{ "fix": "ALAS2023-2026-3187", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3187", "summary": "ALAS2023-2026-3187, released November 7, 2026, fixes 250 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 19 packages", "released": "2026-11-07T01:06:52Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-89688, rated Critical", "supported": true, "cveCount": 250, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00841, "maxCvss": 9.9, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-3187.html", "appliesTo": [ { "product": "bpftool6.18", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "bpftool6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.18.51-120.162", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.18.51-120.162", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel6.18", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "kernel6.18-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "kernel6.18-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-headers", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "kernel6.18-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "kernel6.18-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "kernel6.18-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "kernel6.18-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "kernel6.18-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "microvm-kernel6.18", "productUrl": "https://patchblox.com/security/product/linux/microvm-kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "perf6.18", "productUrl": "https://patchblox.com/security/product/linux/perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "perf6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "python3-perf6.18", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true }, { "product": "python3-perf6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.51-120.162.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-89688", "url": "https://patchblox.com/security/cve/CVE-2026-89688", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on s...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00736, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90048", "url": "https://patchblox.com/security/cve/CVE-2026-90048", "title": "fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00721, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80976", "url": "https://patchblox.com/security/cve/CVE-2026-80976", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation deca...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89485", "url": "https://patchblox.com/security/cve/CVE-2026-89485", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlm_inspect_file loc...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89655", "url": "https://patchblox.com/security/cve/CVE-2026-89655", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() on cf en...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89712", "url": "https://patchblox.com/security/cve/CVE-2026-89712", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc_expire_umount walk after dropp...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89555", "url": "https://patchblox.com/security/cve/CVE-2026-89555", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb_may_pull() mpls_...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89634", "url": "https://patchblox.com/security/cve/CVE-2026-89634", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN() overflow in symlink_dat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00693, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89713", "url": "https://patchblox.com/security/cve/CVE-2026-89713", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00665, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89636", "url": "https://patchblox.com/security/cve/CVE-2026-89636", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce-\u003Etgthint in free_tgts() W...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00663, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89536", "url": "https://patchblox.com/security/cve/CVE-2026-89536", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: wait for in-flight client TLS handshake...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89558", "url": "https://patchblox.com/security/cve/CVE-2026-89558", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix still_degraded being inverted in...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89651", "url": "https://patchblox.com/security/cve/CVE-2026-89651", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ceph: bound MDSCapAuth path and fs_name decode i...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90012", "url": "https://patchblox.com/security/cve/CVE-2026-90012", "title": "spi: Fix DMA mapping ownership on partial map failure", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00626, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89658", "url": "https://patchblox.com/security/cve/CVE-2026-89658", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during NFSv4...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00617, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89660", "url": "https://patchblox.com/security/cve/CVE-2026-89660", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00617, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89703", "url": "https://patchblox.com/security/cve/CVE-2026-89703", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00617, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89689", "url": "https://patchblox.com/security/cve/CVE-2026-89689", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: don\u0027t free session slots that are still in...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00614, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89990", "url": "https://patchblox.com/security/cve/CVE-2026-89990", "title": "ceph: lock mutex in ceph_mds_check_access()", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00608, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89637", "url": "https://patchblox.com/security/cve/CVE-2026-89637", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifs_che...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00597, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89633", "url": "https://patchblox.com/security/cve/CVE-2026-89633", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89478", "url": "https://patchblox.com/security/cve/CVE-2026-89478", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: drop a chunk if its transport was removed...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89541", "url": "https://patchblox.com/security/cve/CVE-2026-89541", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_unwrap_resp_priv length check...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89542", "url": "https://patchblox.com/security/cve/CVE-2026-89542", "title": "SUNRPC: harden gss_krb5_unwrap_v2 against short tokens", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89551", "url": "https://patchblox.com/security/cve/CVE-2026-89551", "title": "SUNRPC: xdr_buf_trim: clamp buf-\u003Elen to avoid underflow", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89652", "url": "https://patchblox.com/security/cve/CVE-2026-89652", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS exp...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90037", "url": "https://patchblox.com/security/cve/CVE-2026-90037", "title": "NFSD: Prevent client use-after-free during close_lru reaping", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89653", "url": "https://patchblox.com/security/cve/CVE-2026-89653", "title": "ceph: reject export_targets ranks \u003E= CEPH_MAX_MDS in mdsmap decode", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89702", "url": "https://patchblox.com/security/cve/CVE-2026-89702", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: size fh_verify server sockaddr slot by xpt...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90042", "url": "https://patchblox.com/security/cve/CVE-2026-90042", "title": "ceph: properly decrypt filenames in vmalloc() buffers", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89479", "url": "https://patchblox.com/security/cve/CVE-2026-89479", "title": "sctp: stop processing a packet once its association is deleted", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89676", "url": "https://patchblox.com/security/cve/CVE-2026-89676", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for as...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89631", "url": "https://patchblox.com/security/cve/CVE-2026-89631", "title": "smb: client: reject a tree connect response whose byte count is too small", "priority": "Urgent", "severity": "Critical", "cvss": 9.1, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90036", "url": "https://patchblox.com/security/cve/CVE-2026-90036", "title": "NFSD: Prevent client use-after-free during blocked-lock reaping", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00484, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93207", "url": "https://patchblox.com/security/cve/CVE-2026-93207", "title": "SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89675", "url": "https://patchblox.com/security/cve/CVE-2026-89675", "title": "nfsd: fix UAF in async copy cancel and shutdown", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00442, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89775", "url": "https://patchblox.com/security/cve/CVE-2026-89775", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle negative S1 walk levels in VN...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89914", "url": "https://patchblox.com/security/cve/CVE-2026-89914", "title": "KVM: arm64: Sign-extend VA for range-based TLBI invalidation", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89916", "url": "https://patchblox.com/security/cve/CVE-2026-89916", "title": "KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89918", "url": "https://patchblox.com/security/cve/CVE-2026-89918", "title": "KVM: arm64: Correctly handle end of VA space TLBI invalidation", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90011", "url": "https://patchblox.com/security/cve/CVE-2026-90011", "title": "scsi: target: iscsi: Reserve a terminator byte for the login payload", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00841, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89696", "url": "https://patchblox.com/security/cve/CVE-2026-89696", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH t...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00752, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89680", "url": "https://patchblox.com/security/cve/CVE-2026-89680", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY se...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0074, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89544", "url": "https://patchblox.com/security/cve/CVE-2026-89544", "title": "SUNRPC: fix gssx_dec_option_array error path bugs", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89679", "url": "https://patchblox.com/security/cve/CVE-2026-89679", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix null dereference in nfsd4_setattr for...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00718, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89482", "url": "https://patchblox.com/security/cve/CVE-2026-89482", "title": "nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89538", "url": "https://patchblox.com/security/cve/CVE-2026-89538", "title": "SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89643", "url": "https://patchblox.com/security/cve/CVE-2026-89643", "title": "audit: avoid dropping live tree ref on fsnotify rule autoremove", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89549", "url": "https://patchblox.com/security/cve/CVE-2026-89549", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc_pool_fo...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00707, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89476", "url": "https://patchblox.com/security/cve/CVE-2026-89476", "title": "sctp: fix stream-\u003Eoutcnt underflow on duplicate RECONF responses", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89707", "url": "https://patchblox.com/security/cve/CVE-2026-89707", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on follow_down() error...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89662", "url": "https://patchblox.com/security/cve/CVE-2026-89662", "title": "NFSD: Prevent lock owner use-after-free during client teardown", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89669", "url": "https://patchblox.com/security/cve/CVE-2026-89669", "title": "nfsd: initialize copy-notify stateid before publishing it", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89649", "url": "https://patchblox.com/security/cve/CVE-2026-89649", "title": "ceph: bound xattr value length in __build_xattrs()", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00678, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89647", "url": "https://patchblox.com/security/cve/CVE-2026-89647", "title": "ceph: do not repeat ceph_trim_dentries() if no progress possible", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00675, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89648", "url": "https://patchblox.com/security/cve/CVE-2026-89648", "title": "ceph: cap delegated inode count in ceph_parse_deleg_inos()", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00675, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89973", "url": "https://patchblox.com/security/cve/CVE-2026-89973", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00615, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89586", "url": "https://patchblox.com/security/cve/CVE-2026-89586", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00615, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89657", "url": "https://patchblox.com/security/cve/CVE-2026-89657", "title": "libceph: validate OSD extent maps before cursor advance", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00612, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89685", "url": "https://patchblox.com/security/cve/CVE-2026-89685", "title": "nfsd: fix clock domain mismatch in clients_still_reclaiming()", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00612, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89692", "url": "https://patchblox.com/security/cve/CVE-2026-89692", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: clear CALLBACK_RUNNING on failed delegatio...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00609, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89554", "url": "https://patchblox.com/security/cve/CVE-2026-89554", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized local_id in syncookie M...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00598, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89483", "url": "https://patchblox.com/security/cve/CVE-2026-89483", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvme_setup...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00571, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89547", "url": "https://patchblox.com/security/cve/CVE-2026-89547", "title": "SUNRPC: Check svc pool percpu counter allocation", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00561, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89671", "url": "https://patchblox.com/security/cve/CVE-2026-89671", "title": "nfsd: gate nfs3 setacl by argp-\u003Emask", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00545, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89667", "url": "https://patchblox.com/security/cve/CVE-2026-89667", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shut...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89682", "url": "https://patchblox.com/security/cve/CVE-2026-89682", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix fcache_disposal UAF by inlining dispos...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00532, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89706", "url": "https://patchblox.com/security/cve/CVE-2026-89706", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY write...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00526, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89704", "url": "https://patchblox.com/security/cve/CVE-2026-89704", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00526, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-81002", "url": "https://patchblox.com/security/cve/CVE-2026-81002", "title": "xdp: fix zero-copy frame layout", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89656", "url": "https://patchblox.com/security/cve/CVE-2026-89656", "title": "libceph: reject buckets with mismatched CRUSH ids", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89650", "url": "https://patchblox.com/security/cve/CVE-2026-89650", "title": "ceph: bound num_export_targets array for mds info v2/v3", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89684", "url": "https://patchblox.com/security/cve/CVE-2026-89684", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4_init_cp_sta...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89477", "url": "https://patchblox.com/security/cve/CVE-2026-89477", "title": "sctp: fix NULL deref on untransmitted RECONF completion", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89699", "url": "https://patchblox.com/security/cve/CVE-2026-89699", "title": "nfsd: validate symlink target length in NFSv4 CREATE", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89550", "url": "https://patchblox.com/security/cve/CVE-2026-89550", "title": "SUNRPC: svcauth_gss: enforce krb5 token minimum length", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89561", "url": "https://patchblox.com/security/cve/CVE-2026-89561", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6_...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89659", "url": "https://patchblox.com/security/cve/CVE-2026-89659", "title": "NFSD: Prevent client use-after-free during delegation revoke", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00477, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89663", "url": "https://patchblox.com/security/cve/CVE-2026-89663", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before droppin...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89708", "url": "https://patchblox.com/security/cve/CVE-2026-89708", "title": "nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00444, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89711", "url": "https://patchblox.com/security/cve/CVE-2026-89711", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89481", "url": "https://patchblox.com/security/cve/CVE-2026-89481", "title": "nvme-tcp: fix host memory disclosure on R2T for a read command", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89480", "url": "https://patchblox.com/security/cve/CVE-2026-89480", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89616", "url": "https://patchblox.com/security/cve/CVE-2026-89616", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompre...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72493", "url": "https://patchblox.com/security/cve/CVE-2026-72493", "title": "net: serialize netif_running() check in enqueue_to_backlog()", "priority": "High", "severity": "Moderate", "cvss": 9.9, "epss": 0.00403, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89995", "url": "https://patchblox.com/security/cve/CVE-2026-89995", "title": "dma-direct: return struct page from dma_direct_alloc_from_pool()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.0035, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89897", "url": "https://patchblox.com/security/cve/CVE-2026-89897", "title": "media: cec: Serialize exclusive follower delivery", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00307, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89645", "url": "https://patchblox.com/security/cve/CVE-2026-89645", "title": "btrfs: drop recovered reloc root refs on recovery failure", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00248, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93241", "url": "https://patchblox.com/security/cve/CVE-2026-93241", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: memcg: bypass the reclaim and oom killer for dyi...", "priority": "High", "severity": "important", "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93240", "url": "https://patchblox.com/security/cve/CVE-2026-93240", "title": "memcg: make the v1 soft limit knob inert", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00225, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89694", "url": "https://patchblox.com/security/cve/CVE-2026-89694", "title": "nfsd: check client ownership when cancelling a copy-notify stateid", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93239", "url": "https://patchblox.com/security/cve/CVE-2026-93239", "title": "arm64: mm: Fix the lockless page-table walk in show_pte()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89984", "url": "https://patchblox.com/security/cve/CVE-2026-89984", "title": "perf/x86/intel: Fix kernel address leakages in LBR stack", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89543", "url": "https://patchblox.com/security/cve/CVE-2026-89543", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix use-after-free in __rpc_clnt_handle_...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89484", "url": "https://patchblox.com/security/cve/CVE-2026-89484", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: fix NULL dereference on lockowner allocat...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89983", "url": "https://patchblox.com/security/cve/CVE-2026-89983", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89451", "url": "https://patchblox.com/security/cve/CVE-2026-89451", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Set handle-\u003Edev before the SVA handle...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89502", "url": "https://patchblox.com/security/cve/CVE-2026-89502", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Free cpu_buffer::free_page with sub...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89701", "url": "https://patchblox.com/security/cve/CVE-2026-89701", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: validate nseconds in TIME_DELEG decode pat...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89714", "url": "https://patchblox.com/security/cve/CVE-2026-89714", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFS: fix delegation_hash_table leak when nfs4_se...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89991", "url": "https://patchblox.com/security/cve/CVE-2026-89991", "title": "bpf: Fix infinite loop in pcpu_freelist push with one possible CPU", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80840", "url": "https://patchblox.com/security/cve/CVE-2026-80840", "title": "ipv6: seg6: clear IPv4 control block on IPIP decapsulation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89556", "url": "https://patchblox.com/security/cve/CVE-2026-89556", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: module: validate string table section types In...", "priority": "High", "severity": "important", "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89577", "url": "https://patchblox.com/security/cve/CVE-2026-89577", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-io: report non-retryable errors separatedly...", "priority": "High", "severity": "important", "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93244", "url": "https://patchblox.com/security/cve/CVE-2026-93244", "title": "drm/sysfb: simpledrm: Improve stride validation", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89578", "url": "https://patchblox.com/security/cve/CVE-2026-89578", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying i...", "priority": "High", "severity": "important", "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80824", "url": "https://patchblox.com/security/cve/CVE-2026-80824", "title": "usb: usbfs: fix use-after-free of usb_device in usbdev_release()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90039", "url": "https://patchblox.com/security/cve/CVE-2026-90039", "title": "NFSD: Guard admin state-revocation walks with NFSD_NET_UP", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89930", "url": "https://patchblox.com/security/cve/CVE-2026-89930", "title": "KVM: nVMX: Service local TLB flushes on failed nested VM-Enter", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89913", "url": "https://patchblox.com/security/cve/CVE-2026-89913", "title": "KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89588", "url": "https://patchblox.com/security/cve/CVE-2026-89588", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length account...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89668", "url": "https://patchblox.com/security/cve/CVE-2026-89668", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: move nfsd_debugfs_init() after nfsd4_init_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93227", "url": "https://patchblox.com/security/cve/CVE-2026-93227", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: deferred_grow_zone(): fix out-of-ran...", "priority": "High", "severity": "important", "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80852", "url": "https://patchblox.com/security/cve/CVE-2026-80852", "title": "tls: device: fix out-of-bounds write in tls_append_frag()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89912", "url": "https://patchblox.com/security/cve/CVE-2026-89912", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don\u0027t dereference a NULL c...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89992", "url": "https://patchblox.com/security/cve/CVE-2026-89992", "title": "cpuidle: dt_idle_genpd: kfree() the original name allocation", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89927", "url": "https://patchblox.com/security/cve/CVE-2026-89927", "title": "KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89638", "url": "https://patchblox.com/security/cve/CVE-2026-89638", "title": "smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-81004", "url": "https://patchblox.com/security/cve/CVE-2026-81004", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89693", "url": "https://patchblox.com/security/cve/CVE-2026-89693", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4_acl_to_attr() return value in...", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80842", "url": "https://patchblox.com/security/cve/CVE-2026-80842", "title": "net: bridge: mcast: fix use-after-free of a master VLAN\u0027s multicast context", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89552", "url": "https://patchblox.com/security/cve/CVE-2026-89552", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failu...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89602", "url": "https://patchblox.com/security/cve/CVE-2026-89602", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers wh...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89799", "url": "https://patchblox.com/security/cve/CVE-2026-89799", "title": "bpf: Disable preemption in bpf_get_stackid", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89618", "url": "https://patchblox.com/security/cve/CVE-2026-89618", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: eventfs: Initialize ei-\u003Echildren and ei-\u003Elist in...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89666", "url": "https://patchblox.com/security/cve/CVE-2026-89666", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range nseconds in NFSv3 SETA...", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80837", "url": "https://patchblox.com/security/cve/CVE-2026-80837", "title": "netfilter: nf_tables: don\u0027t queue packet path object notifications", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80841", "url": "https://patchblox.com/security/cve/CVE-2026-80841", "title": "net/packet: defer vmalloc TX_RING free until skbs finish", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89646", "url": "https://patchblox.com/security/cve/CVE-2026-89646", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix leaked inode reference on writeback ab...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89767", "url": "https://patchblox.com/security/cve/CVE-2026-89767", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ovl: fix double end_creating() on the casefold-m...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89710", "url": "https://patchblox.com/security/cve/CVE-2026-89710", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfs_lay...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93205", "url": "https://patchblox.com/security/cve/CVE-2026-93205", "title": "iommu/arm-smmu-v3: Manage teardown with devm", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90049", "url": "https://patchblox.com/security/cve/CVE-2026-90049", "title": "net: skbuff: don\u0027t skb_tx_error() the source skb in skb_zerocopy()", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80994", "url": "https://patchblox.com/security/cve/CVE-2026-80994", "title": "net: openvswitch: fix flow mask use-after-free on flow deletion", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89932", "url": "https://patchblox.com/security/cve/CVE-2026-89932", "title": "KVM: nVMX: Always flush vpid02 on first use", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89520", "url": "https://patchblox.com/security/cve/CVE-2026-89520", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-fl...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89557", "url": "https://patchblox.com/security/cve/CVE-2026-89557", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb-\u003Ebblog_shift in sup...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89559", "url": "https://patchblox.com/security/cve/CVE-2026-89559", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in __...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89574", "url": "https://patchblox.com/security/cve/CVE-2026-89574", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89741", "url": "https://patchblox.com/security/cve/CVE-2026-89741", "title": "Revert \u0022media: v4l2-dev: fix error handling in __video_register_device()\u0022", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89823", "url": "https://patchblox.com/security/cve/CVE-2026-89823", "title": "drm: fix race between partial drm_dev_register() failure and ioctl", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89965", "url": "https://patchblox.com/security/cve/CVE-2026-89965", "title": "nvdimm/btt: reject an arena whose nfree is below the lane count", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89988", "url": "https://patchblox.com/security/cve/CVE-2026-89988", "title": "kprobes: Protect kprobe_blacklist with RCU", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89998", "url": "https://patchblox.com/security/cve/CVE-2026-89998", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89928", "url": "https://patchblox.com/security/cve/CVE-2026-89928", "title": "KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89929", "url": "https://patchblox.com/security/cve/CVE-2026-89929", "title": "KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80838", "url": "https://patchblox.com/security/cve/CVE-2026-80838", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: keep the last remote linked during FDB fl...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89500", "url": "https://patchblox.com/security/cve/CVE-2026-89500", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89501", "url": "https://patchblox.com/security/cve/CVE-2026-89501", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpu_buffer::lock when resizing...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89503", "url": "https://patchblox.com/security/cve/CVE-2026-89503", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring_bu...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93212", "url": "https://patchblox.com/security/cve/CVE-2026-93212", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: guard nfsd_serv deref in nfsd_file_net_dis...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93230", "url": "https://patchblox.com/security/cve/CVE-2026-93230", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: initialize gigantic bootmem hugepage...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89579", "url": "https://patchblox.com/security/cve/CVE-2026-89579", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80946", "url": "https://patchblox.com/security/cve/CVE-2026-80946", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: copy request headers via a stack buffer fo...", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89997", "url": "https://patchblox.com/security/cve/CVE-2026-89997", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issue...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89690", "url": "https://patchblox.com/security/cve/CVE-2026-89690", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpc_sta...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89545", "url": "https://patchblox.com/security/cve/CVE-2026-89545", "title": "sunrpc: defer rq_argp and rq_resp free until after RCU grace period", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89747", "url": "https://patchblox.com/security/cve/CVE-2026-89747", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in trace_pipe read o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89899", "url": "https://patchblox.com/security/cve/CVE-2026-89899", "title": "media: cec: disable delayed work before freeing an interrupted transmit", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89986", "url": "https://patchblox.com/security/cve/CVE-2026-89986", "title": "mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80929", "url": "https://patchblox.com/security/cve/CVE-2026-80929", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sysctl: move the \u0022cad_pid\u0022 entry from pid_table[...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89911", "url": "https://patchblox.com/security/cve/CVE-2026-89911", "title": "KVM: arm64: Correctly cap TLBI Range to the architural limit", "priority": "High", "severity": "high", "cvss": 7.9, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80862", "url": "https://patchblox.com/security/cve/CVE-2026-80862", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page_frag_cache nvme use...", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80860", "url": "https://patchblox.com/security/cve/CVE-2026-80860", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend Aft...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80857", "url": "https://patchblox.com/security/cve/CVE-2026-80857", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: wait for FR_FINISHED on abort_on_kill to p...", "priority": "High", "severity": "important", "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80858", "url": "https://patchblox.com/security/cve/CVE-2026-80858", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: publish io-uring queues with release seman...", "priority": "High", "severity": "important", "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80859", "url": "https://patchblox.com/security/cve/CVE-2026-80859", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: fix missing barrier when checking io-uring...", "priority": "High", "severity": "important", "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89615", "url": "https://patchblox.com/security/cve/CVE-2026-89615", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound page_lcns[] index by the log rec...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89448", "url": "https://patchblox.com/security/cve/CVE-2026-89448", "title": "iommu/vt-d: Force requesting ACS when tboot is enabled", "priority": "High", "severity": "Moderate", "cvss": 9.3, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89744", "url": "https://patchblox.com/security/cve/CVE-2026-89744", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnode_for...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89743", "url": "https://patchblox.com/security/cve/CVE-2026-89743", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: misc: nsm: bound the device-reported response le...", "priority": "High", "severity": "high", "cvss": 7.7, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89641", "url": "https://patchblox.com/security/cve/CVE-2026-89641", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: clear tcon after cifsFileInfo_put() in cif...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89563", "url": "https://patchblox.com/security/cve/CVE-2026-89563", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89564", "url": "https://patchblox.com/security/cve/CVE-2026-89564", "title": "ip: orphan prefetched skbs before multicast forwarding", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89617", "url": "https://patchblox.com/security/cve/CVE-2026-89617", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log repla...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89754", "url": "https://patchblox.com/security/cve/CVE-2026-89754", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix stale walk-\u003Eaction escaping wal...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80932", "url": "https://patchblox.com/security/cve/CVE-2026-80932", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order v...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89580", "url": "https://patchblox.com/security/cve/CVE-2026-89580", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in __bpf_get_stack get_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80977", "url": "https://patchblox.com/security/cve/CVE-2026-80977", "title": "net: skbuff: don\u0027t touch shared zerocopy state in skb_tx_error()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80978", "url": "https://patchblox.com/security/cve/CVE-2026-80978", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunne...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89487", "url": "https://patchblox.com/security/cve/CVE-2026-89487", "title": "openvswitch: only skb_tx_error() a packet we are about to drop", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89540", "url": "https://patchblox.com/security/cve/CVE-2026-89540", "title": "sunrpc: init gssp_lock before publishing proc entry", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89562", "url": "https://patchblox.com/security/cve/CVE-2026-89562", "title": "ip6_gre: fix hardware header length for NBMA tunnels", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89573", "url": "https://patchblox.com/security/cve/CVE-2026-89573", "title": "dm array: reject an array block whose value size is not the caller\u0027s", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89581", "url": "https://patchblox.com/security/cve/CVE-2026-89581", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89450", "url": "https://patchblox.com/security/cve/CVE-2026-89450", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Reject a vSID wider than t...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-81006", "url": "https://patchblox.com/security/cve/CVE-2026-81006", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration fai...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89507", "url": "https://patchblox.com/security/cve/CVE-2026-89507", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_write_cm_eve...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89488", "url": "https://patchblox.com/security/cve/CVE-2026-89488", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-fre...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89560", "url": "https://patchblox.com/security/cve/CVE-2026-89560", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG fo...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89508", "url": "https://patchblox.com/security/cve/CVE-2026-89508", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_set_ib_path(...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89548", "url": "https://patchblox.com/security/cve/CVE-2026-89548", "title": "SUNRPC: always drain cache_cleaner before destroying a cache_detail", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89640", "url": "https://patchblox.com/security/cve/CVE-2026-89640", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: fix loff_t underflow in cifs_remap_file_ra...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89691", "url": "https://patchblox.com/security/cve/CVE-2026-89691", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to pre...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89593", "url": "https://patchblox.com/security/cve/CVE-2026-89593", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hugetlb: only adjust reservation during unmappin...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93229", "url": "https://patchblox.com/security/cve/CVE-2026-93229", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: add missing read barrier to rpc_status_get...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89486", "url": "https://patchblox.com/security/cve/CVE-2026-89486", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix use-after-free of cmd_rcvr in _ipmi_de...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89600", "url": "https://patchblox.com/security/cve/CVE-2026-89600", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89763", "url": "https://patchblox.com/security/cve/CVE-2026-89763", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM teardown ordering truste...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89771", "url": "https://patchblox.com/security/cve/CVE-2026-89771", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring bu...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63858", "url": "https://patchblox.com/security/cve/CVE-2026-63858", "title": "netfilter: nf_tables: add hook transactions for device deletions", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89603", "url": "https://patchblox.com/security/cve/CVE-2026-89603", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 9.8, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-81009", "url": "https://patchblox.com/security/cve/CVE-2026-81009", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/query: cap user size passed to copy_str...", "priority": "High", "severity": "important", "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89575", "url": "https://patchblox.com/security/cve/CVE-2026-89575", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in bu...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00234, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90015", "url": "https://patchblox.com/security/cve/CVE-2026-90015", "title": "xhci: fix lost bounce buffers on TDs spanning several ring segments", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89816", "url": "https://patchblox.com/security/cve/CVE-2026-89816", "title": "drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89595", "url": "https://patchblox.com/security/cve/CVE-2026-89595", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix stale object mask after concurrent...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80847", "url": "https://patchblox.com/security/cve/CVE-2026-80847", "title": "tcp: clamp route advmss to TCP_MIN_MSS", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89604", "url": "https://patchblox.com/security/cve/CVE-2026-89604", "title": "efivarfs: Rate limit statfs() handler", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89822", "url": "https://patchblox.com/security/cve/CVE-2026-89822", "title": "drm/i915: Guard against NULL driver_data in i915_pci_probe()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89989", "url": "https://patchblox.com/security/cve/CVE-2026-89989", "title": "ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89539", "url": "https://patchblox.com/security/cve/CVE-2026-89539", "title": "SUNRPC: reject duplicate CREDS_VALUE options", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89757", "url": "https://patchblox.com/security/cve/CVE-2026-89757", "title": "mm/mglru: fix and remove redundant unevictable folio handling", "priority": "Routine", "severity": "Low", "cvss": 3.6, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89566", "url": "https://patchblox.com/security/cve/CVE-2026-89566", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: check need_resched() when skipping busy ch...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89567", "url": "https://patchblox.com/security/cve/CVE-2026-89567", "title": "jbd2: bound shrinker scans by examined checkpoint buffers", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89453", "url": "https://patchblox.com/security/cve/CVE-2026-89453", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR fau...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89698", "url": "https://patchblox.com/security/cve/CVE-2026-89698", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsd_genl_rqstp address fields to so...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80755", "url": "https://patchblox.com/security/cve/CVE-2026-80755", "title": "selinux: reject a permission value exceeding the class permission count", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89756", "url": "https://patchblox.com/security/cve/CVE-2026-89756", "title": "mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80830", "url": "https://patchblox.com/security/cve/CVE-2026-80830", "title": "usb: core: Add lock to usb_wakeup_notification()", "priority": "Routine", "severity": "Moderate", "cvss": 6.6, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80843", "url": "https://patchblox.com/security/cve/CVE-2026-80843", "title": "xfrm: fix xfrm_state_construct() auth-trunc leak", "priority": "Routine", "severity": "Low", "cvss": 4.4, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89766", "url": "https://patchblox.com/security/cve/CVE-2026-89766", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: pidfd: hold exec_update_lock around namespace io...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89768", "url": "https://patchblox.com/security/cve/CVE-2026-89768", "title": "fs: fix user path of nested backing files", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93206", "url": "https://patchblox.com/security/cve/CVE-2026-93206", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use file_ns_capable() when checking co...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.4, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89525", "url": "https://patchblox.com/security/cve/CVE-2026-89525", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80855", "url": "https://patchblox.com/security/cve/CVE-2026-80855", "title": "fuse: fix invalidate lock leak on open O_TRUNC DAX failure", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80856", "url": "https://patchblox.com/security/cve/CVE-2026-80856", "title": "fuse: fix invalidate lock leak on setattr writeback failure", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80861", "url": "https://patchblox.com/security/cve/CVE-2026-80861", "title": "usb: xhci: bail out of setup if the controller is inaccessible", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80963", "url": "https://patchblox.com/security/cve/CVE-2026-80963", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu d...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-81005", "url": "https://patchblox.com/security/cve/CVE-2026-81005", "title": "ipmi: si: Fix NULL pointer dereference after failed registration", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89753", "url": "https://patchblox.com/security/cve/CVE-2026-89753", "title": "mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89726", "url": "https://patchblox.com/security/cve/CVE-2026-89726", "title": "lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93222", "url": "https://patchblox.com/security/cve/CVE-2026-93222", "title": "signal: avoid shared siginfo namespace rewrites", "priority": "Routine", "severity": "Low", "cvss": 4.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93226", "url": "https://patchblox.com/security/cve/CVE-2026-93226", "title": "ipv6: use RCU iterator to dump route exceptions", "priority": "Routine", "severity": "Moderate", "cvss": 4.2, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89752", "url": "https://patchblox.com/security/cve/CVE-2026-89752", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is s...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93231", "url": "https://patchblox.com/security/cve/CVE-2026-93231", "title": "lockd: fix swapped arguments in nlmsvc_match_ip()", "priority": "Routine", "severity": "Low", "cvss": 3.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89515", "url": "https://patchblox.com/security/cve/CVE-2026-89515", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fill in DMA padding bytes in scsi_al...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93213", "url": "https://patchblox.com/security/cve/CVE-2026-93213", "title": "of: fix out-of-bounds read in of_alias_scan() stem parser", "priority": "Routine", "severity": "Low", "cvss": 3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89683", "url": "https://patchblox.com/security/cve/CVE-2026-89683", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dentry ref leak on V4ROOT export fileh...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.5, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89589", "url": "https://patchblox.com/security/cve/CVE-2026-89589", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use raw_spinlock_t for CXL CPER...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93210", "url": "https://patchblox.com/security/cve/CVE-2026-93210", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: harden DFS cache against invalid ta...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89565", "url": "https://patchblox.com/security/cve/CVE-2026-89565", "title": "ipip: fix skb leak in collect_md mode when metadata_dst allocation fails", "priority": "Routine", "severity": "Low", "cvss": 3.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89644", "url": "https://patchblox.com/security/cve/CVE-2026-89644", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O w...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80845", "url": "https://patchblox.com/security/cve/CVE-2026-80845", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: avoid lock inversion in nat keepalive work...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89717", "url": "https://patchblox.com/security/cve/CVE-2026-89717", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_des...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93211", "url": "https://patchblox.com/security/cve/CVE-2026-93211", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize DRC hash table before registeri...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89700", "url": "https://patchblox.com/security/cve/CVE-2026-89700", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in lis...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80920", "url": "https://patchblox.com/security/cve/CVE-2026-80920", "title": "io_uring: defer eventfd signaling when queued from a wakeup handler", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80925", "url": "https://patchblox.com/security/cve/CVE-2026-80925", "title": "vlan: fix skb_under_panic and races when toggling HW VLAN offload", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98164", "url": "https://patchblox.com/security/cve/CVE-2026-98164", "title": "KVM: x86/mmu: Check write tracking in all address spaces", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T20:03:11Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }