{
  "fix": "ALAS2023-2026-3139",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3139",
  "summary": "ALAS2023-2026-3139, released September 28, 2026, fixes 150 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 19 packages",
  "released": "2026-09-28T09:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-80557, rated Critical",
  "supported": true,
  "cveCount": 150,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00745,
  "maxCvss": 10,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-3139.html",
  "appliesTo": [
    {
      "product": "bpftool6.18",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "bpftool6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "kernel-livepatch-6.18.48-107.148",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.18.48-107.148",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo-common-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-debuginfo-common-x86_64",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-x86-64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-headers",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-modules-extra",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-modules-extra-common",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "kernel6.18-tools-devel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "microvm-kernel6.18",
      "productUrl": "https://patchblox.com/security/product/linux/microvm-kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.18",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "perf6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.18",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    },
    {
      "product": "python3-perf6.18-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.48-107.148.amzn2023",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-80557",
      "url": "https://patchblox.com/security/cve/CVE-2026-80557",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: fix OOB read in decode_watchers() via m...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80725",
      "url": "https://patchblox.com/security/cve/CVE-2026-80725",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: gro: properly validate BIG TCP aggregation...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00459,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74591",
      "url": "https://patchblox.com/security/cve/CVE-2026-74591",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/filemap: __filemap_add_folio() restore index...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00442,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74665",
      "url": "https://patchblox.com/security/cve/CVE-2026-74665",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: fix skb length accounting after generic XDP...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00373,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74517",
      "url": "https://patchblox.com/security/cve/CVE-2026-74517",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: x86: Cancel delayed I/O APIC EOI handling b...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.3,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68159",
      "url": "https://patchblox.com/security/cve/CVE-2026-68159",
      "title": "libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00745,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97557",
      "url": "https://patchblox.com/security/cve/CVE-2026-97557",
      "title": "smb: client: avoid leaking refcount in cifs_queue_oplock_break()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00696,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80590",
      "url": "https://patchblox.com/security/cve/CVE-2026-80590",
      "title": "inet: frags: strip GSO state from fragments before reassembly",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00578,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74597",
      "url": "https://patchblox.com/security/cve/CVE-2026-74597",
      "title": "ip6_tunnel: clear skb2-\u003Ecb[] in ip6ip6_err()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00543,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74743",
      "url": "https://patchblox.com/security/cve/CVE-2026-74743",
      "title": "macvlan: inherit needed_headroom and needed_tailroom from lowerdev",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00536,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74746",
      "url": "https://patchblox.com/security/cve/CVE-2026-74746",
      "title": "netfilter: flowtable: publish GC-visible tuple last",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00536,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80587",
      "url": "https://patchblox.com/security/cve/CVE-2026-80587",
      "title": "mptcp: avoid combining some incoming suboptions",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00516,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74662",
      "url": "https://patchblox.com/security/cve/CVE-2026-74662",
      "title": "inet: frags: publish queues before arming timer",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74669",
      "url": "https://patchblox.com/security/cve/CVE-2026-74669",
      "title": "ipvs: clear IPv4 options after rebasing tunnel ICMP errors",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80528",
      "url": "https://patchblox.com/security/cve/CVE-2026-80528",
      "title": "ceph: avoid fs reclaim while using current-\u003Ejournal_info",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80558",
      "url": "https://patchblox.com/security/cve/CVE-2026-80558",
      "title": "libceph: Avoid using invalid osd indices from primary_temp",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80561",
      "url": "https://patchblox.com/security/cve/CVE-2026-80561",
      "title": "libceph: fix multiple unsafe decodes in decode_locker()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74616",
      "url": "https://patchblox.com/security/cve/CVE-2026-74616",
      "title": "xdp: reject clones that overrun skb_shared_info tailroom",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00513,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74744",
      "url": "https://patchblox.com/security/cve/CVE-2026-74744",
      "title": "ipvlan: inherit needed_headroom and needed_tailroom from phy_dev",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00512,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74730",
      "url": "https://patchblox.com/security/cve/CVE-2026-74730",
      "title": "NFS: Pin the \u0027struct nfs_server\u0027 during a FREE_STATEID call",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.0051,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80527",
      "url": "https://patchblox.com/security/cve/CVE-2026-80527",
      "title": "ceph: fix hanging __ceph_get_caps() with stale mds_wanted",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74717",
      "url": "https://patchblox.com/security/cve/CVE-2026-74717",
      "title": "net/mlx5: fw_tracer, return NULL on create error",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74705",
      "url": "https://patchblox.com/security/cve/CVE-2026-74705",
      "title": "udp: fix potential use-after-free in tunnel segmentation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 10,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74586",
      "url": "https://patchblox.com/security/cve/CVE-2026-74586",
      "title": "sctp: clear new_transport when removing a peer",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74587",
      "url": "https://patchblox.com/security/cve/CVE-2026-74587",
      "title": "sctp: fix use-after-free of cached ASCONF chunk",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74588",
      "url": "https://patchblox.com/security/cve/CVE-2026-74588",
      "title": "sctp: keep chunk-\u003Etransport in step with the list it is queued on",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74688",
      "url": "https://patchblox.com/security/cve/CVE-2026-74688",
      "title": "sctp: clear control chunk transport if it is being removed",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68082",
      "url": "https://patchblox.com/security/cve/CVE-2026-68082",
      "title": "libceph: fix two unsafe bare decodes in decode_lockers()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00499,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74612",
      "url": "https://patchblox.com/security/cve/CVE-2026-74612",
      "title": "veth: fix skb length accounting after XDP frag adjustment",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 10,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74611",
      "url": "https://patchblox.com/security/cve/CVE-2026-74611",
      "title": "tls: rx: restore msg_iter before TLS 1.3 optimistic retry",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74696",
      "url": "https://patchblox.com/security/cve/CVE-2026-74696",
      "title": "tcp: fix TFO max_qlen accounting across reuseport migration",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74624",
      "url": "https://patchblox.com/security/cve/CVE-2026-74624",
      "title": "netfilter: nf_conntrack: defer invalid log until after unlock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74695",
      "url": "https://patchblox.com/security/cve/CVE-2026-74695",
      "title": "netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74608",
      "url": "https://patchblox.com/security/cve/CVE-2026-74608",
      "title": "smb: client: Fix use-after-free in cifs_try_adding_channels()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00477,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74742",
      "url": "https://patchblox.com/security/cve/CVE-2026-74742",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  veth: fix queue index used to wake the peer txq...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.0046,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74704",
      "url": "https://patchblox.com/security/cve/CVE-2026-74704",
      "title": "net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00443,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74598",
      "url": "https://patchblox.com/security/cve/CVE-2026-74598",
      "title": "ipv6: fix Route Information option length validation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00425,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80586",
      "url": "https://patchblox.com/security/cve/CVE-2026-80586",
      "title": "mptcp: options: reset DSS fields in case of unexpected size",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00399,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80589",
      "url": "https://patchblox.com/security/cve/CVE-2026-80589",
      "title": "block: stop the timeout timer when releasing a never added disk",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.0037,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74592",
      "url": "https://patchblox.com/security/cve/CVE-2026-74592",
      "title": "ima: Instantiate file_truncate and path_truncate hooks",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00341,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80588",
      "url": "https://patchblox.com/security/cve/CVE-2026-80588",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mptcp: reclaim forward-allocated memory on RX pa...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00335,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80585",
      "url": "https://patchblox.com/security/cve/CVE-2026-80585",
      "title": "mptcp: fastopen: only mark MPTFO subflows with SYN data",
      "priority": "High",
      "severity": "Low",
      "cvss": 9.4,
      "epss": 0.00313,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80777",
      "url": "https://patchblox.com/security/cve/CVE-2026-80777",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  futex/pi: Plug private futex exec() race  The ch...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80810",
      "url": "https://patchblox.com/security/cve/CVE-2026-80810",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/rsrc: fix folio size overflow in io_vec...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80818",
      "url": "https://patchblox.com/security/cve/CVE-2026-80818",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/tegra241-cmdqv: Fix CMD_SYNC use-after-fre...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80792",
      "url": "https://patchblox.com/security/cve/CVE-2026-80792",
      "title": "ipv6: fix use-after-free in ip6_finish_output2()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80808",
      "url": "https://patchblox.com/security/cve/CVE-2026-80808",
      "title": "ext4: stop retrying saturated xattr cache entries",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80775",
      "url": "https://patchblox.com/security/cve/CVE-2026-80775",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  futex: Fix race on the initial mm-\u003Efutex.phash.r...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74672",
      "url": "https://patchblox.com/security/cve/CVE-2026-74672",
      "title": "mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80724",
      "url": "https://patchblox.com/security/cve/CVE-2026-80724",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ptp: vmclock: prevent read-only mappings from be...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74728",
      "url": "https://patchblox.com/security/cve/CVE-2026-74728",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: handle NULL b_addr in xfs_buf_free  When xf...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80758",
      "url": "https://patchblox.com/security/cve/CVE-2026-80758",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  futex: Avoid private hash use-after-free on fina...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80778",
      "url": "https://patchblox.com/security/cve/CVE-2026-80778",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  futex/pi: Reject cross-mm private futex owners...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74709",
      "url": "https://patchblox.com/security/cve/CVE-2026-74709",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: clear metadata pointer when no timestamp is...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74593",
      "url": "https://patchblox.com/security/cve/CVE-2026-74593",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Take cgroup_lock() first in scx_cgrou...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74633",
      "url": "https://patchblox.com/security/cve/CVE-2026-74633",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tracing: Fix NULL pointer dereference in module...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74698",
      "url": "https://patchblox.com/security/cve/CVE-2026-74698",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: fix BQL reset on SQ re-activation  ml...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80776",
      "url": "https://patchblox.com/security/cve/CVE-2026-80776",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  futex: Fix race in futex_pivot_pending() during...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80904",
      "url": "https://patchblox.com/security/cve/CVE-2026-80904",
      "title": "net/tls: Fail tls_sw_splice_read() after a failed async decrypt",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74684",
      "url": "https://patchblox.com/security/cve/CVE-2026-74684",
      "title": "net: tap: set skb-\u003Edev before parsing virtio net header in tap_get_user_xdp()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74614",
      "url": "https://patchblox.com/security/cve/CVE-2026-74614",
      "title": "vsock/virtio: read virtqueues under worker locks",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80536",
      "url": "https://patchblox.com/security/cve/CVE-2026-80536",
      "title": "xfs: bounds-check buffer log item\u0027s dirty bitmap",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80731",
      "url": "https://patchblox.com/security/cve/CVE-2026-80731",
      "title": "net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74739",
      "url": "https://patchblox.com/security/cve/CVE-2026-74739",
      "title": "net/sched: cls_u32: skip hash tables in u32_bind_class()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74748",
      "url": "https://patchblox.com/security/cve/CVE-2026-74748",
      "title": "netfilter: ipset: fix refcount race between list:set GC and swap",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74589",
      "url": "https://patchblox.com/security/cve/CVE-2026-74589",
      "title": "bpf, sockmap: Fix sk_redir use-after-free in send verdict",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74736",
      "url": "https://patchblox.com/security/cve/CVE-2026-74736",
      "title": "net/sched: cls_bpf: reject dev-bound programs bound to a different device",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74601",
      "url": "https://patchblox.com/security/cve/CVE-2026-74601",
      "title": "ring-buffer: Use current_context for safe per-CPU buffer swap",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74667",
      "url": "https://patchblox.com/security/cve/CVE-2026-74667",
      "title": "net/packet: reset the MAC header on the packet-socket transmit path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74707",
      "url": "https://patchblox.com/security/cve/CVE-2026-74707",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: validate metadata when processing requests...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80530",
      "url": "https://patchblox.com/security/cve/CVE-2026-80530",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: fix exchange-range reflink flag clearing is...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80574",
      "url": "https://patchblox.com/security/cve/CVE-2026-80574",
      "title": "Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74701",
      "url": "https://patchblox.com/security/cve/CVE-2026-74701",
      "title": "net/openvswitch: check Ethernet header length in key_extract()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74753",
      "url": "https://patchblox.com/security/cve/CVE-2026-74753",
      "title": "perf: Reject exited events as group leaders",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74594",
      "url": "https://patchblox.com/security/cve/CVE-2026-74594",
      "title": "sched/psi: Shut down rtpoll_timer in psi_cgroup_free()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74610",
      "url": "https://patchblox.com/security/cve/CVE-2026-74610",
      "title": "tls: don\u0027t leave a full plaintext sk_msg ring unpushed",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74632",
      "url": "https://patchblox.com/security/cve/CVE-2026-74632",
      "title": "mm/huge_memory: fix huge_zero_pfn race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74635",
      "url": "https://patchblox.com/security/cve/CVE-2026-74635",
      "title": "fbdev: bitblit: bound-check glyph index in bit_cursor()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74663",
      "url": "https://patchblox.com/security/cve/CVE-2026-74663",
      "title": "net/sched: reject overly deep qdisc hierarchies",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74666",
      "url": "https://patchblox.com/security/cve/CVE-2026-74666",
      "title": "packet: synchronize pressure clearing with ring reconfiguration",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74668",
      "url": "https://patchblox.com/security/cve/CVE-2026-74668",
      "title": "packet: use consistent hard_header_len in TX_RING send path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74670",
      "url": "https://patchblox.com/security/cve/CVE-2026-74670",
      "title": "ipvs: stop estimator after disabled calc phase",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74675",
      "url": "https://patchblox.com/security/cve/CVE-2026-74675",
      "title": "vt: stabilize tty reference in kbd_keycode with tty_port_tty_get",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74710",
      "url": "https://patchblox.com/security/cve/CVE-2026-74710",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: require at least 16 bytes of TX metadata  A...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74720",
      "url": "https://patchblox.com/security/cve/CVE-2026-74720",
      "title": "bpf: Preserve pointer state for commuted arithmetic",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80737",
      "url": "https://patchblox.com/security/cve/CVE-2026-80737",
      "title": "serial: amba-pl011: synchronize DMA teardown",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74630",
      "url": "https://patchblox.com/security/cve/CVE-2026-74630",
      "title": "ipv6: prevent in6_dev_get() from resurrecting inet6_dev",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74627",
      "url": "https://patchblox.com/security/cve/CVE-2026-74627",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: devmem: prevent net-iov / page mixing  We s...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74652",
      "url": "https://patchblox.com/security/cve/CVE-2026-74652",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  serial: amba-pl011: cancel RS485 hrtimers after...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74708",
      "url": "https://patchblox.com/security/cve/CVE-2026-74708",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: validate launch-time metadata size  Launch-...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74615",
      "url": "https://patchblox.com/security/cve/CVE-2026-74615",
      "title": "vxlan: do not arm the ageing timer on a device that is down",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74609",
      "url": "https://patchblox.com/security/cve/CVE-2026-74609",
      "title": "tipc: read le-\u003Elink under the node lock in tipc_node_link_down()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74613",
      "url": "https://patchblox.com/security/cve/CVE-2026-74613",
      "title": "vsock/virtio: avoid refilling the RX queue after teardown",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74637",
      "url": "https://patchblox.com/security/cve/CVE-2026-74637",
      "title": "perf/core: Fix group leader use-after-free after sibling detach",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74656",
      "url": "https://patchblox.com/security/cve/CVE-2026-74656",
      "title": "ipv4: fix use-after-free in fib_nhc_update_mtu()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74660",
      "url": "https://patchblox.com/security/cve/CVE-2026-74660",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: ebt_nflog: pin the NFLOG backend  nf_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74700",
      "url": "https://patchblox.com/security/cve/CVE-2026-74700",
      "title": "net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74714",
      "url": "https://patchblox.com/security/cve/CVE-2026-74714",
      "title": "bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74726",
      "url": "https://patchblox.com/security/cve/CVE-2026-74726",
      "title": "bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74606",
      "url": "https://patchblox.com/security/cve/CVE-2026-74606",
      "title": "eventfs: Fix use-after-free in eventfs_remove_rec()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74634",
      "url": "https://patchblox.com/security/cve/CVE-2026-74634",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ring-buffer: Prevent subbuf order change when re...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74724",
      "url": "https://patchblox.com/security/cve/CVE-2026-74724",
      "title": "ipvs: avoid out-of-bounds write in ip_vs_nat_icmp",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74582",
      "url": "https://patchblox.com/security/cve/CVE-2026-74582",
      "title": "packet: use consistent hard_header_len in non-ring send paths",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80572",
      "url": "https://patchblox.com/security/cve/CVE-2026-80572",
      "title": "Input: byd - synchronize timer deletion before freeing private data",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74583",
      "url": "https://patchblox.com/security/cve/CVE-2026-74583",
      "title": "net/sched: cls_route: fix fastmap use-after-free on filter",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80578",
      "url": "https://patchblox.com/security/cve/CVE-2026-80578",
      "title": "fbdev: core: Fix pointer desynchronization in fb_io_read()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74595",
      "url": "https://patchblox.com/security/cve/CVE-2026-74595",
      "title": "fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00092,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80726",
      "url": "https://patchblox.com/security/cve/CVE-2026-80726",
      "title": "KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.3,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80811",
      "url": "https://patchblox.com/security/cve/CVE-2026-80811",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/cmd: fix iovec leak when the async cmd...",
      "priority": "High",
      "severity": "important",
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80905",
      "url": "https://patchblox.com/security/cve/CVE-2026-80905",
      "title": "net: tap: fix wrong transport_header when sending VLAN-tagged frame",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00204,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97547",
      "url": "https://patchblox.com/security/cve/CVE-2026-97547",
      "title": "xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.3,
      "epss": 0.002,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80793",
      "url": "https://patchblox.com/security/cve/CVE-2026-80793",
      "title": "ipv4: reject undersized MTUs in ip_do_fragment()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80781",
      "url": "https://patchblox.com/security/cve/CVE-2026-80781",
      "title": "HID: core: fix OOB read of field-\u003Eusage in hid_set_field()",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.3,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80765",
      "url": "https://patchblox.com/security/cve/CVE-2026-80765",
      "title": "HID: hyperv: validate initial device info bounds",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.5,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80805",
      "url": "https://patchblox.com/security/cve/CVE-2026-80805",
      "title": "xfs: validate attr entry pointer before field access",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.4,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74683",
      "url": "https://patchblox.com/security/cve/CVE-2026-74683",
      "title": "Input: evdev - sanitize event type index when fetching event masks",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80918",
      "url": "https://patchblox.com/security/cve/CVE-2026-80918",
      "title": "HID: core: fix number/pointer type confusion on long items",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 3.3,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74740",
      "url": "https://patchblox.com/security/cve/CVE-2026-74740",
      "title": "net/sched: act_api: fix TOCTOU NULL deref on a-\u003Egoto_chain",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00181,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74620",
      "url": "https://patchblox.com/security/cve/CVE-2026-74620",
      "title": "net/sched: act_gact, act_police: range check the fallback control action",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74654",
      "url": "https://patchblox.com/security/cve/CVE-2026-74654",
      "title": "serial: 8250_dma: Clear stale RX state on shutdown",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74657",
      "url": "https://patchblox.com/security/cve/CVE-2026-74657",
      "title": "ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74658",
      "url": "https://patchblox.com/security/cve/CVE-2026-74658",
      "title": "futex: Prevent robust futex exit race some more",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74664",
      "url": "https://patchblox.com/security/cve/CVE-2026-74664",
      "title": "net: openvswitch: reallocate update replies for mismatched IDs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74671",
      "url": "https://patchblox.com/security/cve/CVE-2026-74671",
      "title": "ima: fix out-of-bounds read in xattr_verify()",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74673",
      "url": "https://patchblox.com/security/cve/CVE-2026-74673",
      "title": "Input: evdev - fix information leak in evdev_pass_values()",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74676",
      "url": "https://patchblox.com/security/cve/CVE-2026-74676",
      "title": "vt: add permission check for KDSKBMETA ioctl",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80534",
      "url": "https://patchblox.com/security/cve/CVE-2026-80534",
      "title": "xfs: fix ilock leak on error in xfs_dq_get_next_id",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80733",
      "url": "https://patchblox.com/security/cve/CVE-2026-80733",
      "title": "net: remove WARN_ON_ONCE() from sk_mc_loop()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80742",
      "url": "https://patchblox.com/security/cve/CVE-2026-80742",
      "title": "af_packet: Don\u0027t send zero-byte data in tpacket_snd().",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80744",
      "url": "https://patchblox.com/security/cve/CVE-2026-80744",
      "title": "netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 3.3,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80529",
      "url": "https://patchblox.com/security/cve/CVE-2026-80529",
      "title": "xfs: don\u0027t swallow dquot recovery verification errors",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.3,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74636",
      "url": "https://patchblox.com/security/cve/CVE-2026-74636",
      "title": "tracing: Fix race between update_event_fields and, event_define_fields",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74722",
      "url": "https://patchblox.com/security/cve/CVE-2026-74722",
      "title": "btrfs: fix memory leak in btrfs_do_encoded_write()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80739",
      "url": "https://patchblox.com/security/cve/CVE-2026-80739",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: TC, Check if flow is PEER before acqu...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80806",
      "url": "https://patchblox.com/security/cve/CVE-2026-80806",
      "title": "ext4: don\u0027t enable DAX on new encrypted files",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80784",
      "url": "https://patchblox.com/security/cve/CVE-2026-80784",
      "title": "mptcp: pm: fix memory leak from alloc-during-teardown race",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.4,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80727",
      "url": "https://patchblox.com/security/cve/CVE-2026-80727",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  x86/mce: Set up the polling timer before CMCI di...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.4,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74483",
      "url": "https://patchblox.com/security/cve/CVE-2026-74483",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  binfmt_misc: don\u0027t leak the user namespace when...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74602",
      "url": "https://patchblox.com/security/cve/CVE-2026-74602",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ring-buffer: Initialise reader page order in rb_...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74618",
      "url": "https://patchblox.com/security/cve/CVE-2026-74618",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  binfmt_misc: don\u0027t warn when the mount is comple...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74619",
      "url": "https://patchblox.com/security/cve/CVE-2026-74619",
      "title": "ovl: don\u0027t warn when the mount is completed from another user namespace",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74644",
      "url": "https://patchblox.com/security/cve/CVE-2026-74644",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/damon/ops-common: putback folios on invalid m...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74653",
      "url": "https://patchblox.com/security/cve/CVE-2026-74653",
      "title": "serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74718",
      "url": "https://patchblox.com/security/cve/CVE-2026-74718",
      "title": "devlink: fix net namespace reference leak in reload",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80757",
      "url": "https://patchblox.com/security/cve/CVE-2026-80757",
      "title": "selinux: reject a class permission count below its inherited common",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.7,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80756",
      "url": "https://patchblox.com/security/cve/CVE-2026-80756",
      "title": "selinux: do not cancel a policy conversion that never started",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.4,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80906",
      "url": "https://patchblox.com/security/cve/CVE-2026-80906",
      "title": "net: packet: fix wrong transport_header when sending VLAN-tagged frame",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.4,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80912",
      "url": "https://patchblox.com/security/cve/CVE-2026-80912",
      "title": "selinux: reject an unclaimed class value in security_get_classes()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.4,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80913",
      "url": "https://patchblox.com/security/cve/CVE-2026-80913",
      "title": "selinux: require every boolean value to be defined",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.4,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80917",
      "url": "https://patchblox.com/security/cve/CVE-2026-80917",
      "title": "PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.1,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}