{ "fix": "ALAS2023-2026-3192", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192", "summary": "ALAS2023-2026-3192, released November 7, 2026, fixes 481 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 19 packages", "released": "2026-11-07T01:06:07Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-99999, rated Critical", "supported": true, "cveCount": 481, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00788, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-3192.html", "appliesTo": [ { "product": "bpftool6.18", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "bpftool6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.18.54-121.166", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.18.54-121.166", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel6.18", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "kernel6.18-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "kernel6.18-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "kernel6.18-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-headers", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "kernel6.18-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "kernel6.18-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "kernel6.18-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "kernel6.18-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "kernel6.18-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.18-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "microvm-kernel6.18", "productUrl": "https://patchblox.com/security/product/linux/microvm-kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "perf6.18", "productUrl": "https://patchblox.com/security/product/linux/perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "perf6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "python3-perf6.18", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true }, { "product": "python3-perf6.18-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.54-121.166.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-99999", "url": "https://patchblox.com/security/cve/CVE-2026-99999", "title": "ipv4: validate checksum_start before completing checksum", "priority": "Urgent", "severity": "Critical", "cvss": 9.3, "epss": 0.00788, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90151", "url": "https://patchblox.com/security/cve/CVE-2026-90151", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client alloc...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00749, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89783", "url": "https://patchblox.com/security/cve/CVE-2026-89783", "title": "xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89778", "url": "https://patchblox.com/security/cve/CVE-2026-89778", "title": "isofs: fix out-of-bounds page array access on empty zisofs block", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72355", "url": "https://patchblox.com/security/cve/CVE-2026-72355", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix barriering when walking subrequest li...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00641, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90110", "url": "https://patchblox.com/security/cve/CVE-2026-90110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree node comparison usin...", "priority": "Urgent", "severity": "critical", "cvss": 9.4, "epss": 0.00612, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98171", "url": "https://patchblox.com/security/cve/CVE-2026-98171", "title": "smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72463", "url": "https://patchblox.com/security/cve/CVE-2026-72463", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resum...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00444, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98174", "url": "https://patchblox.com/security/cve/CVE-2026-98174", "title": "smb: client: fix rlist race and missing initialization", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0033, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98167", "url": "https://patchblox.com/security/cve/CVE-2026-98167", "title": "smb: client: fix server-\u003Etotal_read for compound encrypted PDUs", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98170", "url": "https://patchblox.com/security/cve/CVE-2026-98170", "title": "smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98214", "url": "https://patchblox.com/security/cve/CVE-2026-98214", "title": "selinux: recheck intermediate backing files on mprotect()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98168", "url": "https://patchblox.com/security/cve/CVE-2026-98168", "title": "smb: client: fix reparse buffer bounds in cifs_query_reparse_point()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98215", "url": "https://patchblox.com/security/cve/CVE-2026-98215", "title": "selinux: preserve user SID across nested backing files", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89915", "url": "https://patchblox.com/security/cve/CVE-2026-89915", "title": "KVM: arm64: Remove VM-wide VNCR mapping counter", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98319", "url": "https://patchblox.com/security/cve/CVE-2026-98319", "title": "drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98322", "url": "https://patchblox.com/security/cve/CVE-2026-98322", "title": "netfilter: nft_nat: fully initialise new_addr in netmap setup", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98301", "url": "https://patchblox.com/security/cve/CVE-2026-98301", "title": "net: bridge: mst: move switchdev call outside rcu", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98303", "url": "https://patchblox.com/security/cve/CVE-2026-98303", "title": "ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98233", "url": "https://patchblox.com/security/cve/CVE-2026-98233", "title": "net/packet: clear RX owner on VNET header error", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98255", "url": "https://patchblox.com/security/cve/CVE-2026-98255", "title": "tcp: exclude old ACKs from tcp fast path", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98317", "url": "https://patchblox.com/security/cve/CVE-2026-98317", "title": "neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98221", "url": "https://patchblox.com/security/cve/CVE-2026-98221", "title": "KEYS: trusted: Fix tpm2_load_cmd() boundary check", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98249", "url": "https://patchblox.com/security/cve/CVE-2026-98249", "title": "arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98321", "url": "https://patchblox.com/security/cve/CVE-2026-98321", "title": "netfilter: nf_nat: unregister and release hooks on error", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98363", "url": "https://patchblox.com/security/cve/CVE-2026-98363", "title": "firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98222", "url": "https://patchblox.com/security/cve/CVE-2026-98222", "title": "KEYS: encrypted: fix integer overflow of datablob_len", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98232", "url": "https://patchblox.com/security/cve/CVE-2026-98232", "title": "scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98269", "url": "https://patchblox.com/security/cve/CVE-2026-98269", "title": "btrfs: abort transaction on failure to update inode for hole punching and reflinking", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98289", "url": "https://patchblox.com/security/cve/CVE-2026-98289", "title": "af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98320", "url": "https://patchblox.com/security/cve/CVE-2026-98320", "title": "netfilter: flowtable: hold reference on ct until flow is released", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98251", "url": "https://patchblox.com/security/cve/CVE-2026-98251", "title": "openvswitch: avoid reallocating confirmed conntrack labels", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98253", "url": "https://patchblox.com/security/cve/CVE-2026-98253", "title": "RDMA/ucma: Serialize join and leave on copy_to_user failure", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98252", "url": "https://patchblox.com/security/cve/CVE-2026-98252", "title": "RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98368", "url": "https://patchblox.com/security/cve/CVE-2026-98368", "title": "esp: downgrade zerocopy managed frags before mutating skb frags", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97524", "url": "https://patchblox.com/security/cve/CVE-2026-97524", "title": "mptcp: avoid unneeded actions on subflow reset", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97523", "url": "https://patchblox.com/security/cve/CVE-2026-97523", "title": "mptcp: close race between scheduler and state change", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00728, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89779", "url": "https://patchblox.com/security/cve/CVE-2026-89779", "title": "fs/ntfs3: validate ef-\u003Esize covers the record\u0027s name and value", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89786", "url": "https://patchblox.com/security/cve/CVE-2026-89786", "title": "ext4: fix out-of-bounds read in ext4_read_inline_dir()", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90102", "url": "https://patchblox.com/security/cve/CVE-2026-90102", "title": "NFSv4/pnfs: key the data server cache on the NFS version", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90103", "url": "https://patchblox.com/security/cve/CVE-2026-90103", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90067", "url": "https://patchblox.com/security/cve/CVE-2026-90067", "title": "libceph: validate banner payload length", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0068, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90149", "url": "https://patchblox.com/security/cve/CVE-2026-90149", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for NFSv4....", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00665, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90235", "url": "https://patchblox.com/security/cve/CVE-2026-90235", "title": "sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00664, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89971", "url": "https://patchblox.com/security/cve/CVE-2026-89971", "title": "nvme: skip the zoned limits update if the zone info query failed", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00612, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98056", "url": "https://patchblox.com/security/cve/CVE-2026-98056", "title": "nvme: remove stale namespaces by NSID range during scan", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00612, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98401", "url": "https://patchblox.com/security/cve/CVE-2026-98401", "title": "net: iptunnel: fix stale transport header during tunnel decapsulation", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00595, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97555", "url": "https://patchblox.com/security/cve/CVE-2026-97555", "title": "smb: client: fix heap overflow in DACL owner/group rewrite", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00584, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98069", "url": "https://patchblox.com/security/cve/CVE-2026-98069", "title": "net/rds: acquire the fastpath locks in rds_conn_shutdown()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00562, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98096", "url": "https://patchblox.com/security/cve/CVE-2026-98096", "title": "ipv6: sr: restore network header before routing and forwarding", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00505, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72438", "url": "https://patchblox.com/security/cve/CVE-2026-72438", "title": "md/raid10: fix writes_pending and barrier reference leaks on discard failures", "priority": "High", "severity": "Low", "cvss": 7.5, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97417", "url": "https://patchblox.com/security/cve/CVE-2026-97417", "title": "netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98070", "url": "https://patchblox.com/security/cve/CVE-2026-98070", "title": "net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92489", "url": "https://patchblox.com/security/cve/CVE-2026-92489", "title": "xfrm: Fix skb double-free in xfrm_dev_direct_output()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98130", "url": "https://patchblox.com/security/cve/CVE-2026-98130", "title": "sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00453, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98169", "url": "https://patchblox.com/security/cve/CVE-2026-98169", "title": "smb: client: fix potential OOB read in smb3_enum_snapshots()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00448, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90141", "url": "https://patchblox.com/security/cve/CVE-2026-90141", "title": "ipvs: fix integer overflow in ftp helper port/address parsing", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00445, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97562", "url": "https://patchblox.com/security/cve/CVE-2026-97562", "title": "smb: client: pin DFS superblock in iterator callback", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00413, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98261", "url": "https://patchblox.com/security/cve/CVE-2026-98261", "title": "cifs: Fix server use-after-free in cifs_chan_skip_or_disable()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64210", "url": "https://patchblox.com/security/cve/CVE-2026-64210", "title": "net/mlx5e: xsk: Fix unlocked writing to ICOSQ", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98173", "url": "https://patchblox.com/security/cve/CVE-2026-98173", "title": "smb: client: fix use-after-free of iface in cifs_try_adding_channels()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00345, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93787", "url": "https://patchblox.com/security/cve/CVE-2026-93787", "title": "smb: client: bound dirent name against end of SMB response in cifs_filldir", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90329", "url": "https://patchblox.com/security/cve/CVE-2026-90329", "title": "HID: synchronize input before cleaning up a failed probe", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93189", "url": "https://patchblox.com/security/cve/CVE-2026-93189", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: core: quiesce input in hid_hw_stop() to pre...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00321, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98175", "url": "https://patchblox.com/security/cve/CVE-2026-98175", "title": "smb: client: cancel reconnect work in clean_demultiplex_info()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00321, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97433", "url": "https://patchblox.com/security/cve/CVE-2026-97433", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme: validate FDP configuration descriptor size...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00319, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89796", "url": "https://patchblox.com/security/cve/CVE-2026-89796", "title": "mm/damon/core: avoid infinite kdamond_merge_regions() internal loop", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97558", "url": "https://patchblox.com/security/cve/CVE-2026-97558", "title": "smb: client: fix cifsFileInfo reference leak in deferred close", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00228, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90200", "url": "https://patchblox.com/security/cve/CVE-2026-90200", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster va...", "priority": "High", "severity": "important", "epss": 0.00225, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98417", "url": "https://patchblox.com/security/cve/CVE-2026-98417", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: xfrm: reject unrepresentable espintcp trans...", "priority": "High", "severity": "important", "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90150", "url": "https://patchblox.com/security/cve/CVE-2026-90150", "title": "pnfs/blocklayout: Fix device leaks on parse failure", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92500", "url": "https://patchblox.com/security/cve/CVE-2026-92500", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: use fsdata to track inline data write stat...", "priority": "High", "severity": "important", "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97616", "url": "https://patchblox.com/security/cve/CVE-2026-97616", "title": "net/sched: act_api: release all action references on NEWACTION failure", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97901", "url": "https://patchblox.com/security/cve/CVE-2026-97901", "title": "genetlink: pin family module during policy dump", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90073", "url": "https://patchblox.com/security/cve/CVE-2026-90073", "title": "net/sched: hhf: clamp quantum before hhf_change() to avoid overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90081", "url": "https://patchblox.com/security/cve/CVE-2026-90081", "title": "net/rds: use wq_has_sleeper() in rds_cong_map_updated()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90284", "url": "https://patchblox.com/security/cve/CVE-2026-90284", "title": "firmware_loader: do not queue completed sysfs fallback requests", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90334", "url": "https://patchblox.com/security/cve/CVE-2026-90334", "title": "tty: clear cdev pointer after cdev_add() failure", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97564", "url": "https://patchblox.com/security/cve/CVE-2026-97564", "title": "smb: client: reject userspace cifs.idmap descriptions", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97598", "url": "https://patchblox.com/security/cve/CVE-2026-97598", "title": "ipv4: fib: bound automatic table ID allocation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97998", "url": "https://patchblox.com/security/cve/CVE-2026-97998", "title": "netfilter: nfnetlink_log: cope with concurrent instance destruction", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98076", "url": "https://patchblox.com/security/cve/CVE-2026-98076", "title": "tracing/probes: Fix use-after-free on field name/type of events with multiple probes", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90318", "url": "https://patchblox.com/security/cve/CVE-2026-90318", "title": "fat: release buffer head after rebuilding parent", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97568", "url": "https://patchblox.com/security/cve/CVE-2026-97568", "title": "mptcp: syncookies: remember the request backup flag", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97904", "url": "https://patchblox.com/security/cve/CVE-2026-97904", "title": "cpufreq: initialize policy rwsem before sysfs publication", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97533", "url": "https://patchblox.com/security/cve/CVE-2026-97533", "title": "x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF", "priority": "High", "severity": "important", "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98047", "url": "https://patchblox.com/security/cve/CVE-2026-98047", "title": "bpf: Check ancestor frames for rbtree callbacks", "priority": "High", "severity": "important", "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90247", "url": "https://patchblox.com/security/cve/CVE-2026-90247", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix mmap_lock leak in irq_work path stack_...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93146", "url": "https://patchblox.com/security/cve/CVE-2026-93146", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: time/namespace: Validate nanosecond field in pro...", "priority": "High", "severity": "important", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90076", "url": "https://patchblox.com/security/cve/CVE-2026-90076", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: add overflow bounds to quantum an...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97559", "url": "https://patchblox.com/security/cve/CVE-2026-97559", "title": "smb: client: fail DACL rewrite when the new DACL exceeds 64K", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97619", "url": "https://patchblox.com/security/cve/CVE-2026-97619", "title": "io_uring/rw: end write accounting from -\u003Eki_complete", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93163", "url": "https://patchblox.com/security/cve/CVE-2026-93163", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hwrng: core - fix rng list on registration error...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90097", "url": "https://patchblox.com/security/cve/CVE-2026-90097", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Skip VMBus module cleanup fo...", "priority": "High", "severity": "important", "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90259", "url": "https://patchblox.com/security/cve/CVE-2026-90259", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix a wrong length calculation in...", "priority": "High", "severity": "important", "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97556", "url": "https://patchblox.com/security/cve/CVE-2026-97556", "title": "smb: client: avoid leaking refcount when cifs_sb_tlink() fails", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90063", "url": "https://patchblox.com/security/cve/CVE-2026-90063", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don\u0027t overfl...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90139", "url": "https://patchblox.com/security/cve/CVE-2026-90139", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: check for NULL root inode in fuse_fill_sup...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90140", "url": "https://patchblox.com/security/cve/CVE-2026-90140", "title": "cuse: wait for pending RCU callbacks on module exit", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90248", "url": "https://patchblox.com/security/cve/CVE-2026-90248", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: fix teardown of an adopted p...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93109", "url": "https://patchblox.com/security/cve/CVE-2026-93109", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Drain RCU callbacks during module tea...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89785", "url": "https://patchblox.com/security/cve/CVE-2026-89785", "title": "fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90313", "url": "https://patchblox.com/security/cve/CVE-2026-90313", "title": "bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90086", "url": "https://patchblox.com/security/cve/CVE-2026-90086", "title": "xsk: honor XDP_TX_METADATA in zero-copy path", "priority": "High", "severity": "important", "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98414", "url": "https://patchblox.com/security/cve/CVE-2026-98414", "title": "memcg: avoid charging the root memcg from obj_cgroup_charge_pages()", "priority": "High", "severity": "important", "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90115", "url": "https://patchblox.com/security/cve/CVE-2026-90115", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xsk: fix NULL pointer dereference in __xsk_rcv()...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90184", "url": "https://patchblox.com/security/cve/CVE-2026-90184", "title": "null_blk: serialize configfs attribute updates with device setup", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90187", "url": "https://patchblox.com/security/cve/CVE-2026-90187", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: null_blk: free zones array on device power-off...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90188", "url": "https://patchblox.com/security/cve/CVE-2026-90188", "title": "null_blk: free global tag_set on init error path", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90201", "url": "https://patchblox.com/security/cve/CVE-2026-90201", "title": "net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90385", "url": "https://patchblox.com/security/cve/CVE-2026-90385", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid1: create serial pool adding rdev to arra...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93134", "url": "https://patchblox.com/security/cve/CVE-2026-93134", "title": "printk: Fix possible console use-after-free", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93182", "url": "https://patchblox.com/security/cve/CVE-2026-93182", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix overflow in update_tg_cfs_runnab...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97617", "url": "https://patchblox.com/security/cve/CVE-2026-97617", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resize_disabled before publis...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97938", "url": "https://patchblox.com/security/cve/CVE-2026-97938", "title": "reboot: fix cad_pid use-after-free race", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97950", "url": "https://patchblox.com/security/cve/CVE-2026-97950", "title": "configfs: pin the symlink target\u0027s dirent instead of chasing -\u003Eci_dentry", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98104", "url": "https://patchblox.com/security/cve/CVE-2026-98104", "title": "net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98248", "url": "https://patchblox.com/security/cve/CVE-2026-98248", "title": "arm64: percpu: Fix LSE operations on {8,16}-bit types", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98231", "url": "https://patchblox.com/security/cve/CVE-2026-98231", "title": "xfrm: serialize state GC with device state flush", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93150", "url": "https://patchblox.com/security/cve/CVE-2026-93150", "title": "cgroup/cpuset: Make nr_deadline_tasks an atomic_t", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80729", "url": "https://patchblox.com/security/cve/CVE-2026-80729", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: initialise workingset state befo...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89790", "url": "https://patchblox.com/security/cve/CVE-2026-89790", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: avoid divide by zero in rt6_multipath_reba...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89917", "url": "https://patchblox.com/security/cve/CVE-2026-89917", "title": "KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90077", "url": "https://patchblox.com/security/cve/CVE-2026-90077", "title": "net: fix a resource leak in copy_net_ns() error handling path", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90094", "url": "https://patchblox.com/security/cve/CVE-2026-90094", "title": "arm64: process: Fix context switching MTE store-only tag check", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90113", "url": "https://patchblox.com/security/cve/CVE-2026-90113", "title": "netdevsim: update queue NAPI association on queue reset", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90129", "url": "https://patchblox.com/security/cve/CVE-2026-90129", "title": "virtio_balloon: quiesce balloon work before device shutdown", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90233", "url": "https://patchblox.com/security/cve/CVE-2026-90233", "title": "nvme-pci: release descriptor pools on probe failure", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90269", "url": "https://patchblox.com/security/cve/CVE-2026-90269", "title": "bpf: Reject load-acquire from pointers requiring fault protection", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90272", "url": "https://patchblox.com/security/cve/CVE-2026-90272", "title": "perf: arm_pmuv3: Zero initialize hw_id branch stack field", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90278", "url": "https://patchblox.com/security/cve/CVE-2026-90278", "title": "md: wait for behind writes before destroying bitmap", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90338", "url": "https://patchblox.com/security/cve/CVE-2026-90338", "title": "serial: amba-pl011: keep console clock enabled for atomic writes", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90396", "url": "https://patchblox.com/security/cve/CVE-2026-90396", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: block: fix dio leak on metadata mapping error A...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92516", "url": "https://patchblox.com/security/cve/CVE-2026-92516", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix offset warn check for bpf_res_spin_lock...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98398", "url": "https://patchblox.com/security/cve/CVE-2026-98398", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Invalidate stale class_cache en...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93117", "url": "https://patchblox.com/security/cve/CVE-2026-93117", "title": "usb: fix UAF when probe runs concurrent to dyn ID removal", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97942", "url": "https://patchblox.com/security/cve/CVE-2026-97942", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Exclude text poking against ch...", "priority": "High", "severity": "important", "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97943", "url": "https://patchblox.com/security/cve/CVE-2026-97943", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire init_mm write lock on collap...", "priority": "High", "severity": "important", "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98390", "url": "https://patchblox.com/security/cve/CVE-2026-98390", "title": "x86/amd_node: Avoid divide by zero on virtualized systems", "priority": "High", "severity": "important", "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97560", "url": "https://patchblox.com/security/cve/CVE-2026-97560", "title": "smb: client: fix one-byte OOB read in smb2_parse_native_symlink()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90279", "url": "https://patchblox.com/security/cve/CVE-2026-90279", "title": "md/raid5: round bitmap stripes with sector division", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90389", "url": "https://patchblox.com/security/cve/CVE-2026-90389", "title": "md: scope memalloc_noio to allocation critical sections", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90426", "url": "https://patchblox.com/security/cve/CVE-2026-90426", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Free the error IRQ before...", "priority": "High", "severity": "important", "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90430", "url": "https://patchblox.com/security/cve/CVE-2026-90430", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Publish an LVCMDQ only aft...", "priority": "High", "severity": "important", "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97565", "url": "https://patchblox.com/security/cve/CVE-2026-97565", "title": "smb: client: reject short READ responses in CIFSSMBRead()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92499", "url": "https://patchblox.com/security/cve/CVE-2026-92499", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: validate readdir offset before accessing d...", "priority": "High", "severity": "important", "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97610", "url": "https://patchblox.com/security/cve/CVE-2026-97610", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix uninitialized return value in netfs_u...", "priority": "High", "severity": "important", "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97946", "url": "https://patchblox.com/security/cve/CVE-2026-97946", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Fix PCI device reference counting...", "priority": "High", "severity": "important", "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97947", "url": "https://patchblox.com/security/cve/CVE-2026-97947", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Fix potential NULL pointer derefer...", "priority": "High", "severity": "important", "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98060", "url": "https://patchblox.com/security/cve/CVE-2026-98060", "title": "bpf: Reject resilient lock operations in rbtree callbacks", "priority": "High", "severity": "important", "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98061", "url": "https://patchblox.com/security/cve/CVE-2026-98061", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reject tail calls directly from callback fr...", "priority": "High", "severity": "important", "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98258", "url": "https://patchblox.com/security/cve/CVE-2026-98258", "title": "posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98260", "url": "https://patchblox.com/security/cve/CVE-2026-98260", "title": "exec: Cleanup POSIX timers right after de_thread()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89781", "url": "https://patchblox.com/security/cve/CVE-2026-89781", "title": "fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89791", "url": "https://patchblox.com/security/cve/CVE-2026-89791", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap() reviva...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98240", "url": "https://patchblox.com/security/cve/CVE-2026-98240", "title": "net: ip_tunnel: initialize \u0060options_len\u0060 before referencing options", "priority": "High", "severity": "important", "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89782", "url": "https://patchblox.com/security/cve/CVE-2026-89782", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93073", "url": "https://patchblox.com/security/cve/CVE-2026-93073", "title": "dax: read holder_ops once in dax_holder_notify_failure()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68289", "url": "https://patchblox.com/security/cve/CVE-2026-68289", "title": "tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98900", "url": "https://patchblox.com/security/cve/CVE-2026-98900", "title": "xen/gntalloc: validate grant count before allocation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98881", "url": "https://patchblox.com/security/cve/CVE-2026-98881", "title": "net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98902", "url": "https://patchblox.com/security/cve/CVE-2026-98902", "title": "md/raid5: let stripe batch bm_seq comparison wrap-safe", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97959", "url": "https://patchblox.com/security/cve/CVE-2026-97959", "title": "net/sched: cls_route: free emptied bucket on filter move", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97995", "url": "https://patchblox.com/security/cve/CVE-2026-97995", "title": "virtio_console: do not free control-out buffers on remove", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98011", "url": "https://patchblox.com/security/cve/CVE-2026-98011", "title": "net/sched: hhf: clamp quantum in change and init paths", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98015", "url": "https://patchblox.com/security/cve/CVE-2026-98015", "title": "net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98074", "url": "https://patchblox.com/security/cve/CVE-2026-98074", "title": "bonding: do not clear curr_active_slave prematurely when releasing all slaves", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98342", "url": "https://patchblox.com/security/cve/CVE-2026-98342", "title": "dmaengine: wait for RCU readers before releasing dma_device", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98343", "url": "https://patchblox.com/security/cve/CVE-2026-98343", "title": "dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97951", "url": "https://patchblox.com/security/cve/CVE-2026-97951", "title": "scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93055", "url": "https://patchblox.com/security/cve/CVE-2026-93055", "title": "UDF symlink pathComponent header OOB read", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98063", "url": "https://patchblox.com/security/cve/CVE-2026-98063", "title": "bpf: Fix NULL-ptr-deref in btf_var_show()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98064", "url": "https://patchblox.com/security/cve/CVE-2026-98064", "title": "bpf: Fix NULL-ptr-deref when showing a void BTF type", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98072", "url": "https://patchblox.com/security/cve/CVE-2026-98072", "title": "net/rds: use wq_has_sleeper() in release_in_xmit()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98201", "url": "https://patchblox.com/security/cve/CVE-2026-98201", "title": "Input: zero ff_effect before compat copy in input_ff_effect_from_user", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98234", "url": "https://patchblox.com/security/cve/CVE-2026-98234", "title": "net/sched: hhf: cap hh_flows_limit at change time", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92521", "url": "https://patchblox.com/security/cve/CVE-2026-92521", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPI: PCI: Clear driver_data on all paths that f...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98068", "url": "https://patchblox.com/security/cve/CVE-2026-98068", "title": "net/rds: don\u0027t let rds_conn_shutdown() consume a concurrent drop", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93138", "url": "https://patchblox.com/security/cve/CVE-2026-93138", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix vmlinux BTF prep race in bpf_get_btf_vm...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98021", "url": "https://patchblox.com/security/cve/CVE-2026-98021", "title": "net: reject oversized tx_queue_len at netlink parse time", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90161", "url": "https://patchblox.com/security/cve/CVE-2026-90161", "title": "erofs: fix interlaced ztailpacking pclusters", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90241", "url": "https://patchblox.com/security/cve/CVE-2026-90241", "title": "iommu/vt-d: Tear down scalable-mode context on probe failure", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72315", "url": "https://patchblox.com/security/cve/CVE-2026-72315", "title": "smb: client: fix busy dentry warning on unmount after DIO", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90199", "url": "https://patchblox.com/security/cve/CVE-2026-90199", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mi_enum_at...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90425", "url": "https://patchblox.com/security/cve/CVE-2026-90425", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Require exactly one Stream...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98089", "url": "https://patchblox.com/security/cve/CVE-2026-98089", "title": "bonding: alb: fix uninitialized transport header access in alb_determine_nd()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89815", "url": "https://patchblox.com/security/cve/CVE-2026-89815", "title": "drm/ttm: Drop tt-\u003Erestore after successful restore", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90189", "url": "https://patchblox.com/security/cve/CVE-2026-90189", "title": "null_blk: register configfs subsystem after creating default devices", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90244", "url": "https://patchblox.com/security/cve/CVE-2026-90244", "title": "iommu/dma: Restore locking around msi_page_list", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92509", "url": "https://patchblox.com/security/cve/CVE-2026-92509", "title": "RDMA/core: Fix potential use after free in counter_release()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92512", "url": "https://patchblox.com/security/cve/CVE-2026-92512", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use after free in ib_query_qp()...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93785", "url": "https://patchblox.com/security/cve/CVE-2026-93785", "title": "cifs: validate idmap key payload length", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97441", "url": "https://patchblox.com/security/cve/CVE-2026-97441", "title": "ata: ahci: fail probe if BAR too small for claimed ports", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97964", "url": "https://patchblox.com/security/cve/CVE-2026-97964", "title": "ppp_synctty: ensure a writeable skb header", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98016", "url": "https://patchblox.com/security/cve/CVE-2026-98016", "title": "net/mlx5e: Fix use-after-free race in sample_restore_put()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98245", "url": "https://patchblox.com/security/cve/CVE-2026-98245", "title": "btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98014", "url": "https://patchblox.com/security/cve/CVE-2026-98014", "title": "net/mlx5: E-Switch, prevent mc_list repopulation during vport disable", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98046", "url": "https://patchblox.com/security/cve/CVE-2026-98046", "title": "bpf: Mark bpf_btf_find_by_name_kind() as sleepable", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98075", "url": "https://patchblox.com/security/cve/CVE-2026-98075", "title": "bpf: reject BPF_PSEUDO_FUNC reference to the main program", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97430", "url": "https://patchblox.com/security/cve/CVE-2026-97430", "title": "xhci: Prevent queuing new commands if xhci is inaccessible", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98088", "url": "https://patchblox.com/security/cve/CVE-2026-98088", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumask_of_no...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97447", "url": "https://patchblox.com/security/cve/CVE-2026-97447", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPICA: Enhance OEM ID and Table ID validation i...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90326", "url": "https://patchblox.com/security/cve/CVE-2026-90326", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix race between policy activation a...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90203", "url": "https://patchblox.com/security/cve/CVE-2026-90203", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Squashfs: check block offset is not negative If...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90002", "url": "https://patchblox.com/security/cve/CVE-2026-90002", "title": "ftrace: Take trace_array reference before accessing its ftrace_ops", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90146", "url": "https://patchblox.com/security/cve/CVE-2026-90146", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into dev_xdp_instal...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90358", "url": "https://patchblox.com/security/cve/CVE-2026-90358", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix trampoline stack size for 128-bit...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90388", "url": "https://patchblox.com/security/cve/CVE-2026-90388", "title": "iommu/dma: Check atomic pool allocation result directly", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90392", "url": "https://patchblox.com/security/cve/CVE-2026-90392", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF when reading bpf link inf...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97612", "url": "https://patchblox.com/security/cve/CVE-2026-97612", "title": "net: mpls: clear inner_protocol when the last label is popped", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97940", "url": "https://patchblox.com/security/cve/CVE-2026-97940", "title": "ipv6: fix fib6 walker UAF on seq stop", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98899", "url": "https://patchblox.com/security/cve/CVE-2026-98899", "title": "netfilter: ipset: mark the rcu locked areas properly", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93112", "url": "https://patchblox.com/security/cve/CVE-2026-93112", "title": "bpf: Require a BPF cpumask for bpf_cpumask_populate()", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97984", "url": "https://patchblox.com/security/cve/CVE-2026-97984", "title": "net: ipv6: Fix UDP length overflow with PMTU discover and big MTU", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90227", "url": "https://patchblox.com/security/cve/CVE-2026-90227", "title": "nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97525", "url": "https://patchblox.com/security/cve/CVE-2026-97525", "title": "x86/mm/pat: Allocate split page tables as kernel page tables", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74258", "url": "https://patchblox.com/security/cve/CVE-2026-74258", "title": "bpf: Guard __get_user acesss with access_ok for uprobe_multi data", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97949", "url": "https://patchblox.com/security/cve/CVE-2026-97949", "title": "configfs: unhash the dentry before dropping the item in rmdir", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97978", "url": "https://patchblox.com/security/cve/CVE-2026-97978", "title": "eth: ice: don\u0027t dereference pointers from TP_printk()", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98026", "url": "https://patchblox.com/security/cve/CVE-2026-98026", "title": "net: bridge: mcast: properly convert mglist to rcu", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98101", "url": "https://patchblox.com/security/cve/CVE-2026-98101", "title": "ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source()", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98102", "url": "https://patchblox.com/security/cve/CVE-2026-98102", "title": "ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98103", "url": "https://patchblox.com/security/cve/CVE-2026-98103", "title": "igmp: convert struct ip_sf_list to RCU", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98229", "url": "https://patchblox.com/security/cve/CVE-2026-98229", "title": "xfrm: save input state data before secpath resets", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68337", "url": "https://patchblox.com/security/cve/CVE-2026-68337", "title": "bpf: Reject redirect helpers without a bpf_net_context", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97961", "url": "https://patchblox.com/security/cve/CVE-2026-97961", "title": "perf/core: Allow list_del during perf_event_overflow()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97962", "url": "https://patchblox.com/security/cve/CVE-2026-97962", "title": "net/mlx5e: Move representor vnic reporter to eswitch devlink port", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97965", "url": "https://patchblox.com/security/cve/CVE-2026-97965", "title": "vxlan: initialize _md in vxlan_xmit_one()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98044", "url": "https://patchblox.com/security/cve/CVE-2026-98044", "title": "bpf: Reject legacy packet loads from callbacks", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90424", "url": "https://patchblox.com/security/cve/CVE-2026-90424", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Fix VINTF0 leak on the ini...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90428", "url": "https://patchblox.com/security/cve/CVE-2026-90428", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don\u0027t run the error ISR be...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93066", "url": "https://patchblox.com/security/cve/CVE-2026-93066", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Take cpa_lock around large-page coll...", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97956", "url": "https://patchblox.com/security/cve/CVE-2026-97956", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: net_failover: Fix the deadlock in net_failo...", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97974", "url": "https://patchblox.com/security/cve/CVE-2026-97974", "title": "ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings()", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98000", "url": "https://patchblox.com/security/cve/CVE-2026-98000", "title": "hwmon: Fix potential UAF in pec_store", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98223", "url": "https://patchblox.com/security/cve/CVE-2026-98223", "title": "mm: filemap: retain mapped dropbehind folios", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98224", "url": "https://patchblox.com/security/cve/CVE-2026-98224", "title": "mm/vma: correctly unaccount on mmap_prepare() failure", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98226", "url": "https://patchblox.com/security/cve/CVE-2026-98226", "title": "mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98244", "url": "https://patchblox.com/security/cve/CVE-2026-98244", "title": "btrfs: clear free space tree creation state on rebuild failure", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98259", "url": "https://patchblox.com/security/cve/CVE-2026-98259", "title": "fs/dax: check zero or empty entry before converting xarray entry", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98274", "url": "https://patchblox.com/security/cve/CVE-2026-98274", "title": "net: psp: avoid conflicts with skb-\u003Edecrypted and sk_validate_xmit_skb()", "priority": "High", "severity": "important", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89777", "url": "https://patchblox.com/security/cve/CVE-2026-89777", "title": "vfio/pci: clear vdev-\u003Emsi_perm after freeing it on init failure", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90240", "url": "https://patchblox.com/security/cve/CVE-2026-90240", "title": "iommu/vt-d: Flush context cache with correct SID when tearing down aliases", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90013", "url": "https://patchblox.com/security/cve/CVE-2026-90013", "title": "tracing: Take trace_array reference when opening options file", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90071", "url": "https://patchblox.com/security/cve/CVE-2026-90071", "title": "net/sched: sch_teql: restore skb-\u003Edev on the slave failure path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90325", "url": "https://patchblox.com/security/cve/CVE-2026-90325", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: skip dying blkg in blkcg_activate_po...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92507", "url": "https://patchblox.com/security/cve/CVE-2026-92507", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ib_de...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92508", "url": "https://patchblox.com/security/cve/CVE-2026-92508", "title": "RDMA/core: Fix potential use after free in ib_free_cq()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97594", "url": "https://patchblox.com/security/cve/CVE-2026-97594", "title": "landlock: Fix use-after-free of the source\u0027s parent directory", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97611", "url": "https://patchblox.com/security/cve/CVE-2026-97611", "title": "net: openvswitch: fix use-after-free of the flow table mask array", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90062", "url": "https://patchblox.com/security/cve/CVE-2026-90062", "title": "netfilter: nf_tables: move hardware offload step after building the chain blob", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93250", "url": "https://patchblox.com/security/cve/CVE-2026-93250", "title": "vxlan: mdb: Fix use-after-free in vxlan_mdb_flush()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90051", "url": "https://patchblox.com/security/cve/CVE-2026-90051", "title": "tcp: reject non zerocopy devmem tx", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90312", "url": "https://patchblox.com/security/cve/CVE-2026-90312", "title": "bpf: Check load-acquire src ptr type before the load", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98883", "url": "https://patchblox.com/security/cve/CVE-2026-98883", "title": "serial: 8250_port: recognize UPIO_AU", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98907", "url": "https://patchblox.com/security/cve/CVE-2026-98907", "title": "btrfs: protect sb_write_pointer() with invalidate lock", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93137", "url": "https://patchblox.com/security/cve/CVE-2026-93137", "title": "bpf: Fix use-after-free on mm_struct in bpf_find_vma()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90260", "url": "https://patchblox.com/security/cve/CVE-2026-90260", "title": "btrfs: zoned: don\u0027t clobber the extent buffer when zeroing it out", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90243", "url": "https://patchblox.com/security/cve/CVE-2026-90243", "title": "iommu/vt-d: Clear Present bit before tearing down copied context entry", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90429", "url": "https://patchblox.com/security/cve/CVE-2026-90429", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Synchronize the error ISR...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97505", "url": "https://patchblox.com/security/cve/CVE-2026-97505", "title": "PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97445", "url": "https://patchblox.com/security/cve/CVE-2026-97445", "title": "ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97602", "url": "https://patchblox.com/security/cve/CVE-2026-97602", "title": "inet: frags: invalidate queues before flushing them", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98078", "url": "https://patchblox.com/security/cve/CVE-2026-98078", "title": "ipvs: fix reversed sequence option serialization", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93262", "url": "https://patchblox.com/security/cve/CVE-2026-93262", "title": "md/raid5-ppl: fix use-after-free in ppl_do_flush()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98895", "url": "https://patchblox.com/security/cve/CVE-2026-98895", "title": "net/mlx5: HWS, Handle destroying table that has a miss table", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97608", "url": "https://patchblox.com/security/cve/CVE-2026-97608", "title": "netfilter: nf_log: unregister loggers before per-net teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93046", "url": "https://patchblox.com/security/cve/CVE-2026-93046", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: software node: Fix software_node_get_reference_a...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93054", "url": "https://patchblox.com/security/cve/CVE-2026-93054", "title": "uio: Fix stale info pointer in failed registration path", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98041", "url": "https://patchblox.com/security/cve/CVE-2026-98041", "title": "bpf: Don\u0027t predict JMP32 pointer vs zero comparisons", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97609", "url": "https://patchblox.com/security/cve/CVE-2026-97609", "title": "netfilter: cttimeout: prevent UAF during module unload", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98256", "url": "https://patchblox.com/security/cve/CVE-2026-98256", "title": "signal: Prevent exec() race", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97450", "url": "https://patchblox.com/security/cve/CVE-2026-97450", "title": "ACPICA: validate handler object type in two places", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97451", "url": "https://patchblox.com/security/cve/CVE-2026-97451", "title": "ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97452", "url": "https://patchblox.com/security/cve/CVE-2026-97452", "title": "ACPICA: Prevent adding invalid references", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97444", "url": "https://patchblox.com/security/cve/CVE-2026-97444", "title": "ACPICA: add boundary checks in two places", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97454", "url": "https://patchblox.com/security/cve/CVE-2026-97454", "title": "ACPICA: add boundary checks in acpi_ps_get_next_field()", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97455", "url": "https://patchblox.com/security/cve/CVE-2026-97455", "title": "ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93827", "url": "https://patchblox.com/security/cve/CVE-2026-93827", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nvirtio-fs: avoid double-free on failed queue setu...", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98156", "url": "https://patchblox.com/security/cve/CVE-2026-98156", "title": "drm/virtio: use the DMA API for resource backing on Xen", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97448", "url": "https://patchblox.com/security/cve/CVE-2026-97448", "title": "ACPICA: Add validation for node in acpi_ns_build_normalized_path()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97437", "url": "https://patchblox.com/security/cve/CVE-2026-97437", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfs_dir_emit()...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92522", "url": "https://patchblox.com/security/cve/CVE-2026-92522", "title": "ACPI: processor: validate MADT IOAPIC entry bounds", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98369", "url": "https://patchblox.com/security/cve/CVE-2026-98369", "title": "xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98080", "url": "https://patchblox.com/security/cve/CVE-2026-98080", "title": "btrfs: do not force reloc root creation during qgroup_account_snapshot()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97415", "url": "https://patchblox.com/security/cve/CVE-2026-97415", "title": "btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97438", "url": "https://patchblox.com/security/cve/CVE-2026-97438", "title": "fs/ntfs3: validate index entry key bounds", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98127", "url": "https://patchblox.com/security/cve/CVE-2026-98127", "title": "smb/client: validate new EOF for insert range", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93288", "url": "https://patchblox.com/security/cve/CVE-2026-93288", "title": "netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93817", "url": "https://patchblox.com/security/cve/CVE-2026-93817", "title": "perf: Fix addr_filter_ranges lifetime", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74334", "url": "https://patchblox.com/security/cve/CVE-2026-74334", "title": "RDMA/nldev: Fix locking when accessing mr-\u003Epd", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74347", "url": "https://patchblox.com/security/cve/CVE-2026-74347", "title": "netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90435", "url": "https://patchblox.com/security/cve/CVE-2026-90435", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix integer overflow of user QP buffe...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93045", "url": "https://patchblox.com/security/cve/CVE-2026-93045", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reject arena frees below the arena base bp...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93125", "url": "https://patchblox.com/security/cve/CVE-2026-93125", "title": "bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93287", "url": "https://patchblox.com/security/cve/CVE-2026-93287", "title": "i2c: smbus: reject oversized block transfers in the common path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93798", "url": "https://patchblox.com/security/cve/CVE-2026-93798", "title": "btrfs: fix reloc root cleanup in merge_reloc_roots()", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93813", "url": "https://patchblox.com/security/cve/CVE-2026-93813", "title": "btrfs: tree-checker: validate INODE_REF\u0027s namelen", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97421", "url": "https://patchblox.com/security/cve/CVE-2026-97421", "title": "RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98017", "url": "https://patchblox.com/security/cve/CVE-2026-98017", "title": "net/sched: defer qdisc freeing after failed creation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98241", "url": "https://patchblox.com/security/cve/CVE-2026-98241", "title": "ipv6: xfrm: use full sockets in local error paths", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98117", "url": "https://patchblox.com/security/cve/CVE-2026-98117", "title": "cachefiles: Fix potential UAF/KASAN warning", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98281", "url": "https://patchblox.com/security/cve/CVE-2026-98281", "title": "futex: Also allocate private hash on vfork()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74496", "url": "https://patchblox.com/security/cve/CVE-2026-74496", "title": "fou: Fix use-after-free in fou_create()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74289", "url": "https://patchblox.com/security/cve/CVE-2026-74289", "title": "ipv4: fib: Don\u0027t dump dying fib_info in fib_leaf_notify().", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92510", "url": "https://patchblox.com/security/cve/CVE-2026-92510", "title": "RDMA/core: Fix potential use after free in ib_destroy_srq_user()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92511", "url": "https://patchblox.com/security/cve/CVE-2026-92511", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ib_de...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98023", "url": "https://patchblox.com/security/cve/CVE-2026-98023", "title": "vxlan: reject dynamic fdb entries that reference a nexthop id", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98276", "url": "https://patchblox.com/security/cve/CVE-2026-98276", "title": "net: lock the socket in sock_gettstamp()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93801", "url": "https://patchblox.com/security/cve/CVE-2026-93801", "title": "smb/client: zero-initialize stack-allocated cifs_open_info_data", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98122", "url": "https://patchblox.com/security/cve/CVE-2026-98122", "title": "vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97903", "url": "https://patchblox.com/security/cve/CVE-2026-97903", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: exit: hold a reference to thread_pid across proc...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98095", "url": "https://patchblox.com/security/cve/CVE-2026-98095", "title": "af_packet: Don\u0027t cast tpacket_hdr.tp_len to int in tpacket_parse_header().", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98082", "url": "https://patchblox.com/security/cve/CVE-2026-98082", "title": "btrfs: fix the possible bioc_list memory leak during error", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93810", "url": "https://patchblox.com/security/cve/CVE-2026-93810", "title": "cachefiles: Fix double fput", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98098", "url": "https://patchblox.com/security/cve/CVE-2026-98098", "title": "tipc: fix NULL deref in tipc_named_node_up() on empty publication list", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98083", "url": "https://patchblox.com/security/cve/CVE-2026-98083", "title": "btrfs: fix transaction use-after-free in raid stripe insertion", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98230", "url": "https://patchblox.com/security/cve/CVE-2026-98230", "title": "xfrm: use hlist_del_init_rcu for state_cache and state_cache_input", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98359", "url": "https://patchblox.com/security/cve/CVE-2026-98359", "title": "RDMA/core: Reject unregistering netdevs in ib_get_eth_speed", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00116, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98158", "url": "https://patchblox.com/security/cve/CVE-2026-98158", "title": "ppp_async: drop the errored frame instead of resetting its headroom", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-81010", "url": "https://patchblox.com/security/cve/CVE-2026-81010", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: honor task_work cancellation i...", "priority": "High", "severity": "high", "cvss": 7.8, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98405", "url": "https://patchblox.com/security/cve/CVE-2026-98405", "title": "smb: client: fix missing iov bounds check in parse_posix_sids()", "priority": "Routine", "severity": "Moderate", "cvss": 5.4, "epss": 0.00478, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98097", "url": "https://patchblox.com/security/cve/CVE-2026-98097", "title": "tipc: Dont send random pad bytes in RESET/ACTIVATE messages", "priority": "Routine", "severity": "Moderate", "cvss": 5.3, "epss": 0.00314, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93243", "url": "https://patchblox.com/security/cve/CVE-2026-93243", "title": "mm/secretmem: properly account locked pages", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90393", "url": "https://patchblox.com/security/cve/CVE-2026-90393", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF in bpf_netns_link_update_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90109", "url": "https://patchblox.com/security/cve/CVE-2026-90109", "title": "net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90283", "url": "https://patchblox.com/security/cve/CVE-2026-90283", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: release subpool on fill_super failure...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90138", "url": "https://patchblox.com/security/cve/CVE-2026-90138", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock: don\u0027t check the listener\u0027s sk_err in vsoc...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97597", "url": "https://patchblox.com/security/cve/CVE-2026-97597", "title": "ipv6: flowlabel: cap duplicate leases per socket", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98413", "url": "https://patchblox.com/security/cve/CVE-2026-98413", "title": "selinux: always fill AVC decision in avc_has_perm_noaudit()", "priority": "Routine", "severity": "Low", "cvss": 6.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97939", "url": "https://patchblox.com/security/cve/CVE-2026-97939", "title": "ipmr: account multicast table and route memory", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89987", "url": "https://patchblox.com/security/cve/CVE-2026-89987", "title": "mm/huge_memory: transfer the pmd dirty bit to the folio on zap", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97906", "url": "https://patchblox.com/security/cve/CVE-2026-97906", "title": "bootconfig: Fix integer overflow in initrd size check", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90157", "url": "https://patchblox.com/security/cve/CVE-2026-90157", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative optlen in cgroup getsockopt...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90202", "url": "https://patchblox.com/security/cve/CVE-2026-90202", "title": "scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89784", "url": "https://patchblox.com/security/cve/CVE-2026-89784", "title": "SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90072", "url": "https://patchblox.com/security/cve/CVE-2026-90072", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed ov...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90075", "url": "https://patchblox.com/security/cve/CVE-2026-90075", "title": "net/sched: fq_codel: clamp default quantum and mtu", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90218", "url": "https://patchblox.com/security/cve/CVE-2026-90218", "title": "RDMA/cma: Fix WARNING in res_to_rt", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93048", "url": "https://patchblox.com/security/cve/CVE-2026-93048", "title": "mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93140", "url": "https://patchblox.com/security/cve/CVE-2026-93140", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: udf: Mark LVID buffer as uptodate before marking...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97905", "url": "https://patchblox.com/security/cve/CVE-2026-97905", "title": "cpufreq: zero-initialize policy cpumask before sysfs publication", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98077", "url": "https://patchblox.com/security/cve/CVE-2026-98077", "title": "netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98388", "url": "https://patchblox.com/security/cve/CVE-2026-98388", "title": "exec: do_close_on_exec() before taking exec_update_lock", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90114", "url": "https://patchblox.com/security/cve/CVE-2026-90114", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: bridge: Reject descending VLAN tunnel range...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92524", "url": "https://patchblox.com/security/cve/CVE-2026-92524", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.2, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97596", "url": "https://patchblox.com/security/cve/CVE-2026-97596", "title": "ipvs: reject invalid states in connection template sync records", "priority": "Routine", "severity": "Moderate", "cvss": 4.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98404", "url": "https://patchblox.com/security/cve/CVE-2026-98404", "title": "drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90054", "url": "https://patchblox.com/security/cve/CVE-2026-90054", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: fix corruption of urgent data on multi-segm...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90434", "url": "https://patchblox.com/security/cve/CVE-2026-90434", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93256", "url": "https://patchblox.com/security/cve/CVE-2026-93256", "title": "arm64: hibernate: mask DAIF before restoring hibernated kernel", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90058", "url": "https://patchblox.com/security/cve/CVE-2026-90058", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: bound qdisc_pkt_len to prevent qdisc...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90416", "url": "https://patchblox.com/security/cve/CVE-2026-90416", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix stack out-of-bounds read in cc_pa...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90290", "url": "https://patchblox.com/security/cve/CVE-2026-90290", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: Restore DAIF state on error S...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90160", "url": "https://patchblox.com/security/cve/CVE-2026-90160", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lwt_bpf: Restore reserved headroom after xmit pr...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98429", "url": "https://patchblox.com/security/cve/CVE-2026-98429", "title": "RDMA/efa: Keep EQ resources alive while IRQ is registered", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98538", "url": "https://patchblox.com/security/cve/CVE-2026-98538", "title": "writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90148", "url": "https://patchblox.com/security/cve/CVE-2026-90148", "title": "NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90265", "url": "https://patchblox.com/security/cve/CVE-2026-90265", "title": "btrfs: defrag: fix deadlock between defrag and delalloc space reservation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89996", "url": "https://patchblox.com/security/cve/CVE-2026-89996", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don\u0027t publish fd before copy_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97567", "url": "https://patchblox.com/security/cve/CVE-2026-97567", "title": "mptcp: prevent race between disconnect() and rtx", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97566", "url": "https://patchblox.com/security/cve/CVE-2026-97566", "title": "mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97925", "url": "https://patchblox.com/security/cve/CVE-2026-97925", "title": "tick/broadcast: Plug clockevents replacement race", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72413", "url": "https://patchblox.com/security/cve/CVE-2026-72413", "title": "sctp: fix err_chunk memory leaks in INIT handling", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72402", "url": "https://patchblox.com/security/cve/CVE-2026-72402", "title": "bpf: Mask pseudo pointer values in verifier logs", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90053", "url": "https://patchblox.com/security/cve/CVE-2026-90053", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_htb: limit htb_classify inner-cla...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92494", "url": "https://patchblox.com/security/cve/CVE-2026-92494", "title": "ext4: fix buffer_head leak in ext4_init_orphan_info", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98402", "url": "https://patchblox.com/security/cve/CVE-2026-98402", "title": "net: icmp: avoid invalid transport header access in icmp_send tracepoint", "priority": "Routine", "severity": "Low", "cvss": 3.7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89776", "url": "https://patchblox.com/security/cve/CVE-2026-89776", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98424", "url": "https://patchblox.com/security/cve/CVE-2026-98424", "title": "wifi: cfg80211: undo netns switch if renaming the wiphy fails", "priority": "Routine", "severity": "Low", "cvss": 3, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90185", "url": "https://patchblox.com/security/cve/CVE-2026-90185", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: null_blk: serialize configfs attribute stores wi...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97945", "url": "https://patchblox.com/security/cve/CVE-2026-97945", "title": "x86/mm: Fix user-space data loss with MADV_FREE and THP", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90186", "url": "https://patchblox.com/security/cve/CVE-2026-90186", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: null_blk: reject per-device queue resize for sha...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90250", "url": "https://patchblox.com/security/cve/CVE-2026-90250", "title": "bpf, cgroup: Fix storage null-ptr-deref after replacing prog", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90264", "url": "https://patchblox.com/security/cve/CVE-2026-90264", "title": "btrfs: always wait for ordered extents to avoid OE races", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90364", "url": "https://patchblox.com/security/cve/CVE-2026-90364", "title": "ACPI: processor: Unregister cpufreq notifier on init failure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97522", "url": "https://patchblox.com/security/cve/CVE-2026-97522", "title": "mptcp: fix bad accounting in __mptcp_subflow_push_pending()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93172", "url": "https://patchblox.com/security/cve/CVE-2026-93172", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: handle alloc_percpu failure in free_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97902", "url": "https://patchblox.com/security/cve/CVE-2026-97902", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs: don\u0027t return -EINVAL for successful nested t...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97606", "url": "https://patchblox.com/security/cve/CVE-2026-97606", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs_fill_super...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90190", "url": "https://patchblox.com/security/cve/CVE-2026-90190", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: null_blk: use DEFINE_MUTEX for the file-scope mu...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90194", "url": "https://patchblox.com/security/cve/CVE-2026-90194", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: fix bus ID cleanup on device_add() f...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.5, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98393", "url": "https://patchblox.com/security/cve/CVE-2026-98393", "title": "net: ipv4: Fix UDP length overflow with PMTU discover and big MTU", "priority": "Routine", "severity": "Low", "cvss": 1.9, "epss": 0.00203, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98037", "url": "https://patchblox.com/security/cve/CVE-2026-98037", "title": "bpf: Reject untrusted allocated-object pointers", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93268", "url": "https://patchblox.com/security/cve/CVE-2026-93268", "title": "ext4: skip extra isize expansion during mount to prevent deadlock", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92515", "url": "https://patchblox.com/security/cve/CVE-2026-92515", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve unique-field state across nested s...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97551", "url": "https://patchblox.com/security/cve/CVE-2026-97551", "title": "xfs: initialise args-\u003Etotal for parent pointer updates", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98079", "url": "https://patchblox.com/security/cve/CVE-2026-98079", "title": "btrfs: zstd: fix lost wakeup when waiting for a workspace", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90147", "url": "https://patchblox.com/security/cve/CVE-2026-90147", "title": "clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.6, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90159", "url": "https://patchblox.com/security/cve/CVE-2026-90159", "title": "bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.4, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98394", "url": "https://patchblox.com/security/cve/CVE-2026-98394", "title": "af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.", "priority": "Routine", "severity": "Low", "cvss": 2.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90390", "url": "https://patchblox.com/security/cve/CVE-2026-90390", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/bitmap: resume array on backlog_store() error...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93269", "url": "https://patchblox.com/security/cve/CVE-2026-93269", "title": "ext4: fix circular lock dependency in ext4_ext_migrate", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98878", "url": "https://patchblox.com/security/cve/CVE-2026-98878", "title": "irqchip/gic-v5: Immediately exec priority drop following activate", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93275", "url": "https://patchblox.com/security/cve/CVE-2026-93275", "title": "perf/x86/intel/pt: Fix stop/start with no update", "priority": "Routine", "severity": "Low", "cvss": 2.5, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98888", "url": "https://patchblox.com/security/cve/CVE-2026-98888", "title": "arm64: kprobes: Allow reentering kprobes while single-stepping", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98306", "url": "https://patchblox.com/security/cve/CVE-2026-98306", "title": "seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98877", "url": "https://patchblox.com/security/cve/CVE-2026-98877", "title": "irqchip/gic-v4: Don\u0027t advertise VLPIs if no ITS is probed", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98873", "url": "https://patchblox.com/security/cve/CVE-2026-98873", "title": "netfilter: nf_conntrack_expect: zero at allocation time", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92520", "url": "https://patchblox.com/security/cve/CVE-2026-92520", "title": "bpf: Zero queue and stack outputs on lock failure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98879", "url": "https://patchblox.com/security/cve/CVE-2026-98879", "title": "isofs: handle set_blocksize failures", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98885", "url": "https://patchblox.com/security/cve/CVE-2026-98885", "title": "ima: return error early if file xattr cannot be changed", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93110", "url": "https://patchblox.com/security/cve/CVE-2026-93110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Wait for RCU callbacks before unloadi...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98010", "url": "https://patchblox.com/security/cve/CVE-2026-98010", "title": "net/sched: drr: clamp quantum in change class", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98205", "url": "https://patchblox.com/security/cve/CVE-2026-98205", "title": "Input: evdev - zero absinfo before partial copy in EVIOCSABS", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97899", "url": "https://patchblox.com/security/cve/CVE-2026-97899", "title": "drm/i915: Fix memory leak in query_perf_config_list()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97958", "url": "https://patchblox.com/security/cve/CVE-2026-97958", "title": "net/sched: cls_api: Don\u0027t replay RTM_GETCHAIN in tc_ctl_chain().", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98012", "url": "https://patchblox.com/security/cve/CVE-2026-98012", "title": "net/sched: sfq: clamp quantum in change path", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98022", "url": "https://patchblox.com/security/cve/CVE-2026-98022", "title": "net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98071", "url": "https://patchblox.com/security/cve/CVE-2026-98071", "title": "net/rds: clear cp_flags bits individually in rds_conn_path_reset()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98262", "url": "https://patchblox.com/security/cve/CVE-2026-98262", "title": "ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98299", "url": "https://patchblox.com/security/cve/CVE-2026-98299", "title": "tcp: do not let tcp_rmem be set below 4096", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98300", "url": "https://patchblox.com/security/cve/CVE-2026-98300", "title": "tcp: Don\u0027t call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98344", "url": "https://patchblox.com/security/cve/CVE-2026-98344", "title": "dmaengine: Fix device kref underflow in dma_chan_put()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92501", "url": "https://patchblox.com/security/cve/CVE-2026-92501", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: drain in-flight DIO before buffered write...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90333", "url": "https://patchblox.com/security/cve/CVE-2026-90333", "title": "dm-integrity: replace forgeable discard filler with a keyed sector marker", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98880", "url": "https://patchblox.com/security/cve/CVE-2026-98880", "title": "ntfs3: handle set_blocksize failures", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97480", "url": "https://patchblox.com/security/cve/CVE-2026-97480", "title": "tty: serial: 8250: protect against NULL uart-\u003Eport.dev in register", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97477", "url": "https://patchblox.com/security/cve/CVE-2026-97477", "title": "RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()", "priority": "Routine", "severity": "Low", "cvss": 3.6, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93800", "url": "https://patchblox.com/security/cve/CVE-2026-93800", "title": "btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97416", "url": "https://patchblox.com/security/cve/CVE-2026-97416", "title": "btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97476", "url": "https://patchblox.com/security/cve/CVE-2026-97476", "title": "rds: filter RDS_INFO_* getsockopt by caller\u0027s netns", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97439", "url": "https://patchblox.com/security/cve/CVE-2026-97439", "title": "fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97456", "url": "https://patchblox.com/security/cve/CVE-2026-97456", "title": "ACPICA: Fix condition check in acpi_ps_parse_loop()", "priority": "Routine", "severity": "Moderate", "cvss": 5.6, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92523", "url": "https://patchblox.com/security/cve/CVE-2026-92523", "title": "RDMA/nldev: validate dynamic counter attribute length", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93825", "url": "https://patchblox.com/security/cve/CVE-2026-93825", "title": "spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97481", "url": "https://patchblox.com/security/cve/CVE-2026-97481", "title": "serial: 8250: fix possible ISR soft lockup", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97483", "url": "https://patchblox.com/security/cve/CVE-2026-97483", "title": "usb: core: hcd: fix possible deadlock in rh control transfers", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97979", "url": "https://patchblox.com/security/cve/CVE-2026-97979", "title": "ice: add missing xa_destroy for sched_node_ids", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98031", "url": "https://patchblox.com/security/cve/CVE-2026-98031", "title": "nexthop: Initialize extack in remove_nh_grp_entry()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97453", "url": "https://patchblox.com/security/cve/CVE-2026-97453", "title": "ACPICA: validate byte_count in acpi_ps_get_next_package_length()", "priority": "Routine", "severity": "Moderate", "cvss": 5.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97484", "url": "https://patchblox.com/security/cve/CVE-2026-97484", "title": "usbip: vhci_hcd: fix NULL deref in status_show_vhci", "priority": "Routine", "severity": "Moderate", "cvss": 5.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93795", "url": "https://patchblox.com/security/cve/CVE-2026-93795", "title": "blk-cgroup: fix leaks and online flag on radix_tree_insert failure", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97446", "url": "https://patchblox.com/security/cve/CVE-2026-97446", "title": "ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97420", "url": "https://patchblox.com/security/cve/CVE-2026-97420", "title": "bpf: NUL-terminate replaced sysctl value", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97472", "url": "https://patchblox.com/security/cve/CVE-2026-97472", "title": "ipv6: addrconf: fix temp address generation after prefix deprecation", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97449", "url": "https://patchblox.com/security/cve/CVE-2026-97449", "title": "ACPICA: Add package limit checks in parser functions", "priority": "Routine", "severity": "Moderate", "cvss": 4, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93174", "url": "https://patchblox.com/security/cve/CVE-2026-93174", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Copy per-CPU map value padding in copy_map_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93824", "url": "https://patchblox.com/security/cve/CVE-2026-93824", "title": "tls: reject the combination of TLS and sockmap", "priority": "Routine", "severity": "Low", "cvss": 6.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93828", "url": "https://patchblox.com/security/cve/CVE-2026-93828", "title": "exfat: fix handling of damaged volume in exfat_create_upcase_table()", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93829", "url": "https://patchblox.com/security/cve/CVE-2026-93829", "title": "smb: client: fix races in cifsd thread creation", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98039", "url": "https://patchblox.com/security/cve/CVE-2026-98039", "title": "bpf: Require MEM_PERCPU for percpu kptr stores", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98045", "url": "https://patchblox.com/security/cve/CVE-2026-98045", "title": "bpf: Mark faultable stack helpers as sleepable", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98271", "url": "https://patchblox.com/security/cve/CVE-2026-98271", "title": "net: skbuff: do not leave stale header offsets after pskb_carve()", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90400", "url": "https://patchblox.com/security/cve/CVE-2026-90400", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md: recheck spare changes before starting sync...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92502", "url": "https://patchblox.com/security/cve/CVE-2026-92502", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: clear stale xarray tags on folios skipped...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93781", "url": "https://patchblox.com/security/cve/CVE-2026-93781", "title": "scsi: core: Do not block on tag allocation in scsi_eh_lock_door()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97900", "url": "https://patchblox.com/security/cve/CVE-2026-97900", "title": "drm/drm_exec: fix up contended obj when num_objects is 0", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97960", "url": "https://patchblox.com/security/cve/CVE-2026-97960", "title": "perf/x86/intel: Prevent drain_pebs() reentry", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97985", "url": "https://patchblox.com/security/cve/CVE-2026-97985", "title": "af_unix: Update last skb marker in manage_oob().", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98003", "url": "https://patchblox.com/security/cve/CVE-2026-98003", "title": "iommu/amd: Do not reallocate GA log buffers on resume", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98007", "url": "https://patchblox.com/security/cve/CVE-2026-98007", "title": "bpf: Reject non-scalar bpf_loop iteration counts", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98067", "url": "https://patchblox.com/security/cve/CVE-2026-98067", "title": "erofs: disable LZ4 rolling decompression for now", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98081", "url": "https://patchblox.com/security/cve/CVE-2026-98081", "title": "btrfs: zoned: finish active block group cleanup if call_zone_finish() fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98235", "url": "https://patchblox.com/security/cve/CVE-2026-98235", "title": "net/sched: act_api: release tail references on DELACTION failure", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90275", "url": "https://patchblox.com/security/cve/CVE-2026-90275", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid1: don\u0027t set array_frozen in raid1_takeov...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93173", "url": "https://patchblox.com/security/cve/CVE-2026-93173", "title": "bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93794", "url": "https://patchblox.com/security/cve/CVE-2026-93794", "title": "smb/client: flush dirty data before punching a hole", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90178", "url": "https://patchblox.com/security/cve/CVE-2026-90178", "title": "hwmon: (coretemp) Fix core_data leak on CPUs without PTS", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97479", "url": "https://patchblox.com/security/cve/CVE-2026-97479", "title": "driver core: Avoid warning when removing a device while its supplier is unbinding", "priority": "Routine", "severity": "Low", "cvss": 1.9, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98087", "url": "https://patchblox.com/security/cve/CVE-2026-98087", "title": "sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98273", "url": "https://patchblox.com/security/cve/CVE-2026-98273", "title": "x86/kprobes: Fix crash when probing CS CALL instructions", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97443", "url": "https://patchblox.com/security/cve/CVE-2026-97443", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/ftrace: Fix WARNING in __unregister_ftrace_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98354", "url": "https://patchblox.com/security/cve/CVE-2026-98354", "title": "RDMA/mad: Fix receive buffer leak when PKey enforcement fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97503", "url": "https://patchblox.com/security/cve/CVE-2026-97503", "title": "genirq/proc: Size interrupt directory names for 10-digit interrupt numbers", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-100074", "url": "https://patchblox.com/security/cve/CVE-2026-100074", "title": "bpf: Mark bpf_refcount field as unique", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98062", "url": "https://patchblox.com/security/cve/CVE-2026-98062", "title": "bpf: Mark signal tracepoint siginfo arguments as scalar", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98119", "url": "https://patchblox.com/security/cve/CVE-2026-98119", "title": "netfs: break unbuffered write when netfs_alloc_subrequest() fails", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98090", "url": "https://patchblox.com/security/cve/CVE-2026-98090", "title": "btrfs: restore active device pointers after failed sprout", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98091", "url": "https://patchblox.com/security/cve/CVE-2026-98091", "title": "btrfs: detach failed sprout device from transaction update list", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98128", "url": "https://patchblox.com/security/cve/CVE-2026-98128", "title": "scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98129", "url": "https://patchblox.com/security/cve/CVE-2026-98129", "title": "scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98059", "url": "https://patchblox.com/security/cve/CVE-2026-98059", "title": "bpf: Mark sched_process_wait argument as nullable", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98126", "url": "https://patchblox.com/security/cve/CVE-2026-98126", "title": "smb/client: validate new EOF for zero range", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98120", "url": "https://patchblox.com/security/cve/CVE-2026-98120", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak Fix a subrequest ref...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-100070", "url": "https://patchblox.com/security/cve/CVE-2026-100070", "title": "netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98157", "url": "https://patchblox.com/security/cve/CVE-2026-98157", "title": "EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98151", "url": "https://patchblox.com/security/cve/CVE-2026-98151", "title": "bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic", "priority": "Routine", "severity": "medium", "cvss": 6.7, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98161", "url": "https://patchblox.com/security/cve/CVE-2026-98161", "title": "nvdimm: pmem: keep PREFLUSH before data writes", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98123", "url": "https://patchblox.com/security/cve/CVE-2026-98123", "title": "sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97618", "url": "https://patchblox.com/security/cve/CVE-2026-97618", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don\u0027t overconsume buffers when usi...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T01:44:33Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }