{ "fix": "ALAS2023-2026-2143", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2143", "summary": "ALAS2023-2026-2143, released September 14, 2026, fixes 232 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 18 packages", "released": "2026-09-14T09:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-72299, rated Critical", "supported": true, "cveCount": 232, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.01467, "maxCvss": 10, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-2143.html", "appliesTo": [ { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "bpftool-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "kernel", "productUrl": "https://patchblox.com/security/product/linux/kernel", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "kernel-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "kernel-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "kernel-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel-headers", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.1.186-228.374", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.186-228.374", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "kernel-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "kernel-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "kernel-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "kernel-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "perf", "productUrl": "https://patchblox.com/security/product/linux/perf", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "python3-perf", "productUrl": "https://patchblox.com/security/product/linux/python3-perf", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true }, { "product": "python3-perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.186-228.374.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-72299", "url": "https://patchblox.com/security/cve/CVE-2026-72299", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tra...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72191", "url": "https://patchblox.com/security/cve/CVE-2026-72191", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: validate split-point offset in indx_inser...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68127", "url": "https://patchblox.com/security/cve/CVE-2026-68127", "title": "ila: reload IPv6 header after pskb_may_pull in checksum adjust", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80557", "url": "https://patchblox.com/security/cve/CVE-2026-80557", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via m...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80681", "url": "https://patchblox.com/security/cve/CVE-2026-80681", "title": "vxlan: re-fetch eth header after route_shortcircuit()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80725", "url": "https://patchblox.com/security/cve/CVE-2026-80725", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00459, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68121", "url": "https://patchblox.com/security/cve/CVE-2026-68121", "title": "pppoe: reload header pointer after dev_hard_header()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00367, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72288", "url": "https://patchblox.com/security/cve/CVE-2026-72288", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68132", "url": "https://patchblox.com/security/cve/CVE-2026-68132", "title": "super: fix emergency thaw deadlock on frozen block devices", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68146", "url": "https://patchblox.com/security/cve/CVE-2026-68146", "title": "ftrace: Add global mutex to serialize trace_parser access", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68325", "url": "https://patchblox.com/security/cve/CVE-2026-68325", "title": "iommu/amd: Bound the early ACPI HID map", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80686", "url": "https://patchblox.com/security/cve/CVE-2026-80686", "title": "mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68399", "url": "https://patchblox.com/security/cve/CVE-2026-68399", "title": "bpf: Fix UAF in sock clone early bailouts", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64562", "url": "https://patchblox.com/security/cve/CVE-2026-64562", "title": "KVM: nVMX: Hide shadow VMCS right after VMCLEAR", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80715", "url": "https://patchblox.com/security/cve/CVE-2026-80715", "title": "igc: remove napi_synchronize() in igc_down()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68153", "url": "https://patchblox.com/security/cve/CVE-2026-68153", "title": "libceph: remove debugfs files before client teardown", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68142", "url": "https://patchblox.com/security/cve/CVE-2026-68142", "title": "geneve: require CAP_NET_ADMIN in the device netns for changelink", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74469", "url": "https://patchblox.com/security/cve/CVE-2026-74469", "title": "sctp: prevent peer transport count overflow", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.01467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72398", "url": "https://patchblox.com/security/cve/CVE-2026-72398", "title": "sctp: add INIT verification after cookie unpacking", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00803, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68159", "url": "https://patchblox.com/security/cve/CVE-2026-68159", "title": "libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68154", "url": "https://patchblox.com/security/cve/CVE-2026-68154", "title": "libceph: reject zero bucket types in crush_decode", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68158", "url": "https://patchblox.com/security/cve/CVE-2026-68158", "title": "libceph: Fix multiplication overflow in decode_new_up_state_weight()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72242", "url": "https://patchblox.com/security/cve/CVE-2026-72242", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68157", "url": "https://patchblox.com/security/cve/CVE-2026-68157", "title": "libceph: guard missing CRUSH type name lookup", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72253", "url": "https://patchblox.com/security/cve/CVE-2026-72253", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst()...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68156", "url": "https://patchblox.com/security/cve/CVE-2026-68156", "title": "libceph: refresh auth-\u003Eauthorizer_buf{,_len} after authorizer update", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68376", "url": "https://patchblox.com/security/cve/CVE-2026-68376", "title": "sctp: fix auth_hmacs array size in struct sctp_cookie", "priority": "High", "severity": "Low", "cvss": 8.1, "epss": 0.00605, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68300", "url": "https://patchblox.com/security/cve/CVE-2026-68300", "title": "sctp: auth: verify auth requirement when auth_chunk is NULL", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0058, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74480", "url": "https://patchblox.com/security/cve/CVE-2026-74480", "title": "net: bridge: stop fast-leave after deleting a port group", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00579, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80590", "url": "https://patchblox.com/security/cve/CVE-2026-80590", "title": "inet: frags: strip GSO state from fragments before reassembly", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68123", "url": "https://patchblox.com/security/cve/CVE-2026-68123", "title": "openvswitch: fix GSO userspace truncation underflow", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72099", "url": "https://patchblox.com/security/cve/CVE-2026-72099", "title": "kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00546, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74597", "url": "https://patchblox.com/security/cve/CVE-2026-74597", "title": "ip6_tunnel: clear skb2-\u003Ecb[] in ip6ip6_err()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00543, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68136", "url": "https://patchblox.com/security/cve/CVE-2026-68136", "title": "net: gro: fix double aggregation of flush-marked skbs", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00539, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74743", "url": "https://patchblox.com/security/cve/CVE-2026-74743", "title": "macvlan: inherit needed_headroom and needed_tailroom from lowerdev", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74746", "url": "https://patchblox.com/security/cve/CVE-2026-74746", "title": "netfilter: flowtable: publish GC-visible tuple last", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68096", "url": "https://patchblox.com/security/cve/CVE-2026-68096", "title": "audit: fix recursive locking deadlock in audit_dupe_exe()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00533, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68117", "url": "https://patchblox.com/security/cve/CVE-2026-68117", "title": "tipc: clear sock-\u003Esk on the failed-insert path in tipc_sk_create()", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74473", "url": "https://patchblox.com/security/cve/CVE-2026-74473", "title": "vxlan: use pskb_network_may_pull() in route_shortcircuit()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68388", "url": "https://patchblox.com/security/cve/CVE-2026-68388", "title": "smb/client: handle overlapping allocated ranges in fallocate", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74662", "url": "https://patchblox.com/security/cve/CVE-2026-74662", "title": "inet: frags: publish queues before arming timer", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74669", "url": "https://patchblox.com/security/cve/CVE-2026-74669", "title": "ipvs: clear IPv4 options after rebasing tunnel ICMP errors", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80528", "url": "https://patchblox.com/security/cve/CVE-2026-80528", "title": "ceph: avoid fs reclaim while using current-\u003Ejournal_info", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80558", "url": "https://patchblox.com/security/cve/CVE-2026-80558", "title": "libceph: Avoid using invalid osd indices from primary_temp", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80561", "url": "https://patchblox.com/security/cve/CVE-2026-80561", "title": "libceph: fix multiple unsafe decodes in decode_locker()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74616", "url": "https://patchblox.com/security/cve/CVE-2026-74616", "title": "xdp: reject clones that overrun skb_shared_info tailroom", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68343", "url": "https://patchblox.com/security/cve/CVE-2026-68343", "title": "smb: client: validate DFS referral PathConsumed", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74744", "url": "https://patchblox.com/security/cve/CVE-2026-74744", "title": "ipvlan: inherit needed_headroom and needed_tailroom from phy_dev", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68315", "url": "https://patchblox.com/security/cve/CVE-2026-68315", "title": "sctp: validate stream count in sctp_process_strreset_inreq()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74730", "url": "https://patchblox.com/security/cve/CVE-2026-74730", "title": "NFS: Pin the \u0027struct nfs_server\u0027 during a FREE_STATEID call", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0051, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80527", "url": "https://patchblox.com/security/cve/CVE-2026-80527", "title": "ceph: fix hanging __ceph_get_caps() with stale mds_wanted", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74717", "url": "https://patchblox.com/security/cve/CVE-2026-74717", "title": "net/mlx5: fw_tracer, return NULL on create error", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74705", "url": "https://patchblox.com/security/cve/CVE-2026-74705", "title": "udp: fix potential use-after-free in tunnel segmentation", "priority": "High", "severity": "Moderate", "cvss": 10, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74586", "url": "https://patchblox.com/security/cve/CVE-2026-74586", "title": "sctp: clear new_transport when removing a peer", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74587", "url": "https://patchblox.com/security/cve/CVE-2026-74587", "title": "sctp: fix use-after-free of cached ASCONF chunk", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74588", "url": "https://patchblox.com/security/cve/CVE-2026-74588", "title": "sctp: keep chunk-\u003Etransport in step with the list it is queued on", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74688", "url": "https://patchblox.com/security/cve/CVE-2026-74688", "title": "sctp: clear control chunk transport if it is being removed", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68082", "url": "https://patchblox.com/security/cve/CVE-2026-68082", "title": "libceph: fix two unsafe bare decodes in decode_lockers()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00499, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74612", "url": "https://patchblox.com/security/cve/CVE-2026-74612", "title": "veth: fix skb length accounting after XDP frag adjustment", "priority": "High", "severity": "Moderate", "cvss": 10, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74476", "url": "https://patchblox.com/security/cve/CVE-2026-74476", "title": "veth: convert frag_list skbs before running XDP", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74696", "url": "https://patchblox.com/security/cve/CVE-2026-74696", "title": "tcp: fix TFO max_qlen accounting across reuseport migration", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80714", "url": "https://patchblox.com/security/cve/CVE-2026-80714", "title": "ipvs: do not propagate one-packet flag to synced conns", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74550", "url": "https://patchblox.com/security/cve/CVE-2026-74550", "title": "net: do not send ICMP/NDISC Redirects when peer allocation fails", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74624", "url": "https://patchblox.com/security/cve/CVE-2026-74624", "title": "netfilter: nf_conntrack: defer invalid log until after unlock", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74608", "url": "https://patchblox.com/security/cve/CVE-2026-74608", "title": "smb: client: Fix use-after-free in cifs_try_adding_channels()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00477, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74490", "url": "https://patchblox.com/security/cve/CVE-2026-74490", "title": "tipc: avoid use-after-free in poll trace queue dumps", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74475", "url": "https://patchblox.com/security/cve/CVE-2026-74475", "title": "vxlan: use neigh_ha_snapshot() in route_shortcircuit()", "priority": "High", "severity": "Low", "cvss": 10, "epss": 0.00454, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74704", "url": "https://patchblox.com/security/cve/CVE-2026-74704", "title": "net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74598", "url": "https://patchblox.com/security/cve/CVE-2026-74598", "title": "ipv6: fix Route Information option length validation", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74581", "url": "https://patchblox.com/security/cve/CVE-2026-74581", "title": "net: ipv6: clear suppressed fib6 rule result", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00421, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80586", "url": "https://patchblox.com/security/cve/CVE-2026-80586", "title": "mptcp: options: reset DSS fields in case of unexpected size", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74569", "url": "https://patchblox.com/security/cve/CVE-2026-74569", "title": "netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00388, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80589", "url": "https://patchblox.com/security/cve/CVE-2026-80589", "title": "block: stop the timeout timer when releasing a never added disk", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68433", "url": "https://patchblox.com/security/cve/CVE-2026-68433", "title": "libceph: bound get_version reply decode to front len", "priority": "High", "severity": "Low", "cvss": 8.6, "epss": 0.00364, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72121", "url": "https://patchblox.com/security/cve/CVE-2026-72121", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and t...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74557", "url": "https://patchblox.com/security/cve/CVE-2026-74557", "title": "scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80717", "url": "https://patchblox.com/security/cve/CVE-2026-80717", "title": "sctp: validate Adaptation Indication parameter length", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72115", "url": "https://patchblox.com/security/cve/CVE-2026-72115", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: track a single source interface for AN...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00303, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68425", "url": "https://patchblox.com/security/cve/CVE-2026-68425", "title": "IB/mad: Drop unmatched RMPP responses before reassembly", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68278", "url": "https://patchblox.com/security/cve/CVE-2026-68278", "title": "drm/dp/mst: fix buffer overflows in sideband chunk accumulation", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64507", "url": "https://patchblox.com/security/cve/CVE-2026-64507", "title": "x86/bugs: Enable IBPB flush on BPF JIT allocation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68186", "url": "https://patchblox.com/security/cve/CVE-2026-68186", "title": "binfmt_misc: set have_execfd only once the interpreter is opened", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68165", "url": "https://patchblox.com/security/cve/CVE-2026-68165", "title": "mm/damon/core: validate ranges in damon_set_regions()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64572", "url": "https://patchblox.com/security/cve/CVE-2026-64572", "title": "ipv4: fib: free fib_alias with kfree_rcu() on insert error path", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68162", "url": "https://patchblox.com/security/cve/CVE-2026-68162", "title": "sctp: avoid auth_enable sysctl UAF during netns teardown", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80792", "url": "https://patchblox.com/security/cve/CVE-2026-80792", "title": "ipv6: fix use-after-free in ip6_finish_output2()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80808", "url": "https://patchblox.com/security/cve/CVE-2026-80808", "title": "ext4: stop retrying saturated xattr cache entries", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64508", "url": "https://patchblox.com/security/cve/CVE-2026-64508", "title": "bpf: Support for hardening against JIT spraying", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68255", "url": "https://patchblox.com/security/cve/CVE-2026-68255", "title": "drm/virtio: bound EDID block reads to the response buffer", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72116", "url": "https://patchblox.com/security/cve/CVE-2026-72116", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix stale rx/tx ops after device remov...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68093", "url": "https://patchblox.com/security/cve/CVE-2026-68093", "title": "KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80916", "url": "https://patchblox.com/security/cve/CVE-2026-80916", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74672", "url": "https://patchblox.com/security/cve/CVE-2026-74672", "title": "mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72416", "url": "https://patchblox.com/security/cve/CVE-2026-72416", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_compat: ebtables emulation must r...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80893", "url": "https://patchblox.com/security/cve/CVE-2026-80893", "title": "mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72110", "url": "https://patchblox.com/security/cve/CVE-2026-72110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe -\u003Ebpf_storage before bailouts tha...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72113", "url": "https://patchblox.com/security/cve/CVE-2026-72113", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing device refcount for CAN fi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72114", "url": "https://patchblox.com/security/cve/CVE-2026-72114", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcm_rx_setup(...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72119", "url": "https://patchblox.com/security/cve/CVE-2026-72119", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: extend bcm_tx_lock usage for data and...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72172", "url": "https://patchblox.com/security/cve/CVE-2026-72172", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for Z...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72252", "url": "https://patchblox.com/security/cve/CVE-2026-72252", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: don\u0027t leak bad clone...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64563", "url": "https://patchblox.com/security/cve/CVE-2026-64563", "title": "rhashtable: clear stale iter-\u003Ep on table restart", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64556", "url": "https://patchblox.com/security/cve/CVE-2026-64556", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90347", "url": "https://patchblox.com/security/cve/CVE-2026-90347", "title": "arm64: ptrace: Keep \u0027orig_x0\u0027 in-sync with x0 on syscall entry", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80904", "url": "https://patchblox.com/security/cve/CVE-2026-80904", "title": "net/tls: Fail tls_sw_splice_read() after a failed async decrypt", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64294", "url": "https://patchblox.com/security/cve/CVE-2026-64294", "title": "mm: do file ownership checks with the proper mount idmap", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74465", "url": "https://patchblox.com/security/cve/CVE-2026-74465", "title": "net: openvswitch: fix potential UAF on meter attach failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68432", "url": "https://patchblox.com/security/cve/CVE-2026-68432", "title": "vxlan: require CAP_NET_ADMIN in the device netns for changelink", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74519", "url": "https://patchblox.com/security/cve/CVE-2026-74519", "title": "pinctrl: devicetree: don\u0027t free uninitialized dev_name on error path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74684", "url": "https://patchblox.com/security/cve/CVE-2026-74684", "title": "net: tap: set skb-\u003Edev before parsing virtio net header in tap_get_user_xdp()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68253", "url": "https://patchblox.com/security/cve/CVE-2026-68253", "title": "drm/i915/hdcp: check streams[] bounds before overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74492", "url": "https://patchblox.com/security/cve/CVE-2026-74492", "title": "netfilter: ipset: do not update comments from kernel-side hash adds", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74614", "url": "https://patchblox.com/security/cve/CVE-2026-74614", "title": "vsock/virtio: read virtqueues under worker locks", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80536", "url": "https://patchblox.com/security/cve/CVE-2026-80536", "title": "xfs: bounds-check buffer log item\u0027s dirty bitmap", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80731", "url": "https://patchblox.com/security/cve/CVE-2026-80731", "title": "net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53090", "url": "https://patchblox.com/security/cve/CVE-2026-53090", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix ld_{abs,ind} failure path analysis in s...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74739", "url": "https://patchblox.com/security/cve/CVE-2026-74739", "title": "net/sched: cls_u32: skip hash tables in u32_bind_class()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74748", "url": "https://patchblox.com/security/cve/CVE-2026-74748", "title": "netfilter: ipset: fix refcount race between list:set GC and swap", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74589", "url": "https://patchblox.com/security/cve/CVE-2026-74589", "title": "bpf, sockmap: Fix sk_redir use-after-free in send verdict", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74601", "url": "https://patchblox.com/security/cve/CVE-2026-74601", "title": "ring-buffer: Use current_context for safe per-CPU buffer swap", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74667", "url": "https://patchblox.com/security/cve/CVE-2026-74667", "title": "net/packet: reset the MAC header on the packet-socket transmit path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74516", "url": "https://patchblox.com/security/cve/CVE-2026-74516", "title": "KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68284", "url": "https://patchblox.com/security/cve/CVE-2026-68284", "title": "bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80574", "url": "https://patchblox.com/security/cve/CVE-2026-80574", "title": "Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74481", "url": "https://patchblox.com/security/cve/CVE-2026-74481", "title": "mm/page_reporting: use system_freezable_wq to fix UAF during suspend", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68297", "url": "https://patchblox.com/security/cve/CVE-2026-68297", "title": "tipc: fix u16 MTU truncation in media and bearer MTU validation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74701", "url": "https://patchblox.com/security/cve/CVE-2026-74701", "title": "net/openvswitch: check Ethernet header length in key_extract()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74443", "url": "https://patchblox.com/security/cve/CVE-2026-74443", "title": "drm/vmwgfx: bound DMA command body size against suffix pointer", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74347", "url": "https://patchblox.com/security/cve/CVE-2026-74347", "title": "netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74444", "url": "https://patchblox.com/security/cve/CVE-2026-74444", "title": "drm/vmwgfx: validate DRAW_PRIMITIVES header size before division", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74594", "url": "https://patchblox.com/security/cve/CVE-2026-74594", "title": "sched/psi: Shut down rtpoll_timer in psi_cgroup_free()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74632", "url": "https://patchblox.com/security/cve/CVE-2026-74632", "title": "mm/huge_memory: fix huge_zero_pfn race", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74635", "url": "https://patchblox.com/security/cve/CVE-2026-74635", "title": "fbdev: bitblit: bound-check glyph index in bit_cursor()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74663", "url": "https://patchblox.com/security/cve/CVE-2026-74663", "title": "net/sched: reject overly deep qdisc hierarchies", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74666", "url": "https://patchblox.com/security/cve/CVE-2026-74666", "title": "packet: synchronize pressure clearing with ring reconfiguration", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74668", "url": "https://patchblox.com/security/cve/CVE-2026-74668", "title": "packet: use consistent hard_header_len in TX_RING send path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74675", "url": "https://patchblox.com/security/cve/CVE-2026-74675", "title": "vt: stabilize tty reference in kbd_keycode with tty_port_tty_get", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74720", "url": "https://patchblox.com/security/cve/CVE-2026-74720", "title": "bpf: Preserve pointer state for commuted arithmetic", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80737", "url": "https://patchblox.com/security/cve/CVE-2026-80737", "title": "serial: amba-pl011: synchronize DMA teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74630", "url": "https://patchblox.com/security/cve/CVE-2026-74630", "title": "ipv6: prevent in6_dev_get() from resurrecting inet6_dev", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68320", "url": "https://patchblox.com/security/cve/CVE-2026-68320", "title": "sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46158", "url": "https://patchblox.com/security/cve/CVE-2026-46158", "title": "mptcp: pm: ADD_ADDR rtx: always decrease sk refcount", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46170", "url": "https://patchblox.com/security/cve/CVE-2026-46170", "title": "mptcp: pm: ADD_ADDR rtx: free sk if last", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74518", "url": "https://patchblox.com/security/cve/CVE-2026-74518", "title": "mm/hugetlb: fix list corruption in allocate_file_region_entries()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74615", "url": "https://patchblox.com/security/cve/CVE-2026-74615", "title": "vxlan: do not arm the ageing timer on a device that is down", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64543", "url": "https://patchblox.com/security/cve/CVE-2026-64543", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in ti...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74471", "url": "https://patchblox.com/security/cve/CVE-2026-74471", "title": "tracing: Check return value of __register_event() in trace_module_add_events()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74482", "url": "https://patchblox.com/security/cve/CVE-2026-74482", "title": "mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74512", "url": "https://patchblox.com/security/cve/CVE-2026-74512", "title": "audit: fix potential use-after-free in audit_del_rule()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74609", "url": "https://patchblox.com/security/cve/CVE-2026-74609", "title": "tipc: read le-\u003Elink under the node lock in tipc_node_link_down()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74613", "url": "https://patchblox.com/security/cve/CVE-2026-74613", "title": "vsock/virtio: avoid refilling the RX queue after teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74637", "url": "https://patchblox.com/security/cve/CVE-2026-74637", "title": "perf/core: Fix group leader use-after-free after sibling detach", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74656", "url": "https://patchblox.com/security/cve/CVE-2026-74656", "title": "ipv4: fix use-after-free in fib_nhc_update_mtu()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74660", "url": "https://patchblox.com/security/cve/CVE-2026-74660", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt_nflog: pin the NFLOG backend nf_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74700", "url": "https://patchblox.com/security/cve/CVE-2026-74700", "title": "net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74714", "url": "https://patchblox.com/security/cve/CVE-2026-74714", "title": "bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74726", "url": "https://patchblox.com/security/cve/CVE-2026-74726", "title": "bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74485", "url": "https://patchblox.com/security/cve/CVE-2026-74485", "title": "binfmt_misc: reject a flag character as the field delimiter", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64567", "url": "https://patchblox.com/security/cve/CVE-2026-64567", "title": "btrfs: reject free space cache with more entries than pages", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64580", "url": "https://patchblox.com/security/cve/CVE-2026-64580", "title": "xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74565", "url": "https://patchblox.com/security/cve/CVE-2026-74565", "title": "netfilter: nf_tables: make nft_object rhltable per table", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74724", "url": "https://patchblox.com/security/cve/CVE-2026-74724", "title": "ipvs: avoid out-of-bounds write in ip_vs_nat_icmp", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68446", "url": "https://patchblox.com/security/cve/CVE-2026-68446", "title": "drm/vmwgfx: Validate vmw_surface_metadata::array_size", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64576", "url": "https://patchblox.com/security/cve/CVE-2026-64576", "title": "nexthop: initialize extack in nh_res_bucket_migrate()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74582", "url": "https://patchblox.com/security/cve/CVE-2026-74582", "title": "packet: use consistent hard_header_len in non-ring send paths", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80572", "url": "https://patchblox.com/security/cve/CVE-2026-80572", "title": "Input: byd - synchronize timer deletion before freeing private data", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74579", "url": "https://patchblox.com/security/cve/CVE-2026-74579", "title": "netfilter: nft_payload: fix mask build for partial field offload", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64192", "url": "https://patchblox.com/security/cve/CVE-2026-64192", "title": "bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74564", "url": "https://patchblox.com/security/cve/CVE-2026-74564", "title": "netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74583", "url": "https://patchblox.com/security/cve/CVE-2026-74583", "title": "net/sched: cls_route: fix fastmap use-after-free on filter", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74563", "url": "https://patchblox.com/security/cve/CVE-2026-74563", "title": "rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74567", "url": "https://patchblox.com/security/cve/CVE-2026-74567", "title": "keys: fix out-of-bounds read in keyring_get_key_chunk()", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74595", "url": "https://patchblox.com/security/cve/CVE-2026-74595", "title": "fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00092, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80726", "url": "https://patchblox.com/security/cve/CVE-2026-80726", "title": "KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page", "priority": "High", "severity": "Moderate", "cvss": 9.3, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68277", "url": "https://patchblox.com/security/cve/CVE-2026-68277", "title": "drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68184", "url": "https://patchblox.com/security/cve/CVE-2026-68184", "title": "cdrom: fix stack out-of-bounds read in CDROMVOLCTRL", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68313", "url": "https://patchblox.com/security/cve/CVE-2026-68313", "title": "tipc: fix infinite loop in __tipc_nl_compat_dumpit", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68322", "url": "https://patchblox.com/security/cve/CVE-2026-68322", "title": "rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72096", "url": "https://patchblox.com/security/cve/CVE-2026-72096", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72117", "url": "https://patchblox.com/security/cve/CVE-2026-72117", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix data race on rx_stamp/rx_ifindex i...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72118", "url": "https://patchblox.com/security/cve/CVE-2026-72118", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72392", "url": "https://patchblox.com/security/cve/CVE-2026-72392", "title": "ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68164", "url": "https://patchblox.com/security/cve/CVE-2026-68164", "title": "mm/damon/core: disallow overlapping input ranges for damon_set_regions()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68422", "url": "https://patchblox.com/security/cve/CVE-2026-68422", "title": "btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72413", "url": "https://patchblox.com/security/cve/CVE-2026-72413", "title": "sctp: fix err_chunk memory leaks in INIT handling", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68386", "url": "https://patchblox.com/security/cve/CVE-2026-68386", "title": "bpf, sockmap: Reject unhashed UDP sockets on sockmap update", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72040", "url": "https://patchblox.com/security/cve/CVE-2026-72040", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipmi: fix refcount leak in i_ipmi_request() Whe...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68269", "url": "https://patchblox.com/security/cve/CVE-2026-68269", "title": "drm/i915/gem: Add missing nospec on parallel submit slot", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72030", "url": "https://patchblox.com/security/cve/CVE-2026-72030", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Reject an invalid concurrent p...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80793", "url": "https://patchblox.com/security/cve/CVE-2026-80793", "title": "ipv4: reject undersized MTUs in ip_do_fragment()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80781", "url": "https://patchblox.com/security/cve/CVE-2026-80781", "title": "HID: core: fix OOB read of field-\u003Eusage in hid_set_field()", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80765", "url": "https://patchblox.com/security/cve/CVE-2026-80765", "title": "HID: hyperv: validate initial device info bounds", "priority": "Routine", "severity": "Moderate", "cvss": 4.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80805", "url": "https://patchblox.com/security/cve/CVE-2026-80805", "title": "xfs: validate attr entry pointer before field access", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74683", "url": "https://patchblox.com/security/cve/CVE-2026-74683", "title": "Input: evdev - sanitize event type index when fetching event masks", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68279", "url": "https://patchblox.com/security/cve/CVE-2026-68279", "title": "drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80888", "url": "https://patchblox.com/security/cve/CVE-2026-80888", "title": "drm/vmwgfx: drop dma_buf reference on foreign-fd prime import", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80890", "url": "https://patchblox.com/security/cve/CVE-2026-80890", "title": "sctp: reject stale cookies with mismatched verification tags", "priority": "Routine", "severity": "Moderate", "cvss": 4.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80918", "url": "https://patchblox.com/security/cve/CVE-2026-80918", "title": "HID: core: fix number/pointer type confusion on long items", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68336", "url": "https://patchblox.com/security/cve/CVE-2026-68336", "title": "bonding: fix devconf_all NULL dereference when IPv6 is disabled", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74464", "url": "https://patchblox.com/security/cve/CVE-2026-74464", "title": "net: openvswitch: fix skb leak on flow key update failure during ct", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74487", "url": "https://patchblox.com/security/cve/CVE-2026-74487", "title": "binfmt_misc: restore write access when removing an entry", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74620", "url": "https://patchblox.com/security/cve/CVE-2026-74620", "title": "net/sched: act_gact, act_police: range check the fallback control action", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74654", "url": "https://patchblox.com/security/cve/CVE-2026-74654", "title": "serial: 8250_dma: Clear stale RX state on shutdown", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74657", "url": "https://patchblox.com/security/cve/CVE-2026-74657", "title": "ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74658", "url": "https://patchblox.com/security/cve/CVE-2026-74658", "title": "futex: Prevent robust futex exit race some more", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74664", "url": "https://patchblox.com/security/cve/CVE-2026-74664", "title": "net: openvswitch: reallocate update replies for mismatched IDs", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74671", "url": "https://patchblox.com/security/cve/CVE-2026-74671", "title": "ima: fix out-of-bounds read in xattr_verify()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74673", "url": "https://patchblox.com/security/cve/CVE-2026-74673", "title": "Input: evdev - fix information leak in evdev_pass_values()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74676", "url": "https://patchblox.com/security/cve/CVE-2026-74676", "title": "vt: add permission check for KDSKBMETA ioctl", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80534", "url": "https://patchblox.com/security/cve/CVE-2026-80534", "title": "xfs: fix ilock leak on error in xfs_dq_get_next_id", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80733", "url": "https://patchblox.com/security/cve/CVE-2026-80733", "title": "net: remove WARN_ON_ONCE() from sk_mc_loop()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80742", "url": "https://patchblox.com/security/cve/CVE-2026-80742", "title": "af_packet: Don\u0027t send zero-byte data in tpacket_snd().", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80744", "url": "https://patchblox.com/security/cve/CVE-2026-80744", "title": "netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80529", "url": "https://patchblox.com/security/cve/CVE-2026-80529", "title": "xfs: don\u0027t swallow dquot recovery verification errors", "priority": "Routine", "severity": "Moderate", "cvss": 6.3, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64542", "url": "https://patchblox.com/security/cve/CVE-2026-64542", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in accept_untracked_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68243", "url": "https://patchblox.com/security/cve/CVE-2026-68243", "title": "drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68244", "url": "https://patchblox.com/security/cve/CVE-2026-68244", "title": "drm/i915/gem: Do not leak siblings[] on proto context error", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68248", "url": "https://patchblox.com/security/cve/CVE-2026-68248", "title": "drm/i915: Return NULL on error in active_instance", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68254", "url": "https://patchblox.com/security/cve/CVE-2026-68254", "title": "drm/i915/vrr: require valid min/max vfreq for VRR", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74636", "url": "https://patchblox.com/security/cve/CVE-2026-74636", "title": "tracing: Fix race between update_event_fields and, event_define_fields", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74722", "url": "https://patchblox.com/security/cve/CVE-2026-74722", "title": "btrfs: fix memory leak in btrfs_do_encoded_write()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64579", "url": "https://patchblox.com/security/cve/CVE-2026-64579", "title": "xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80757", "url": "https://patchblox.com/security/cve/CVE-2026-80757", "title": "selinux: reject a class permission count below its inherited common", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68428", "url": "https://patchblox.com/security/cve/CVE-2026-68428", "title": "KVM: x86/mmu: Fix use-after-free on vendor module reload", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74566", "url": "https://patchblox.com/security/cve/CVE-2026-74566", "title": "keys: make keyring key-chunk byte order agree with keyring_diff_objects()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74577", "url": "https://patchblox.com/security/cve/CVE-2026-74577", "title": "net: mpls: initialize rtm_tos in mpls_getroute()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80756", "url": "https://patchblox.com/security/cve/CVE-2026-80756", "title": "selinux: do not cancel a policy conversion that never started", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80906", "url": "https://patchblox.com/security/cve/CVE-2026-80906", "title": "net: packet: fix wrong transport_header when sending VLAN-tagged frame", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80913", "url": "https://patchblox.com/security/cve/CVE-2026-80913", "title": "selinux: require every boolean value to be defined", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80917", "url": "https://patchblox.com/security/cve/CVE-2026-80917", "title": "PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68450", "url": "https://patchblox.com/security/cve/CVE-2026-68450", "title": "btrfs: free mapping node on duplicate reloc root insert", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80901", "url": "https://patchblox.com/security/cve/CVE-2026-80901", "title": "ipvs: fix the checksum validations", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T13:56:55Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }