{ "fix": "ALAS2023-2026-3197", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3197", "summary": "ALAS2023-2026-3197, released November 7, 2026, fixes 202 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 18 packages", "released": "2026-11-07T01:06:07Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-99999, rated Critical", "supported": true, "cveCount": 202, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00841, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-3197.html", "appliesTo": [ { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "bpftool-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "kernel", "productUrl": "https://patchblox.com/security/product/linux/kernel", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "kernel-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "kernel-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "kernel-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel-headers", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.1.188-233.385", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.188-233.385", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "kernel-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "kernel-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "kernel-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "kernel-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "perf", "productUrl": "https://patchblox.com/security/product/linux/perf", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "python3-perf", "productUrl": "https://patchblox.com/security/product/linux/python3-perf", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true }, { "product": "python3-perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.188-233.385.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-99999", "url": "https://patchblox.com/security/cve/CVE-2026-99999", "title": "ipv4: validate checksum_start before completing checksum", "priority": "Urgent", "severity": "Critical", "cvss": 9.3, "epss": 0.00788, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90151", "url": "https://patchblox.com/security/cve/CVE-2026-90151", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client alloc...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00749, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72323", "url": "https://patchblox.com/security/cve/CVE-2026-72323", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68476", "url": "https://patchblox.com/security/cve/CVE-2026-68476", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80976", "url": "https://patchblox.com/security/cve/CVE-2026-80976", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation deca...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89485", "url": "https://patchblox.com/security/cve/CVE-2026-89485", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlm_inspect_file loc...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89655", "url": "https://patchblox.com/security/cve/CVE-2026-89655", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in __kick_flushing_caps() on cf en...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89712", "url": "https://patchblox.com/security/cve/CVE-2026-89712", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc_expire_umount walk after dropp...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89783", "url": "https://patchblox.com/security/cve/CVE-2026-89783", "title": "xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89778", "url": "https://patchblox.com/security/cve/CVE-2026-89778", "title": "isofs: fix out-of-bounds page array access on empty zisofs block", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89555", "url": "https://patchblox.com/security/cve/CVE-2026-89555", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mpls: reload header after pskb_may_pull() mpls_...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89634", "url": "https://patchblox.com/security/cve/CVE-2026-89634", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix ALIGN() overflow in symlink_dat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00693, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89636", "url": "https://patchblox.com/security/cve/CVE-2026-89636", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: clear ce-\u003Etgthint in free_tgts() W...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00663, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90110", "url": "https://patchblox.com/security/cve/CVE-2026-90110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: inetpeer: randomize RB-tree node comparison usin...", "priority": "Urgent", "severity": "critical", "cvss": 9.4, "epss": 0.00612, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89478", "url": "https://patchblox.com/security/cve/CVE-2026-89478", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: drop a chunk if its transport was removed...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89541", "url": "https://patchblox.com/security/cve/CVE-2026-89541", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_unwrap_resp_priv length check...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89542", "url": "https://patchblox.com/security/cve/CVE-2026-89542", "title": "SUNRPC: harden gss_krb5_unwrap_v2 against short tokens", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89551", "url": "https://patchblox.com/security/cve/CVE-2026-89551", "title": "SUNRPC: xdr_buf_trim: clamp buf-\u003Elen to avoid underflow", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89653", "url": "https://patchblox.com/security/cve/CVE-2026-89653", "title": "ceph: reject export_targets ranks \u003E= CEPH_MAX_MDS in mdsmap decode", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89479", "url": "https://patchblox.com/security/cve/CVE-2026-89479", "title": "sctp: stop processing a packet once its association is deleted", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64025", "url": "https://patchblox.com/security/cve/CVE-2026-64025", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing wit...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00369, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80671", "url": "https://patchblox.com/security/cve/CVE-2026-80671", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix register_pid() overflow, strcpy,...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64078", "url": "https://patchblox.com/security/cve/CVE-2026-64078", "title": "netfilter: x_tables: add and use xtables_unregister_table_exit", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64079", "url": "https://patchblox.com/security/cve/CVE-2026-64079", "title": "netfilter: x_tables: allocate hook ops while under mutex", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90011", "url": "https://patchblox.com/security/cve/CVE-2026-90011", "title": "scsi: target: iscsi: Reserve a terminator byte for the login payload", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00841, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89696", "url": "https://patchblox.com/security/cve/CVE-2026-89696", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH t...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00752, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74268", "url": "https://patchblox.com/security/cve/CVE-2026-74268", "title": "tcp: clear sock_ops cb flags before force-closing a child socket", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89482", "url": "https://patchblox.com/security/cve/CVE-2026-89482", "title": "nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89538", "url": "https://patchblox.com/security/cve/CVE-2026-89538", "title": "SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89643", "url": "https://patchblox.com/security/cve/CVE-2026-89643", "title": "audit: avoid dropping live tree ref on fsnotify rule autoremove", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89549", "url": "https://patchblox.com/security/cve/CVE-2026-89549", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: route to a populated pool in svc_pool_fo...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00707, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89779", "url": "https://patchblox.com/security/cve/CVE-2026-89779", "title": "fs/ntfs3: validate ef-\u003Esize covers the record\u0027s name and value", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89786", "url": "https://patchblox.com/security/cve/CVE-2026-89786", "title": "ext4: fix out-of-bounds read in ext4_read_inline_dir()", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00697, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89476", "url": "https://patchblox.com/security/cve/CVE-2026-89476", "title": "sctp: fix stream-\u003Eoutcnt underflow on duplicate RECONF responses", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90102", "url": "https://patchblox.com/security/cve/CVE-2026-90102", "title": "NFSv4/pnfs: key the data server cache on the NFS version", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90103", "url": "https://patchblox.com/security/cve/CVE-2026-90103", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97557", "url": "https://patchblox.com/security/cve/CVE-2026-97557", "title": "smb: client: avoid leaking refcount in cifs_queue_oplock_break()", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89662", "url": "https://patchblox.com/security/cve/CVE-2026-89662", "title": "NFSD: Prevent lock owner use-after-free during client teardown", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89669", "url": "https://patchblox.com/security/cve/CVE-2026-89669", "title": "nfsd: initialize copy-notify stateid before publishing it", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90067", "url": "https://patchblox.com/security/cve/CVE-2026-90067", "title": "libceph: validate banner payload length", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0068, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89649", "url": "https://patchblox.com/security/cve/CVE-2026-89649", "title": "ceph: bound xattr value length in __build_xattrs()", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00678, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89973", "url": "https://patchblox.com/security/cve/CVE-2026-89973", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: check the data direction of a C2HData...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00615, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89586", "url": "https://patchblox.com/security/cve/CVE-2026-89586", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: fix DSM TRIM for sector sizes...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00615, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89554", "url": "https://patchblox.com/security/cve/CVE-2026-89554", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: fix uninitialized local_id in syncookie M...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00598, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89483", "url": "https://patchblox.com/security/cve/CVE-2026-89483", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme: zero the discard fallback page nvme_setup...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00571, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89706", "url": "https://patchblox.com/security/cve/CVE-2026-89706", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY write...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00526, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89704", "url": "https://patchblox.com/security/cve/CVE-2026-89704", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00526, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-81002", "url": "https://patchblox.com/security/cve/CVE-2026-81002", "title": "xdp: fix zero-copy frame layout", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89656", "url": "https://patchblox.com/security/cve/CVE-2026-89656", "title": "libceph: reject buckets with mismatched CRUSH ids", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89650", "url": "https://patchblox.com/security/cve/CVE-2026-89650", "title": "ceph: bound num_export_targets array for mds info v2/v3", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89684", "url": "https://patchblox.com/security/cve/CVE-2026-89684", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4_init_cp_sta...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89477", "url": "https://patchblox.com/security/cve/CVE-2026-89477", "title": "sctp: fix NULL deref on untransmitted RECONF completion", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89699", "url": "https://patchblox.com/security/cve/CVE-2026-89699", "title": "nfsd: validate symlink target length in NFSv4 CREATE", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74474", "url": "https://patchblox.com/security/cve/CVE-2026-74474", "title": "vxlan: use pskb_network_may_pull() for transmit path header pulls", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89663", "url": "https://patchblox.com/security/cve/CVE-2026-89663", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before droppin...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90141", "url": "https://patchblox.com/security/cve/CVE-2026-90141", "title": "ipvs: fix integer overflow in ftp helper port/address parsing", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00445, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89711", "url": "https://patchblox.com/security/cve/CVE-2026-89711", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89481", "url": "https://patchblox.com/security/cve/CVE-2026-89481", "title": "nvme-tcp: fix host memory disclosure on R2T for a read command", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89480", "url": "https://patchblox.com/security/cve/CVE-2026-89480", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89616", "url": "https://patchblox.com/security/cve/CVE-2026-89616", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix info-leak on partial LZNT decompre...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64210", "url": "https://patchblox.com/security/cve/CVE-2026-64210", "title": "net/mlx5e: xsk: Fix unlocked writing to ICOSQ", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90329", "url": "https://patchblox.com/security/cve/CVE-2026-90329", "title": "HID: synchronize input before cleaning up a failed probe", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93189", "url": "https://patchblox.com/security/cve/CVE-2026-93189", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: core: quiesce input in hid_hw_stop() to pre...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00321, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89694", "url": "https://patchblox.com/security/cve/CVE-2026-89694", "title": "nfsd: check client ownership when cancelling a copy-notify stateid", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90073", "url": "https://patchblox.com/security/cve/CVE-2026-90073", "title": "net/sched: hhf: clamp quantum before hhf_change() to avoid overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90081", "url": "https://patchblox.com/security/cve/CVE-2026-90081", "title": "net/rds: use wq_has_sleeper() in rds_cong_map_updated()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90284", "url": "https://patchblox.com/security/cve/CVE-2026-90284", "title": "firmware_loader: do not queue completed sysfs fallback requests", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90334", "url": "https://patchblox.com/security/cve/CVE-2026-90334", "title": "tty: clear cdev pointer after cdev_add() failure", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89984", "url": "https://patchblox.com/security/cve/CVE-2026-89984", "title": "perf/x86/intel: Fix kernel address leakages in LBR stack", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90318", "url": "https://patchblox.com/security/cve/CVE-2026-90318", "title": "fat: release buffer head after rebuilding parent", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90063", "url": "https://patchblox.com/security/cve/CVE-2026-90063", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don\u0027t overfl...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90140", "url": "https://patchblox.com/security/cve/CVE-2026-90140", "title": "cuse: wait for pending RCU callbacks on module exit", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90248", "url": "https://patchblox.com/security/cve/CVE-2026-90248", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: fix teardown of an adopted p...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93109", "url": "https://patchblox.com/security/cve/CVE-2026-93109", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Drain RCU callbacks during module tea...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89785", "url": "https://patchblox.com/security/cve/CVE-2026-89785", "title": "fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89983", "url": "https://patchblox.com/security/cve/CVE-2026-89983", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix debugfs UAF on adapter removal i...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90184", "url": "https://patchblox.com/security/cve/CVE-2026-90184", "title": "null_blk: serialize configfs attribute updates with device setup", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90188", "url": "https://patchblox.com/security/cve/CVE-2026-90188", "title": "null_blk: free global tag_set on init error path", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93182", "url": "https://patchblox.com/security/cve/CVE-2026-93182", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix overflow in update_tg_cfs_runnab...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80840", "url": "https://patchblox.com/security/cve/CVE-2026-80840", "title": "ipv6: seg6: clear IPv4 control block on IPIP decapsulation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93117", "url": "https://patchblox.com/security/cve/CVE-2026-93117", "title": "usb: fix UAF when probe runs concurrent to dyn ID removal", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80824", "url": "https://patchblox.com/security/cve/CVE-2026-80824", "title": "usb: usbfs: fix use-after-free of usb_device in usbdev_release()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89930", "url": "https://patchblox.com/security/cve/CVE-2026-89930", "title": "KVM: nVMX: Service local TLB flushes on failed nested VM-Enter", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89781", "url": "https://patchblox.com/security/cve/CVE-2026-89781", "title": "fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80852", "url": "https://patchblox.com/security/cve/CVE-2026-80852", "title": "tls: device: fix out-of-bounds write in tls_append_frag()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89782", "url": "https://patchblox.com/security/cve/CVE-2026-89782", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject restart table growth beyond U16...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89992", "url": "https://patchblox.com/security/cve/CVE-2026-89992", "title": "cpuidle: dt_idle_genpd: kfree() the original name allocation", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89927", "url": "https://patchblox.com/security/cve/CVE-2026-89927", "title": "KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93073", "url": "https://patchblox.com/security/cve/CVE-2026-93073", "title": "dax: read holder_ops once in dax_holder_notify_failure()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80842", "url": "https://patchblox.com/security/cve/CVE-2026-80842", "title": "net: bridge: mcast: fix use-after-free of a master VLAN\u0027s multicast context", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93055", "url": "https://patchblox.com/security/cve/CVE-2026-93055", "title": "UDF symlink pathComponent header OOB read", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92521", "url": "https://patchblox.com/security/cve/CVE-2026-92521", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPI: PCI: Clear driver_data on all paths that f...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93138", "url": "https://patchblox.com/security/cve/CVE-2026-93138", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix vmlinux BTF prep race in bpf_get_btf_vm...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90189", "url": "https://patchblox.com/security/cve/CVE-2026-90189", "title": "null_blk: register configfs subsystem after creating default devices", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92509", "url": "https://patchblox.com/security/cve/CVE-2026-92509", "title": "RDMA/core: Fix potential use after free in counter_release()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92512", "url": "https://patchblox.com/security/cve/CVE-2026-92512", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix use after free in ib_query_qp()...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89710", "url": "https://patchblox.com/security/cve/CVE-2026-89710", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfs_lay...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90049", "url": "https://patchblox.com/security/cve/CVE-2026-90049", "title": "net: skbuff: don\u0027t skb_tx_error() the source skb in skb_zerocopy()", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80994", "url": "https://patchblox.com/security/cve/CVE-2026-80994", "title": "net: openvswitch: fix flow mask use-after-free on flow deletion", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90203", "url": "https://patchblox.com/security/cve/CVE-2026-90203", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Squashfs: check block offset is not negative If...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89932", "url": "https://patchblox.com/security/cve/CVE-2026-89932", "title": "KVM: nVMX: Always flush vpid02 on first use", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89557", "url": "https://patchblox.com/security/cve/CVE-2026-89557", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md: do overflow check for sb-\u003Ebblog_shift in sup...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89559", "url": "https://patchblox.com/security/cve/CVE-2026-89559", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libnvdimm/labels: Prevent integer overflow in __...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89741", "url": "https://patchblox.com/security/cve/CVE-2026-89741", "title": "Revert \u0022media: v4l2-dev: fix error handling in __video_register_device()\u0022", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89823", "url": "https://patchblox.com/security/cve/CVE-2026-89823", "title": "drm: fix race between partial drm_dev_register() failure and ioctl", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89965", "url": "https://patchblox.com/security/cve/CVE-2026-89965", "title": "nvdimm/btt: reject an arena whose nfree is below the lane count", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89988", "url": "https://patchblox.com/security/cve/CVE-2026-89988", "title": "kprobes: Protect kprobe_blacklist with RCU", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89998", "url": "https://patchblox.com/security/cve/CVE-2026-89998", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90388", "url": "https://patchblox.com/security/cve/CVE-2026-90388", "title": "iommu/dma: Check atomic pool allocation result directly", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89579", "url": "https://patchblox.com/security/cve/CVE-2026-89579", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89777", "url": "https://patchblox.com/security/cve/CVE-2026-89777", "title": "vfio/pci: clear vdev-\u003Emsi_perm after freeing it on init failure", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89997", "url": "https://patchblox.com/security/cve/CVE-2026-89997", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: fix resume-vs-remove race If the user issue...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90071", "url": "https://patchblox.com/security/cve/CVE-2026-90071", "title": "net/sched: sch_teql: restore skb-\u003Edev on the slave failure path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92507", "url": "https://patchblox.com/security/cve/CVE-2026-92507", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ib_de...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92508", "url": "https://patchblox.com/security/cve/CVE-2026-92508", "title": "RDMA/core: Fix potential use after free in ib_free_cq()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90062", "url": "https://patchblox.com/security/cve/CVE-2026-90062", "title": "netfilter: nf_tables: move hardware offload step after building the chain blob", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93137", "url": "https://patchblox.com/security/cve/CVE-2026-93137", "title": "bpf: Fix use-after-free on mm_struct in bpf_find_vma()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93262", "url": "https://patchblox.com/security/cve/CVE-2026-93262", "title": "md/raid5-ppl: fix use-after-free in ppl_do_flush()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89615", "url": "https://patchblox.com/security/cve/CVE-2026-89615", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound page_lcns[] index by the log rec...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93046", "url": "https://patchblox.com/security/cve/CVE-2026-93046", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: software node: Fix software_node_get_reference_a...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93054", "url": "https://patchblox.com/security/cve/CVE-2026-93054", "title": "uio: Fix stale info pointer in failed registration path", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89744", "url": "https://patchblox.com/security/cve/CVE-2026-89744", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnode_for...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89563", "url": "https://patchblox.com/security/cve/CVE-2026-89563", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89617", "url": "https://patchblox.com/security/cve/CVE-2026-89617", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate dirty page table on log repla...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80932", "url": "https://patchblox.com/security/cve/CVE-2026-80932", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order v...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92522", "url": "https://patchblox.com/security/cve/CVE-2026-92522", "title": "ACPI: processor: validate MADT IOAPIC entry bounds", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74334", "url": "https://patchblox.com/security/cve/CVE-2026-74334", "title": "RDMA/nldev: Fix locking when accessing mr-\u003Epd", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80977", "url": "https://patchblox.com/security/cve/CVE-2026-80977", "title": "net: skbuff: don\u0027t touch shared zerocopy state in skb_tx_error()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80978", "url": "https://patchblox.com/security/cve/CVE-2026-80978", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunne...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89487", "url": "https://patchblox.com/security/cve/CVE-2026-89487", "title": "openvswitch: only skb_tx_error() a packet we are about to drop", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89540", "url": "https://patchblox.com/security/cve/CVE-2026-89540", "title": "sunrpc: init gssp_lock before publishing proc entry", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89562", "url": "https://patchblox.com/security/cve/CVE-2026-89562", "title": "ip6_gre: fix hardware header length for NBMA tunnels", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89573", "url": "https://patchblox.com/security/cve/CVE-2026-89573", "title": "dm array: reject an array block whose value size is not the caller\u0027s", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90435", "url": "https://patchblox.com/security/cve/CVE-2026-90435", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix integer overflow of user QP buffe...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89488", "url": "https://patchblox.com/security/cve/CVE-2026-89488", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: openvswitch: Fix CT limit teardown use-after-fre...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89560", "url": "https://patchblox.com/security/cve/CVE-2026-89560", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG fo...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89508", "url": "https://patchblox.com/security/cve/CVE-2026-89508", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_set_ib_path(...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89548", "url": "https://patchblox.com/security/cve/CVE-2026-89548", "title": "SUNRPC: always drain cache_cleaner before destroying a cache_detail", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92510", "url": "https://patchblox.com/security/cve/CVE-2026-92510", "title": "RDMA/core: Fix potential use after free in ib_destroy_srq_user()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92511", "url": "https://patchblox.com/security/cve/CVE-2026-92511", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ib_de...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89640", "url": "https://patchblox.com/security/cve/CVE-2026-89640", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: fix loff_t underflow in cifs_remap_file_ra...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63858", "url": "https://patchblox.com/security/cve/CVE-2026-63858", "title": "netfilter: nf_tables: add hook transactions for device deletions", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89603", "url": "https://patchblox.com/security/cve/CVE-2026-89603", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 9.8, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89575", "url": "https://patchblox.com/security/cve/CVE-2026-89575", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm raid1: reserve space for NUL-terminator in bu...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00234, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90393", "url": "https://patchblox.com/security/cve/CVE-2026-90393", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF in bpf_netns_link_update_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90283", "url": "https://patchblox.com/security/cve/CVE-2026-90283", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hugetlbfs: release subpool on fill_super failure...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00227, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90157", "url": "https://patchblox.com/security/cve/CVE-2026-90157", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reject negative optlen in cgroup getsockopt...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90015", "url": "https://patchblox.com/security/cve/CVE-2026-90015", "title": "xhci: fix lost bounce buffers on TDs spanning several ring segments", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90202", "url": "https://patchblox.com/security/cve/CVE-2026-90202", "title": "scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89784", "url": "https://patchblox.com/security/cve/CVE-2026-89784", "title": "SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89816", "url": "https://patchblox.com/security/cve/CVE-2026-89816", "title": "drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90072", "url": "https://patchblox.com/security/cve/CVE-2026-90072", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed ov...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90075", "url": "https://patchblox.com/security/cve/CVE-2026-90075", "title": "net/sched: fq_codel: clamp default quantum and mtu", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90218", "url": "https://patchblox.com/security/cve/CVE-2026-90218", "title": "RDMA/cma: Fix WARNING in res_to_rt", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93140", "url": "https://patchblox.com/security/cve/CVE-2026-93140", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: udf: Mark LVID buffer as uptodate before marking...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90114", "url": "https://patchblox.com/security/cve/CVE-2026-90114", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: bridge: Reject descending VLAN tunnel range...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92524", "url": "https://patchblox.com/security/cve/CVE-2026-92524", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.2, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90054", "url": "https://patchblox.com/security/cve/CVE-2026-90054", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: fix corruption of urgent data on multi-segm...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90434", "url": "https://patchblox.com/security/cve/CVE-2026-90434", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: isofs: release zisofs block pointer buffer head...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93256", "url": "https://patchblox.com/security/cve/CVE-2026-93256", "title": "arm64: hibernate: mask DAIF before restoring hibernated kernel", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89595", "url": "https://patchblox.com/security/cve/CVE-2026-89595", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix stale object mask after concurrent...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90058", "url": "https://patchblox.com/security/cve/CVE-2026-90058", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: bound qdisc_pkt_len to prevent qdisc...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90416", "url": "https://patchblox.com/security/cve/CVE-2026-90416", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix stack out-of-bounds read in cc_pa...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90290", "url": "https://patchblox.com/security/cve/CVE-2026-90290", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: Restore DAIF state on error S...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90160", "url": "https://patchblox.com/security/cve/CVE-2026-90160", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lwt_bpf: Restore reserved headroom after xmit pr...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89604", "url": "https://patchblox.com/security/cve/CVE-2026-89604", "title": "efivarfs: Rate limit statfs() handler", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89822", "url": "https://patchblox.com/security/cve/CVE-2026-89822", "title": "drm/i915: Guard against NULL driver_data in i915_pci_probe()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89989", "url": "https://patchblox.com/security/cve/CVE-2026-89989", "title": "ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90053", "url": "https://patchblox.com/security/cve/CVE-2026-90053", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_htb: limit htb_classify inner-cla...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92494", "url": "https://patchblox.com/security/cve/CVE-2026-92494", "title": "ext4: fix buffer_head leak in ext4_init_orphan_info", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89776", "url": "https://patchblox.com/security/cve/CVE-2026-89776", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: vnifilter: enforce exact length of GROUP/...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90185", "url": "https://patchblox.com/security/cve/CVE-2026-90185", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: null_blk: serialize configfs attribute stores wi...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90186", "url": "https://patchblox.com/security/cve/CVE-2026-90186", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: null_blk: reject per-device queue resize for sha...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90190", "url": "https://patchblox.com/security/cve/CVE-2026-90190", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: null_blk: use DEFINE_MUTEX for the file-scope mu...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90194", "url": "https://patchblox.com/security/cve/CVE-2026-90194", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPI: scan: fix bus ID cleanup on device_add() f...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.5, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93268", "url": "https://patchblox.com/security/cve/CVE-2026-93268", "title": "ext4: skip extra isize expansion during mount to prevent deadlock", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89756", "url": "https://patchblox.com/security/cve/CVE-2026-89756", "title": "mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80830", "url": "https://patchblox.com/security/cve/CVE-2026-80830", "title": "usb: core: Add lock to usb_wakeup_notification()", "priority": "Routine", "severity": "Moderate", "cvss": 6.6, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80843", "url": "https://patchblox.com/security/cve/CVE-2026-80843", "title": "xfrm: fix xfrm_state_construct() auth-trunc leak", "priority": "Routine", "severity": "Low", "cvss": 4.4, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93206", "url": "https://patchblox.com/security/cve/CVE-2026-93206", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI/proc: Use file_ns_capable() when checking co...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.4, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89525", "url": "https://patchblox.com/security/cve/CVE-2026-89525", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80855", "url": "https://patchblox.com/security/cve/CVE-2026-80855", "title": "fuse: fix invalidate lock leak on open O_TRUNC DAX failure", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80856", "url": "https://patchblox.com/security/cve/CVE-2026-80856", "title": "fuse: fix invalidate lock leak on setattr writeback failure", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93110", "url": "https://patchblox.com/security/cve/CVE-2026-93110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Wait for RCU callbacks before unloadi...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80963", "url": "https://patchblox.com/security/cve/CVE-2026-80963", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-stats: fix a crash if allocation of per-cpu d...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-81005", "url": "https://patchblox.com/security/cve/CVE-2026-81005", "title": "ipmi: si: Fix NULL pointer dereference after failed registration", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92501", "url": "https://patchblox.com/security/cve/CVE-2026-92501", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: drain in-flight DIO before buffered write...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89753", "url": "https://patchblox.com/security/cve/CVE-2026-89753", "title": "mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89726", "url": "https://patchblox.com/security/cve/CVE-2026-89726", "title": "lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93222", "url": "https://patchblox.com/security/cve/CVE-2026-93222", "title": "signal: avoid shared siginfo namespace rewrites", "priority": "Routine", "severity": "Low", "cvss": 4.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93226", "url": "https://patchblox.com/security/cve/CVE-2026-93226", "title": "ipv6: use RCU iterator to dump route exceptions", "priority": "Routine", "severity": "Moderate", "cvss": 4.2, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89752", "url": "https://patchblox.com/security/cve/CVE-2026-89752", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is s...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89515", "url": "https://patchblox.com/security/cve/CVE-2026-89515", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fill in DMA padding bytes in scsi_al...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93213", "url": "https://patchblox.com/security/cve/CVE-2026-93213", "title": "of: fix out-of-bounds read in of_alias_scan() stem parser", "priority": "Routine", "severity": "Low", "cvss": 3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80806", "url": "https://patchblox.com/security/cve/CVE-2026-80806", "title": "ext4: don\u0027t enable DAX on new encrypted files", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92523", "url": "https://patchblox.com/security/cve/CVE-2026-92523", "title": "RDMA/nldev: validate dynamic counter attribute length", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93210", "url": "https://patchblox.com/security/cve/CVE-2026-93210", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: harden DFS cache against invalid ta...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80784", "url": "https://patchblox.com/security/cve/CVE-2026-80784", "title": "mptcp: pm: fix memory leak from alloc-during-teardown race", "priority": "Routine", "severity": "Low", "cvss": 4.4, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89565", "url": "https://patchblox.com/security/cve/CVE-2026-89565", "title": "ipip: fix skb leak in collect_md mode when metadata_dst allocation fails", "priority": "Routine", "severity": "Low", "cvss": 3.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80912", "url": "https://patchblox.com/security/cve/CVE-2026-80912", "title": "selinux: reject an unclaimed class value in security_get_classes()", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98164", "url": "https://patchblox.com/security/cve/CVE-2026-98164", "title": "KVM: x86/mmu: Check write tracking in all address spaces", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-100070", "url": "https://patchblox.com/security/cve/CVE-2026-100070", "title": "netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T20:03:11Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }