", "appliesTo": [ { "product": "bpftool6.18", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "bpftool6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.18.41-94.142", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.18.41-94.142", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel6.18", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "kernel6.18-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "kernel6.18-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-headers", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "kernel6.18-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "kernel6.18-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "kernel6.18-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "kernel6.18-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "kernel6.18-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "microvm-kernel6.18", "productUrl": "https://patchblox.com/security/product/linux/microvm-kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "perf6.18", "productUrl": "https://patchblox.com/security/product/linux/perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "perf6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "python3-perf6.18", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true }, { "product": "python3-perf6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-72194", "url": "https://patchblox.com/security/cve/CVE-2026-72194", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add depth limit to indx_find_buffer to...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00798, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80630", "url": "https://patchblox.com/security/cve/CVE-2026-80630", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00755, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72084", "url": "https://patchblox.com/security/cve/CVE-2026-72084", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72299", "url": "https://patchblox.com/security/cve/CVE-2026-72299", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tra...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72319", "url": "https://patchblox.com/security/cve/CVE-2026-72319", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72351", "url": "https://patchblox.com/security/cve/CVE-2026-72351", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72192", "url": "https://patchblox.com/security/cve/CVE-2026-72192", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: bound to_move in indx_insert_into_root be...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72466", "url": "https://patchblox.com/security/cve/CVE-2026-72466", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72296", "url": "https://patchblox.com/security/cve/CVE-2026-72296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00735, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72322", "url": "https://patchblox.com/security/cve/CVE-2026-72322", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed wo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72323", "url": "https://patchblox.com/security/cve/CVE-2026-72323", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72014", "url": "https://patchblox.com/security/cve/CVE-2026-72014", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range p...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00723, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68476", "url": "https://patchblox.com/security/cve/CVE-2026-68476", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68477", "url": "https://patchblox.com/security/cve/CVE-2026-68477", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72020", "url": "https://patchblox.com/security/cve/CVE-2026-72020", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72041", "url": "https://patchblox.com/security/cve/CVE-2026-72041", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: espintcp: use sk_msg_free_partial to fix partial...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72251", "url": "https://patchblox.com/security/cve/CVE-2026-72251", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74267", "url": "https://patchblox.com/security/cve/CVE-2026-74267", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_red...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72436", "url": "https://patchblox.com/security/cve/CVE-2026-72436", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don\u0027t use test_bit() in lockle...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00712, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72137", "url": "https://patchblox.com/security/cve/CVE-2026-72137", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: nat_keepalive: avoid double free on send e...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.0071, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72191", "url": "https://patchblox.com/security/cve/CVE-2026-72191", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx_inser...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72451", "url": "https://patchblox.com/security/cve/CVE-2026-72451", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The x...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00671, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72366", "url": "https://patchblox.com/security/cve/CVE-2026-72366", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle as...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00663, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74361", "url": "https://patchblox.com/security/cve/CVE-2026-74361", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme: fix FDP fdpcidx bounds check The fdpcidx...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00649, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72317", "url": "https://patchblox.com/security/cve/CVE-2026-72317", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connec...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00644, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72217", "url": "https://patchblox.com/security/cve/CVE-2026-72217", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores bef...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72221", "url": "https://patchblox.com/security/cve/CVE-2026-72221", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callbac...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72222", "url": "https://patchblox.com/security/cve/CVE-2026-72222", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72139", "url": "https://patchblox.com/security/cve/CVE-2026-72139", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: defer md5sig_info kfree past RCU grace peri...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00631, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72220", "url": "https://patchblox.com/security/cve/CVE-2026-72220", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: harden rq_procinfo lifecycle to prevent...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00631, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72348", "url": "https://patchblox.com/security/cve/CVE-2026-72348", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extens...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00626, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80603", "url": "https://patchblox.com/security/cve/CVE-2026-80603", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00595, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72318", "url": "https://patchblox.com/security/cve/CVE-2026-72318", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets pars...", "priority": "Urgent", "severity": "critical", "cvss": 9.4, "epss": 0.00586, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80637", "url": "https://patchblox.com/security/cve/CVE-2026-80637", "title": "netfilter: synproxy: fix unaligned memory access in timestamp adjustment", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00585, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72421", "url": "https://patchblox.com/security/cve/CVE-2026-72421", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don\u0027t ignore error route in local/mai...", "priority": "Urgent", "severity": "critical", "cvss": 10, "epss": 0.00571, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74384", "url": "https://patchblox.com/security/cve/CVE-2026-74384", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nv...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74398", "url": "https://patchblox.com/security/cve/CVE-2026-74398", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad_failure when sta...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74406", "url": "https://patchblox.com/security/cve/CVE-2026-74406", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64551", "url": "https://patchblox.com/security/cve/CVE-2026-64551", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74287", "url": "https://patchblox.com/security/cve/CVE-2026-74287", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74376", "url": "https://patchblox.com/security/cve/CVE-2026-74376", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio f...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74255", "url": "https://patchblox.com/security/cve/CVE-2026-74255", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc_l2_send_msg() Syzbot repo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64068", "url": "https://patchblox.com/security/cve/CVE-2026-64068", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding n...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00353, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74439", "url": "https://patchblox.com/security/cve/CVE-2026-74439", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing dow...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72277", "url": "https://patchblox.com/security/cve/CVE-2026-72277", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if guest VNCR isn\u0027t n...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72278", "url": "https://patchblox.com/security/cve/CVE-2026-72278", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Re-translate VNCR before injecti...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72279", "url": "https://patchblox.com/security/cve/CVE-2026-72279", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Respect read-only PFN when mappi...", "priority": "Urgent", "severity": "critical", "cvss": 9, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72288", "url": "https://patchblox.com/security/cve/CVE-2026-72288", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80607", "url": "https://patchblox.com/security/cve/CVE-2026-80607", "title": "tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80671", "url": "https://patchblox.com/security/cve/CVE-2026-80671", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix register_pid() overflow, strcpy,...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74310", "url": "https://patchblox.com/security/cve/CVE-2026-74310", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vhost/net: complete zerocopy ubufs only once vh...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72398", "url": "https://patchblox.com/security/cve/CVE-2026-72398", "title": "sctp: add INIT verification after cookie unpacking", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00803, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74396", "url": "https://patchblox.com/security/cve/CVE-2026-74396", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix UMR XLT cleanup on ODP populate f...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00732, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72083", "url": "https://patchblox.com/security/cve/CVE-2026-72083", "title": "kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72418", "url": "https://patchblox.com/security/cve/CVE-2026-72418", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: prevent connlimit drops...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72502", "url": "https://patchblox.com/security/cve/CVE-2026-72502", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74321", "url": "https://patchblox.com/security/cve/CVE-2026-74321", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrf...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80646", "url": "https://patchblox.com/security/cve/CVE-2026-80646", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74268", "url": "https://patchblox.com/security/cve/CVE-2026-74268", "title": "tcp: clear sock_ops cb flags before force-closing a child socket", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72242", "url": "https://patchblox.com/security/cve/CVE-2026-72242", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72247", "url": "https://patchblox.com/security/cve/CVE-2026-72247", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74282", "url": "https://patchblox.com/security/cve/CVE-2026-74282", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74281", "url": "https://patchblox.com/security/cve/CVE-2026-74281", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer b...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0068, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64530", "url": "https://patchblox.com/security/cve/CVE-2026-64530", "title": "net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00655, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72472", "url": "https://patchblox.com/security/cve/CVE-2026-72472", "title": "nfs: use nfsi-\u003Erwsem to protect traversal of the file lock list", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00652, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72420", "url": "https://patchblox.com/security/cve/CVE-2026-72420", "title": "md/raid5: avoid R5_Overlap races while breaking stripe batches", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00648, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72310", "url": "https://patchblox.com/security/cve/CVE-2026-72310", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl b...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00643, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72356", "url": "https://patchblox.com/security/cve/CVE-2026-72356", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in c...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0063, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74316", "url": "https://patchblox.com/security/cve/CVE-2026-74316", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4_drop_revoked_s...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0063, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72330", "url": "https://patchblox.com/security/cve/CVE-2026-72330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_re...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00622, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72367", "url": "https://patchblox.com/security/cve/CVE-2026-72367", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iomap: guard io_size EOF trim against concurrent...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00601, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72021", "url": "https://patchblox.com/security/cve/CVE-2026-72021", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72035", "url": "https://patchblox.com/security/cve/CVE-2026-72035", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: Replace direct dequeue ca...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72057", "url": "https://patchblox.com/security/cve/CVE-2026-72057", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across def...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00585, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64545", "url": "https://patchblox.com/security/cve/CVE-2026-64545", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_re...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72320", "url": "https://patchblox.com/security/cve/CVE-2026-72320", "title": "netfilter: nft_lookup: fix catchall element handling with inverted lookups", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00569, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72099", "url": "https://patchblox.com/security/cve/CVE-2026-72099", "title": "kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00546, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64560", "url": "https://patchblox.com/security/cve/CVE-2026-64560", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-lead...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00503, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72100", "url": "https://patchblox.com/security/cve/CVE-2026-72100", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of lim...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00464, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80604", "url": "https://patchblox.com/security/cve/CVE-2026-80604", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_get_report for nu...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72227", "url": "https://patchblox.com/security/cve/CVE-2026-72227", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num_dests h...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00331, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64561", "url": "https://patchblox.com/security/cve/CVE-2026-64561", "title": "KVM: x86: Check for invalid/obsolete root *after* making MMU pages available", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00273, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72108", "url": "https://patchblox.com/security/cve/CVE-2026-72108", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consiste...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74356", "url": "https://patchblox.com/security/cve/CVE-2026-74356", "title": "vhost: fix vhost_get_avail_idx for a non empty ring", "priority": "High", "severity": "Moderate", "cvss": 7.4, "epss": 0.00247, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80867", "url": "https://patchblox.com/security/cve/CVE-2026-80867", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: alpha/PCI: Add security_locked_down() check to p...", "priority": "High", "severity": "important", "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80875", "url": "https://patchblox.com/security/cve/CVE-2026-80875", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in TCP state l...", "priority": "High", "severity": "important", "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80876", "url": "https://patchblox.com/security/cve/CVE-2026-80876", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix event length with forced 8-byte...", "priority": "High", "severity": "important", "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72218", "url": "https://patchblox.com/security/cve/CVE-2026-72218", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file refcount leak on cached nlm...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72219", "url": "https://patchblox.com/security/cve/CVE-2026-72219", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fa...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74271", "url": "https://patchblox.com/security/cve/CVE-2026-74271", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix supplied_from allocatio...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72097", "url": "https://patchblox.com/security/cve/CVE-2026-72097", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity: fix a possible NULL pointer dereferen...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72193", "url": "https://patchblox.com/security/cve/CVE-2026-72193", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: cap RESTART_TABLE free-chain walker at rt...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72274", "url": "https://patchblox.com/security/cve/CVE-2026-72274", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: hecubafb: fix potential memory leak in he...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72275", "url": "https://patchblox.com/security/cve/CVE-2026-72275", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: broadsheetfb: fix potential memory leak i...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72276", "url": "https://patchblox.com/security/cve/CVE-2026-72276", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: metronomefb: fix potential memory leak in...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72290", "url": "https://patchblox.com/security/cve/CVE-2026-72290", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix GISC refcount leak on AIF en...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80602", "url": "https://patchblox.com/security/cve/CVE-2026-80602", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80620", "url": "https://patchblox.com/security/cve/CVE-2026-80620", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Revert \u0022PCI/MSI: Unmap MSI-X region on error\u0022 T...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80669", "url": "https://patchblox.com/security/cve/CVE-2026-80669", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrm_decode_session hook attachment...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72363", "url": "https://patchblox.com/security/cve/CVE-2026-72363", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio state after ENOMEM whilst under...", "priority": "High", "severity": "important", "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80636", "url": "https://patchblox.com/security/cve/CVE-2026-80636", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: revert ct extension genid...", "priority": "High", "severity": "important", "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80667", "url": "https://patchblox.com/security/cve/CVE-2026-80667", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete() on...", "priority": "High", "severity": "important", "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80665", "url": "https://patchblox.com/security/cve/CVE-2026-80665", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Inject SEA if kvm_translate_vncr...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72006", "url": "https://patchblox.com/security/cve/CVE-2026-72006", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: free mlx5_st_idx_data on final dealloc...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72016", "url": "https://patchblox.com/security/cve/CVE-2026-72016", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpu/hotplug: Fix NULL kobject warning in cpuhp_s...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72150", "url": "https://patchblox.com/security/cve/CVE-2026-72150", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix uninitialized xprt_create_args struc...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72365", "url": "https://patchblox.com/security/cve/CVE-2026-72365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writethrough to use collection offloa...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72385", "url": "https://patchblox.com/security/cve/CVE-2026-72385", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing/fprobe: Fix NULL pointer dereference in...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74266", "url": "https://patchblox.com/security/cve/CVE-2026-74266", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_dualpi2: Do not call qdisc_tree_r...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74335", "url": "https://patchblox.com/security/cve/CVE-2026-74335", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL pointer dereference in bpf_task_fr...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74358", "url": "https://patchblox.com/security/cve/CVE-2026-74358", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 6...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74360", "url": "https://patchblox.com/security/cve/CVE-2026-74360", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reject exclusive maps for bpf_map_elem iter...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74372", "url": "https://patchblox.com/security/cve/CVE-2026-74372", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: raid1: fix nr_pending leak in REQ_ATOMIC bad-blo...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74400", "url": "https://patchblox.com/security/cve/CVE-2026-74400", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix crash in bpf_[set|remove]_dentry_xattr...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80621", "url": "https://patchblox.com/security/cve/CVE-2026-80621", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit()...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80873", "url": "https://patchblox.com/security/cve/CVE-2026-80873", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Write ESR_EL2 for injected neste...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72151", "url": "https://patchblox.com/security/cve/CVE-2026-72151", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completio...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72342", "url": "https://patchblox.com/security/cve/CVE-2026-72342", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72343", "url": "https://patchblox.com/security/cve/CVE-2026-72343", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer a...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72478", "url": "https://patchblox.com/security/cve/CVE-2026-72478", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: add bounds check to run_get_highest_vc...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74383", "url": "https://patchblox.com/security/cve/CVE-2026-74383", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix out-of-bounds access in nvme_setup...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72284", "url": "https://patchblox.com/security/cve/CVE-2026-72284", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72280", "url": "https://patchblox.com/security/cve/CVE-2026-72280", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72289", "url": "https://patchblox.com/security/cve/CVE-2026-72289", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72196", "url": "https://patchblox.com/security/cve/CVE-2026-72196", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound copy_lcns dp-\u003Epage_lcns[] index...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72197", "url": "https://patchblox.com/security/cve/CVE-2026-72197", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound DeleteIndexEntryAllocation memmo...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74256", "url": "https://patchblox.com/security/cve/CVE-2026-74256", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_po...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74262", "url": "https://patchblox.com/security/cve/CVE-2026-74262", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: kcm: use WRITE_ONCE() when changing lower socket...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72487", "url": "https://patchblox.com/security/cve/CVE-2026-72487", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr be...", "priority": "High", "severity": "high", "cvss": 7.7, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72425", "url": "https://patchblox.com/security/cve/CVE-2026-72425", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_rese...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74355", "url": "https://patchblox.com/security/cve/CVE-2026-74355", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix RB-tree corruption in probe erro...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74364", "url": "https://patchblox.com/security/cve/CVE-2026-74364", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reject exclusive maps as inner maps in map-...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72283", "url": "https://patchblox.com/security/cve/CVE-2026-72283", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Nullify irqfd-\u003Eproducer if updating IR...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72066", "url": "https://patchblox.com/security/cve/CVE-2026-72066", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72067", "url": "https://patchblox.com/security/cve/CVE-2026-72067", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback err...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72225", "url": "https://patchblox.com/security/cve/CVE-2026-72225", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2_journal_init...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72111", "url": "https://patchblox.com/security/cve/CVE-2026-72111", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register bounds before narrowing retv...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72255", "url": "https://patchblox.com/security/cve/CVE-2026-72255", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74380", "url": "https://patchblox.com/security/cve/CVE-2026-74380", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return valu...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64287", "url": "https://patchblox.com/security/cve/CVE-2026-64287", "title": "KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72282", "url": "https://patchblox.com/security/cve/CVE-2026-72282", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsib...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72350", "url": "https://patchblox.com/security/cve/CVE-2026-72350", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72375", "url": "https://patchblox.com/security/cve/CVE-2026-72375", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix reinitialisation of the inode, in parti...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72400", "url": "https://patchblox.com/security/cve/CVE-2026-72400", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed f...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72419", "url": "https://patchblox.com/security/cve/CVE-2026-72419", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: avoid invalid nat_net pointer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72470", "url": "https://patchblox.com/security/cve/CVE-2026-72470", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: resize log-\u003Eone_page_buf when adopting...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74264", "url": "https://patchblox.com/security/cve/CVE-2026-74264", "title": "net: watchdog: fix refcount tracking races", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74296", "url": "https://patchblox.com/security/cve/CVE-2026-74296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW\u2011provided UAR index rat...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74297", "url": "https://patchblox.com/security/cve/CVE-2026-74297", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE si...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74305", "url": "https://patchblox.com/security/cve/CVE-2026-74305", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for pr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74417", "url": "https://patchblox.com/security/cve/CVE-2026-74417", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeon_align...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80598", "url": "https://patchblox.com/security/cve/CVE-2026-80598", "title": "ntfs3: fix out-of-bounds read in decompress_lznt", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80677", "url": "https://patchblox.com/security/cve/CVE-2026-80677", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: driver core: use READ_ONCE() for dev-\u003Edriver in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72286", "url": "https://patchblox.com/security/cve/CVE-2026-72286", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirr...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72027", "url": "https://patchblox.com/security/cve/CVE-2026-72027", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle free_pages_prepare() prope...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72034", "url": "https://patchblox.com/security/cve/CVE-2026-72034", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fhandle: reject detached mounts in capable_wrt_m...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72352", "url": "https://patchblox.com/security/cve/CVE-2026-72352", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix hid_bpf_get_data() range check hi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72452", "url": "https://patchblox.com/security/cve/CVE-2026-72452", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after d...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74344", "url": "https://patchblox.com/security/cve/CVE-2026-74344", "title": "bpf: Clear rb node linkage when freeing bpf_rb_root", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74371", "url": "https://patchblox.com/security/cve/CVE-2026-74371", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix BPF_PROG_QUERY OOB write and cgroup bac...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72183", "url": "https://patchblox.com/security/cve/CVE-2026-72183", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on th...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72390", "url": "https://patchblox.com/security/cve/CVE-2026-72390", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: Introduce slaves_lock to av...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72347", "url": "https://patchblox.com/security/cve/CVE-2026-72347", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift par...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72416", "url": "https://patchblox.com/security/cve/CVE-2026-72416", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_compat: ebtables emulation must r...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72042", "url": "https://patchblox.com/security/cve/CVE-2026-72042", "title": "ipmi: Fix user refcount underflow in event delivery", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72095", "url": "https://patchblox.com/security/cve/CVE-2026-72095", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dma-fence: Make dma_fence_dedup_array() robust a...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72357", "url": "https://patchblox.com/security/cve/CVE-2026-72357", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: uprobes/x86: Use proper mm_struct in __in_uprobe...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74346", "url": "https://patchblox.com/security/cve/CVE-2026-74346", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registrati...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72072", "url": "https://patchblox.com/security/cve/CVE-2026-72072", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadat...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72476", "url": "https://patchblox.com/security/cve/CVE-2026-72476", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma_r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72364", "url": "https://patchblox.com/security/cve/CVE-2026-72364", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writeback error handling Fix the err...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72071", "url": "https://patchblox.com/security/cve/CVE-2026-72071", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Fix use-after-free in user_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72427", "url": "https://patchblox.com/security/cve/CVE-2026-72427", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF_F_P...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80675", "url": "https://patchblox.com/security/cve/CVE-2026-80675", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libbpf: Reject non-exclusive metadata maps in th...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74283", "url": "https://patchblox.com/security/cve/CVE-2026-74283", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ntipc: require net admin for TIPCv2 netlink mutato...", "priority": "High", "severity": "moderate", "cvss": 9.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72102", "url": "https://patchblox.com/security/cve/CVE-2026-72102", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_re...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72136", "url": "https://patchblox.com/security/cve/CVE-2026-72136", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in t...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72036", "url": "https://patchblox.com/security/cve/CVE-2026-72036", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue ca...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72105", "url": "https://patchblox.com/security/cve/CVE-2026-72105", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit mach...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72110", "url": "https://patchblox.com/security/cve/CVE-2026-72110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe -\u003Ebpf_storage before bailouts tha...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72120", "url": "https://patchblox.com/security/cve/CVE-2026-72120", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu list annotations and o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72123", "url": "https://patchblox.com/security/cve/CVE-2026-72123", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ncan: bcm: defer rx_op deallocation to workqueue t...", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72135", "url": "https://patchblox.com/security/cve/CVE-2026-72135", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72172", "url": "https://patchblox.com/security/cve/CVE-2026-72172", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for Z...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72195", "url": "https://patchblox.com/security/cve/CVE-2026-72195", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound attr_off in UpdateResidentValue...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72250", "url": "https://patchblox.com/security/cve/CVE-2026-72250", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_reasm: guard mac_header...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72252", "url": "https://patchblox.com/security/cve/CVE-2026-72252", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: don\u0027t leak bad clone...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72435", "url": "https://patchblox.com/security/cve/CVE-2026-72435", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72450", "url": "https://patchblox.com/security/cve/CVE-2026-72450", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen dur...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72434", "url": "https://patchblox.com/security/cve/CVE-2026-72434", "title": "netfilter: ipset: make sure gc is properly stopped", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74286", "url": "https://patchblox.com/security/cve/CVE-2026-74286", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: pfcp: allocate per-cpu tstats for PFCP netd...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72338", "url": "https://patchblox.com/security/cve/CVE-2026-72338", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_pedit: fix TOCTOU heap OOB write...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72243", "url": "https://patchblox.com/security/cve/CVE-2026-72243", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TC...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72383", "url": "https://patchblox.com/security/cve/CVE-2026-72383", "title": "sctp: fix addr_wq_timer race in sctp_free_addr_wq()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72389", "url": "https://patchblox.com/security/cve/CVE-2026-72389", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bridge: stp: Fix a potential use-after-free when...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72122", "url": "https://patchblox.com/security/cve/CVE-2026-72122", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix lockless bound/ifindex race and si...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72213", "url": "https://patchblox.com/security/cve/CVE-2026-72213", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix hugetlb cgroup rsvd charge/uncha...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64227", "url": "https://patchblox.com/security/cve/CVE-2026-64227", "title": "ACPI: driver: Check ACPI_COMPANION() against NULL during probe", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80865", "url": "https://patchblox.com/security/cve/CVE-2026-80865", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Add missing access_ok call to copy_user_sym...", "priority": "High", "severity": "important", "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80880", "url": "https://patchblox.com/security/cve/CVE-2026-80880", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP rereg_mr...", "priority": "High", "severity": "important", "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72061", "url": "https://patchblox.com/security/cve/CVE-2026-72061", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAP_NET_ADMIN in the device ne...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72051", "url": "https://patchblox.com/security/cve/CVE-2026-72051", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_tunnel: require CAP_NET_ADMIN in the de...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72052", "url": "https://patchblox.com/security/cve/CVE-2026-72052", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the devic...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72053", "url": "https://patchblox.com/security/cve/CVE-2026-72053", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAP_NET_ADMIN in the device n...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72054", "url": "https://patchblox.com/security/cve/CVE-2026-72054", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip_vti: require CAP_NET_ADMIN in the device...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72055", "url": "https://patchblox.com/security/cve/CVE-2026-72055", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the devic...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74578", "url": "https://patchblox.com/security/cve/CVE-2026-74578", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force synchronous proce...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64548", "url": "https://patchblox.com/security/cve/CVE-2026-64548", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy \u002B len in b...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64552", "url": "https://patchblox.com/security/cve/CVE-2026-64552", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() rece...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64533", "url": "https://patchblox.com/security/cve/CVE-2026-64533", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcns_follow in log_replay con...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53005", "url": "https://patchblox.com/security/cve/CVE-2026-53005", "title": "af_unix: Drop all SCM attributes for SOCKMAP.", "priority": "High", "severity": "Important", "cvss": 8.3, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72405", "url": "https://patchblox.com/security/cve/CVE-2026-72405", "title": "net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64532", "url": "https://patchblox.com/security/cve/CVE-2026-64532", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFS_DE view.data_off in UpdateR...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74365", "url": "https://patchblox.com/security/cve/CVE-2026-74365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Handle preemption in BTT lane acquis...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72012", "url": "https://patchblox.com/security/cve/CVE-2026-72012", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronize_rcu() when unr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74397", "url": "https://patchblox.com/security/cve/CVE-2026-74397", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74405", "url": "https://patchblox.com/security/cve/CVE-2026-74405", "title": "OPP: Fix race between OPP addition and lookup", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64546", "url": "https://patchblox.com/security/cve/CVE-2026-64546", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block(...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64555", "url": "https://patchblox.com/security/cve/CVE-2026-64555", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64352", "url": "https://patchblox.com/security/cve/CVE-2026-64352", "title": "bpf: Allow LPM map access from sleepable BPF programs", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72444", "url": "https://patchblox.com/security/cve/CVE-2026-72444", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: flow_dissector: check device type before reading...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74270", "url": "https://patchblox.com/security/cve/CVE-2026-74270", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: handshake: Require admin permission for DONE com...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74288", "url": "https://patchblox.com/security/cve/CVE-2026-74288", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don\u0027t dump dying fib_rule in fib...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74330", "url": "https://patchblox.com/security/cve/CVE-2026-74330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -\u003Es_childre...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80613", "url": "https://patchblox.com/security/cve/CVE-2026-80613", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path Du...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64371", "url": "https://patchblox.com/security/cve/CVE-2026-64371", "title": "proc: protect ptrace_may_access() with exec_update_lock (part 1)", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68458", "url": "https://patchblox.com/security/cve/CVE-2026-68458", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80664", "url": "https://patchblox.com/security/cve/CVE-2026-80664", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nat: reject unsupported target fam...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64543", "url": "https://patchblox.com/security/cve/CVE-2026-64543", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in ti...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74257", "url": "https://patchblox.com/security/cve/CVE-2026-74257", "title": "sockmap: Fix use-after-free in udp_bpf_recvmsg()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74359", "url": "https://patchblox.com/security/cve/CVE-2026-74359", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: configfs_lookup(): don\u0027t leave -\u003Es_dentry dangli...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74363", "url": "https://patchblox.com/security/cve/CVE-2026-74363", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix UAF by restoring RCU-delayed inode free...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64192", "url": "https://patchblox.com/security/cve/CVE-2026-64192", "title": "bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64375", "url": "https://patchblox.com/security/cve/CVE-2026-64375", "title": "proc: protect ptrace_may_access() with exec_update_lock (FD links)", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74259", "url": "https://patchblox.com/security/cve/CVE-2026-74259", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: remove all cifs files before kill super C...", "priority": "High", "severity": "high", "cvss": 8.4, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74331", "url": "https://patchblox.com/security/cve/CVE-2026-74331", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix recursive lock in device_ca...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72106", "url": "https://patchblox.com/security/cve/CVE-2026-72106", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-ioctl: fix a possible overflow in list_versio...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72325", "url": "https://patchblox.com/security/cve/CVE-2026-72325", "title": "perf/x86/amd/core: Avoid enabling BRS from the SVM reload path", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72341", "url": "https://patchblox.com/security/cve/CVE-2026-72341", "title": "net/mlx5e: Fix publication race for priv-\u003Echannel_stats[]", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72321", "url": "https://patchblox.com/security/cve/CVE-2026-72321", "title": "ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()", "priority": "Routine", "severity": "Low", "cvss": 3.1, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72010", "url": "https://patchblox.com/security/cve/CVE-2026-72010", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effective_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72063", "url": "https://patchblox.com/security/cve/CVE-2026-72063", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gpio: tegra: do not call pinctrl for GPIO direct...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72068", "url": "https://patchblox.com/security/cve/CVE-2026-72068", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in upda...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72223", "url": "https://patchblox.com/security/cve/CVE-2026-72223", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discov...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72224", "url": "https://patchblox.com/security/cve/CVE-2026-72224", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on btt_init() error path...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72326", "url": "https://patchblox.com/security/cve/CVE-2026-72326", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cake: reject overhead values that und...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72349", "url": "https://patchblox.com/security/cve/CVE-2026-72349", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72447", "url": "https://patchblox.com/security/cve/CVE-2026-72447", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74395", "url": "https://patchblox.com/security/cve/CVE-2026-74395", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix devx subscribe-event unwind NULL...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72428", "url": "https://patchblox.com/security/cve/CVE-2026-72428", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks chec...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72096", "url": "https://patchblox.com/security/cve/CVE-2026-72096", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72138", "url": "https://patchblox.com/security/cve/CVE-2026-72138", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gn...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72152", "url": "https://patchblox.com/security/cve/CVE-2026-72152", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_tis_spi: Use wait_woken() in wait_for_t...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72155", "url": "https://patchblox.com/security/cve/CVE-2026-72155", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experien...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72256", "url": "https://patchblox.com/security/cve/CVE-2026-72256", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_cluster: reject template conntrack...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72392", "url": "https://patchblox.com/security/cve/CVE-2026-72392", "title": "ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72433", "url": "https://patchblox.com/security/cve/CVE-2026-72433", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIF...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74284", "url": "https://patchblox.com/security/cve/CVE-2026-74284", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: Don\u0027t make class passive tw...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72177", "url": "https://patchblox.com/security/cve/CVE-2026-72177", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: fix dir put orders in ac...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72379", "url": "https://patchblox.com/security/cve/CVE-2026-72379", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs: refuse O_TMPFILE creation with an unmapped f...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72437", "url": "https://patchblox.com/security/cve/CVE-2026-72437", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid1: free r1_bio when REQ_NOWAIT is set and...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74327", "url": "https://patchblox.com/security/cve/CVE-2026-74327", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in is_vm_a...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74329", "url": "https://patchblox.com/security/cve/CVE-2026-74329", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unr...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74399", "url": "https://patchblox.com/security/cve/CVE-2026-74399", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evm_xattrs read buf...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72040", "url": "https://patchblox.com/security/cve/CVE-2026-72040", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipmi: fix refcount leak in i_ipmi_request() Whe...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72127", "url": "https://patchblox.com/security/cve/CVE-2026-72127", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netdev-genl: report NAPI thread PID in the calle...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72132", "url": "https://patchblox.com/security/cve/CVE-2026-72132", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFS: Charge unstable writes by request size, not...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72176", "url": "https://patchblox.com/security/cve/CVE-2026-72176", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: put stats for scheme_add...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72266", "url": "https://patchblox.com/security/cve/CVE-2026-72266", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: vesafb: fix memory leak in vesafb_probe()...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72273", "url": "https://patchblox.com/security/cve/CVE-2026-72273", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: efifb: fix memory leak in efifb_probe()...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74393", "url": "https://patchblox.com/security/cve/CVE-2026-74393", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/syncobj: Fix memory leak in drm_syncobj_find...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80676", "url": "https://patchblox.com/security/cve/CVE-2026-80676", "title": "Drivers: hv: vmbus: use generic driver_override infrastructure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72178", "url": "https://patchblox.com/security/cve/CVE-2026-72178", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: always put unsuccessfully committ...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72032", "url": "https://patchblox.com/security/cve/CVE-2026-72032", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix matcher leak on resize target...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72174", "url": "https://patchblox.com/security/cve/CVE-2026-72174", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix hugetlb self-deadlock in p...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72212", "url": "https://patchblox.com/security/cve/CVE-2026-72212", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix incorrect altmap passing...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74337", "url": "https://patchblox.com/security/cve/CVE-2026-74337", "title": "bpf: Fix NMI/tracepoint re-entry deadlock on lru locks", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72101", "url": "https://patchblox.com/security/cve/CVE-2026-72101", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix leaking uninitialized kernel m...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64538", "url": "https://patchblox.com/security/cve/CVE-2026-64538", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change()", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68081", "url": "https://patchblox.com/security/cve/CVE-2026-68081", "title": "KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state", "priority": "Routine", "severity": "Moderate", "cvss": 6, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74382", "url": "https://patchblox.com/security/cve/CVE-2026-74382", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_bpf: prevent unbounded recursion...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64472", "url": "https://patchblox.com/security/cve/CVE-2026-64472", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74318", "url": "https://patchblox.com/security/cve/CVE-2026-74318", "title": "btrfs: fix deadlock cloning inline extent when using flushoncommit", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64544", "url": "https://patchblox.com/security/cve/CVE-2026-64544", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - fix OOB read in pefile...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64553", "url": "https://patchblox.com/security/cve/CVE-2026-64553", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: psample: fix info leak in PSAMPLE_ATTR_DATA...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64542", "url": "https://patchblox.com/security/cve/CVE-2026-64542", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in accept_untracked_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74290", "url": "https://patchblox.com/security/cve/CVE-2026-74290", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: Dont expose folded kernel p...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74308", "url": "https://patchblox.com/security/cve/CVE-2026-74308", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4_write_inline_data_e...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74379", "url": "https://patchblox.com/security/cve/CVE-2026-74379", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dax/kmem: account for partial discontiguous reso...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80611", "url": "https://patchblox.com/security/cve/CVE-2026-80611", "title": "ACPI: processor_idle: Mark LPI enter functions as __cpuidle", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74352", "url": "https://patchblox.com/security/cve/CVE-2026-74352", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: avoid post-init UAF when alloc...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74424", "url": "https://patchblox.com/security/cve/CVE-2026-74424", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbcon: fix NULL pointer dereference for a consol...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64353", "url": "https://patchblox.com/security/cve/CVE-2026-64353", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Keep dynamic inner array lookups nullable...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T13:56:55Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }