{ "fix": "ALAS2023-2026-3196", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196", "summary": "ALAS2023-2026-3196, released November 7, 2026, fixes 432 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 18 packages", "released": "2026-11-07T01:06:07Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-99999, rated Critical", "supported": true, "cveCount": 432, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00841, "maxCvss": 10, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-3196.html", "appliesTo": [ { "product": "bpftool6.12", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "bpftool6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.12.110-135.201", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.110-135.201", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel6.12", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "kernel6.12-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "kernel6.12-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "kernel6.12-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "kernel6.12-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "kernel6.12-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "kernel6.12-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "kernel6.12-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "perf6.12", "productUrl": "https://patchblox.com/security/product/linux/perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "perf6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "python3-perf6.12", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true }, { "product": "python3-perf6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.110-135.201.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-99999", "url": "https://patchblox.com/security/cve/CVE-2026-99999", "title": "ipv4: validate checksum_start before completing checksum", "priority": "Urgent", "severity": "Critical", "cvss": 9.3, "epss": 0.00788, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90151", "url": "https://patchblox.com/security/cve/CVE-2026-90151", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client alloc...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00749, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89688", "url": "https://patchblox.com/security/cve/CVE-2026-89688", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on s...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00736, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90048", "url": "https://patchblox.com/security/cve/CVE-2026-90048", "title": "fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00721, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80976", "url": "https://patchblox.com/security/cve/CVE-2026-80976", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation deca...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89485", "url": "https://patchblox.com/security/cve/CVE-2026-89485", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlm_inspect_file loc...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89655", "url": "https://patchblox.com/security/cve/CVE-2026-89655", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() on cf en...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89712", "url": "https://patchblox.com/security/cve/CVE-2026-89712", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc_expire_umount walk after dropp...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89783", "url": "https://patchblox.com/security/cve/CVE-2026-89783", "title": "xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89778", "url": "https://patchblox.com/security/cve/CVE-2026-89778", "title": "isofs: fix out-of-bounds page array access on empty zisofs block", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89555", "url": "https://patchblox.com/security/cve/CVE-2026-89555", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb_may_pull() mpls_...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89634", "url": "https://patchblox.com/security/cve/CVE-2026-89634", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN() overflow in symlink_dat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00693, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89713", "url": "https://patchblox.com/security/cve/CVE-2026-89713", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00665, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89636", "url": "https://patchblox.com/security/cve/CVE-2026-89636", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce-\u003Etgthint in free_tgts() W...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00663, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63979", "url": "https://patchblox.com/security/cve/CVE-2026-63979", "title": "net/handshake: hand off the pinned file reference to accept_doit", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89536", "url": "https://patchblox.com/security/cve/CVE-2026-89536", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: wait for in-flight client TLS handshake...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89558", "url": "https://patchblox.com/security/cve/CVE-2026-89558", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix still_degraded being inverted in...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89651", "url": "https://patchblox.com/security/cve/CVE-2026-89651", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ceph: bound MDSCapAuth path and fs_name decode i...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90012", "url": "https://patchblox.com/security/cve/CVE-2026-90012", "title": "spi: Fix DMA mapping ownership on partial map failure", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00626, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89658", "url": "https://patchblox.com/security/cve/CVE-2026-89658", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during NFSv4...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00617, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89703", "url": "https://patchblox.com/security/cve/CVE-2026-89703", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00617, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90110", "url": "https://patchblox.com/security/cve/CVE-2026-90110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree node comparison usin...", "priority": "Urgent", "severity": "critical", "cvss": 9.4, "epss": 0.00612, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89990", "url": "https://patchblox.com/security/cve/CVE-2026-89990", "title": "ceph: lock mutex in ceph_mds_check_access()", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00608, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80557", "url": "https://patchblox.com/security/cve/CVE-2026-80557", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via m...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89478", "url": "https://patchblox.com/security/cve/CVE-2026-89478", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: drop a chunk if its transport was removed...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89541", "url": "https://patchblox.com/security/cve/CVE-2026-89541", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_unwrap_resp_priv length check...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89542", "url": "https://patchblox.com/security/cve/CVE-2026-89542", "title": "SUNRPC: harden gss_krb5_unwrap_v2 against short tokens", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89551", "url": "https://patchblox.com/security/cve/CVE-2026-89551", "title": "SUNRPC: xdr_buf_trim: clamp buf-\u003Elen to avoid underflow", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89652", "url": "https://patchblox.com/security/cve/CVE-2026-89652", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS exp...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89653", "url": "https://patchblox.com/security/cve/CVE-2026-89653", "title": "ceph: reject export_targets ranks \u003E= CEPH_MAX_MDS in mdsmap decode", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89702", "url": "https://patchblox.com/security/cve/CVE-2026-89702", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: size fh_verify server sockaddr slot by xpt...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89479", "url": "https://patchblox.com/security/cve/CVE-2026-89479", "title": "sctp: stop processing a packet once its association is deleted", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93207", "url": "https://patchblox.com/security/cve/CVE-2026-93207", "title": "SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80725", "url": "https://patchblox.com/security/cve/CVE-2026-80725", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00459, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64216", "url": "https://patchblox.com/security/cve/CVE-2026-64216", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandon...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74665", "url": "https://patchblox.com/security/cve/CVE-2026-74665", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00373, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68132", "url": "https://patchblox.com/security/cve/CVE-2026-68132", "title": "super: fix emergency thaw deadlock on frozen block devices", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80715", "url": "https://patchblox.com/security/cve/CVE-2026-80715", "title": "igc: remove napi_synchronize() in igc_down()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80671", "url": "https://patchblox.com/security/cve/CVE-2026-80671", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix register_pid() overflow, strcpy,...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74517", "url": "https://patchblox.com/security/cve/CVE-2026-74517", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Cancel delayed I/O APIC EOI handling b...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64078", "url": "https://patchblox.com/security/cve/CVE-2026-64078", "title": "netfilter: x_tables: add and use xtables_unregister_table_exit", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64079", "url": "https://patchblox.com/security/cve/CVE-2026-64079", "title": "netfilter: x_tables: allocate hook ops while under mutex", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90011", "url": "https://patchblox.com/security/cve/CVE-2026-90011", "title": "scsi: target: iscsi: Reserve a terminator byte for the login payload", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00841, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89696", "url": "https://patchblox.com/security/cve/CVE-2026-89696", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH t...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00752, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68159", "url": "https://patchblox.com/security/cve/CVE-2026-68159", "title": "libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89680", "url": "https://patchblox.com/security/cve/CVE-2026-89680", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY se...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0074, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74268", "url": "https://patchblox.com/security/cve/CVE-2026-74268", "title": "tcp: clear sock_ops cb flags before force-closing a child socket", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89482", "url": "https://patchblox.com/security/cve/CVE-2026-89482", "title": "nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89538", "url": "https://patchblox.com/security/cve/CVE-2026-89538", "title": "SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89643", "url": "https://patchblox.com/security/cve/CVE-2026-89643", "title": "audit: avoid dropping live tree ref on fsnotify rule autoremove", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89549", "url": "https://patchblox.com/security/cve/CVE-2026-89549", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc_pool_fo...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00707, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89779", "url": "https://patchblox.com/security/cve/CVE-2026-89779", "title": "fs/ntfs3: validate ef-\u003Esize covers the record\u0027s name and value", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89786", "url": "https://patchblox.com/security/cve/CVE-2026-89786", "title": "ext4: fix out-of-bounds read in ext4_read_inline_dir()", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89476", "url": "https://patchblox.com/security/cve/CVE-2026-89476", "title": "sctp: fix stream-\u003Eoutcnt underflow on duplicate RECONF responses", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89707", "url": "https://patchblox.com/security/cve/CVE-2026-89707", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on follow_down() error...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90102", "url": "https://patchblox.com/security/cve/CVE-2026-90102", "title": "NFSv4/pnfs: key the data server cache on the NFS version", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90103", "url": "https://patchblox.com/security/cve/CVE-2026-90103", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97557", "url": "https://patchblox.com/security/cve/CVE-2026-97557", "title": "smb: client: avoid leaking refcount in cifs_queue_oplock_break()", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89662", "url": "https://patchblox.com/security/cve/CVE-2026-89662", "title": "NFSD: Prevent lock owner use-after-free during client teardown", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89669", "url": "https://patchblox.com/security/cve/CVE-2026-89669", "title": "nfsd: initialize copy-notify stateid before publishing it", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90067", "url": "https://patchblox.com/security/cve/CVE-2026-90067", "title": "libceph: validate banner payload length", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0068, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89649", "url": "https://patchblox.com/security/cve/CVE-2026-89649", "title": "ceph: bound xattr value length in __build_xattrs()", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00678, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89647", "url": "https://patchblox.com/security/cve/CVE-2026-89647", "title": "ceph: do not repeat ceph_trim_dentries() if no progress possible", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00675, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90235", "url": "https://patchblox.com/security/cve/CVE-2026-90235", "title": "sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00664, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89973", "url": "https://patchblox.com/security/cve/CVE-2026-89973", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00615, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89586", "url": "https://patchblox.com/security/cve/CVE-2026-89586", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00615, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89657", "url": "https://patchblox.com/security/cve/CVE-2026-89657", "title": "libceph: validate OSD extent maps before cursor advance", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00612, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89554", "url": "https://patchblox.com/security/cve/CVE-2026-89554", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized local_id in syncookie M...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00598, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80590", "url": "https://patchblox.com/security/cve/CVE-2026-80590", "title": "inet: frags: strip GSO state from fragments before reassembly", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89483", "url": "https://patchblox.com/security/cve/CVE-2026-89483", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvme_setup...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00571, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89547", "url": "https://patchblox.com/security/cve/CVE-2026-89547", "title": "SUNRPC: Check svc pool percpu counter allocation", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00561, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89671", "url": "https://patchblox.com/security/cve/CVE-2026-89671", "title": "nfsd: gate nfs3 setacl by argp-\u003Emask", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00545, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74597", "url": "https://patchblox.com/security/cve/CVE-2026-74597", "title": "ip6_tunnel: clear skb2-\u003Ecb[] in ip6ip6_err()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00543, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74743", "url": "https://patchblox.com/security/cve/CVE-2026-74743", "title": "macvlan: inherit needed_headroom and needed_tailroom from lowerdev", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74746", "url": "https://patchblox.com/security/cve/CVE-2026-74746", "title": "netfilter: flowtable: publish GC-visible tuple last", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89706", "url": "https://patchblox.com/security/cve/CVE-2026-89706", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY write...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00526, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89704", "url": "https://patchblox.com/security/cve/CVE-2026-89704", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00526, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80587", "url": "https://patchblox.com/security/cve/CVE-2026-80587", "title": "mptcp: avoid combining some incoming suboptions", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00516, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74662", "url": "https://patchblox.com/security/cve/CVE-2026-74662", "title": "inet: frags: publish queues before arming timer", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74669", "url": "https://patchblox.com/security/cve/CVE-2026-74669", "title": "ipvs: clear IPv4 options after rebasing tunnel ICMP errors", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80528", "url": "https://patchblox.com/security/cve/CVE-2026-80528", "title": "ceph: avoid fs reclaim while using current-\u003Ejournal_info", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80558", "url": "https://patchblox.com/security/cve/CVE-2026-80558", "title": "libceph: Avoid using invalid osd indices from primary_temp", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80561", "url": "https://patchblox.com/security/cve/CVE-2026-80561", "title": "libceph: fix multiple unsafe decodes in decode_locker()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-81002", "url": "https://patchblox.com/security/cve/CVE-2026-81002", "title": "xdp: fix zero-copy frame layout", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89656", "url": "https://patchblox.com/security/cve/CVE-2026-89656", "title": "libceph: reject buckets with mismatched CRUSH ids", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89650", "url": "https://patchblox.com/security/cve/CVE-2026-89650", "title": "ceph: bound num_export_targets array for mds info v2/v3", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74616", "url": "https://patchblox.com/security/cve/CVE-2026-74616", "title": "xdp: reject clones that overrun skb_shared_info tailroom", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74744", "url": "https://patchblox.com/security/cve/CVE-2026-74744", "title": "ipvlan: inherit needed_headroom and needed_tailroom from phy_dev", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74730", "url": "https://patchblox.com/security/cve/CVE-2026-74730", "title": "NFS: Pin the \u0027struct nfs_server\u0027 during a FREE_STATEID call", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0051, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89684", "url": "https://patchblox.com/security/cve/CVE-2026-89684", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4_init_cp_sta...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80527", "url": "https://patchblox.com/security/cve/CVE-2026-80527", "title": "ceph: fix hanging __ceph_get_caps() with stale mds_wanted", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74717", "url": "https://patchblox.com/security/cve/CVE-2026-74717", "title": "net/mlx5: fw_tracer, return NULL on create error", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89477", "url": "https://patchblox.com/security/cve/CVE-2026-89477", "title": "sctp: fix NULL deref on untransmitted RECONF completion", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89699", "url": "https://patchblox.com/security/cve/CVE-2026-89699", "title": "nfsd: validate symlink target length in NFSv4 CREATE", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74705", "url": "https://patchblox.com/security/cve/CVE-2026-74705", "title": "udp: fix potential use-after-free in tunnel segmentation", "priority": "High", "severity": "Moderate", "cvss": 10, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74586", "url": "https://patchblox.com/security/cve/CVE-2026-74586", "title": "sctp: clear new_transport when removing a peer", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74587", "url": "https://patchblox.com/security/cve/CVE-2026-74587", "title": "sctp: fix use-after-free of cached ASCONF chunk", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74588", "url": "https://patchblox.com/security/cve/CVE-2026-74588", "title": "sctp: keep chunk-\u003Etransport in step with the list it is queued on", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74688", "url": "https://patchblox.com/security/cve/CVE-2026-74688", "title": "sctp: clear control chunk transport if it is being removed", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68082", "url": "https://patchblox.com/security/cve/CVE-2026-68082", "title": "libceph: fix two unsafe bare decodes in decode_lockers()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00499, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74612", "url": "https://patchblox.com/security/cve/CVE-2026-74612", "title": "veth: fix skb length accounting after XDP frag adjustment", "priority": "High", "severity": "Moderate", "cvss": 10, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74474", "url": "https://patchblox.com/security/cve/CVE-2026-74474", "title": "vxlan: use pskb_network_may_pull() for transmit path header pulls", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89550", "url": "https://patchblox.com/security/cve/CVE-2026-89550", "title": "SUNRPC: svcauth_gss: enforce krb5 token minimum length", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74696", "url": "https://patchblox.com/security/cve/CVE-2026-74696", "title": "tcp: fix TFO max_qlen accounting across reuseport migration", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74624", "url": "https://patchblox.com/security/cve/CVE-2026-74624", "title": "netfilter: nf_conntrack: defer invalid log until after unlock", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74608", "url": "https://patchblox.com/security/cve/CVE-2026-74608", "title": "smb: client: Fix use-after-free in cifs_try_adding_channels()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00477, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74742", "url": "https://patchblox.com/security/cve/CVE-2026-74742", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: veth: fix queue index used to wake the peer txq...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0046, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92489", "url": "https://patchblox.com/security/cve/CVE-2026-92489", "title": "xfrm: Fix skb double-free in xfrm_dev_direct_output()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89663", "url": "https://patchblox.com/security/cve/CVE-2026-89663", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before droppin...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90141", "url": "https://patchblox.com/security/cve/CVE-2026-90141", "title": "ipvs: fix integer overflow in ftp helper port/address parsing", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00445, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74704", "url": "https://patchblox.com/security/cve/CVE-2026-74704", "title": "net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89711", "url": "https://patchblox.com/security/cve/CVE-2026-89711", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89481", "url": "https://patchblox.com/security/cve/CVE-2026-89481", "title": "nvme-tcp: fix host memory disclosure on R2T for a read command", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89480", "url": "https://patchblox.com/security/cve/CVE-2026-89480", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74598", "url": "https://patchblox.com/security/cve/CVE-2026-74598", "title": "ipv6: fix Route Information option length validation", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89616", "url": "https://patchblox.com/security/cve/CVE-2026-89616", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompre...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68118", "url": "https://patchblox.com/security/cve/CVE-2026-68118", "title": "tcp: challenge ACK for non-exact RST in SYN-RECEIVED", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72493", "url": "https://patchblox.com/security/cve/CVE-2026-72493", "title": "net: serialize netif_running() check in enqueue_to_backlog()", "priority": "High", "severity": "Moderate", "cvss": 9.9, "epss": 0.00403, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80586", "url": "https://patchblox.com/security/cve/CVE-2026-80586", "title": "mptcp: options: reset DSS fields in case of unexpected size", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80589", "url": "https://patchblox.com/security/cve/CVE-2026-80589", "title": "block: stop the timeout timer when releasing a never added disk", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64210", "url": "https://patchblox.com/security/cve/CVE-2026-64210", "title": "net/mlx5e: xsk: Fix unlocked writing to ICOSQ", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89995", "url": "https://patchblox.com/security/cve/CVE-2026-89995", "title": "dma-direct: return struct page from dma_direct_alloc_from_pool()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.0035, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90329", "url": "https://patchblox.com/security/cve/CVE-2026-90329", "title": "HID: synchronize input before cleaning up a failed probe", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74592", "url": "https://patchblox.com/security/cve/CVE-2026-74592", "title": "ima: Instantiate file_truncate and path_truncate hooks", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00341, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93189", "url": "https://patchblox.com/security/cve/CVE-2026-93189", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: core: quiesce input in hid_hw_stop() to pre...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00321, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80585", "url": "https://patchblox.com/security/cve/CVE-2026-80585", "title": "mptcp: fastopen: only mark MPTFO subflows with SYN data", "priority": "High", "severity": "Low", "cvss": 9.4, "epss": 0.00313, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89645", "url": "https://patchblox.com/security/cve/CVE-2026-89645", "title": "btrfs: drop recovered reloc root refs on recovery failure", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00248, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93240", "url": "https://patchblox.com/security/cve/CVE-2026-93240", "title": "memcg: make the v1 soft limit knob inert", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00225, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90200", "url": "https://patchblox.com/security/cve/CVE-2026-90200", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix integer overflow in MFT cluster va...", "priority": "High", "severity": "important", "epss": 0.00225, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90150", "url": "https://patchblox.com/security/cve/CVE-2026-90150", "title": "pnfs/blocklayout: Fix device leaks on parse failure", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89694", "url": "https://patchblox.com/security/cve/CVE-2026-89694", "title": "nfsd: check client ownership when cancelling a copy-notify stateid", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90073", "url": "https://patchblox.com/security/cve/CVE-2026-90073", "title": "net/sched: hhf: clamp quantum before hhf_change() to avoid overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90081", "url": "https://patchblox.com/security/cve/CVE-2026-90081", "title": "net/rds: use wq_has_sleeper() in rds_cong_map_updated()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90284", "url": "https://patchblox.com/security/cve/CVE-2026-90284", "title": "firmware_loader: do not queue completed sysfs fallback requests", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90334", "url": "https://patchblox.com/security/cve/CVE-2026-90334", "title": "tty: clear cdev pointer after cdev_add() failure", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93239", "url": "https://patchblox.com/security/cve/CVE-2026-93239", "title": "arm64: mm: Fix the lockless page-table walk in show_pte()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89984", "url": "https://patchblox.com/security/cve/CVE-2026-89984", "title": "perf/x86/intel: Fix kernel address leakages in LBR stack", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90318", "url": "https://patchblox.com/security/cve/CVE-2026-90318", "title": "fat: release buffer head after rebuilding parent", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90076", "url": "https://patchblox.com/security/cve/CVE-2026-90076", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: add overflow bounds to quantum an...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89484", "url": "https://patchblox.com/security/cve/CVE-2026-89484", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: fix NULL dereference on lockowner allocat...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93163", "url": "https://patchblox.com/security/cve/CVE-2026-93163", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hwrng: core - fix rng list on registration error...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90063", "url": "https://patchblox.com/security/cve/CVE-2026-90063", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don\u0027t overfl...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90139", "url": "https://patchblox.com/security/cve/CVE-2026-90139", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: check for NULL root inode in fuse_fill_sup...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90140", "url": "https://patchblox.com/security/cve/CVE-2026-90140", "title": "cuse: wait for pending RCU callbacks on module exit", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90248", "url": "https://patchblox.com/security/cve/CVE-2026-90248", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: fix teardown of an adopted p...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93109", "url": "https://patchblox.com/security/cve/CVE-2026-93109", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Drain RCU callbacks during module tea...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89785", "url": "https://patchblox.com/security/cve/CVE-2026-89785", "title": "fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90313", "url": "https://patchblox.com/security/cve/CVE-2026-90313", "title": "bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89983", "url": "https://patchblox.com/security/cve/CVE-2026-89983", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89451", "url": "https://patchblox.com/security/cve/CVE-2026-89451", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Set handle-\u003Edev before the SVA handle...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89502", "url": "https://patchblox.com/security/cve/CVE-2026-89502", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Free cpu_buffer::free_page with sub...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90115", "url": "https://patchblox.com/security/cve/CVE-2026-90115", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xsk: fix NULL pointer dereference in __xsk_rcv()...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90184", "url": "https://patchblox.com/security/cve/CVE-2026-90184", "title": "null_blk: serialize configfs attribute updates with device setup", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90187", "url": "https://patchblox.com/security/cve/CVE-2026-90187", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: null_blk: free zones array on device power-off...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90188", "url": "https://patchblox.com/security/cve/CVE-2026-90188", "title": "null_blk: free global tag_set on init error path", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90201", "url": "https://patchblox.com/security/cve/CVE-2026-90201", "title": "net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90385", "url": "https://patchblox.com/security/cve/CVE-2026-90385", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid1: create serial pool adding rdev to arra...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93134", "url": "https://patchblox.com/security/cve/CVE-2026-93134", "title": "printk: Fix possible console use-after-free", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93182", "url": "https://patchblox.com/security/cve/CVE-2026-93182", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix overflow in update_tg_cfs_runnab...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93150", "url": "https://patchblox.com/security/cve/CVE-2026-93150", "title": "cgroup/cpuset: Make nr_deadline_tasks an atomic_t", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80840", "url": "https://patchblox.com/security/cve/CVE-2026-80840", "title": "ipv6: seg6: clear IPv4 control block on IPIP decapsulation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93117", "url": "https://patchblox.com/security/cve/CVE-2026-93117", "title": "usb: fix UAF when probe runs concurrent to dyn ID removal", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90389", "url": "https://patchblox.com/security/cve/CVE-2026-90389", "title": "md: scope memalloc_noio to allocation critical sections", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90426", "url": "https://patchblox.com/security/cve/CVE-2026-90426", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Free the error IRQ before...", "priority": "High", "severity": "important", "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80824", "url": "https://patchblox.com/security/cve/CVE-2026-80824", "title": "usb: usbfs: fix use-after-free of usb_device in usbdev_release()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80792", "url": "https://patchblox.com/security/cve/CVE-2026-80792", "title": "ipv6: fix use-after-free in ip6_finish_output2()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80808", "url": "https://patchblox.com/security/cve/CVE-2026-80808", "title": "ext4: stop retrying saturated xattr cache entries", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89930", "url": "https://patchblox.com/security/cve/CVE-2026-89930", "title": "KVM: nVMX: Service local TLB flushes on failed nested VM-Enter", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89588", "url": "https://patchblox.com/security/cve/CVE-2026-89588", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: GHES: fix ARM section length account...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89781", "url": "https://patchblox.com/security/cve/CVE-2026-89781", "title": "fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80852", "url": "https://patchblox.com/security/cve/CVE-2026-80852", "title": "tls: device: fix out-of-bounds write in tls_append_frag()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89782", "url": "https://patchblox.com/security/cve/CVE-2026-89782", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89992", "url": "https://patchblox.com/security/cve/CVE-2026-89992", "title": "cpuidle: dt_idle_genpd: kfree() the original name allocation", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89927", "url": "https://patchblox.com/security/cve/CVE-2026-89927", "title": "KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93073", "url": "https://patchblox.com/security/cve/CVE-2026-93073", "title": "dax: read holder_ops once in dax_holder_notify_failure()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80842", "url": "https://patchblox.com/security/cve/CVE-2026-80842", "title": "net: bridge: mcast: fix use-after-free of a master VLAN\u0027s multicast context", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89552", "url": "https://patchblox.com/security/cve/CVE-2026-89552", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: params: fix charp corruption on allocation failu...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93055", "url": "https://patchblox.com/security/cve/CVE-2026-93055", "title": "UDF symlink pathComponent header OOB read", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74672", "url": "https://patchblox.com/security/cve/CVE-2026-74672", "title": "mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92521", "url": "https://patchblox.com/security/cve/CVE-2026-92521", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPI: PCI: Clear driver_data on all paths that f...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93138", "url": "https://patchblox.com/security/cve/CVE-2026-93138", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix vmlinux BTF prep race in bpf_get_btf_vm...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90241", "url": "https://patchblox.com/security/cve/CVE-2026-90241", "title": "iommu/vt-d: Tear down scalable-mode context on probe failure", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89618", "url": "https://patchblox.com/security/cve/CVE-2026-89618", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: eventfs: Initialize ei-\u003Echildren and ei-\u003Elist in...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90199", "url": "https://patchblox.com/security/cve/CVE-2026-90199", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mi_enum_at...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89666", "url": "https://patchblox.com/security/cve/CVE-2026-89666", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range nseconds in NFSv3 SETA...", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80837", "url": "https://patchblox.com/security/cve/CVE-2026-80837", "title": "netfilter: nf_tables: don\u0027t queue packet path object notifications", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90189", "url": "https://patchblox.com/security/cve/CVE-2026-90189", "title": "null_blk: register configfs subsystem after creating default devices", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92509", "url": "https://patchblox.com/security/cve/CVE-2026-92509", "title": "RDMA/core: Fix potential use after free in counter_release()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92512", "url": "https://patchblox.com/security/cve/CVE-2026-92512", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use after free in ib_query_qp()...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89710", "url": "https://patchblox.com/security/cve/CVE-2026-89710", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfs_lay...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93205", "url": "https://patchblox.com/security/cve/CVE-2026-93205", "title": "iommu/arm-smmu-v3: Manage teardown with devm", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90049", "url": "https://patchblox.com/security/cve/CVE-2026-90049", "title": "net: skbuff: don\u0027t skb_tx_error() the source skb in skb_zerocopy()", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80994", "url": "https://patchblox.com/security/cve/CVE-2026-80994", "title": "net: openvswitch: fix flow mask use-after-free on flow deletion", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90203", "url": "https://patchblox.com/security/cve/CVE-2026-90203", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Squashfs: check block offset is not negative If...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89932", "url": "https://patchblox.com/security/cve/CVE-2026-89932", "title": "KVM: nVMX: Always flush vpid02 on first use", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89557", "url": "https://patchblox.com/security/cve/CVE-2026-89557", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb-\u003Ebblog_shift in sup...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89559", "url": "https://patchblox.com/security/cve/CVE-2026-89559", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in __...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89574", "url": "https://patchblox.com/security/cve/CVE-2026-89574", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm array: validate array block headers on read...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89741", "url": "https://patchblox.com/security/cve/CVE-2026-89741", "title": "Revert \u0022media: v4l2-dev: fix error handling in __video_register_device()\u0022", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89823", "url": "https://patchblox.com/security/cve/CVE-2026-89823", "title": "drm: fix race between partial drm_dev_register() failure and ioctl", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89965", "url": "https://patchblox.com/security/cve/CVE-2026-89965", "title": "nvdimm/btt: reject an arena whose nfree is below the lane count", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89988", "url": "https://patchblox.com/security/cve/CVE-2026-89988", "title": "kprobes: Protect kprobe_blacklist with RCU", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89998", "url": "https://patchblox.com/security/cve/CVE-2026-89998", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90358", "url": "https://patchblox.com/security/cve/CVE-2026-90358", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix trampoline stack size for 128-bit...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90388", "url": "https://patchblox.com/security/cve/CVE-2026-90388", "title": "iommu/dma: Check atomic pool allocation result directly", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90392", "url": "https://patchblox.com/security/cve/CVE-2026-90392", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF when reading bpf link inf...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89929", "url": "https://patchblox.com/security/cve/CVE-2026-89929", "title": "KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90227", "url": "https://patchblox.com/security/cve/CVE-2026-90227", "title": "nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80838", "url": "https://patchblox.com/security/cve/CVE-2026-80838", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: keep the last remote linked during FDB fl...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89501", "url": "https://patchblox.com/security/cve/CVE-2026-89501", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpu_buffer::lock when resizing...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93212", "url": "https://patchblox.com/security/cve/CVE-2026-93212", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: guard nfsd_serv deref in nfsd_file_net_dis...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90428", "url": "https://patchblox.com/security/cve/CVE-2026-90428", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don\u0027t run the error ISR be...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89579", "url": "https://patchblox.com/security/cve/CVE-2026-89579", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89777", "url": "https://patchblox.com/security/cve/CVE-2026-89777", "title": "vfio/pci: clear vdev-\u003Emsi_perm after freeing it on init failure", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89997", "url": "https://patchblox.com/security/cve/CVE-2026-89997", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issue...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90071", "url": "https://patchblox.com/security/cve/CVE-2026-90071", "title": "net/sched: sch_teql: restore skb-\u003Edev on the slave failure path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90325", "url": "https://patchblox.com/security/cve/CVE-2026-90325", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: skip dying blkg in blkcg_activate_po...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92507", "url": "https://patchblox.com/security/cve/CVE-2026-92507", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ib_de...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92508", "url": "https://patchblox.com/security/cve/CVE-2026-92508", "title": "RDMA/core: Fix potential use after free in ib_free_cq()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90062", "url": "https://patchblox.com/security/cve/CVE-2026-90062", "title": "netfilter: nf_tables: move hardware offload step after building the chain blob", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89690", "url": "https://patchblox.com/security/cve/CVE-2026-89690", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpc_sta...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89747", "url": "https://patchblox.com/security/cve/CVE-2026-89747", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in trace_pipe read o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89986", "url": "https://patchblox.com/security/cve/CVE-2026-89986", "title": "mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93250", "url": "https://patchblox.com/security/cve/CVE-2026-93250", "title": "vxlan: mdb: Fix use-after-free in vxlan_mdb_flush()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80904", "url": "https://patchblox.com/security/cve/CVE-2026-80904", "title": "net/tls: Fail tls_sw_splice_read() after a failed async decrypt", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93137", "url": "https://patchblox.com/security/cve/CVE-2026-93137", "title": "bpf: Fix use-after-free on mm_struct in bpf_find_vma()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90243", "url": "https://patchblox.com/security/cve/CVE-2026-90243", "title": "iommu/vt-d: Clear Present bit before tearing down copied context entry", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80862", "url": "https://patchblox.com/security/cve/CVE-2026-80862", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix usage of page_frag_cache nvme use...", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93262", "url": "https://patchblox.com/security/cve/CVE-2026-93262", "title": "md/raid5-ppl: fix use-after-free in ppl_do_flush()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89615", "url": "https://patchblox.com/security/cve/CVE-2026-89615", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound page_lcns[] index by the log rec...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93046", "url": "https://patchblox.com/security/cve/CVE-2026-93046", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: software node: Fix software_node_get_reference_a...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93054", "url": "https://patchblox.com/security/cve/CVE-2026-93054", "title": "uio: Fix stale info pointer in failed registration path", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74684", "url": "https://patchblox.com/security/cve/CVE-2026-74684", "title": "net: tap: set skb-\u003Edev before parsing virtio net header in tap_get_user_xdp()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89448", "url": "https://patchblox.com/security/cve/CVE-2026-89448", "title": "iommu/vt-d: Force requesting ACS when tboot is enabled", "priority": "High", "severity": "Moderate", "cvss": 9.3, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74614", "url": "https://patchblox.com/security/cve/CVE-2026-74614", "title": "vsock/virtio: read virtqueues under worker locks", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80536", "url": "https://patchblox.com/security/cve/CVE-2026-80536", "title": "xfs: bounds-check buffer log item\u0027s dirty bitmap", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89744", "url": "https://patchblox.com/security/cve/CVE-2026-89744", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnode_for...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80731", "url": "https://patchblox.com/security/cve/CVE-2026-80731", "title": "net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89743", "url": "https://patchblox.com/security/cve/CVE-2026-89743", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: misc: nsm: bound the device-reported response le...", "priority": "High", "severity": "high", "cvss": 7.7, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74739", "url": "https://patchblox.com/security/cve/CVE-2026-74739", "title": "net/sched: cls_u32: skip hash tables in u32_bind_class()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74748", "url": "https://patchblox.com/security/cve/CVE-2026-74748", "title": "netfilter: ipset: fix refcount race between list:set GC and swap", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89563", "url": "https://patchblox.com/security/cve/CVE-2026-89563", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89617", "url": "https://patchblox.com/security/cve/CVE-2026-89617", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log repla...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74589", "url": "https://patchblox.com/security/cve/CVE-2026-74589", "title": "bpf, sockmap: Fix sk_redir use-after-free in send verdict", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80932", "url": "https://patchblox.com/security/cve/CVE-2026-80932", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order v...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74736", "url": "https://patchblox.com/security/cve/CVE-2026-74736", "title": "net/sched: cls_bpf: reject dev-bound programs bound to a different device", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92522", "url": "https://patchblox.com/security/cve/CVE-2026-92522", "title": "ACPI: processor: validate MADT IOAPIC entry bounds", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74601", "url": "https://patchblox.com/security/cve/CVE-2026-74601", "title": "ring-buffer: Use current_context for safe per-CPU buffer swap", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74667", "url": "https://patchblox.com/security/cve/CVE-2026-74667", "title": "net/packet: reset the MAC header on the packet-socket transmit path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80530", "url": "https://patchblox.com/security/cve/CVE-2026-80530", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing is...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80574", "url": "https://patchblox.com/security/cve/CVE-2026-80574", "title": "Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64520", "url": "https://patchblox.com/security/cve/CVE-2026-64520", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74701", "url": "https://patchblox.com/security/cve/CVE-2026-74701", "title": "net/openvswitch: check Ethernet header length in key_extract()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89580", "url": "https://patchblox.com/security/cve/CVE-2026-89580", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in __bpf_get_stack get_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74753", "url": "https://patchblox.com/security/cve/CVE-2026-74753", "title": "perf: Reject exited events as group leaders", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74334", "url": "https://patchblox.com/security/cve/CVE-2026-74334", "title": "RDMA/nldev: Fix locking when accessing mr-\u003Epd", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74594", "url": "https://patchblox.com/security/cve/CVE-2026-74594", "title": "sched/psi: Shut down rtpoll_timer in psi_cgroup_free()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74610", "url": "https://patchblox.com/security/cve/CVE-2026-74610", "title": "tls: don\u0027t leave a full plaintext sk_msg ring unpushed", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74632", "url": "https://patchblox.com/security/cve/CVE-2026-74632", "title": "mm/huge_memory: fix huge_zero_pfn race", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74635", "url": "https://patchblox.com/security/cve/CVE-2026-74635", "title": "fbdev: bitblit: bound-check glyph index in bit_cursor()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74663", "url": "https://patchblox.com/security/cve/CVE-2026-74663", "title": "net/sched: reject overly deep qdisc hierarchies", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74666", "url": "https://patchblox.com/security/cve/CVE-2026-74666", "title": "packet: synchronize pressure clearing with ring reconfiguration", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74668", "url": "https://patchblox.com/security/cve/CVE-2026-74668", "title": "packet: use consistent hard_header_len in TX_RING send path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74670", "url": "https://patchblox.com/security/cve/CVE-2026-74670", "title": "ipvs: stop estimator after disabled calc phase", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74675", "url": "https://patchblox.com/security/cve/CVE-2026-74675", "title": "vt: stabilize tty reference in kbd_keycode with tty_port_tty_get", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74710", "url": "https://patchblox.com/security/cve/CVE-2026-74710", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata A...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74720", "url": "https://patchblox.com/security/cve/CVE-2026-74720", "title": "bpf: Preserve pointer state for commuted arithmetic", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80737", "url": "https://patchblox.com/security/cve/CVE-2026-80737", "title": "serial: amba-pl011: synchronize DMA teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80977", "url": "https://patchblox.com/security/cve/CVE-2026-80977", "title": "net: skbuff: don\u0027t touch shared zerocopy state in skb_tx_error()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80978", "url": "https://patchblox.com/security/cve/CVE-2026-80978", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunne...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89487", "url": "https://patchblox.com/security/cve/CVE-2026-89487", "title": "openvswitch: only skb_tx_error() a packet we are about to drop", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89540", "url": "https://patchblox.com/security/cve/CVE-2026-89540", "title": "sunrpc: init gssp_lock before publishing proc entry", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89562", "url": "https://patchblox.com/security/cve/CVE-2026-89562", "title": "ip6_gre: fix hardware header length for NBMA tunnels", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89573", "url": "https://patchblox.com/security/cve/CVE-2026-89573", "title": "dm array: reject an array block whose value size is not the caller\u0027s", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89581", "url": "https://patchblox.com/security/cve/CVE-2026-89581", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix per-CPU address resolution into an...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90435", "url": "https://patchblox.com/security/cve/CVE-2026-90435", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix integer overflow of user QP buffe...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93045", "url": "https://patchblox.com/security/cve/CVE-2026-93045", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reject arena frees below the arena base bp...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74630", "url": "https://patchblox.com/security/cve/CVE-2026-74630", "title": "ipv6: prevent in6_dev_get() from resurrecting inet6_dev", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74615", "url": "https://patchblox.com/security/cve/CVE-2026-74615", "title": "vxlan: do not arm the ageing timer on a device that is down", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89488", "url": "https://patchblox.com/security/cve/CVE-2026-89488", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-fre...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89560", "url": "https://patchblox.com/security/cve/CVE-2026-89560", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG fo...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74609", "url": "https://patchblox.com/security/cve/CVE-2026-74609", "title": "tipc: read le-\u003Elink under the node lock in tipc_node_link_down()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74613", "url": "https://patchblox.com/security/cve/CVE-2026-74613", "title": "vsock/virtio: avoid refilling the RX queue after teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74637", "url": "https://patchblox.com/security/cve/CVE-2026-74637", "title": "perf/core: Fix group leader use-after-free after sibling detach", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74656", "url": "https://patchblox.com/security/cve/CVE-2026-74656", "title": "ipv4: fix use-after-free in fib_nhc_update_mtu()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74660", "url": "https://patchblox.com/security/cve/CVE-2026-74660", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt_nflog: pin the NFLOG backend nf_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74700", "url": "https://patchblox.com/security/cve/CVE-2026-74700", "title": "net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74714", "url": "https://patchblox.com/security/cve/CVE-2026-74714", "title": "bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89508", "url": "https://patchblox.com/security/cve/CVE-2026-89508", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_set_ib_path(...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89548", "url": "https://patchblox.com/security/cve/CVE-2026-89548", "title": "SUNRPC: always drain cache_cleaner before destroying a cache_detail", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92510", "url": "https://patchblox.com/security/cve/CVE-2026-92510", "title": "RDMA/core: Fix potential use after free in ib_destroy_srq_user()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92511", "url": "https://patchblox.com/security/cve/CVE-2026-92511", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ib_de...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74726", "url": "https://patchblox.com/security/cve/CVE-2026-74726", "title": "bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89640", "url": "https://patchblox.com/security/cve/CVE-2026-89640", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: fix loff_t underflow in cifs_remap_file_ra...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89691", "url": "https://patchblox.com/security/cve/CVE-2026-89691", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to pre...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74606", "url": "https://patchblox.com/security/cve/CVE-2026-74606", "title": "eventfs: Fix use-after-free in eventfs_remove_rec()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74634", "url": "https://patchblox.com/security/cve/CVE-2026-74634", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when re...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89593", "url": "https://patchblox.com/security/cve/CVE-2026-89593", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hugetlb: only adjust reservation during unmappin...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93229", "url": "https://patchblox.com/security/cve/CVE-2026-93229", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: add missing read barrier to rpc_status_get...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74724", "url": "https://patchblox.com/security/cve/CVE-2026-74724", "title": "ipvs: avoid out-of-bounds write in ip_vs_nat_icmp", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74582", "url": "https://patchblox.com/security/cve/CVE-2026-74582", "title": "packet: use consistent hard_header_len in non-ring send paths", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80572", "url": "https://patchblox.com/security/cve/CVE-2026-80572", "title": "Input: byd - synchronize timer deletion before freeing private data", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89771", "url": "https://patchblox.com/security/cve/CVE-2026-89771", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring bu...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74583", "url": "https://patchblox.com/security/cve/CVE-2026-74583", "title": "net/sched: cls_route: fix fastmap use-after-free on filter", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80578", "url": "https://patchblox.com/security/cve/CVE-2026-80578", "title": "fbdev: core: Fix pointer desynchronization in fb_io_read()", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63858", "url": "https://patchblox.com/security/cve/CVE-2026-63858", "title": "netfilter: nf_tables: add hook transactions for device deletions", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74595", "url": "https://patchblox.com/security/cve/CVE-2026-74595", "title": "fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00092, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89603", "url": "https://patchblox.com/security/cve/CVE-2026-89603", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 9.8, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80726", "url": "https://patchblox.com/security/cve/CVE-2026-80726", "title": "KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page", "priority": "High", "severity": "Moderate", "cvss": 9.3, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89575", "url": "https://patchblox.com/security/cve/CVE-2026-89575", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in bu...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00234, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90393", "url": "https://patchblox.com/security/cve/CVE-2026-90393", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF in bpf_netns_link_update_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90109", "url": "https://patchblox.com/security/cve/CVE-2026-90109", "title": "net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90283", "url": "https://patchblox.com/security/cve/CVE-2026-90283", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: release subpool on fill_super failure...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90138", "url": "https://patchblox.com/security/cve/CVE-2026-90138", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock: don\u0027t check the listener\u0027s sk_err in vsoc...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90157", "url": "https://patchblox.com/security/cve/CVE-2026-90157", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative optlen in cgroup getsockopt...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90015", "url": "https://patchblox.com/security/cve/CVE-2026-90015", "title": "xhci: fix lost bounce buffers on TDs spanning several ring segments", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90202", "url": "https://patchblox.com/security/cve/CVE-2026-90202", "title": "scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89784", "url": "https://patchblox.com/security/cve/CVE-2026-89784", "title": "SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89816", "url": "https://patchblox.com/security/cve/CVE-2026-89816", "title": "drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90072", "url": "https://patchblox.com/security/cve/CVE-2026-90072", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed ov...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90075", "url": "https://patchblox.com/security/cve/CVE-2026-90075", "title": "net/sched: fq_codel: clamp default quantum and mtu", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90218", "url": "https://patchblox.com/security/cve/CVE-2026-90218", "title": "RDMA/cma: Fix WARNING in res_to_rt", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93048", "url": "https://patchblox.com/security/cve/CVE-2026-93048", "title": "mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93140", "url": "https://patchblox.com/security/cve/CVE-2026-93140", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: udf: Mark LVID buffer as uptodate before marking...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90114", "url": "https://patchblox.com/security/cve/CVE-2026-90114", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: bridge: Reject descending VLAN tunnel range...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92524", "url": "https://patchblox.com/security/cve/CVE-2026-92524", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.2, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90054", "url": "https://patchblox.com/security/cve/CVE-2026-90054", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: fix corruption of urgent data on multi-segm...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90434", "url": "https://patchblox.com/security/cve/CVE-2026-90434", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93256", "url": "https://patchblox.com/security/cve/CVE-2026-93256", "title": "arm64: hibernate: mask DAIF before restoring hibernated kernel", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89595", "url": "https://patchblox.com/security/cve/CVE-2026-89595", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix stale object mask after concurrent...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90058", "url": "https://patchblox.com/security/cve/CVE-2026-90058", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: bound qdisc_pkt_len to prevent qdisc...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90416", "url": "https://patchblox.com/security/cve/CVE-2026-90416", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix stack out-of-bounds read in cc_pa...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90290", "url": "https://patchblox.com/security/cve/CVE-2026-90290", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: Restore DAIF state on error S...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90160", "url": "https://patchblox.com/security/cve/CVE-2026-90160", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lwt_bpf: Restore reserved headroom after xmit pr...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90148", "url": "https://patchblox.com/security/cve/CVE-2026-90148", "title": "NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89604", "url": "https://patchblox.com/security/cve/CVE-2026-89604", "title": "efivarfs: Rate limit statfs() handler", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89822", "url": "https://patchblox.com/security/cve/CVE-2026-89822", "title": "drm/i915: Guard against NULL driver_data in i915_pci_probe()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89989", "url": "https://patchblox.com/security/cve/CVE-2026-89989", "title": "ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90053", "url": "https://patchblox.com/security/cve/CVE-2026-90053", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_htb: limit htb_classify inner-cla...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92494", "url": "https://patchblox.com/security/cve/CVE-2026-92494", "title": "ext4: fix buffer_head leak in ext4_init_orphan_info", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89539", "url": "https://patchblox.com/security/cve/CVE-2026-89539", "title": "SUNRPC: reject duplicate CREDS_VALUE options", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89776", "url": "https://patchblox.com/security/cve/CVE-2026-89776", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90185", "url": "https://patchblox.com/security/cve/CVE-2026-90185", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: null_blk: serialize configfs attribute stores wi...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89566", "url": "https://patchblox.com/security/cve/CVE-2026-89566", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: check need_resched() when skipping busy ch...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89567", "url": "https://patchblox.com/security/cve/CVE-2026-89567", "title": "jbd2: bound shrinker scans by examined checkpoint buffers", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90186", "url": "https://patchblox.com/security/cve/CVE-2026-90186", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: null_blk: reject per-device queue resize for sha...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90250", "url": "https://patchblox.com/security/cve/CVE-2026-90250", "title": "bpf, cgroup: Fix storage null-ptr-deref after replacing prog", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90364", "url": "https://patchblox.com/security/cve/CVE-2026-90364", "title": "ACPI: processor: Unregister cpufreq notifier on init failure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89453", "url": "https://patchblox.com/security/cve/CVE-2026-89453", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR fau...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93172", "url": "https://patchblox.com/security/cve/CVE-2026-93172", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: handle alloc_percpu failure in free_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90190", "url": "https://patchblox.com/security/cve/CVE-2026-90190", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: null_blk: use DEFINE_MUTEX for the file-scope mu...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90194", "url": "https://patchblox.com/security/cve/CVE-2026-90194", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: fix bus ID cleanup on device_add() f...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.5, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93268", "url": "https://patchblox.com/security/cve/CVE-2026-93268", "title": "ext4: skip extra isize expansion during mount to prevent deadlock", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92515", "url": "https://patchblox.com/security/cve/CVE-2026-92515", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve unique-field state across nested s...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97547", "url": "https://patchblox.com/security/cve/CVE-2026-97547", "title": "xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90147", "url": "https://patchblox.com/security/cve/CVE-2026-90147", "title": "clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.6, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90159", "url": "https://patchblox.com/security/cve/CVE-2026-90159", "title": "bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.4, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90390", "url": "https://patchblox.com/security/cve/CVE-2026-90390", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/bitmap: resume array on backlog_store() error...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80755", "url": "https://patchblox.com/security/cve/CVE-2026-80755", "title": "selinux: reject a permission value exceeding the class permission count", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89756", "url": "https://patchblox.com/security/cve/CVE-2026-89756", "title": "mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93269", "url": "https://patchblox.com/security/cve/CVE-2026-93269", "title": "ext4: fix circular lock dependency in ext4_ext_migrate", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80830", "url": "https://patchblox.com/security/cve/CVE-2026-80830", "title": "usb: core: Add lock to usb_wakeup_notification()", "priority": "Routine", "severity": "Moderate", "cvss": 6.6, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80793", "url": "https://patchblox.com/security/cve/CVE-2026-80793", "title": "ipv4: reject undersized MTUs in ip_do_fragment()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80781", "url": "https://patchblox.com/security/cve/CVE-2026-80781", "title": "HID: core: fix OOB read of field-\u003Eusage in hid_set_field()", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80765", "url": "https://patchblox.com/security/cve/CVE-2026-80765", "title": "HID: hyperv: validate initial device info bounds", "priority": "Routine", "severity": "Moderate", "cvss": 4.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80805", "url": "https://patchblox.com/security/cve/CVE-2026-80805", "title": "xfs: validate attr entry pointer before field access", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80843", "url": "https://patchblox.com/security/cve/CVE-2026-80843", "title": "xfrm: fix xfrm_state_construct() auth-trunc leak", "priority": "Routine", "severity": "Low", "cvss": 4.4, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89768", "url": "https://patchblox.com/security/cve/CVE-2026-89768", "title": "fs: fix user path of nested backing files", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74683", "url": "https://patchblox.com/security/cve/CVE-2026-74683", "title": "Input: evdev - sanitize event type index when fetching event masks", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93206", "url": "https://patchblox.com/security/cve/CVE-2026-93206", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use file_ns_capable() when checking co...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.4, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93275", "url": "https://patchblox.com/security/cve/CVE-2026-93275", "title": "perf/x86/intel/pt: Fix stop/start with no update", "priority": "Routine", "severity": "Low", "cvss": 2.5, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89525", "url": "https://patchblox.com/security/cve/CVE-2026-89525", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80855", "url": "https://patchblox.com/security/cve/CVE-2026-80855", "title": "fuse: fix invalidate lock leak on open O_TRUNC DAX failure", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80856", "url": "https://patchblox.com/security/cve/CVE-2026-80856", "title": "fuse: fix invalidate lock leak on setattr writeback failure", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80918", "url": "https://patchblox.com/security/cve/CVE-2026-80918", "title": "HID: core: fix number/pointer type confusion on long items", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74740", "url": "https://patchblox.com/security/cve/CVE-2026-74740", "title": "net/sched: act_api: fix TOCTOU NULL deref on a-\u003Egoto_chain", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93110", "url": "https://patchblox.com/security/cve/CVE-2026-93110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Wait for RCU callbacks before unloadi...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74487", "url": "https://patchblox.com/security/cve/CVE-2026-74487", "title": "binfmt_misc: restore write access when removing an entry", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74620", "url": "https://patchblox.com/security/cve/CVE-2026-74620", "title": "net/sched: act_gact, act_police: range check the fallback control action", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74654", "url": "https://patchblox.com/security/cve/CVE-2026-74654", "title": "serial: 8250_dma: Clear stale RX state on shutdown", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74657", "url": "https://patchblox.com/security/cve/CVE-2026-74657", "title": "ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74658", "url": "https://patchblox.com/security/cve/CVE-2026-74658", "title": "futex: Prevent robust futex exit race some more", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74664", "url": "https://patchblox.com/security/cve/CVE-2026-74664", "title": "net: openvswitch: reallocate update replies for mismatched IDs", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74671", "url": "https://patchblox.com/security/cve/CVE-2026-74671", "title": "ima: fix out-of-bounds read in xattr_verify()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74673", "url": "https://patchblox.com/security/cve/CVE-2026-74673", "title": "Input: evdev - fix information leak in evdev_pass_values()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74676", "url": "https://patchblox.com/security/cve/CVE-2026-74676", "title": "vt: add permission check for KDSKBMETA ioctl", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80534", "url": "https://patchblox.com/security/cve/CVE-2026-80534", "title": "xfs: fix ilock leak on error in xfs_dq_get_next_id", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80733", "url": "https://patchblox.com/security/cve/CVE-2026-80733", "title": "net: remove WARN_ON_ONCE() from sk_mc_loop()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80742", "url": "https://patchblox.com/security/cve/CVE-2026-80742", "title": "af_packet: Don\u0027t send zero-byte data in tpacket_snd().", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80963", "url": "https://patchblox.com/security/cve/CVE-2026-80963", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu d...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-81005", "url": "https://patchblox.com/security/cve/CVE-2026-81005", "title": "ipmi: si: Fix NULL pointer dereference after failed registration", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92501", "url": "https://patchblox.com/security/cve/CVE-2026-92501", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: drain in-flight DIO before buffered write...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89753", "url": "https://patchblox.com/security/cve/CVE-2026-89753", "title": "mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89726", "url": "https://patchblox.com/security/cve/CVE-2026-89726", "title": "lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93222", "url": "https://patchblox.com/security/cve/CVE-2026-93222", "title": "signal: avoid shared siginfo namespace rewrites", "priority": "Routine", "severity": "Low", "cvss": 4.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93226", "url": "https://patchblox.com/security/cve/CVE-2026-93226", "title": "ipv6: use RCU iterator to dump route exceptions", "priority": "Routine", "severity": "Moderate", "cvss": 4.2, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89752", "url": "https://patchblox.com/security/cve/CVE-2026-89752", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is s...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80744", "url": "https://patchblox.com/security/cve/CVE-2026-80744", "title": "netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89515", "url": "https://patchblox.com/security/cve/CVE-2026-89515", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fill in DMA padding bytes in scsi_al...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93213", "url": "https://patchblox.com/security/cve/CVE-2026-93213", "title": "of: fix out-of-bounds read in of_alias_scan() stem parser", "priority": "Routine", "severity": "Low", "cvss": 3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89683", "url": "https://patchblox.com/security/cve/CVE-2026-89683", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dentry ref leak on V4ROOT export fileh...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.5, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80529", "url": "https://patchblox.com/security/cve/CVE-2026-80529", "title": "xfs: don\u0027t swallow dquot recovery verification errors", "priority": "Routine", "severity": "Moderate", "cvss": 6.3, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74636", "url": "https://patchblox.com/security/cve/CVE-2026-74636", "title": "tracing: Fix race between update_event_fields and, event_define_fields", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74722", "url": "https://patchblox.com/security/cve/CVE-2026-74722", "title": "btrfs: fix memory leak in btrfs_do_encoded_write()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80739", "url": "https://patchblox.com/security/cve/CVE-2026-80739", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is PEER before acqu...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80806", "url": "https://patchblox.com/security/cve/CVE-2026-80806", "title": "ext4: don\u0027t enable DAX on new encrypted files", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92523", "url": "https://patchblox.com/security/cve/CVE-2026-92523", "title": "RDMA/nldev: validate dynamic counter attribute length", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93210", "url": "https://patchblox.com/security/cve/CVE-2026-93210", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: harden DFS cache against invalid ta...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80784", "url": "https://patchblox.com/security/cve/CVE-2026-80784", "title": "mptcp: pm: fix memory leak from alloc-during-teardown race", "priority": "Routine", "severity": "Low", "cvss": 4.4, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89565", "url": "https://patchblox.com/security/cve/CVE-2026-89565", "title": "ipip: fix skb leak in collect_md mode when metadata_dst allocation fails", "priority": "Routine", "severity": "Low", "cvss": 3.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93174", "url": "https://patchblox.com/security/cve/CVE-2026-93174", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Copy per-CPU map value padding in copy_map_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80727", "url": "https://patchblox.com/security/cve/CVE-2026-80727", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling timer before CMCI di...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.4, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74483", "url": "https://patchblox.com/security/cve/CVE-2026-74483", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don\u0027t leak the user namespace when...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74602", "url": "https://patchblox.com/security/cve/CVE-2026-74602", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rb_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74618", "url": "https://patchblox.com/security/cve/CVE-2026-74618", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don\u0027t warn when the mount is comple...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74619", "url": "https://patchblox.com/security/cve/CVE-2026-74619", "title": "ovl: don\u0027t warn when the mount is completed from another user namespace", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74653", "url": "https://patchblox.com/security/cve/CVE-2026-74653", "title": "serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74718", "url": "https://patchblox.com/security/cve/CVE-2026-74718", "title": "devlink: fix net namespace reference leak in reload", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80845", "url": "https://patchblox.com/security/cve/CVE-2026-80845", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: avoid lock inversion in nat keepalive work...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90400", "url": "https://patchblox.com/security/cve/CVE-2026-90400", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md: recheck spare changes before starting sync...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92502", "url": "https://patchblox.com/security/cve/CVE-2026-92502", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: clear stale xarray tags on folios skipped...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90275", "url": "https://patchblox.com/security/cve/CVE-2026-90275", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid1: don\u0027t set array_frozen in raid1_takeov...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93173", "url": "https://patchblox.com/security/cve/CVE-2026-93173", "title": "bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93211", "url": "https://patchblox.com/security/cve/CVE-2026-93211", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize DRC hash table before registeri...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90178", "url": "https://patchblox.com/security/cve/CVE-2026-90178", "title": "hwmon: (coretemp) Fix core_data leak on CPUs without PTS", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80757", "url": "https://patchblox.com/security/cve/CVE-2026-80757", "title": "selinux: reject a class permission count below its inherited common", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80756", "url": "https://patchblox.com/security/cve/CVE-2026-80756", "title": "selinux: do not cancel a policy conversion that never started", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80906", "url": "https://patchblox.com/security/cve/CVE-2026-80906", "title": "net: packet: fix wrong transport_header when sending VLAN-tagged frame", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80912", "url": "https://patchblox.com/security/cve/CVE-2026-80912", "title": "selinux: reject an unclaimed class value in security_get_classes()", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80913", "url": "https://patchblox.com/security/cve/CVE-2026-80913", "title": "selinux: require every boolean value to be defined", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98164", "url": "https://patchblox.com/security/cve/CVE-2026-98164", "title": "KVM: x86/mmu: Check write tracking in all address spaces", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-100070", "url": "https://patchblox.com/security/cve/CVE-2026-100070", "title": "netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T07:50:38Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }