{ "fix": "ALAS2023-2026-3193", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3193", "summary": "ALAS2023-2026-3193, released November 7, 2026, fixes 203 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 18 packages", "released": "2026-11-07T01:06:52Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-89660, rated Critical", "supported": true, "cveCount": 203, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00745, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-3193.html", "appliesTo": [ { "product": "bpftool6.12", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "bpftool6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.12.111-136.204", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.111-136.204", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel6.12", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "kernel6.12-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "kernel6.12-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "kernel6.12-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "kernel6.12-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "kernel6.12-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "kernel6.12-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "kernel6.12-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "perf6.12", "productUrl": "https://patchblox.com/security/product/linux/perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "perf6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "python3-perf6.12", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true }, { "product": "python3-perf6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.111-136.204.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-89660", "url": "https://patchblox.com/security/cve/CVE-2026-89660", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00617, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89637", "url": "https://patchblox.com/security/cve/CVE-2026-89637", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifs_che...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00597, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90037", "url": "https://patchblox.com/security/cve/CVE-2026-90037", "title": "NFSD: Prevent client use-after-free during close_lru reaping", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90042", "url": "https://patchblox.com/security/cve/CVE-2026-90042", "title": "ceph: properly decrypt filenames in vmalloc() buffers", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89676", "url": "https://patchblox.com/security/cve/CVE-2026-89676", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for as...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90036", "url": "https://patchblox.com/security/cve/CVE-2026-90036", "title": "NFSD: Prevent client use-after-free during blocked-lock reaping", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00484, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97524", "url": "https://patchblox.com/security/cve/CVE-2026-97524", "title": "mptcp: avoid unneeded actions on subflow reset", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97523", "url": "https://patchblox.com/security/cve/CVE-2026-97523", "title": "mptcp: close race between scheduler and state change", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00728, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89544", "url": "https://patchblox.com/security/cve/CVE-2026-89544", "title": "SUNRPC: fix gssx_dec_option_array error path bugs", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89685", "url": "https://patchblox.com/security/cve/CVE-2026-89685", "title": "nfsd: fix clock domain mismatch in clients_still_reclaiming()", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00612, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98056", "url": "https://patchblox.com/security/cve/CVE-2026-98056", "title": "nvme: remove stale namespaces by NSID range during scan", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00612, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98401", "url": "https://patchblox.com/security/cve/CVE-2026-98401", "title": "net: iptunnel: fix stale transport header during tunnel decapsulation", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00595, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97555", "url": "https://patchblox.com/security/cve/CVE-2026-97555", "title": "smb: client: fix heap overflow in DACL owner/group rewrite", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00584, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98069", "url": "https://patchblox.com/security/cve/CVE-2026-98069", "title": "net/rds: acquire the fastpath locks in rds_conn_shutdown()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00562, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89667", "url": "https://patchblox.com/security/cve/CVE-2026-89667", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shut...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98096", "url": "https://patchblox.com/security/cve/CVE-2026-98096", "title": "ipv6: sr: restore network header before routing and forwarding", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00505, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72438", "url": "https://patchblox.com/security/cve/CVE-2026-72438", "title": "md/raid10: fix writes_pending and barrier reference leaks on discard failures", "priority": "High", "severity": "Low", "cvss": 7.5, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97417", "url": "https://patchblox.com/security/cve/CVE-2026-97417", "title": "netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89561", "url": "https://patchblox.com/security/cve/CVE-2026-89561", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6_...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89659", "url": "https://patchblox.com/security/cve/CVE-2026-89659", "title": "NFSD: Prevent client use-after-free during delegation revoke", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00477, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98070", "url": "https://patchblox.com/security/cve/CVE-2026-98070", "title": "net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98130", "url": "https://patchblox.com/security/cve/CVE-2026-98130", "title": "sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00453, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89708", "url": "https://patchblox.com/security/cve/CVE-2026-89708", "title": "nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00444, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97562", "url": "https://patchblox.com/security/cve/CVE-2026-97562", "title": "smb: client: pin DFS superblock in iterator callback", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00413, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93787", "url": "https://patchblox.com/security/cve/CVE-2026-93787", "title": "smb: client: bound dirent name against end of SMB response in cifs_filldir", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89796", "url": "https://patchblox.com/security/cve/CVE-2026-89796", "title": "mm/damon/core: avoid infinite kdamond_merge_regions() internal loop", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97616", "url": "https://patchblox.com/security/cve/CVE-2026-97616", "title": "net/sched: act_api: release all action references on NEWACTION failure", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97564", "url": "https://patchblox.com/security/cve/CVE-2026-97564", "title": "smb: client: reject userspace cifs.idmap descriptions", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97598", "url": "https://patchblox.com/security/cve/CVE-2026-97598", "title": "ipv4: fib: bound automatic table ID allocation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97998", "url": "https://patchblox.com/security/cve/CVE-2026-97998", "title": "netfilter: nfnetlink_log: cope with concurrent instance destruction", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98076", "url": "https://patchblox.com/security/cve/CVE-2026-98076", "title": "tracing/probes: Fix use-after-free on field name/type of events with multiple probes", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97568", "url": "https://patchblox.com/security/cve/CVE-2026-97568", "title": "mptcp: syncookies: remember the request backup flag", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97904", "url": "https://patchblox.com/security/cve/CVE-2026-97904", "title": "cpufreq: initialize policy rwsem before sysfs publication", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89543", "url": "https://patchblox.com/security/cve/CVE-2026-89543", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix use-after-free in __rpc_clnt_handle_...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97556", "url": "https://patchblox.com/security/cve/CVE-2026-97556", "title": "smb: client: avoid leaking refcount when cifs_sb_tlink() fails", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97617", "url": "https://patchblox.com/security/cve/CVE-2026-97617", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resize_disabled before publis...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98104", "url": "https://patchblox.com/security/cve/CVE-2026-98104", "title": "net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98398", "url": "https://patchblox.com/security/cve/CVE-2026-98398", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Invalidate stale class_cache en...", "priority": "High", "severity": "important", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97560", "url": "https://patchblox.com/security/cve/CVE-2026-97560", "title": "smb: client: fix one-byte OOB read in smb2_parse_native_symlink()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90430", "url": "https://patchblox.com/security/cve/CVE-2026-90430", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Publish an LVCMDQ only aft...", "priority": "High", "severity": "important", "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90039", "url": "https://patchblox.com/security/cve/CVE-2026-90039", "title": "NFSD: Guard admin state-revocation walks with NFSD_NET_UP", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68289", "url": "https://patchblox.com/security/cve/CVE-2026-68289", "title": "tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98900", "url": "https://patchblox.com/security/cve/CVE-2026-98900", "title": "xen/gntalloc: validate grant count before allocation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98881", "url": "https://patchblox.com/security/cve/CVE-2026-98881", "title": "net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98902", "url": "https://patchblox.com/security/cve/CVE-2026-98902", "title": "md/raid5: let stripe batch bm_seq comparison wrap-safe", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89693", "url": "https://patchblox.com/security/cve/CVE-2026-89693", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4_acl_to_attr() return value in...", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97959", "url": "https://patchblox.com/security/cve/CVE-2026-97959", "title": "net/sched: cls_route: free emptied bucket on filter move", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97995", "url": "https://patchblox.com/security/cve/CVE-2026-97995", "title": "virtio_console: do not free control-out buffers on remove", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98011", "url": "https://patchblox.com/security/cve/CVE-2026-98011", "title": "net/sched: hhf: clamp quantum in change and init paths", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98015", "url": "https://patchblox.com/security/cve/CVE-2026-98015", "title": "net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98074", "url": "https://patchblox.com/security/cve/CVE-2026-98074", "title": "bonding: do not clear curr_active_slave prematurely when releasing all slaves", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97951", "url": "https://patchblox.com/security/cve/CVE-2026-97951", "title": "scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98063", "url": "https://patchblox.com/security/cve/CVE-2026-98063", "title": "bpf: Fix NULL-ptr-deref in btf_var_show()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98064", "url": "https://patchblox.com/security/cve/CVE-2026-98064", "title": "bpf: Fix NULL-ptr-deref when showing a void BTF type", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98072", "url": "https://patchblox.com/security/cve/CVE-2026-98072", "title": "net/rds: use wq_has_sleeper() in release_in_xmit()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98068", "url": "https://patchblox.com/security/cve/CVE-2026-98068", "title": "net/rds: don\u0027t let rds_conn_shutdown() consume a concurrent drop", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89602", "url": "https://patchblox.com/security/cve/CVE-2026-89602", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers wh...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98021", "url": "https://patchblox.com/security/cve/CVE-2026-98021", "title": "net: reject oversized tx_queue_len at netlink parse time", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89799", "url": "https://patchblox.com/security/cve/CVE-2026-89799", "title": "bpf: Disable preemption in bpf_get_stackid", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98089", "url": "https://patchblox.com/security/cve/CVE-2026-98089", "title": "bonding: alb: fix uninitialized transport header access in alb_determine_nd()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80841", "url": "https://patchblox.com/security/cve/CVE-2026-80841", "title": "net/packet: defer vmalloc TX_RING free until skbs finish", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93785", "url": "https://patchblox.com/security/cve/CVE-2026-93785", "title": "cifs: validate idmap key payload length", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97441", "url": "https://patchblox.com/security/cve/CVE-2026-97441", "title": "ata: ahci: fail probe if BAR too small for claimed ports", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97964", "url": "https://patchblox.com/security/cve/CVE-2026-97964", "title": "ppp_synctty: ensure a writeable skb header", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98016", "url": "https://patchblox.com/security/cve/CVE-2026-98016", "title": "net/mlx5e: Fix use-after-free race in sample_restore_put()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98014", "url": "https://patchblox.com/security/cve/CVE-2026-98014", "title": "net/mlx5: E-Switch, prevent mc_list repopulation during vport disable", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98046", "url": "https://patchblox.com/security/cve/CVE-2026-98046", "title": "bpf: Mark bpf_btf_find_by_name_kind() as sleepable", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98075", "url": "https://patchblox.com/security/cve/CVE-2026-98075", "title": "bpf: reject BPF_PSEUDO_FUNC reference to the main program", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97430", "url": "https://patchblox.com/security/cve/CVE-2026-97430", "title": "xhci: Prevent queuing new commands if xhci is inaccessible", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98088", "url": "https://patchblox.com/security/cve/CVE-2026-98088", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumask_of_no...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97612", "url": "https://patchblox.com/security/cve/CVE-2026-97612", "title": "net: mpls: clear inner_protocol when the last label is popped", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97940", "url": "https://patchblox.com/security/cve/CVE-2026-97940", "title": "ipv6: fix fib6 walker UAF on seq stop", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98899", "url": "https://patchblox.com/security/cve/CVE-2026-98899", "title": "netfilter: ipset: mark the rcu locked areas properly", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97984", "url": "https://patchblox.com/security/cve/CVE-2026-97984", "title": "net: ipv6: Fix UDP length overflow with PMTU discover and big MTU", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74258", "url": "https://patchblox.com/security/cve/CVE-2026-74258", "title": "bpf: Guard __get_user acesss with access_ok for uprobe_multi data", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97978", "url": "https://patchblox.com/security/cve/CVE-2026-97978", "title": "eth: ice: don\u0027t dereference pointers from TP_printk()", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98026", "url": "https://patchblox.com/security/cve/CVE-2026-98026", "title": "net: bridge: mcast: properly convert mglist to rcu", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98102", "url": "https://patchblox.com/security/cve/CVE-2026-98102", "title": "ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98103", "url": "https://patchblox.com/security/cve/CVE-2026-98103", "title": "igmp: convert struct ip_sf_list to RCU", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68337", "url": "https://patchblox.com/security/cve/CVE-2026-68337", "title": "bpf: Reject redirect helpers without a bpf_net_context", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97961", "url": "https://patchblox.com/security/cve/CVE-2026-97961", "title": "perf/core: Allow list_del during perf_event_overflow()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97965", "url": "https://patchblox.com/security/cve/CVE-2026-97965", "title": "vxlan: initialize _md in vxlan_xmit_one()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98057", "url": "https://patchblox.com/security/cve/CVE-2026-98057", "title": "ring-buffer: Add checking nr_subbufs to persistent ring buffer validation", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97611", "url": "https://patchblox.com/security/cve/CVE-2026-97611", "title": "net: openvswitch: fix use-after-free of the flow table mask array", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89545", "url": "https://patchblox.com/security/cve/CVE-2026-89545", "title": "sunrpc: defer rq_argp and rq_resp free until after RCU grace period", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89755", "url": "https://patchblox.com/security/cve/CVE-2026-89755", "title": "mm/migrate_device: clear stale mapping after freeing swapcache", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97505", "url": "https://patchblox.com/security/cve/CVE-2026-97505", "title": "PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80860", "url": "https://patchblox.com/security/cve/CVE-2026-80860", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend Aft...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97445", "url": "https://patchblox.com/security/cve/CVE-2026-97445", "title": "ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97602", "url": "https://patchblox.com/security/cve/CVE-2026-97602", "title": "inet: frags: invalidate queues before flushing them", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98078", "url": "https://patchblox.com/security/cve/CVE-2026-98078", "title": "ipvs: fix reversed sequence option serialization", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97608", "url": "https://patchblox.com/security/cve/CVE-2026-97608", "title": "netfilter: nf_log: unregister loggers before per-net teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98041", "url": "https://patchblox.com/security/cve/CVE-2026-98041", "title": "bpf: Don\u0027t predict JMP32 pointer vs zero comparisons", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97450", "url": "https://patchblox.com/security/cve/CVE-2026-97450", "title": "ACPICA: validate handler object type in two places", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97451", "url": "https://patchblox.com/security/cve/CVE-2026-97451", "title": "ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97452", "url": "https://patchblox.com/security/cve/CVE-2026-97452", "title": "ACPICA: Prevent adding invalid references", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97444", "url": "https://patchblox.com/security/cve/CVE-2026-97444", "title": "ACPICA: add boundary checks in two places", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97454", "url": "https://patchblox.com/security/cve/CVE-2026-97454", "title": "ACPICA: add boundary checks in acpi_ps_get_next_field()", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97455", "url": "https://patchblox.com/security/cve/CVE-2026-97455", "title": "ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93827", "url": "https://patchblox.com/security/cve/CVE-2026-93827", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nvirtio-fs: avoid double-free on failed queue setu...", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89564", "url": "https://patchblox.com/security/cve/CVE-2026-89564", "title": "ip: orphan prefetched skbs before multicast forwarding", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97448", "url": "https://patchblox.com/security/cve/CVE-2026-97448", "title": "ACPICA: Add validation for node in acpi_ns_build_normalized_path()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97437", "url": "https://patchblox.com/security/cve/CVE-2026-97437", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfs_dir_emit()...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98080", "url": "https://patchblox.com/security/cve/CVE-2026-98080", "title": "btrfs: do not force reloc root creation during qgroup_account_snapshot()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97415", "url": "https://patchblox.com/security/cve/CVE-2026-97415", "title": "btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97438", "url": "https://patchblox.com/security/cve/CVE-2026-97438", "title": "fs/ntfs3: validate index entry key bounds", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98127", "url": "https://patchblox.com/security/cve/CVE-2026-98127", "title": "smb/client: validate new EOF for insert range", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93288", "url": "https://patchblox.com/security/cve/CVE-2026-93288", "title": "netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93817", "url": "https://patchblox.com/security/cve/CVE-2026-93817", "title": "perf: Fix addr_filter_ranges lifetime", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93125", "url": "https://patchblox.com/security/cve/CVE-2026-93125", "title": "bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93287", "url": "https://patchblox.com/security/cve/CVE-2026-93287", "title": "i2c: smbus: reject oversized block transfers in the common path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93798", "url": "https://patchblox.com/security/cve/CVE-2026-93798", "title": "btrfs: fix reloc root cleanup in merge_reloc_roots()", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93813", "url": "https://patchblox.com/security/cve/CVE-2026-93813", "title": "btrfs: tree-checker: validate INODE_REF\u0027s namelen", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97421", "url": "https://patchblox.com/security/cve/CVE-2026-97421", "title": "RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98017", "url": "https://patchblox.com/security/cve/CVE-2026-98017", "title": "net/sched: defer qdisc freeing after failed creation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74496", "url": "https://patchblox.com/security/cve/CVE-2026-74496", "title": "fou: Fix use-after-free in fou_create()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74289", "url": "https://patchblox.com/security/cve/CVE-2026-74289", "title": "ipv4: fib: Don\u0027t dump dying fib_info in fib_leaf_notify().", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98023", "url": "https://patchblox.com/security/cve/CVE-2026-98023", "title": "vxlan: reject dynamic fdb entries that reference a nexthop id", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93801", "url": "https://patchblox.com/security/cve/CVE-2026-93801", "title": "smb/client: zero-initialize stack-allocated cifs_open_info_data", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98122", "url": "https://patchblox.com/security/cve/CVE-2026-98122", "title": "vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98095", "url": "https://patchblox.com/security/cve/CVE-2026-98095", "title": "af_packet: Don\u0027t cast tpacket_hdr.tp_len to int in tpacket_parse_header().", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98082", "url": "https://patchblox.com/security/cve/CVE-2026-98082", "title": "btrfs: fix the possible bioc_list memory leak during error", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93810", "url": "https://patchblox.com/security/cve/CVE-2026-93810", "title": "cachefiles: Fix double fput", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89763", "url": "https://patchblox.com/security/cve/CVE-2026-89763", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM teardown ordering truste...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98098", "url": "https://patchblox.com/security/cve/CVE-2026-98098", "title": "tipc: fix NULL deref in tipc_named_node_up() on empty publication list", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98083", "url": "https://patchblox.com/security/cve/CVE-2026-98083", "title": "btrfs: fix transaction use-after-free in raid stripe insertion", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98158", "url": "https://patchblox.com/security/cve/CVE-2026-98158", "title": "ppp_async: drop the errored frame instead of resetting its headroom", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98097", "url": "https://patchblox.com/security/cve/CVE-2026-98097", "title": "tipc: Dont send random pad bytes in RESET/ACTIVATE messages", "priority": "Routine", "severity": "Moderate", "cvss": 5.3, "epss": 0.00314, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97905", "url": "https://patchblox.com/security/cve/CVE-2026-97905", "title": "cpufreq: zero-initialize policy cpumask before sysfs publication", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98077", "url": "https://patchblox.com/security/cve/CVE-2026-98077", "title": "netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98388", "url": "https://patchblox.com/security/cve/CVE-2026-98388", "title": "exec: do_close_on_exec() before taking exec_update_lock", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97596", "url": "https://patchblox.com/security/cve/CVE-2026-97596", "title": "ipvs: reject invalid states in connection template sync records", "priority": "Routine", "severity": "Moderate", "cvss": 4.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98404", "url": "https://patchblox.com/security/cve/CVE-2026-98404", "title": "drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98538", "url": "https://patchblox.com/security/cve/CVE-2026-98538", "title": "writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80847", "url": "https://patchblox.com/security/cve/CVE-2026-80847", "title": "tcp: clamp route advmss to TCP_MIN_MSS", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97925", "url": "https://patchblox.com/security/cve/CVE-2026-97925", "title": "tick/broadcast: Plug clockevents replacement race", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72402", "url": "https://patchblox.com/security/cve/CVE-2026-72402", "title": "bpf: Mask pseudo pointer values in verifier logs", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98402", "url": "https://patchblox.com/security/cve/CVE-2026-98402", "title": "net: icmp: avoid invalid transport header access in icmp_send tracepoint", "priority": "Routine", "severity": "Low", "cvss": 3.7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97945", "url": "https://patchblox.com/security/cve/CVE-2026-97945", "title": "x86/mm: Fix user-space data loss with MADV_FREE and THP", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97522", "url": "https://patchblox.com/security/cve/CVE-2026-97522", "title": "mptcp: fix bad accounting in __mptcp_subflow_push_pending()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97902", "url": "https://patchblox.com/security/cve/CVE-2026-97902", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs: don\u0027t return -EINVAL for successful nested t...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89698", "url": "https://patchblox.com/security/cve/CVE-2026-89698", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsd_genl_rqstp address fields to so...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97606", "url": "https://patchblox.com/security/cve/CVE-2026-97606", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs_fill_super...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98037", "url": "https://patchblox.com/security/cve/CVE-2026-98037", "title": "bpf: Reject untrusted allocated-object pointers", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97551", "url": "https://patchblox.com/security/cve/CVE-2026-97551", "title": "xfs: initialise args-\u003Etotal for parent pointer updates", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98394", "url": "https://patchblox.com/security/cve/CVE-2026-98394", "title": "af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.", "priority": "Routine", "severity": "Low", "cvss": 2.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98888", "url": "https://patchblox.com/security/cve/CVE-2026-98888", "title": "arm64: kprobes: Allow reentering kprobes while single-stepping", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80861", "url": "https://patchblox.com/security/cve/CVE-2026-80861", "title": "usb: xhci: bail out of setup if the controller is inaccessible", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98877", "url": "https://patchblox.com/security/cve/CVE-2026-98877", "title": "irqchip/gic-v4: Don\u0027t advertise VLPIs if no ITS is probed", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98873", "url": "https://patchblox.com/security/cve/CVE-2026-98873", "title": "netfilter: nf_conntrack_expect: zero at allocation time", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98879", "url": "https://patchblox.com/security/cve/CVE-2026-98879", "title": "isofs: handle set_blocksize failures", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98885", "url": "https://patchblox.com/security/cve/CVE-2026-98885", "title": "ima: return error early if file xattr cannot be changed", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98775", "url": "https://patchblox.com/security/cve/CVE-2026-98775", "title": "nitro_enclaves: fix use-after-free on SLOT_ALLOC failure", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98010", "url": "https://patchblox.com/security/cve/CVE-2026-98010", "title": "net/sched: drr: clamp quantum in change class", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97899", "url": "https://patchblox.com/security/cve/CVE-2026-97899", "title": "drm/i915: Fix memory leak in query_perf_config_list()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97958", "url": "https://patchblox.com/security/cve/CVE-2026-97958", "title": "net/sched: cls_api: Don\u0027t replay RTM_GETCHAIN in tc_ctl_chain().", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98012", "url": "https://patchblox.com/security/cve/CVE-2026-98012", "title": "net/sched: sfq: clamp quantum in change path", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98022", "url": "https://patchblox.com/security/cve/CVE-2026-98022", "title": "net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98071", "url": "https://patchblox.com/security/cve/CVE-2026-98071", "title": "net/rds: clear cp_flags bits individually in rds_conn_path_reset()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89589", "url": "https://patchblox.com/security/cve/CVE-2026-89589", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use raw_spinlock_t for CXL CPER...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98880", "url": "https://patchblox.com/security/cve/CVE-2026-98880", "title": "ntfs3: handle set_blocksize failures", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93800", "url": "https://patchblox.com/security/cve/CVE-2026-93800", "title": "btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97416", "url": "https://patchblox.com/security/cve/CVE-2026-97416", "title": "btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97476", "url": "https://patchblox.com/security/cve/CVE-2026-97476", "title": "rds: filter RDS_INFO_* getsockopt by caller\u0027s netns", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97439", "url": "https://patchblox.com/security/cve/CVE-2026-97439", "title": "fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97456", "url": "https://patchblox.com/security/cve/CVE-2026-97456", "title": "ACPICA: Fix condition check in acpi_ps_parse_loop()", "priority": "Routine", "severity": "Moderate", "cvss": 5.6, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93825", "url": "https://patchblox.com/security/cve/CVE-2026-93825", "title": "spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97481", "url": "https://patchblox.com/security/cve/CVE-2026-97481", "title": "serial: 8250: fix possible ISR soft lockup", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97483", "url": "https://patchblox.com/security/cve/CVE-2026-97483", "title": "usb: core: hcd: fix possible deadlock in rh control transfers", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97979", "url": "https://patchblox.com/security/cve/CVE-2026-97979", "title": "ice: add missing xa_destroy for sched_node_ids", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98031", "url": "https://patchblox.com/security/cve/CVE-2026-98031", "title": "nexthop: Initialize extack in remove_nh_grp_entry()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97453", "url": "https://patchblox.com/security/cve/CVE-2026-97453", "title": "ACPICA: validate byte_count in acpi_ps_get_next_package_length()", "priority": "Routine", "severity": "Moderate", "cvss": 5.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97484", "url": "https://patchblox.com/security/cve/CVE-2026-97484", "title": "usbip: vhci_hcd: fix NULL deref in status_show_vhci", "priority": "Routine", "severity": "Moderate", "cvss": 5.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93795", "url": "https://patchblox.com/security/cve/CVE-2026-93795", "title": "blk-cgroup: fix leaks and online flag on radix_tree_insert failure", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97446", "url": "https://patchblox.com/security/cve/CVE-2026-97446", "title": "ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97420", "url": "https://patchblox.com/security/cve/CVE-2026-97420", "title": "bpf: NUL-terminate replaced sysctl value", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97472", "url": "https://patchblox.com/security/cve/CVE-2026-97472", "title": "ipv6: addrconf: fix temp address generation after prefix deprecation", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97449", "url": "https://patchblox.com/security/cve/CVE-2026-97449", "title": "ACPICA: Add package limit checks in parser functions", "priority": "Routine", "severity": "Moderate", "cvss": 4, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89644", "url": "https://patchblox.com/security/cve/CVE-2026-89644", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O w...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93824", "url": "https://patchblox.com/security/cve/CVE-2026-93824", "title": "tls: reject the combination of TLS and sockmap", "priority": "Routine", "severity": "Low", "cvss": 6.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93828", "url": "https://patchblox.com/security/cve/CVE-2026-93828", "title": "exfat: fix handling of damaged volume in exfat_create_upcase_table()", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93829", "url": "https://patchblox.com/security/cve/CVE-2026-93829", "title": "smb: client: fix races in cifsd thread creation", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98039", "url": "https://patchblox.com/security/cve/CVE-2026-98039", "title": "bpf: Require MEM_PERCPU for percpu kptr stores", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98045", "url": "https://patchblox.com/security/cve/CVE-2026-98045", "title": "bpf: Mark faultable stack helpers as sleepable", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89717", "url": "https://patchblox.com/security/cve/CVE-2026-89717", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_des...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93781", "url": "https://patchblox.com/security/cve/CVE-2026-93781", "title": "scsi: core: Do not block on tag allocation in scsi_eh_lock_door()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97900", "url": "https://patchblox.com/security/cve/CVE-2026-97900", "title": "drm/drm_exec: fix up contended obj when num_objects is 0", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97985", "url": "https://patchblox.com/security/cve/CVE-2026-97985", "title": "af_unix: Update last skb marker in manage_oob().", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98007", "url": "https://patchblox.com/security/cve/CVE-2026-98007", "title": "bpf: Reject non-scalar bpf_loop iteration counts", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98081", "url": "https://patchblox.com/security/cve/CVE-2026-98081", "title": "btrfs: zoned: finish active block group cleanup if call_zone_finish() fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89700", "url": "https://patchblox.com/security/cve/CVE-2026-89700", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in lis...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93794", "url": "https://patchblox.com/security/cve/CVE-2026-93794", "title": "smb/client: flush dirty data before punching a hole", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97443", "url": "https://patchblox.com/security/cve/CVE-2026-97443", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/ftrace: Fix WARNING in __unregister_ftrace_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80925", "url": "https://patchblox.com/security/cve/CVE-2026-80925", "title": "vlan: fix skb_under_panic and races when toggling HW VLAN offload", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98090", "url": "https://patchblox.com/security/cve/CVE-2026-98090", "title": "btrfs: restore active device pointers after failed sprout", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98091", "url": "https://patchblox.com/security/cve/CVE-2026-98091", "title": "btrfs: detach failed sprout device from transaction update list", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98128", "url": "https://patchblox.com/security/cve/CVE-2026-98128", "title": "scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98129", "url": "https://patchblox.com/security/cve/CVE-2026-98129", "title": "scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98059", "url": "https://patchblox.com/security/cve/CVE-2026-98059", "title": "bpf: Mark sched_process_wait argument as nullable", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98126", "url": "https://patchblox.com/security/cve/CVE-2026-98126", "title": "smb/client: validate new EOF for zero range", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98157", "url": "https://patchblox.com/security/cve/CVE-2026-98157", "title": "EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98151", "url": "https://patchblox.com/security/cve/CVE-2026-98151", "title": "bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic", "priority": "Routine", "severity": "medium", "cvss": 6.7, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98123", "url": "https://patchblox.com/security/cve/CVE-2026-98123", "title": "sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T13:56:55Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }