# ALAS2023-2026-3197: Security update for 18 packages

ALAS2023-2026-3197, released November 7, 2026, fixes 202 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/alas2023-2026-3197
- Platform: Linux
- Released: Nov 7, 2026
- Priority: Urgent (Closes CVE-2026-99999, rated Critical)
- CVEs: 202, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://alas.aws.amazon.com/AL2023/ALAS-2026-3197.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [bpftool-debuginfo](https://patchblox.com/security/data/product/linux/bpftool-debuginfo.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel](https://patchblox.com/security/data/product/linux/kernel.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-debuginfo](https://patchblox.com/security/data/product/linux/kernel-debuginfo.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-debuginfo-common-aarch64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-aarch64.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-debuginfo-common-x86_64](https://patchblox.com/security/data/product/linux/kernel-debuginfo-common-x86-64.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-devel](https://patchblox.com/security/data/product/linux/kernel-devel.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-headers](https://patchblox.com/security/data/product/linux/kernel-headers.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-livepatch-6.1.188-233.385](https://patchblox.com/security/data/product/linux/kernel-livepatch-6.1.188-233.385.md) | amzn 2023 | 1:1.0-0.amzn2023 |
| [kernel-modules-extra](https://patchblox.com/security/data/product/linux/kernel-modules-extra.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-modules-extra-common](https://patchblox.com/security/data/product/linux/kernel-modules-extra-common.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-tools](https://patchblox.com/security/data/product/linux/kernel-tools.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-tools-debuginfo](https://patchblox.com/security/data/product/linux/kernel-tools-debuginfo.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [kernel-tools-devel](https://patchblox.com/security/data/product/linux/kernel-tools-devel.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [perf](https://patchblox.com/security/data/product/linux/perf.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [perf-debuginfo](https://patchblox.com/security/data/product/linux/perf-debuginfo.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [python3-perf](https://patchblox.com/security/data/product/linux/python3-perf.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |
| [python3-perf-debuginfo](https://patchblox.com/security/data/product/linux/python3-perf-debuginfo.md) | amzn 2023 | 1:6.1.188-233.385.amzn2023 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-99999](https://patchblox.com/security/data/cve/CVE-2026-99999.md) | Urgent | ipv4: validate checksum_start before completing checksum | 9.3 | 0.0079 |  |
| [CVE-2026-90151](https://patchblox.com/security/data/cve/CVE-2026-90151.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  NFSv4: remove callback IDR entry on client alloc... | 9.8 | 0.0075 |  |
| [CVE-2026-72323](https://patchblox.com/security/data/cve/CVE-2026-72323.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  ipv4: igmp: Fix potential UAF in igmp_gq_start_t... | 9.8 | 0.0072 |  |
| [CVE-2026-68476](https://patchblox.com/security/data/cve/CVE-2026-68476.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  ipvs: reload ip header after head reallocation... | 9.8 | 0.0071 |  |
| [CVE-2026-80976](https://patchblox.com/security/data/cve/CVE-2026-80976.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  seg6: reset IP6CB after IPv6 decapsulation  deca... | 9.8 | 0.0071 |  |
| [CVE-2026-89485](https://patchblox.com/security/data/cve/CVE-2026-89485.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  lockd: pin next file across nlm_inspect_file loc... | 9.8 | 0.0071 |  |
| [CVE-2026-89655](https://patchblox.com/security/data/cve/CVE-2026-89655.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  ceph: fix UAF in __kick_flushing_caps() on cf en... | 9.8 | 0.0071 |  |
| [CVE-2026-89712](https://patchblox.com/security/data/cve/CVE-2026-89712.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  NFSD: restart ssc_expire_umount walk after dropp... | 9.8 | 0.0071 |  |
| [CVE-2026-89783](https://patchblox.com/security/data/cve/CVE-2026-89783.md) | Urgent | xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full | 9.8 | 0.0071 |  |
| [CVE-2026-89778](https://patchblox.com/security/data/cve/CVE-2026-89778.md) | Urgent | isofs: fix out-of-bounds page array access on empty zisofs block | 9.8 | 0.0070 |  |
| [CVE-2026-89555](https://patchblox.com/security/data/cve/CVE-2026-89555.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  mpls: reload header after pskb_may_pull()  mpls_... | 9.8 | 0.0069 |  |
| [CVE-2026-89634](https://patchblox.com/security/data/cve/CVE-2026-89634.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix ALIGN() overflow in symlink_dat... | 9.8 | 0.0069 |  |
| [CVE-2026-89636](https://patchblox.com/security/data/cve/CVE-2026-89636.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: clear ce->tgthint in free_tgts()  W... | 9.8 | 0.0066 |  |
| [CVE-2026-90110](https://patchblox.com/security/data/cve/CVE-2026-90110.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  inetpeer: randomize RB-tree node comparison usin... | 9.4 | 0.0061 |  |
| [CVE-2026-89478](https://patchblox.com/security/data/cve/CVE-2026-89478.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  sctp: drop a chunk if its transport was removed... | 9.8 | 0.0051 |  |
| [CVE-2026-89541](https://patchblox.com/security/data/cve/CVE-2026-89541.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  SUNRPC: harden gss_unwrap_resp_priv length check... | 9.8 | 0.0051 |  |
| [CVE-2026-89542](https://patchblox.com/security/data/cve/CVE-2026-89542.md) | Urgent | SUNRPC: harden gss_krb5_unwrap_v2 against short tokens | 9.8 | 0.0051 |  |
| [CVE-2026-89551](https://patchblox.com/security/data/cve/CVE-2026-89551.md) | Urgent | SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow | 9.8 | 0.0051 |  |
| [CVE-2026-89653](https://patchblox.com/security/data/cve/CVE-2026-89653.md) | Urgent | ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode | 9.8 | 0.0050 |  |
| [CVE-2026-89479](https://patchblox.com/security/data/cve/CVE-2026-89479.md) | Urgent | sctp: stop processing a packet once its association is deleted | 9.8 | 0.0050 |  |
| [CVE-2026-64025](https://patchblox.com/security/data/cve/CVE-2026-64025.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf, skmsg: fix verdict sk_data_ready racing wit... | 9.8 | 0.0037 |  |
| [CVE-2026-80671](https://patchblox.com/security/data/cve/CVE-2026-80671.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  perf sched: Fix register_pid() overflow, strcpy,... | 9.3 | 0.0016 |  |
| [CVE-2026-64078](https://patchblox.com/security/data/cve/CVE-2026-64078.md) | Urgent | netfilter: x_tables: add and use xtables_unregister_table_exit | 9.8 | 0.0013 |  |
| [CVE-2026-64079](https://patchblox.com/security/data/cve/CVE-2026-64079.md) | Urgent | netfilter: x_tables: allocate hook ops while under mutex | 9.8 | 0.0012 |  |
| [CVE-2026-90011](https://patchblox.com/security/data/cve/CVE-2026-90011.md) | High | scsi: target: iscsi: Reserve a terminator byte for the login payload | 9.8 | 0.0084 |  |
| [CVE-2026-89696](https://patchblox.com/security/data/cve/CVE-2026-89696.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: block non-SAVEFH ops after FOREIGN PUTFH t... | 7.5 | 0.0075 |  |
| [CVE-2026-74268](https://patchblox.com/security/data/cve/CVE-2026-74268.md) | High | tcp: clear sock_ops cb flags before force-closing a child socket | 9.8 | 0.0071 |  |
| [CVE-2026-89482](https://patchblox.com/security/data/cve/CVE-2026-89482.md) | High | nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone | 9.8 | 0.0071 |  |
| [CVE-2026-89538](https://patchblox.com/security/data/cve/CVE-2026-89538.md) | High | SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field | 9.8 | 0.0071 |  |
| [CVE-2026-89643](https://patchblox.com/security/data/cve/CVE-2026-89643.md) | High | audit: avoid dropping live tree ref on fsnotify rule autoremove | 9.8 | 0.0071 |  |
| [CVE-2026-89549](https://patchblox.com/security/data/cve/CVE-2026-89549.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  sunrpc: route to a populated pool in svc_pool_fo... | 8.1 | 0.0071 |  |
| [CVE-2026-89779](https://patchblox.com/security/data/cve/CVE-2026-89779.md) | High | fs/ntfs3: validate ef->size covers the record's name and value | 9.1 | 0.0070 |  |
| [CVE-2026-89786](https://patchblox.com/security/data/cve/CVE-2026-89786.md) | High | ext4: fix out-of-bounds read in ext4_read_inline_dir() | 9.1 | 0.0070 |  |
| [CVE-2026-89476](https://patchblox.com/security/data/cve/CVE-2026-89476.md) | High | sctp: fix stream->outcnt underflow on duplicate RECONF responses | 7.8 | 0.0070 |  |
| [CVE-2026-90102](https://patchblox.com/security/data/cve/CVE-2026-90102.md) | High | NFSv4/pnfs: key the data server cache on the NFS version | 7.5 | 0.0070 |  |
| [CVE-2026-90103](https://patchblox.com/security/data/cve/CVE-2026-90103.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  NFSv4.2: fix LAYOUTSTATS send buffer exhaustion... | 7.5 | 0.0070 |  |
| [CVE-2026-97557](https://patchblox.com/security/data/cve/CVE-2026-97557.md) | High | smb: client: avoid leaking refcount in cifs_queue_oplock_break() | 7.5 | 0.0070 |  |
| [CVE-2026-89662](https://patchblox.com/security/data/cve/CVE-2026-89662.md) | High | NFSD: Prevent lock owner use-after-free during client teardown | 9.8 | 0.0069 |  |
| [CVE-2026-89669](https://patchblox.com/security/data/cve/CVE-2026-89669.md) | High | nfsd: initialize copy-notify stateid before publishing it | 9.8 | 0.0069 |  |
| [CVE-2026-90067](https://patchblox.com/security/data/cve/CVE-2026-90067.md) | High | libceph: validate banner payload length | 7.5 | 0.0068 |  |
| [CVE-2026-89649](https://patchblox.com/security/data/cve/CVE-2026-89649.md) | High | ceph: bound xattr value length in __build_xattrs() | 9.1 | 0.0068 |  |
| [CVE-2026-89973](https://patchblox.com/security/data/cve/CVE-2026-89973.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nvme-tcp: check the data direction of a C2HData... | 9.8 | 0.0062 |  |
| [CVE-2026-89586](https://patchblox.com/security/data/cve/CVE-2026-89586.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ata: libata-scsi: fix DSM TRIM for sector sizes... | 8.2 | 0.0062 |  |
| [CVE-2026-89554](https://patchblox.com/security/data/cve/CVE-2026-89554.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mptcp: fix uninitialized local_id in syncookie M... | 9.8 | 0.0060 |  |
| [CVE-2026-89483](https://patchblox.com/security/data/cve/CVE-2026-89483.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nvme: zero the discard fallback page  nvme_setup... | 7.5 | 0.0057 |  |
| [CVE-2026-89706](https://patchblox.com/security/data/cve/CVE-2026-89706.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: Reset write verifier when async COPY write... | 8.2 | 0.0053 |  |
| [CVE-2026-89704](https://patchblox.com/security/data/cve/CVE-2026-89704.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: sample writeback error cursor before async... | 7.5 | 0.0053 |  |
| [CVE-2026-81002](https://patchblox.com/security/data/cve/CVE-2026-81002.md) | High | xdp: fix zero-copy frame layout | 9.8 | 0.0051 |  |
| [CVE-2026-89656](https://patchblox.com/security/data/cve/CVE-2026-89656.md) | High | libceph: reject buckets with mismatched CRUSH ids | 9.8 | 0.0051 |  |
| [CVE-2026-89650](https://patchblox.com/security/data/cve/CVE-2026-89650.md) | High | ceph: bound num_export_targets array for mds info v2/v3 | 9.1 | 0.0051 |  |
| [CVE-2026-89684](https://patchblox.com/security/data/cve/CVE-2026-89684.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: fix cpntf publish race in nfs4_init_cp_sta... | 9.8 | 0.0050 |  |
| [CVE-2026-89477](https://patchblox.com/security/data/cve/CVE-2026-89477.md) | High | sctp: fix NULL deref on untransmitted RECONF completion | 7.5 | 0.0050 |  |
| [CVE-2026-89699](https://patchblox.com/security/data/cve/CVE-2026-89699.md) | High | nfsd: validate symlink target length in NFSv4 CREATE | 7.5 | 0.0050 |  |
| [CVE-2026-74474](https://patchblox.com/security/data/cve/CVE-2026-74474.md) | High | vxlan: use pskb_network_may_pull() for transmit path header pulls | 9.8 | 0.0049 |  |
| [CVE-2026-89663](https://patchblox.com/security/data/cve/CVE-2026-89663.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: revoke copy-notify stateids before droppin... | 9.8 | 0.0046 |  |
| [CVE-2026-90141](https://patchblox.com/security/data/cve/CVE-2026-90141.md) | High | ipvs: fix integer overflow in ftp helper port/address parsing | 9.8 | 0.0045 |  |
| [CVE-2026-89711](https://patchblox.com/security/data/cve/CVE-2026-89711.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_... | 8.2 | 0.0044 |  |
| [CVE-2026-89481](https://patchblox.com/security/data/cve/CVE-2026-89481.md) | High | nvme-tcp: fix host memory disclosure on R2T for a read command | 8.8 | 0.0043 |  |
| [CVE-2026-89480](https://patchblox.com/security/data/cve/CVE-2026-89480.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nvme-tcp: reject a read that transferred too few... | 8.8 | 0.0043 |  |
| [CVE-2026-89616](https://patchblox.com/security/data/cve/CVE-2026-89616.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: fix info-leak on partial LZNT decompre... | 7.5 | 0.0042 |  |
| [CVE-2026-64210](https://patchblox.com/security/data/cve/CVE-2026-64210.md) | High | net/mlx5e: xsk: Fix unlocked writing to ICOSQ | 7.5 | 0.0037 |  |
| [CVE-2026-90329](https://patchblox.com/security/data/cve/CVE-2026-90329.md) | High | HID: synchronize input before cleaning up a failed probe | 8.8 | 0.0034 |  |
| [CVE-2026-93189](https://patchblox.com/security/data/cve/CVE-2026-93189.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  HID: core: quiesce input in hid_hw_stop() to pre... | 9.8 | 0.0032 |  |
| [CVE-2026-89694](https://patchblox.com/security/data/cve/CVE-2026-89694.md) | High | nfsd: check client ownership when cancelling a copy-notify stateid | 8.8 | 0.0022 |  |
| [CVE-2026-90073](https://patchblox.com/security/data/cve/CVE-2026-90073.md) | High | net/sched: hhf: clamp quantum before hhf_change() to avoid overflow | 7.8 | 0.0022 |  |
| [CVE-2026-90081](https://patchblox.com/security/data/cve/CVE-2026-90081.md) | High | net/rds: use wq_has_sleeper() in rds_cong_map_updated() | 7.8 | 0.0022 |  |
| [CVE-2026-90284](https://patchblox.com/security/data/cve/CVE-2026-90284.md) | High | firmware_loader: do not queue completed sysfs fallback requests | 7.8 | 0.0022 |  |
| [CVE-2026-90334](https://patchblox.com/security/data/cve/CVE-2026-90334.md) | High | tty: clear cdev pointer after cdev_add() failure | 7.8 | 0.0022 |  |
| [CVE-2026-89984](https://patchblox.com/security/data/cve/CVE-2026-89984.md) | High | perf/x86/intel: Fix kernel address leakages in LBR stack | 7.1 | 0.0022 |  |
| [CVE-2026-90318](https://patchblox.com/security/data/cve/CVE-2026-90318.md) | High | fat: release buffer head after rebuilding parent | 7.1 | 0.0022 |  |
| [CVE-2026-90063](https://patchblox.com/security/data/cve/CVE-2026-90063.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  virtio-net: Ensure that TCP packets don't overfl... | 7.8 | 0.0021 |  |
| [CVE-2026-90140](https://patchblox.com/security/data/cve/CVE-2026-90140.md) | High | cuse: wait for pending RCU callbacks on module exit | 7.8 | 0.0021 |  |
| [CVE-2026-90248](https://patchblox.com/security/data/cve/CVE-2026-90248.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: cls_api: fix teardown of an adopted p... | 7.8 | 0.0021 |  |
| [CVE-2026-93109](https://patchblox.com/security/data/cve/CVE-2026-93109.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/mlx5: Drain RCU callbacks during module tea... | 7.8 | 0.0021 |  |
| [CVE-2026-89785](https://patchblox.com/security/data/cve/CVE-2026-89785.md) | High | fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init | 7.1 | 0.0021 |  |
| [CVE-2026-89983](https://patchblox.com/security/data/cve/CVE-2026-89983.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  i2c: core: fix debugfs UAF on adapter removal  i... | 7.0 | 0.0021 |  |
| [CVE-2026-90184](https://patchblox.com/security/data/cve/CVE-2026-90184.md) | High | null_blk: serialize configfs attribute updates with device setup | 7.8 | 0.0021 |  |
| [CVE-2026-90188](https://patchblox.com/security/data/cve/CVE-2026-90188.md) | High | null_blk: free global tag_set on init error path | 7.8 | 0.0021 |  |
| [CVE-2026-93182](https://patchblox.com/security/data/cve/CVE-2026-93182.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  sched/fair: Fix overflow in update_tg_cfs_runnab... | 7.8 | 0.0021 |  |
| [CVE-2026-80840](https://patchblox.com/security/data/cve/CVE-2026-80840.md) | High | ipv6: seg6: clear IPv4 control block on IPIP decapsulation | 7.8 | 0.0021 |  |
| [CVE-2026-93117](https://patchblox.com/security/data/cve/CVE-2026-93117.md) | High | usb: fix UAF when probe runs concurrent to dyn ID removal | 7.8 | 0.0021 |  |
| [CVE-2026-80824](https://patchblox.com/security/data/cve/CVE-2026-80824.md) | High | usb: usbfs: fix use-after-free of usb_device in usbdev_release() | 8.8 | 0.0020 |  |
| [CVE-2026-89930](https://patchblox.com/security/data/cve/CVE-2026-89930.md) | High | KVM: nVMX: Service local TLB flushes on failed nested VM-Enter | 9.3 | 0.0019 |  |
| [CVE-2026-89781](https://patchblox.com/security/data/cve/CVE-2026-89781.md) | High | fs/ntfs3: fix out-of-bounds read in read_log_rec_buf() | 8.4 | 0.0019 |  |
| [CVE-2026-80852](https://patchblox.com/security/data/cve/CVE-2026-80852.md) | High | tls: device: fix out-of-bounds write in tls_append_frag() | 7.8 | 0.0018 |  |
| [CVE-2026-89782](https://patchblox.com/security/data/cve/CVE-2026-89782.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: reject restart table growth beyond U16... | 8.4 | 0.0018 |  |
| [CVE-2026-89992](https://patchblox.com/security/data/cve/CVE-2026-89992.md) | High | cpuidle: dt_idle_genpd: kfree() the original name allocation | 8.4 | 0.0018 |  |
| [CVE-2026-89927](https://patchblox.com/security/data/cve/CVE-2026-89927.md) | High | KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock | 7.8 | 0.0018 |  |
| [CVE-2026-93073](https://patchblox.com/security/data/cve/CVE-2026-93073.md) | High | dax: read holder_ops once in dax_holder_notify_failure() | 7.1 | 0.0018 |  |
| [CVE-2026-80842](https://patchblox.com/security/data/cve/CVE-2026-80842.md) | High | net: bridge: mcast: fix use-after-free of a master VLAN's multicast context | 7.8 | 0.0018 |  |
| [CVE-2026-93055](https://patchblox.com/security/data/cve/CVE-2026-93055.md) | High | UDF symlink pathComponent header OOB read | 7.1 | 0.0018 |  |
| [CVE-2026-92521](https://patchblox.com/security/data/cve/CVE-2026-92521.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ACPI: PCI: Clear driver_data on all paths that f... | 7.0 | 0.0018 |  |
| [CVE-2026-93138](https://patchblox.com/security/data/cve/CVE-2026-93138.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix vmlinux BTF prep race in bpf_get_btf_vm... | 7.8 | 0.0018 |  |
| [CVE-2026-90189](https://patchblox.com/security/data/cve/CVE-2026-90189.md) | High | null_blk: register configfs subsystem after creating default devices | 7.8 | 0.0017 |  |
| [CVE-2026-92509](https://patchblox.com/security/data/cve/CVE-2026-92509.md) | High | RDMA/core: Fix potential use after free in counter_release() | 7.8 | 0.0017 |  |
| [CVE-2026-92512](https://patchblox.com/security/data/cve/CVE-2026-92512.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/core: Fix use after free in ib_query_qp()... | 7.8 | 0.0017 |  |
| [CVE-2026-89710](https://patchblox.com/security/data/cve/CVE-2026-89710.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  NFSv4.1: fix layout segment leak on the pnfs_lay... | 7.5 | 0.0017 |  |
| [CVE-2026-90049](https://patchblox.com/security/data/cve/CVE-2026-90049.md) | High | net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy() | 9.3 | 0.0017 |  |
| [CVE-2026-80994](https://patchblox.com/security/data/cve/CVE-2026-80994.md) | High | net: openvswitch: fix flow mask use-after-free on flow deletion | 7.8 | 0.0017 |  |
| [CVE-2026-90203](https://patchblox.com/security/data/cve/CVE-2026-90203.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Squashfs: check block offset is not negative  If... | 7.1 | 0.0017 |  |
| [CVE-2026-89932](https://patchblox.com/security/data/cve/CVE-2026-89932.md) | High | KVM: nVMX: Always flush vpid02 on first use | 9.8 | 0.0017 |  |
| [CVE-2026-89557](https://patchblox.com/security/data/cve/CVE-2026-89557.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  md: do overflow check for sb->bblog_shift in sup... | 7.8 | 0.0017 |  |
| [CVE-2026-89559](https://patchblox.com/security/data/cve/CVE-2026-89559.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  libnvdimm/labels: Prevent integer overflow in __... | 7.8 | 0.0017 |  |
| [CVE-2026-89741](https://patchblox.com/security/data/cve/CVE-2026-89741.md) | High | Revert "media: v4l2-dev: fix error handling in __video_register_device()" | 7.8 | 0.0017 |  |
| [CVE-2026-89823](https://patchblox.com/security/data/cve/CVE-2026-89823.md) | High | drm: fix race between partial drm_dev_register() failure and ioctl | 7.8 | 0.0017 |  |
| [CVE-2026-89965](https://patchblox.com/security/data/cve/CVE-2026-89965.md) | High | nvdimm/btt: reject an arena whose nfree is below the lane count | 7.8 | 0.0017 |  |
| [CVE-2026-89988](https://patchblox.com/security/data/cve/CVE-2026-89988.md) | High | kprobes: Protect kprobe_blacklist with RCU | 7.8 | 0.0017 |  |
| [CVE-2026-89998](https://patchblox.com/security/data/cve/CVE-2026-89998.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  dm: fix race when loading and unloading a table... | 7.8 | 0.0017 |  |
| [CVE-2026-90388](https://patchblox.com/security/data/cve/CVE-2026-90388.md) | High | iommu/dma: Check atomic pool allocation result directly | 7.8 | 0.0017 |  |
| [CVE-2026-89579](https://patchblox.com/security/data/cve/CVE-2026-89579.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Harden bloom filter sizing and indexing on... | 7.8 | 0.0017 |  |
| [CVE-2026-89777](https://patchblox.com/security/data/cve/CVE-2026-89777.md) | High | vfio/pci: clear vdev->msi_perm after freeing it on init failure | 8.8 | 0.0016 |  |
| [CVE-2026-89997](https://patchblox.com/security/data/cve/CVE-2026-89997.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  dm: fix resume-vs-remove race  If the user issue... | 7.8 | 0.0016 |  |
| [CVE-2026-90071](https://patchblox.com/security/data/cve/CVE-2026-90071.md) | High | net/sched: sch_teql: restore skb->dev on the slave failure path | 7.8 | 0.0016 |  |
| [CVE-2026-92507](https://patchblox.com/security/data/cve/CVE-2026-92507.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/core: Fix potential use after free in ib_de... | 7.8 | 0.0016 |  |
| [CVE-2026-92508](https://patchblox.com/security/data/cve/CVE-2026-92508.md) | High | RDMA/core: Fix potential use after free in ib_free_cq() | 7.8 | 0.0016 |  |
| [CVE-2026-90062](https://patchblox.com/security/data/cve/CVE-2026-90062.md) | High | netfilter: nf_tables: move hardware offload step after building the chain blob | 7.1 | 0.0016 |  |
| [CVE-2026-93137](https://patchblox.com/security/data/cve/CVE-2026-93137.md) | High | bpf: Fix use-after-free on mm_struct in bpf_find_vma() | 7.8 | 0.0016 |  |
| [CVE-2026-93262](https://patchblox.com/security/data/cve/CVE-2026-93262.md) | High | md/raid5-ppl: fix use-after-free in ppl_do_flush() | 8.8 | 0.0015 |  |
| [CVE-2026-89615](https://patchblox.com/security/data/cve/CVE-2026-89615.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: bound page_lcns[] index by the log rec... | 8.4 | 0.0015 |  |
| [CVE-2026-93046](https://patchblox.com/security/data/cve/CVE-2026-93046.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  software node: Fix software_node_get_reference_a... | 7.0 | 0.0015 |  |
| [CVE-2026-93054](https://patchblox.com/security/data/cve/CVE-2026-93054.md) | High | uio: Fix stale info pointer in failed registration path | 7.0 | 0.0015 |  |
| [CVE-2026-89744](https://patchblox.com/security/data/cve/CVE-2026-89744.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  device property: fix infinite loop in fwnode_for... | 8.4 | 0.0014 |  |
| [CVE-2026-89563](https://patchblox.com/security/data/cve/CVE-2026-89563.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()... | 7.8 | 0.0014 |  |
| [CVE-2026-89617](https://patchblox.com/security/data/cve/CVE-2026-89617.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/ntfs3: validate dirty page table on log repla... | 7.8 | 0.0014 |  |
| [CVE-2026-80932](https://patchblox.com/security/data/cve/CVE-2026-80932.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  vsock/virtio: flush works in dependency order  v... | 8.4 | 0.0014 |  |
| [CVE-2026-92522](https://patchblox.com/security/data/cve/CVE-2026-92522.md) | High | ACPI: processor: validate MADT IOAPIC entry bounds | 7.3 | 0.0014 |  |
| [CVE-2026-74334](https://patchblox.com/security/data/cve/CVE-2026-74334.md) | High | RDMA/nldev: Fix locking when accessing mr->pd | 7.8 | 0.0013 |  |
| [CVE-2026-80977](https://patchblox.com/security/data/cve/CVE-2026-80977.md) | High | net: skbuff: don't touch shared zerocopy state in skb_tx_error() | 7.8 | 0.0013 |  |
| [CVE-2026-80978](https://patchblox.com/security/data/cve/CVE-2026-80978.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: cap advertised IP tunnel headroom  IP tunne... | 7.8 | 0.0013 |  |
| [CVE-2026-89487](https://patchblox.com/security/data/cve/CVE-2026-89487.md) | High | openvswitch: only skb_tx_error() a packet we are about to drop | 7.8 | 0.0013 |  |
| [CVE-2026-89540](https://patchblox.com/security/data/cve/CVE-2026-89540.md) | High | sunrpc: init gssp_lock before publishing proc entry | 7.8 | 0.0013 |  |
| [CVE-2026-89562](https://patchblox.com/security/data/cve/CVE-2026-89562.md) | High | ip6_gre: fix hardware header length for NBMA tunnels | 7.8 | 0.0013 |  |
| [CVE-2026-89573](https://patchblox.com/security/data/cve/CVE-2026-89573.md) | High | dm array: reject an array block whose value size is not the caller's | 7.8 | 0.0013 |  |
| [CVE-2026-90435](https://patchblox.com/security/data/cve/CVE-2026-90435.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/mlx5: Fix integer overflow of user QP buffe... | 7.8 | 0.0013 |  |
| [CVE-2026-89488](https://patchblox.com/security/data/cve/CVE-2026-89488.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  openvswitch: Fix CT limit teardown use-after-fre... | 8.8 | 0.0013 |  |
| [CVE-2026-89560](https://patchblox.com/security/data/cve/CVE-2026-89560.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG fo... | 8.4 | 0.0013 |  |
| [CVE-2026-89508](https://patchblox.com/security/data/cve/CVE-2026-89508.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/ucma: Lock the handler in ucma_set_ib_path(... | 7.8 | 0.0013 |  |
| [CVE-2026-89548](https://patchblox.com/security/data/cve/CVE-2026-89548.md) | High | SUNRPC: always drain cache_cleaner before destroying a cache_detail | 7.8 | 0.0013 |  |
| [CVE-2026-92510](https://patchblox.com/security/data/cve/CVE-2026-92510.md) | High | RDMA/core: Fix potential use after free in ib_destroy_srq_user() | 7.8 | 0.0013 |  |
| [CVE-2026-92511](https://patchblox.com/security/data/cve/CVE-2026-92511.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/core: Fix potential use after free in ib_de... | 7.8 | 0.0013 |  |
| [CVE-2026-89640](https://patchblox.com/security/data/cve/CVE-2026-89640.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: fix loff_t underflow in cifs_remap_file_ra... | 7.1 | 0.0013 |  |
| [CVE-2026-63858](https://patchblox.com/security/data/cve/CVE-2026-63858.md) | High | netfilter: nf_tables: add hook transactions for device deletions | 7.8 | 0.0010 |  |
| [CVE-2026-89603](https://patchblox.com/security/data/cve/CVE-2026-89603.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: s... | 9.8 | n/a |  |
| [CVE-2026-89575](https://patchblox.com/security/data/cve/CVE-2026-89575.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dm raid1: reserve space for NUL-terminator in bu... | 6.7 | 0.0023 |  |
| [CVE-2026-90393](https://patchblox.com/security/data/cve/CVE-2026-90393.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix potential UAF in bpf_netns_link_update_... | 6.7 | 0.0023 |  |
| [CVE-2026-90283](https://patchblox.com/security/data/cve/CVE-2026-90283.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  hugetlbfs: release subpool on fill_super failure... | 6.7 | 0.0023 |  |
| [CVE-2026-90157](https://patchblox.com/security/data/cve/CVE-2026-90157.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Reject negative optlen in cgroup getsockopt... | 6.7 | 0.0022 |  |
| [CVE-2026-90015](https://patchblox.com/security/data/cve/CVE-2026-90015.md) | Routine | xhci: fix lost bounce buffers on TDs spanning several ring segments | 6.5 | 0.0022 |  |
| [CVE-2026-90202](https://patchblox.com/security/data/cve/CVE-2026-90202.md) | Routine | scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers | 6.4 | 0.0022 |  |
| [CVE-2026-89784](https://patchblox.com/security/data/cve/CVE-2026-89784.md) | Routine | SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6 | 5.5 | 0.0022 |  |
| [CVE-2026-89816](https://patchblox.com/security/data/cve/CVE-2026-89816.md) | Routine | drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used | 5.5 | 0.0022 |  |
| [CVE-2026-90072](https://patchblox.com/security/data/cve/CVE-2026-90072.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: sfq: clamp quantum to avoid signed ov... | 5.5 | 0.0022 |  |
| [CVE-2026-90075](https://patchblox.com/security/data/cve/CVE-2026-90075.md) | Routine | net/sched: fq_codel: clamp default quantum and mtu | 5.5 | 0.0022 |  |
| [CVE-2026-90218](https://patchblox.com/security/data/cve/CVE-2026-90218.md) | Routine | RDMA/cma: Fix WARNING in res_to_rt | 5.5 | 0.0022 |  |
| [CVE-2026-93140](https://patchblox.com/security/data/cve/CVE-2026-93140.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  udf: Mark LVID buffer as uptodate before marking... | 5.5 | 0.0022 |  |
| [CVE-2026-90114](https://patchblox.com/security/data/cve/CVE-2026-90114.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: bridge: Reject descending VLAN tunnel range... | 5.3 | 0.0022 |  |
| [CVE-2026-92524](https://patchblox.com/security/data/cve/CVE-2026-92524.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  irqchip/gic-v3-its: Prevent leak in its_vpe_irq_... | 5.2 | 0.0022 |  |
| [CVE-2026-90054](https://patchblox.com/security/data/cve/CVE-2026-90054.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: fix corruption of urgent data on multi-segm... | 4.4 | 0.0022 |  |
| [CVE-2026-90434](https://patchblox.com/security/data/cve/CVE-2026-90434.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  isofs: release zisofs block pointer buffer head... | 4.4 | 0.0022 |  |
| [CVE-2026-93256](https://patchblox.com/security/data/cve/CVE-2026-93256.md) | Routine | arm64: hibernate: mask DAIF before restoring hibernated kernel | 4.1 | 0.0022 |  |
| [CVE-2026-89595](https://patchblox.com/security/data/cve/CVE-2026-89595.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  fsnotify: Fix stale object mask after concurrent... | 3.3 | 0.0022 |  |
| [CVE-2026-90058](https://patchblox.com/security/data/cve/CVE-2026-90058.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: bound qdisc_pkt_len to prevent qdisc... | 3.3 | 0.0022 |  |
| [CVE-2026-90416](https://patchblox.com/security/data/cve/CVE-2026-90416.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/mlx5: Fix stack out-of-bounds read in cc_pa... | 3.3 | 0.0022 |  |
| [CVE-2026-90290](https://patchblox.com/security/data/cve/CVE-2026-90290.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: hibernate: Restore DAIF state on error  S... | 3.0 | 0.0022 |  |
| [CVE-2026-90160](https://patchblox.com/security/data/cve/CVE-2026-90160.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  lwt_bpf: Restore reserved headroom after xmit pr... | 2.3 | 0.0022 |  |
| [CVE-2026-89604](https://patchblox.com/security/data/cve/CVE-2026-89604.md) | Routine | efivarfs: Rate limit statfs() handler | 5.5 | 0.0021 |  |
| [CVE-2026-89822](https://patchblox.com/security/data/cve/CVE-2026-89822.md) | Routine | drm/i915: Guard against NULL driver_data in i915_pci_probe() | 5.5 | 0.0021 |  |
| [CVE-2026-89989](https://patchblox.com/security/data/cve/CVE-2026-89989.md) | Routine | ima: Check for ERR_PTR from dentry_path() in validate_hash_algo() | 5.5 | 0.0021 |  |
| [CVE-2026-90053](https://patchblox.com/security/data/cve/CVE-2026-90053.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: sch_htb: limit htb_classify inner-cla... | 5.5 | 0.0021 |  |
| [CVE-2026-92494](https://patchblox.com/security/data/cve/CVE-2026-92494.md) | Routine | ext4: fix buffer_head leak in ext4_init_orphan_info | 5.5 | 0.0021 |  |
| [CVE-2026-89776](https://patchblox.com/security/data/cve/CVE-2026-89776.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  vxlan: vnifilter: enforce exact length of GROUP/... | 3.3 | 0.0021 |  |
| [CVE-2026-90185](https://patchblox.com/security/data/cve/CVE-2026-90185.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  null_blk: serialize configfs attribute stores wi... | 6.7 | 0.0021 |  |
| [CVE-2026-90186](https://patchblox.com/security/data/cve/CVE-2026-90186.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  null_blk: reject per-device queue resize for sha... | 5.5 | 0.0021 |  |
| [CVE-2026-90190](https://patchblox.com/security/data/cve/CVE-2026-90190.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  null_blk: use DEFINE_MUTEX for the file-scope mu... | 4.7 | 0.0021 |  |
| [CVE-2026-90194](https://patchblox.com/security/data/cve/CVE-2026-90194.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ACPI: scan: fix bus ID cleanup on device_add() f... | 4.5 | 0.0021 |  |
| [CVE-2026-93268](https://patchblox.com/security/data/cve/CVE-2026-93268.md) | Routine | ext4: skip extra isize expansion during mount to prevent deadlock | 6.4 | 0.0020 |  |
| [CVE-2026-89756](https://patchblox.com/security/data/cve/CVE-2026-89756.md) | Routine | mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch() | 4.7 | 0.0020 |  |
| [CVE-2026-80830](https://patchblox.com/security/data/cve/CVE-2026-80830.md) | Routine | usb: core: Add lock to usb_wakeup_notification() | 6.6 | 0.0020 |  |
| [CVE-2026-80843](https://patchblox.com/security/data/cve/CVE-2026-80843.md) | Routine | xfrm: fix xfrm_state_construct() auth-trunc leak | 4.4 | 0.0020 |  |
| [CVE-2026-93206](https://patchblox.com/security/data/cve/CVE-2026-93206.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  PCI/proc: Use file_ns_capable() when checking co... | 3.4 | 0.0019 |  |
| [CVE-2026-89525](https://patchblox.com/security/data/cve/CVE-2026-89525.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  udf: reject VAT indexes equal to the entry count... | 6.7 | 0.0018 |  |
| [CVE-2026-80855](https://patchblox.com/security/data/cve/CVE-2026-80855.md) | Routine | fuse: fix invalidate lock leak on open O_TRUNC DAX failure | 4.7 | 0.0018 |  |
| [CVE-2026-80856](https://patchblox.com/security/data/cve/CVE-2026-80856.md) | Routine | fuse: fix invalidate lock leak on setattr writeback failure | 4.7 | 0.0018 |  |
| [CVE-2026-93110](https://patchblox.com/security/data/cve/CVE-2026-93110.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/core: Wait for RCU callbacks before unloadi... | 6.4 | 0.0018 |  |
| [CVE-2026-80963](https://patchblox.com/security/data/cve/CVE-2026-80963.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dm-stats: fix a crash if allocation of per-cpu d... | 5.5 | 0.0018 |  |
| [CVE-2026-81005](https://patchblox.com/security/data/cve/CVE-2026-81005.md) | Routine | ipmi: si: Fix NULL pointer dereference after failed registration | 5.5 | 0.0018 |  |
| [CVE-2026-92501](https://patchblox.com/security/data/cve/CVE-2026-92501.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: drain in-flight DIO before buffered write... | 5.3 | 0.0018 |  |
| [CVE-2026-89753](https://patchblox.com/security/data/cve/CVE-2026-89753.md) | Routine | mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec() | 4.7 | 0.0018 |  |
| [CVE-2026-89726](https://patchblox.com/security/data/cve/CVE-2026-89726.md) | Routine | lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen() | 4.4 | 0.0018 |  |
| [CVE-2026-93222](https://patchblox.com/security/data/cve/CVE-2026-93222.md) | Routine | signal: avoid shared siginfo namespace rewrites | 4.4 | 0.0018 |  |
| [CVE-2026-93226](https://patchblox.com/security/data/cve/CVE-2026-93226.md) | Routine | ipv6: use RCU iterator to dump route exceptions | 4.2 | 0.0018 |  |
| [CVE-2026-89752](https://patchblox.com/security/data/cve/CVE-2026-89752.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm: memcg: stop reclaim when a limit update is s... | 3.4 | 0.0018 |  |
| [CVE-2026-89515](https://patchblox.com/security/data/cve/CVE-2026-89515.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: core: Fill in DMA padding bytes in scsi_al... | 3.3 | 0.0018 |  |
| [CVE-2026-93213](https://patchblox.com/security/data/cve/CVE-2026-93213.md) | Routine | of: fix out-of-bounds read in of_alias_scan() stem parser | 3.0 | 0.0018 |  |
| [CVE-2026-80806](https://patchblox.com/security/data/cve/CVE-2026-80806.md) | Routine | ext4: don't enable DAX on new encrypted files | 5.5 | 0.0017 |  |
| [CVE-2026-92523](https://patchblox.com/security/data/cve/CVE-2026-92523.md) | Routine | RDMA/nldev: validate dynamic counter attribute length | 5.5 | 0.0017 |  |
| [CVE-2026-93210](https://patchblox.com/security/data/cve/CVE-2026-93210.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: harden DFS cache against invalid ta... | 5.5 | 0.0017 |  |
| [CVE-2026-80784](https://patchblox.com/security/data/cve/CVE-2026-80784.md) | Routine | mptcp: pm: fix memory leak from alloc-during-teardown race | 4.4 | 0.0017 |  |
| [CVE-2026-89565](https://patchblox.com/security/data/cve/CVE-2026-89565.md) | Routine | ipip: fix skb leak in collect_md mode when metadata_dst allocation fails | 3.7 | 0.0017 |  |
| [CVE-2026-80912](https://patchblox.com/security/data/cve/CVE-2026-80912.md) | Routine | selinux: reject an unclaimed class value in security_get_classes() | 4.4 | 0.0017 |  |
| [CVE-2026-98164](https://patchblox.com/security/data/cve/CVE-2026-98164.md) | Routine | KVM: x86/mmu: Check write tracking in all address spaces | 5.5 | 0.0015 |  |
| [CVE-2026-100070](https://patchblox.com/security/data/cve/CVE-2026-100070.md) | Routine | netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet | 6.5 | 0.0012 |  |

---

Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.