{ "fix": "ALAS2023-2026-2106", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2106", "summary": "ALAS2023-2026-2106, released August 31, 2026, fixes 197 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 19 packages", "released": "2026-08-31T09:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-64564, rated Critical", "supported": true, "cveCount": 197, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.01467, "maxCvss": 10, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-2106.html", "appliesTo": [ { "product": "bpftool6.18", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "bpftool6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.18.44-99.149", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.18.44-99.149", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel6.18", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "kernel6.18-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "kernel6.18-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-headers", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "kernel6.18-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "kernel6.18-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "kernel6.18-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "kernel6.18-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "kernel6.18-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "microvm-kernel6.18", "productUrl": "https://patchblox.com/security/product/linux/microvm-kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "perf6.18", "productUrl": "https://patchblox.com/security/product/linux/perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "perf6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "python3-perf6.18", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true }, { "product": "python3-perf6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.44-99.149.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-64564", "url": "https://patchblox.com/security/cve/CVE-2026-64564", "title": "sctp: don\u0027t free the ASCONF\u0027s own transport in DEL-IP processing", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.01432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68160", "url": "https://patchblox.com/security/cve/CVE-2026-68160", "title": "ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00772, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63979", "url": "https://patchblox.com/security/cve/CVE-2026-63979", "title": "net/handshake: hand off the pinned file reference to accept_doit", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68127", "url": "https://patchblox.com/security/cve/CVE-2026-68127", "title": "ila: reload IPv6 header after pskb_may_pull in checksum adjust", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68131", "url": "https://patchblox.com/security/cve/CVE-2026-68131", "title": "rbd: Reset positive result codes to zero in object map update path", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80681", "url": "https://patchblox.com/security/cve/CVE-2026-80681", "title": "vxlan: re-fetch eth header after route_shortcircuit()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68121", "url": "https://patchblox.com/security/cve/CVE-2026-68121", "title": "pppoe: reload header pointer after dev_hard_header()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00367, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68166", "url": "https://patchblox.com/security/cve/CVE-2026-68166", "title": "userfaultfd: prevent registration of special VMAs", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68132", "url": "https://patchblox.com/security/cve/CVE-2026-68132", "title": "super: fix emergency thaw deadlock on frozen block devices", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68146", "url": "https://patchblox.com/security/cve/CVE-2026-68146", "title": "ftrace: Add global mutex to serialize trace_parser access", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68325", "url": "https://patchblox.com/security/cve/CVE-2026-68325", "title": "iommu/amd: Bound the early ACPI HID map", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80686", "url": "https://patchblox.com/security/cve/CVE-2026-80686", "title": "mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64562", "url": "https://patchblox.com/security/cve/CVE-2026-64562", "title": "KVM: nVMX: Hide shadow VMCS right after VMCLEAR", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80715", "url": "https://patchblox.com/security/cve/CVE-2026-80715", "title": "igc: remove napi_synchronize() in igc_down()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64017", "url": "https://patchblox.com/security/cve/CVE-2026-64017", "title": "blk-mq: pop cached request if it is usable", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68153", "url": "https://patchblox.com/security/cve/CVE-2026-68153", "title": "libceph: remove debugfs files before client teardown", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68142", "url": "https://patchblox.com/security/cve/CVE-2026-68142", "title": "geneve: require CAP_NET_ADMIN in the device netns for changelink", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74469", "url": "https://patchblox.com/security/cve/CVE-2026-74469", "title": "sctp: prevent peer transport count overflow", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.01467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68154", "url": "https://patchblox.com/security/cve/CVE-2026-68154", "title": "libceph: reject zero bucket types in crush_decode", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68158", "url": "https://patchblox.com/security/cve/CVE-2026-68158", "title": "libceph: Fix multiplication overflow in decode_new_up_state_weight()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68155", "url": "https://patchblox.com/security/cve/CVE-2026-68155", "title": "libceph: Reject monmaps advertising zero monitors", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68157", "url": "https://patchblox.com/security/cve/CVE-2026-68157", "title": "libceph: guard missing CRUSH type name lookup", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72253", "url": "https://patchblox.com/security/cve/CVE-2026-72253", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst()...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68156", "url": "https://patchblox.com/security/cve/CVE-2026-68156", "title": "libceph: refresh auth-\u003Eauthorizer_buf{,_len} after authorizer update", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68161", "url": "https://patchblox.com/security/cve/CVE-2026-68161", "title": "sctp: close UDP tunnel sockets during netns teardown", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00682, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72254", "url": "https://patchblox.com/security/cve/CVE-2026-72254", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: reject fib expression on the...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00665, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80720", "url": "https://patchblox.com/security/cve/CVE-2026-80720", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iomap: add a separate bio_set for iomap_split_io...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00609, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68376", "url": "https://patchblox.com/security/cve/CVE-2026-68376", "title": "sctp: fix auth_hmacs array size in struct sctp_cookie", "priority": "High", "severity": "Low", "cvss": 8.1, "epss": 0.00605, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68300", "url": "https://patchblox.com/security/cve/CVE-2026-68300", "title": "sctp: auth: verify auth requirement when auth_chunk is NULL", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0058, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74480", "url": "https://patchblox.com/security/cve/CVE-2026-74480", "title": "net: bridge: stop fast-leave after deleting a port group", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00579, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68123", "url": "https://patchblox.com/security/cve/CVE-2026-68123", "title": "openvswitch: fix GSO userspace truncation underflow", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68136", "url": "https://patchblox.com/security/cve/CVE-2026-68136", "title": "net: gro: fix double aggregation of flush-marked skbs", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00539, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68096", "url": "https://patchblox.com/security/cve/CVE-2026-68096", "title": "audit: fix recursive locking deadlock in audit_dupe_exe()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00533, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68117", "url": "https://patchblox.com/security/cve/CVE-2026-68117", "title": "tipc: clear sock-\u003Esk on the failed-insert path in tipc_sk_create()", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74473", "url": "https://patchblox.com/security/cve/CVE-2026-74473", "title": "vxlan: use pskb_network_may_pull() in route_shortcircuit()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68388", "url": "https://patchblox.com/security/cve/CVE-2026-68388", "title": "smb/client: handle overlapping allocated ranges in fallocate", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68343", "url": "https://patchblox.com/security/cve/CVE-2026-68343", "title": "smb: client: validate DFS referral PathConsumed", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68315", "url": "https://patchblox.com/security/cve/CVE-2026-68315", "title": "sctp: validate stream count in sctp_process_strreset_inreq()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68299", "url": "https://patchblox.com/security/cve/CVE-2026-68299", "title": "vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68426", "url": "https://patchblox.com/security/cve/CVE-2026-68426", "title": "xfrm: fix stale skb-\u003Eprev after async crypto steals a GSO segment", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00498, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74474", "url": "https://patchblox.com/security/cve/CVE-2026-74474", "title": "vxlan: use pskb_network_may_pull() for transmit path header pulls", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74476", "url": "https://patchblox.com/security/cve/CVE-2026-74476", "title": "veth: convert frag_list skbs before running XDP", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63978", "url": "https://patchblox.com/security/cve/CVE-2026-63978", "title": "net/handshake: Drain pending requests at net namespace exit", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80714", "url": "https://patchblox.com/security/cve/CVE-2026-80714", "title": "ipvs: do not propagate one-packet flag to synced conns", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74550", "url": "https://patchblox.com/security/cve/CVE-2026-74550", "title": "net: do not send ICMP/NDISC Redirects when peer allocation fails", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74490", "url": "https://patchblox.com/security/cve/CVE-2026-74490", "title": "tipc: avoid use-after-free in poll trace queue dumps", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74475", "url": "https://patchblox.com/security/cve/CVE-2026-74475", "title": "vxlan: use neigh_ha_snapshot() in route_shortcircuit()", "priority": "High", "severity": "Low", "cvss": 10, "epss": 0.00454, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64523", "url": "https://patchblox.com/security/cve/CVE-2026-64523", "title": "net/handshake: Take a long-lived file reference at submit", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80691", "url": "https://patchblox.com/security/cve/CVE-2026-80691", "title": "scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74581", "url": "https://patchblox.com/security/cve/CVE-2026-74581", "title": "net: ipv6: clear suppressed fib6 rule result", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00421, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74580", "url": "https://patchblox.com/security/cve/CVE-2026-74580", "title": "vhost: reset the vring metadata cache on vring reconfiguration", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00409, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68118", "url": "https://patchblox.com/security/cve/CVE-2026-68118", "title": "tcp: challenge ACK for non-exact RST in SYN-RECEIVED", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74556", "url": "https://patchblox.com/security/cve/CVE-2026-74556", "title": "scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74569", "url": "https://patchblox.com/security/cve/CVE-2026-74569", "title": "netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00388, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74576", "url": "https://patchblox.com/security/cve/CVE-2026-74576", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/slab: prevent unbounded recursion in free pat...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00376, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68433", "url": "https://patchblox.com/security/cve/CVE-2026-68433", "title": "libceph: bound get_version reply decode to front len", "priority": "High", "severity": "Low", "cvss": 8.6, "epss": 0.00364, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72121", "url": "https://patchblox.com/security/cve/CVE-2026-72121", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and t...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74572", "url": "https://patchblox.com/security/cve/CVE-2026-74572", "title": "btrfs: zoned: fix deadlock between metadata writeback and transaction commit", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00346, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74557", "url": "https://patchblox.com/security/cve/CVE-2026-74557", "title": "scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80707", "url": "https://patchblox.com/security/cve/CVE-2026-80707", "title": "can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer", "priority": "High", "severity": "Low", "cvss": 7.5, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80717", "url": "https://patchblox.com/security/cve/CVE-2026-80717", "title": "sctp: validate Adaptation Indication parameter length", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72115", "url": "https://patchblox.com/security/cve/CVE-2026-72115", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: track a single source interface for AN...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00303, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68425", "url": "https://patchblox.com/security/cve/CVE-2026-68425", "title": "IB/mad: Drop unmatched RMPP responses before reassembly", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68278", "url": "https://patchblox.com/security/cve/CVE-2026-68278", "title": "drm/dp/mst: fix buffer overflows in sideband chunk accumulation", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68480", "url": "https://patchblox.com/security/cve/CVE-2026-68480", "title": "x86/bugs: Make Safe-RET robust against interrupt injection", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00234, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68138", "url": "https://patchblox.com/security/cve/CVE-2026-68138", "title": "net/sched: serialize qdisc_rtab_list against concurrent get/put", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68186", "url": "https://patchblox.com/security/cve/CVE-2026-68186", "title": "binfmt_misc: set have_execfd only once the interpreter is opened", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68169", "url": "https://patchblox.com/security/cve/CVE-2026-68169", "title": "mptcp: pm: userspace: fix use-after-free in get_local_id", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68165", "url": "https://patchblox.com/security/cve/CVE-2026-68165", "title": "mm/damon/core: validate ranges in damon_set_regions()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80897", "url": "https://patchblox.com/security/cve/CVE-2026-80897", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: release readahead folios on iterator prep...", "priority": "High", "severity": "important", "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68270", "url": "https://patchblox.com/security/cve/CVE-2026-68270", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Avoid possible truncation with calcul...", "priority": "High", "severity": "important", "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80701", "url": "https://patchblox.com/security/cve/CVE-2026-80701", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: enforce cursor size limits for MOB c...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80898", "url": "https://patchblox.com/security/cve/CVE-2026-80898", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: clear PG_private_2 on copy-to-cache appen...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64572", "url": "https://patchblox.com/security/cve/CVE-2026-64572", "title": "ipv4: fib: free fib_alias with kfree_rcu() on insert error path", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68162", "url": "https://patchblox.com/security/cve/CVE-2026-68162", "title": "sctp: avoid auth_enable sysctl UAF during netns teardown", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68174", "url": "https://patchblox.com/security/cve/CVE-2026-68174", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix union collision of module and refcn...", "priority": "High", "severity": "important", "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68421", "url": "https://patchblox.com/security/cve/CVE-2026-68421", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don\u0027t warn on core-sched forced idle...", "priority": "High", "severity": "important", "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68255", "url": "https://patchblox.com/security/cve/CVE-2026-68255", "title": "drm/virtio: bound EDID block reads to the response buffer", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72116", "url": "https://patchblox.com/security/cve/CVE-2026-72116", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix stale rx/tx ops after device remov...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68093", "url": "https://patchblox.com/security/cve/CVE-2026-68093", "title": "KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68179", "url": "https://patchblox.com/security/cve/CVE-2026-68179", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock erro...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68387", "url": "https://patchblox.com/security/cve/CVE-2026-68387", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: raw: add locking for raw flags bitfield Wi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80893", "url": "https://patchblox.com/security/cve/CVE-2026-80893", "title": "mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72175", "url": "https://patchblox.com/security/cve/CVE-2026-72175", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix make_uffd_wp_huge_pte() pr...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72113", "url": "https://patchblox.com/security/cve/CVE-2026-72113", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing device refcount for CAN fi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72114", "url": "https://patchblox.com/security/cve/CVE-2026-72114", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcm_rx_setup(...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72119", "url": "https://patchblox.com/security/cve/CVE-2026-72119", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: extend bcm_tx_lock usage for data and...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80887", "url": "https://patchblox.com/security/cve/CVE-2026-80887", "title": "drm/vmwgfx: use check_add_overflow for shader size\u002Boffset bound", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64563", "url": "https://patchblox.com/security/cve/CVE-2026-64563", "title": "rhashtable: clear stale iter-\u003Ep on table restart", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80687", "url": "https://patchblox.com/security/cve/CVE-2026-80687", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommufd/viommu: Release the igroup lock on the v...", "priority": "High", "severity": "important", "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68095", "url": "https://patchblox.com/security/cve/CVE-2026-68095", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and co...", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68239", "url": "https://patchblox.com/security/cve/CVE-2026-68239", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Account for NULL and handle pages in tt...", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68292", "url": "https://patchblox.com/security/cve/CVE-2026-68292", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ice: prevent tstamp ring allocation for non-PF V...", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74477", "url": "https://patchblox.com/security/cve/CVE-2026-74477", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: uprobes: Fix NULL pointer dereference in hprobe_...", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74491", "url": "https://patchblox.com/security/cve/CVE-2026-74491", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: of/address: Fix NULL bus dereference in of_pci_r...", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68178", "url": "https://patchblox.com/security/cve/CVE-2026-68178", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is op...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72103", "url": "https://patchblox.com/security/cve/CVE-2026-72103", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller\u0027s thread keyring vi...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72244", "url": "https://patchblox.com/security/cve/CVE-2026-72244", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gpu/buddy: bail out of try_harder when alignment...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68416", "url": "https://patchblox.com/security/cve/CVE-2026-68416", "title": "mtd: fix double free and WARN_ON in add_mtd_device() error paths", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68448", "url": "https://patchblox.com/security/cve/CVE-2026-68448", "title": "ovl: check access to copy_file_range source with src mounter creds", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64575", "url": "https://patchblox.com/security/cve/CVE-2026-64575", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch reall...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74465", "url": "https://patchblox.com/security/cve/CVE-2026-74465", "title": "net: openvswitch: fix potential UAF on meter attach failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68442", "url": "https://patchblox.com/security/cve/CVE-2026-68442", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: don\u0027t propagate EXTENT_FLAG_LOGGING to sp...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64283", "url": "https://patchblox.com/security/cve/CVE-2026-64283", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding offset\u002Bs...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68432", "url": "https://patchblox.com/security/cve/CVE-2026-68432", "title": "vxlan: require CAP_NET_ADMIN in the device netns for changelink", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74519", "url": "https://patchblox.com/security/cve/CVE-2026-74519", "title": "pinctrl: devicetree: don\u0027t free uninitialized dev_name on error path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68253", "url": "https://patchblox.com/security/cve/CVE-2026-68253", "title": "drm/i915/hdcp: check streams[] bounds before overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80684", "url": "https://patchblox.com/security/cve/CVE-2026-80684", "title": "KVM: s390: pci: Fix NULL dereference on AIBV allocation failure", "priority": "High", "severity": "Moderate", "cvss": 9.3, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74492", "url": "https://patchblox.com/security/cve/CVE-2026-74492", "title": "netfilter: ipset: do not update comments from kernel-side hash adds", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53090", "url": "https://patchblox.com/security/cve/CVE-2026-53090", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix ld_{abs,ind} failure path analysis in s...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68293", "url": "https://patchblox.com/security/cve/CVE-2026-68293", "title": "net/mlx5: Fix MCIA register buffer overflow on 32 dword reads", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68128", "url": "https://patchblox.com/security/cve/CVE-2026-68128", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_pro...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68145", "url": "https://patchblox.com/security/cve/CVE-2026-68145", "title": "iomap: fix out-of-bounds bitmap_set() with zero-length range", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68401", "url": "https://patchblox.com/security/cve/CVE-2026-68401", "title": "firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68338", "url": "https://patchblox.com/security/cve/CVE-2026-68338", "title": "net/packet: avoid fanout hook re-registration after unregister", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68149", "url": "https://patchblox.com/security/cve/CVE-2026-68149", "title": "fs: preserve ACL_DONT_CACHE state in forget_cached_acl()", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74516", "url": "https://patchblox.com/security/cve/CVE-2026-74516", "title": "KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68284", "url": "https://patchblox.com/security/cve/CVE-2026-68284", "title": "bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68335", "url": "https://patchblox.com/security/cve/CVE-2026-68335", "title": "rds: drop incoming messages that cross network namespace boundaries", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80723", "url": "https://patchblox.com/security/cve/CVE-2026-80723", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: of: reserved_mem: prevent OOB when too many dyna...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74481", "url": "https://patchblox.com/security/cve/CVE-2026-74481", "title": "mm/page_reporting: use system_freezable_wq to fix UAF during suspend", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68297", "url": "https://patchblox.com/security/cve/CVE-2026-68297", "title": "tipc: fix u16 MTU truncation in media and bearer MTU validation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74443", "url": "https://patchblox.com/security/cve/CVE-2026-74443", "title": "drm/vmwgfx: bound DMA command body size against suffix pointer", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68374", "url": "https://patchblox.com/security/cve/CVE-2026-68374", "title": "usb: core: sysfs: add lock to bos_descriptors_read()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74444", "url": "https://patchblox.com/security/cve/CVE-2026-74444", "title": "drm/vmwgfx: validate DRAW_PRIMITIVES header size before division", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80700", "url": "https://patchblox.com/security/cve/CVE-2026-80700", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80702", "url": "https://patchblox.com/security/cve/CVE-2026-80702", "title": "drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68400", "url": "https://patchblox.com/security/cve/CVE-2026-68400", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix Endpoint Memory Access De...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68320", "url": "https://patchblox.com/security/cve/CVE-2026-68320", "title": "sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68329", "url": "https://patchblox.com/security/cve/CVE-2026-68329", "title": "iommu/amd: Wait for completion instead of returning early in iommu_completion_wait()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74518", "url": "https://patchblox.com/security/cve/CVE-2026-74518", "title": "mm/hugetlb: fix list corruption in allocate_file_region_entries()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74471", "url": "https://patchblox.com/security/cve/CVE-2026-74471", "title": "tracing: Check return value of __register_event() in trace_module_add_events()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74482", "url": "https://patchblox.com/security/cve/CVE-2026-74482", "title": "mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74512", "url": "https://patchblox.com/security/cve/CVE-2026-74512", "title": "audit: fix potential use-after-free in audit_del_rule()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74485", "url": "https://patchblox.com/security/cve/CVE-2026-74485", "title": "binfmt_misc: reject a flag character as the field delimiter", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64567", "url": "https://patchblox.com/security/cve/CVE-2026-64567", "title": "btrfs: reject free space cache with more entries than pages", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64580", "url": "https://patchblox.com/security/cve/CVE-2026-64580", "title": "xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68290", "url": "https://patchblox.com/security/cve/CVE-2026-68290", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80685", "url": "https://patchblox.com/security/cve/CVE-2026-80685", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/util: don\u0027t read __page_2 for order-1 folios...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74565", "url": "https://patchblox.com/security/cve/CVE-2026-74565", "title": "netfilter: nf_tables: make nft_object rhltable per table", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68116", "url": "https://patchblox.com/security/cve/CVE-2026-68116", "title": "vxlan: mdb: Fix source list corruption on a failed replace", "priority": "High", "severity": "Moderate", "cvss": 7.9, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64581", "url": "https://patchblox.com/security/cve/CVE-2026-64581", "title": "xfrm: fix sk_dst_cache double-free in xfrm_user_policy()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68446", "url": "https://patchblox.com/security/cve/CVE-2026-68446", "title": "drm/vmwgfx: Validate vmw_surface_metadata::array_size", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64576", "url": "https://patchblox.com/security/cve/CVE-2026-64576", "title": "nexthop: initialize extack in nh_res_bucket_migrate()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74579", "url": "https://patchblox.com/security/cve/CVE-2026-74579", "title": "netfilter: nft_payload: fix mask build for partial field offload", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74564", "url": "https://patchblox.com/security/cve/CVE-2026-74564", "title": "netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74563", "url": "https://patchblox.com/security/cve/CVE-2026-74563", "title": "rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74567", "url": "https://patchblox.com/security/cve/CVE-2026-74567", "title": "keys: fix out-of-bounds read in keyring_get_key_chunk()", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68420", "url": "https://patchblox.com/security/cve/CVE-2026-68420", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: reject optional IPTFS templates in outboun...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68277", "url": "https://patchblox.com/security/cve/CVE-2026-68277", "title": "drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68184", "url": "https://patchblox.com/security/cve/CVE-2026-68184", "title": "cdrom: fix stack out-of-bounds read in CDROMVOLCTRL", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68313", "url": "https://patchblox.com/security/cve/CVE-2026-68313", "title": "tipc: fix infinite loop in __tipc_nl_compat_dumpit", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68322", "url": "https://patchblox.com/security/cve/CVE-2026-68322", "title": "rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72117", "url": "https://patchblox.com/security/cve/CVE-2026-72117", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix data race on rx_stamp/rx_ifindex i...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72118", "url": "https://patchblox.com/security/cve/CVE-2026-72118", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68164", "url": "https://patchblox.com/security/cve/CVE-2026-68164", "title": "mm/damon/core: disallow overlapping input ranges for damon_set_regions()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68422", "url": "https://patchblox.com/security/cve/CVE-2026-68422", "title": "btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74543", "url": "https://patchblox.com/security/cve/CVE-2026-74543", "title": "net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68386", "url": "https://patchblox.com/security/cve/CVE-2026-68386", "title": "bpf, sockmap: Reject unhashed UDP sockets on sockmap update", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68241", "url": "https://patchblox.com/security/cve/CVE-2026-68241", "title": "drm/i915/mst: limit DP MST ESI service loop", "priority": "Routine", "severity": "Moderate", "cvss": 4.6, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68269", "url": "https://patchblox.com/security/cve/CVE-2026-68269", "title": "drm/i915/gem: Add missing nospec on parallel submit slot", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68296", "url": "https://patchblox.com/security/cve/CVE-2026-68296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels wi...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68378", "url": "https://patchblox.com/security/cve/CVE-2026-68378", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL pointer dereference in dpll_msg_a...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72030", "url": "https://patchblox.com/security/cve/CVE-2026-72030", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Reject an invalid concurrent p...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68396", "url": "https://patchblox.com/security/cve/CVE-2026-68396", "title": "scsi: core: wake eh reliably when using scsi_schedule_eh", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68279", "url": "https://patchblox.com/security/cve/CVE-2026-68279", "title": "drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80888", "url": "https://patchblox.com/security/cve/CVE-2026-80888", "title": "drm/vmwgfx: drop dma_buf reference on foreign-fd prime import", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80890", "url": "https://patchblox.com/security/cve/CVE-2026-80890", "title": "sctp: reject stale cookies with mismatched verification tags", "priority": "Routine", "severity": "Moderate", "cvss": 4.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45901", "url": "https://patchblox.com/security/cve/CVE-2026-45901", "title": "netfilter: nf_tables: revert commit_mutex usage in reset path", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68336", "url": "https://patchblox.com/security/cve/CVE-2026-68336", "title": "bonding: fix devconf_all NULL dereference when IPv6 is disabled", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74445", "url": "https://patchblox.com/security/cve/CVE-2026-74445", "title": "drm/vmwgfx: reject DX_BIND_QUERY without a DX context", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74464", "url": "https://patchblox.com/security/cve/CVE-2026-74464", "title": "net: openvswitch: fix skb leak on flow key update failure during ct", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74486", "url": "https://patchblox.com/security/cve/CVE-2026-74486", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: use exe_file_deny_write_access() fo...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74487", "url": "https://patchblox.com/security/cve/CVE-2026-74487", "title": "binfmt_misc: restore write access when removing an entry", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80689", "url": "https://patchblox.com/security/cve/CVE-2026-80689", "title": "tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68150", "url": "https://patchblox.com/security/cve/CVE-2026-68150", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/super: fix emergency thaw double-unlock of s_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68133", "url": "https://patchblox.com/security/cve/CVE-2026-68133", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68139", "url": "https://patchblox.com/security/cve/CVE-2026-68139", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use sender devcom for MPV master-up...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80892", "url": "https://patchblox.com/security/cve/CVE-2026-80892", "title": "erofs: cap LZMA stream pool size", "priority": "Routine", "severity": "Low", "cvss": 6.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68243", "url": "https://patchblox.com/security/cve/CVE-2026-68243", "title": "drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68244", "url": "https://patchblox.com/security/cve/CVE-2026-68244", "title": "drm/i915/gem: Do not leak siblings[] on proto context error", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68247", "url": "https://patchblox.com/security/cve/CVE-2026-68247", "title": "drm/i915/bios: range check LFP Data Block panel_type2", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68248", "url": "https://patchblox.com/security/cve/CVE-2026-68248", "title": "drm/i915: Return NULL on error in active_instance", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68254", "url": "https://patchblox.com/security/cve/CVE-2026-68254", "title": "drm/i915/vrr: require valid min/max vfreq for VRR", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68444", "url": "https://patchblox.com/security/cve/CVE-2026-68444", "title": "firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64579", "url": "https://patchblox.com/security/cve/CVE-2026-64579", "title": "xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68429", "url": "https://patchblox.com/security/cve/CVE-2026-68429", "title": "drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74442", "url": "https://patchblox.com/security/cve/CVE-2026-74442", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: avoid destroy_workqueue(NULL) on vkm...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74484", "url": "https://patchblox.com/security/cve/CVE-2026-74484", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don\u0027t let an \u0027F\u0027 entry pin its own...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74559", "url": "https://patchblox.com/security/cve/CVE-2026-74559", "title": "xsk: drain continuation descs after overflow in xsk_build_skb()", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68428", "url": "https://patchblox.com/security/cve/CVE-2026-68428", "title": "KVM: x86/mmu: Fix use-after-free on vendor module reload", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74566", "url": "https://patchblox.com/security/cve/CVE-2026-74566", "title": "keys: make keyring key-chunk byte order agree with keyring_diff_objects()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74577", "url": "https://patchblox.com/security/cve/CVE-2026-74577", "title": "net: mpls: initialize rtm_tos in mpls_getroute()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68450", "url": "https://patchblox.com/security/cve/CVE-2026-68450", "title": "btrfs: free mapping node on duplicate reloc root insert", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80901", "url": "https://patchblox.com/security/cve/CVE-2026-80901", "title": "ipvs: fix the checksum validations", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45897", "url": "https://patchblox.com/security/cve/CVE-2026-45897", "title": "netfilter: nft_counter: serialize reset with spinlock", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74560", "url": "https://patchblox.com/security/cve/CVE-2026-74560", "title": "xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T13:56:55Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }