{ "fix": "ALAS2023-2026-3335", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335", "summary": "ALAS2023-2026-3335, released November 7, 2026, fixes 272 CVEs across 18 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 18 packages", "released": "2026-11-07T01:06:52Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-89633, rated Critical", "supported": true, "cveCount": 272, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.0076, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-3335.html", "appliesTo": [ { "product": "bpftool6.12", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "bpftool6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.12.113-138.209", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.12.113-138.209", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel6.12", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "kernel6.12-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "kernel6.12-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "kernel6.12-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-headers", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "kernel6.12-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "kernel6.12-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "kernel6.12-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "kernel6.12-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "kernel6.12-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel6.12-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "perf6.12", "productUrl": "https://patchblox.com/security/product/linux/perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "perf6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "python3-perf6.12", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true }, { "product": "python3-perf6.12-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf6.12-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.12.113-138.209.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-89633", "url": "https://patchblox.com/security/cve/CVE-2026-89633", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98171", "url": "https://patchblox.com/security/cve/CVE-2026-98171", "title": "smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99078", "url": "https://patchblox.com/security/cve/CVE-2026-99078", "title": "net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99079", "url": "https://patchblox.com/security/cve/CVE-2026-99079", "title": "net/mlx5e: Prevent stale XSK buffer release on refill retry", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72463", "url": "https://patchblox.com/security/cve/CVE-2026-72463", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resum...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00444, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98174", "url": "https://patchblox.com/security/cve/CVE-2026-98174", "title": "smb: client: fix rlist race and missing initialization", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0033, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98167", "url": "https://patchblox.com/security/cve/CVE-2026-98167", "title": "smb: client: fix server-\u003Etotal_read for compound encrypted PDUs", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98794", "url": "https://patchblox.com/security/cve/CVE-2026-98794", "title": "ipvs: filter some flags received in the backup server", "priority": "Urgent", "severity": "Critical", "cvss": 9.1, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98170", "url": "https://patchblox.com/security/cve/CVE-2026-98170", "title": "smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98214", "url": "https://patchblox.com/security/cve/CVE-2026-98214", "title": "selinux: recheck intermediate backing files on mprotect()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98573", "url": "https://patchblox.com/security/cve/CVE-2026-98573", "title": "net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()", "priority": "Urgent", "severity": "Critical", "cvss": 9.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98621", "url": "https://patchblox.com/security/cve/CVE-2026-98621", "title": "net: gue: reject invalid REMCSUM offsets", "priority": "Urgent", "severity": "Critical", "cvss": 9.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98168", "url": "https://patchblox.com/security/cve/CVE-2026-98168", "title": "smb: client: fix reparse buffer bounds in cifs_query_reparse_point()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98215", "url": "https://patchblox.com/security/cve/CVE-2026-98215", "title": "selinux: preserve user SID across nested backing files", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98319", "url": "https://patchblox.com/security/cve/CVE-2026-98319", "title": "drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98322", "url": "https://patchblox.com/security/cve/CVE-2026-98322", "title": "netfilter: nft_nat: fully initialise new_addr in netmap setup", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98301", "url": "https://patchblox.com/security/cve/CVE-2026-98301", "title": "net: bridge: mst: move switchdev call outside rcu", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98303", "url": "https://patchblox.com/security/cve/CVE-2026-98303", "title": "ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98233", "url": "https://patchblox.com/security/cve/CVE-2026-98233", "title": "net/packet: clear RX owner on VNET header error", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98255", "url": "https://patchblox.com/security/cve/CVE-2026-98255", "title": "tcp: exclude old ACKs from tcp fast path", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98221", "url": "https://patchblox.com/security/cve/CVE-2026-98221", "title": "KEYS: trusted: Fix tpm2_load_cmd() boundary check", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98249", "url": "https://patchblox.com/security/cve/CVE-2026-98249", "title": "arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68399", "url": "https://patchblox.com/security/cve/CVE-2026-68399", "title": "bpf: Fix UAF in sock clone early bailouts", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98363", "url": "https://patchblox.com/security/cve/CVE-2026-98363", "title": "firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98222", "url": "https://patchblox.com/security/cve/CVE-2026-98222", "title": "KEYS: encrypted: fix integer overflow of datablob_len", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98232", "url": "https://patchblox.com/security/cve/CVE-2026-98232", "title": "scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98269", "url": "https://patchblox.com/security/cve/CVE-2026-98269", "title": "btrfs: abort transaction on failure to update inode for hole punching and reflinking", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98320", "url": "https://patchblox.com/security/cve/CVE-2026-98320", "title": "netfilter: flowtable: hold reference on ct until flow is released", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98251", "url": "https://patchblox.com/security/cve/CVE-2026-98251", "title": "openvswitch: avoid reallocating confirmed conntrack labels", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98253", "url": "https://patchblox.com/security/cve/CVE-2026-98253", "title": "RDMA/ucma: Serialize join and leave on copy_to_user failure", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98252", "url": "https://patchblox.com/security/cve/CVE-2026-98252", "title": "RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98368", "url": "https://patchblox.com/security/cve/CVE-2026-98368", "title": "esp: downgrade zerocopy managed frags before mutating skb frags", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98432", "url": "https://patchblox.com/security/cve/CVE-2026-98432", "title": "ipv4: free inet_opt and ireq_opt after an RCU grace period", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.0076, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98490", "url": "https://patchblox.com/security/cve/CVE-2026-98490", "title": "net: openvswitch: conntrack: fix helper UAF due to extensions realloc", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00695, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98548", "url": "https://patchblox.com/security/cve/CVE-2026-98548", "title": "sctp: discard the rest of the packet on a stale-cookie error", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98550", "url": "https://patchblox.com/security/cve/CVE-2026-98550", "title": "tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00677, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89648", "url": "https://patchblox.com/security/cve/CVE-2026-89648", "title": "ceph: cap delegated inode count in ceph_parse_deleg_inos()", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00675, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98532", "url": "https://patchblox.com/security/cve/CVE-2026-98532", "title": "ipv6: do not let ipv6_find_hdr() return an offset past the packet end", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00613, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89971", "url": "https://patchblox.com/security/cve/CVE-2026-89971", "title": "nvme: skip the zoned limits update if the zone info query failed", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00612, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98959", "url": "https://patchblox.com/security/cve/CVE-2026-98959", "title": "btrfs: fix xattr replace when multiple xattrs are packed in the same item", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00607, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98549", "url": "https://patchblox.com/security/cve/CVE-2026-98549", "title": "tcp: prevent collapsing skbs across boundary in rtx queue", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00559, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99064", "url": "https://patchblox.com/security/cve/CVE-2026-99064", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cipso: adjust cached option offsets when removin...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00516, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99059", "url": "https://patchblox.com/security/cve/CVE-2026-99059", "title": "wireguard: noise: reject response consumption after intermediate initiation", "priority": "High", "severity": "Important", "cvss": 7.7, "epss": 0.00506, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99030", "url": "https://patchblox.com/security/cve/CVE-2026-99030", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don\u0027t leave stale bytes in skb_copy...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98169", "url": "https://patchblox.com/security/cve/CVE-2026-98169", "title": "smb: client: fix potential OOB read in smb3_enum_snapshots()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00448, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98261", "url": "https://patchblox.com/security/cve/CVE-2026-98261", "title": "cifs: Fix server use-after-free in cifs_chan_skip_or_disable()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98451", "url": "https://patchblox.com/security/cve/CVE-2026-98451", "title": "smb: client: use finish_no_open() for non-regular inodes", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00398, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98479", "url": "https://patchblox.com/security/cve/CVE-2026-98479", "title": "scsi: libiscsi_tcp: Check the data direction of a Data-In PDU", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00392, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98454", "url": "https://patchblox.com/security/cve/CVE-2026-98454", "title": "smb: client: fix create context out-of-bounds reads", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98173", "url": "https://patchblox.com/security/cve/CVE-2026-98173", "title": "smb: client: fix use-after-free of iface in cifs_try_adding_channels()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00345, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98175", "url": "https://patchblox.com/security/cve/CVE-2026-98175", "title": "smb: client: cancel reconnect work in clean_demultiplex_info()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00321, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98374", "url": "https://patchblox.com/security/cve/CVE-2026-98374", "title": "tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00293, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97558", "url": "https://patchblox.com/security/cve/CVE-2026-97558", "title": "smb: client: fix cifsFileInfo reference leak in deferred close", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00228, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97901", "url": "https://patchblox.com/security/cve/CVE-2026-97901", "title": "genetlink: pin family module during policy dump", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98375", "url": "https://patchblox.com/security/cve/CVE-2026-98375", "title": "xen/netfront: drop RX packets with a short Ethernet header", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97559", "url": "https://patchblox.com/security/cve/CVE-2026-97559", "title": "smb: client: fail DACL rewrite when the new DACL exceeds 64K", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97619", "url": "https://patchblox.com/security/cve/CVE-2026-97619", "title": "io_uring/rw: end write accounting from -\u003Eki_complete", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98626", "url": "https://patchblox.com/security/cve/CVE-2026-98626", "title": "bpf: Restrict CO-RE poisoning to relocatable instructions", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97933", "url": "https://patchblox.com/security/cve/CVE-2026-97933", "title": "tracing: Take trace_array reference when opening a tracer options file", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97938", "url": "https://patchblox.com/security/cve/CVE-2026-97938", "title": "reboot: fix cad_pid use-after-free race", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97950", "url": "https://patchblox.com/security/cve/CVE-2026-97950", "title": "configfs: pin the symlink target\u0027s dirent instead of chasing -\u003Eci_dentry", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98248", "url": "https://patchblox.com/security/cve/CVE-2026-98248", "title": "arm64: percpu: Fix LSE operations on {8,16}-bit types", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98231", "url": "https://patchblox.com/security/cve/CVE-2026-98231", "title": "xfrm: serialize state GC with device state flush", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98034", "url": "https://patchblox.com/security/cve/CVE-2026-98034", "title": "bpf: Mark NULL kptr stores precise", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93244", "url": "https://patchblox.com/security/cve/CVE-2026-93244", "title": "drm/sysfb: simpledrm: Improve stride validation", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98260", "url": "https://patchblox.com/security/cve/CVE-2026-98260", "title": "exec: Cleanup POSIX timers right after de_thread()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89912", "url": "https://patchblox.com/security/cve/CVE-2026-89912", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don\u0027t dereference a NULL c...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89638", "url": "https://patchblox.com/security/cve/CVE-2026-89638", "title": "smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98342", "url": "https://patchblox.com/security/cve/CVE-2026-98342", "title": "dmaengine: wait for RCU readers before releasing dma_device", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98343", "url": "https://patchblox.com/security/cve/CVE-2026-98343", "title": "dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98201", "url": "https://patchblox.com/security/cve/CVE-2026-98201", "title": "Input: zero ff_effect before compat copy in input_ff_effect_from_user", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98234", "url": "https://patchblox.com/security/cve/CVE-2026-98234", "title": "net/sched: hhf: cap hh_flows_limit at change time", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98933", "url": "https://patchblox.com/security/cve/CVE-2026-98933", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: hub: use shorter 120ms post resume hold for...", "priority": "High", "severity": "important", "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98716", "url": "https://patchblox.com/security/cve/CVE-2026-98716", "title": "KVM: SVM: Use the active VMCB\u0027s MSR bitmap when checking if MSR is intercepted", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98953", "url": "https://patchblox.com/security/cve/CVE-2026-98953", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: devlink: fix devlink_rel reference leak when not...", "priority": "High", "severity": "important", "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98980", "url": "https://patchblox.com/security/cve/CVE-2026-98980", "title": "namei: don\u0027t reveal overmounted entries in refwalk", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72315", "url": "https://patchblox.com/security/cve/CVE-2026-72315", "title": "smb: client: fix busy dentry warning on unmount after DIO", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98245", "url": "https://patchblox.com/security/cve/CVE-2026-98245", "title": "btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98485", "url": "https://patchblox.com/security/cve/CVE-2026-98485", "title": "netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98686", "url": "https://patchblox.com/security/cve/CVE-2026-98686", "title": "smb: client: discard post-EOF pagecache when extending a file via zero range", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99053", "url": "https://patchblox.com/security/cve/CVE-2026-99053", "title": "tipc: hold a reference to nodes found by link name", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98846", "url": "https://patchblox.com/security/cve/CVE-2026-98846", "title": "sctp: check RCV_SHUTDOWN after the sendmsg connect wait", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90002", "url": "https://patchblox.com/security/cve/CVE-2026-90002", "title": "ftrace: Take trace_array reference before accessing its ftrace_ops", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89520", "url": "https://patchblox.com/security/cve/CVE-2026-89520", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-fl...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90146", "url": "https://patchblox.com/security/cve/CVE-2026-90146", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into dev_xdp_instal...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98491", "url": "https://patchblox.com/security/cve/CVE-2026-98491", "title": "net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89500", "url": "https://patchblox.com/security/cve/CVE-2026-89500", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89503", "url": "https://patchblox.com/security/cve/CVE-2026-89503", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring_bu...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97949", "url": "https://patchblox.com/security/cve/CVE-2026-97949", "title": "configfs: unhash the dentry before dropping the item in rmdir", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98101", "url": "https://patchblox.com/security/cve/CVE-2026-98101", "title": "ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source()", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98229", "url": "https://patchblox.com/security/cve/CVE-2026-98229", "title": "xfrm: save input state data before secpath resets", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98720", "url": "https://patchblox.com/security/cve/CVE-2026-98720", "title": "KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified", "priority": "High", "severity": "Important", "cvss": 7.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98801", "url": "https://patchblox.com/security/cve/CVE-2026-98801", "title": "net: restrict SO_RESERVE_MEM to TCP sockets and cap max value", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98611", "url": "https://patchblox.com/security/cve/CVE-2026-98611", "title": "bpf: Check params size before reading reserved fields", "priority": "High", "severity": "IMPORTANT", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98713", "url": "https://patchblox.com/security/cve/CVE-2026-98713", "title": "KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98728", "url": "https://patchblox.com/security/cve/CVE-2026-98728", "title": "tpm: fix off-by-four bounds check in tpm2_get_random()", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98791", "url": "https://patchblox.com/security/cve/CVE-2026-98791", "title": "net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98841", "url": "https://patchblox.com/security/cve/CVE-2026-98841", "title": "virt: vmgenid: set driver_data before registering notification handlers", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98923", "url": "https://patchblox.com/security/cve/CVE-2026-98923", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: arm64: io: Reject non-user protection in ioremap...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99055", "url": "https://patchblox.com/security/cve/CVE-2026-99055", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: reject net_iov in zerocopy receive mapping...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99062", "url": "https://patchblox.com/security/cve/CVE-2026-99062", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: account only unread bytes in read_...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98507", "url": "https://patchblox.com/security/cve/CVE-2026-98507", "title": "mm/rmap: fix missing barrier between anon_vma init and vma-\u003Eanon_vma publish", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98857", "url": "https://patchblox.com/security/cve/CVE-2026-98857", "title": "ipvs: bound LBLCR and LBLC cache growth", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90013", "url": "https://patchblox.com/security/cve/CVE-2026-90013", "title": "tracing: Take trace_array reference when opening options file", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97594", "url": "https://patchblox.com/security/cve/CVE-2026-97594", "title": "landlock: Fix use-after-free of the source\u0027s parent directory", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98487", "url": "https://patchblox.com/security/cve/CVE-2026-98487", "title": "net: bridge: mdb: restart port group walk after deletion", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99006", "url": "https://patchblox.com/security/cve/CVE-2026-99006", "title": "drm/i915/gem: Prevent overstepping exec array boundary", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98982", "url": "https://patchblox.com/security/cve/CVE-2026-98982", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: namespace: don\u0027t let a pseudo dentry become the...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98383", "url": "https://patchblox.com/security/cve/CVE-2026-98383", "title": "bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98382", "url": "https://patchblox.com/security/cve/CVE-2026-98382", "title": "bpf: Reject dev-bound-only programs on other devices", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99054", "url": "https://patchblox.com/security/cve/CVE-2026-99054", "title": "tipc: destroy topsrv workqueues before closing connections", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98376", "url": "https://patchblox.com/security/cve/CVE-2026-98376", "title": "bpf: Use array_map_meta_equal for percpu array inner map replacement", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98858", "url": "https://patchblox.com/security/cve/CVE-2026-98858", "title": "io_uring: fix task_work add use-after-free with SQPOLL", "priority": "High", "severity": "important", "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99073", "url": "https://patchblox.com/security/cve/CVE-2026-99073", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: stop exception dump when nexthop group shr...", "priority": "High", "severity": "important", "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98844", "url": "https://patchblox.com/security/cve/CVE-2026-98844", "title": "netfs: clear post-EOF pagecache when extending a file via write", "priority": "High", "severity": "important", "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98845", "url": "https://patchblox.com/security/cve/CVE-2026-98845", "title": "tpm: Disable TPM on null key name mismatch", "priority": "High", "severity": "important", "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98927", "url": "https://patchblox.com/security/cve/CVE-2026-98927", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix life cycle of the nested_mmu...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99074", "url": "https://patchblox.com/security/cve/CVE-2026-99074", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: stop PMTU walk when nexthop group shrinks...", "priority": "High", "severity": "important", "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97609", "url": "https://patchblox.com/security/cve/CVE-2026-97609", "title": "netfilter: cttimeout: prevent UAF during module unload", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98369", "url": "https://patchblox.com/security/cve/CVE-2026-98369", "title": "xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98443", "url": "https://patchblox.com/security/cve/CVE-2026-98443", "title": "xfs: fix cursor and pointer handling when recovering iunlink buckets", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98241", "url": "https://patchblox.com/security/cve/CVE-2026-98241", "title": "ipv6: xfrm: use full sockets in local error paths", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98276", "url": "https://patchblox.com/security/cve/CVE-2026-98276", "title": "net: lock the socket in sock_gettstamp()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98381", "url": "https://patchblox.com/security/cve/CVE-2026-98381", "title": "veth: manage XDP program pointers during channel resize", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98440", "url": "https://patchblox.com/security/cve/CVE-2026-98440", "title": "KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98364", "url": "https://patchblox.com/security/cve/CVE-2026-98364", "title": "xfrm: hold net_device reference under RCU in bundle creation", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98230", "url": "https://patchblox.com/security/cve/CVE-2026-98230", "title": "xfrm: use hlist_del_init_rcu for state_cache and state_cache_input", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98378", "url": "https://patchblox.com/security/cve/CVE-2026-98378", "title": "bpf: Skip unsettled links in link iterator", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98359", "url": "https://patchblox.com/security/cve/CVE-2026-98359", "title": "RDMA/core: Reject unregistering netdevs in ib_get_eth_speed", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00116, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98405", "url": "https://patchblox.com/security/cve/CVE-2026-98405", "title": "smb: client: fix missing iov bounds check in parse_posix_sids()", "priority": "Routine", "severity": "Moderate", "cvss": 5.4, "epss": 0.00478, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98937", "url": "https://patchblox.com/security/cve/CVE-2026-98937", "title": "perf/core: Check kernel access when kernel callchains are requested", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93243", "url": "https://patchblox.com/security/cve/CVE-2026-93243", "title": "mm/secretmem: properly account locked pages", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97597", "url": "https://patchblox.com/security/cve/CVE-2026-97597", "title": "ipv6: flowlabel: cap duplicate leases per socket", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98413", "url": "https://patchblox.com/security/cve/CVE-2026-98413", "title": "selinux: always fill AVC decision in avc_has_perm_noaudit()", "priority": "Routine", "severity": "Low", "cvss": 6.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98537", "url": "https://patchblox.com/security/cve/CVE-2026-98537", "title": "workqueue: Fix NULL current_pwq deref in flush dependency check", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98531", "url": "https://patchblox.com/security/cve/CVE-2026-98531", "title": "ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99036", "url": "https://patchblox.com/security/cve/CVE-2026-99036", "title": "dm: fix reading free memory in do_resume", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97939", "url": "https://patchblox.com/security/cve/CVE-2026-97939", "title": "ipmr: account multicast table and route memory", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98856", "url": "https://patchblox.com/security/cve/CVE-2026-98856", "title": "kprobes: Skip disarmed probes when checking optkprobe overlap", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97906", "url": "https://patchblox.com/security/cve/CVE-2026-97906", "title": "bootconfig: Fix integer overflow in initrd size check", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98567", "url": "https://patchblox.com/security/cve/CVE-2026-98567", "title": "net: xps: reject an out of range traffic class", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98590", "url": "https://patchblox.com/security/cve/CVE-2026-98590", "title": "bpf: Fix bpf_sock context code generation", "priority": "Routine", "severity": "Moderate", "cvss": 6.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98495", "url": "https://patchblox.com/security/cve/CVE-2026-98495", "title": "net: arp: terminate device name before lookup", "priority": "Routine", "severity": "Low", "cvss": 6.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98541", "url": "https://patchblox.com/security/cve/CVE-2026-98541", "title": "fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98610", "url": "https://patchblox.com/security/cve/CVE-2026-98610", "title": "net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98554", "url": "https://patchblox.com/security/cve/CVE-2026-98554", "title": "vlan: ensure sufficient headroom in vlan_dev_hard_header()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98547", "url": "https://patchblox.com/security/cve/CVE-2026-98547", "title": "af_packet: fix integer overflow in prb_calc_retire_blk_tmo()", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98569", "url": "https://patchblox.com/security/cve/CVE-2026-98569", "title": "ip_gre: Reject enabling collect metadata through changelink", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98553", "url": "https://patchblox.com/security/cve/CVE-2026-98553", "title": "autofs: fix sbi-\u003Epipe file reference leak in autofs_kill_sb()", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98521", "url": "https://patchblox.com/security/cve/CVE-2026-98521", "title": "drm/i915: fix incorrect RCU teardown order", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98536", "url": "https://patchblox.com/security/cve/CVE-2026-98536", "title": "writeback: report a Tasks-RCU quiescent state per cgwb drain pass", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98935", "url": "https://patchblox.com/security/cve/CVE-2026-98935", "title": "rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89996", "url": "https://patchblox.com/security/cve/CVE-2026-89996", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don\u0027t publish fd before copy_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97567", "url": "https://patchblox.com/security/cve/CVE-2026-97567", "title": "mptcp: prevent race between disconnect() and rtx", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97566", "url": "https://patchblox.com/security/cve/CVE-2026-97566", "title": "mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98606", "url": "https://patchblox.com/security/cve/CVE-2026-98606", "title": "drm/virtio: release the GEM object on virtio_gpu_vram_create() errors", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98568", "url": "https://patchblox.com/security/cve/CVE-2026-98568", "title": "vxlan: use one headroom snapshot for neighbour replies", "priority": "Routine", "severity": "Moderate", "cvss": 6, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98588", "url": "https://patchblox.com/security/cve/CVE-2026-98588", "title": "bpf, sockmap: Reject max_entries \u003E INT_MAX in sock_map_alloc", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98625", "url": "https://patchblox.com/security/cve/CVE-2026-98625", "title": "netfilter: flowtable: publish HW_DEAD after worker is done", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98979", "url": "https://patchblox.com/security/cve/CVE-2026-98979", "title": "namespace: refuse an automount below a mount that is in no namespace", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98643", "url": "https://patchblox.com/security/cve/CVE-2026-98643", "title": "bpf: Fix out-of-bounds read of rtt_min in sock_ops", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98955", "url": "https://patchblox.com/security/cve/CVE-2026-98955", "title": "flow_dissector: avoid u16 truncation of skb-\u003Elen when computing thoff", "priority": "Routine", "severity": "Low", "cvss": 3.4, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98969", "url": "https://patchblox.com/security/cve/CVE-2026-98969", "title": "net/sched: em_text: reject unterminated algo before autoload", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98934", "url": "https://patchblox.com/security/cve/CVE-2026-98934", "title": "ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()", "priority": "Routine", "severity": "Low", "cvss": 1.9, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98631", "url": "https://patchblox.com/security/cve/CVE-2026-98631", "title": "xsk: Use a 32-bit compare in xsk_map_gen_lookup", "priority": "Routine", "severity": "Moderate", "cvss": 6, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98695", "url": "https://patchblox.com/security/cve/CVE-2026-98695", "title": "USB: serial: fix ioctl hangup race", "priority": "Routine", "severity": "Moderate", "cvss": 4.2, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98539", "url": "https://patchblox.com/security/cve/CVE-2026-98539", "title": "fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot\u0027s \u0022WARNING in do_new_mount\u0022 saga", "priority": "Routine", "severity": "Moderate", "cvss": 6.3, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98523", "url": "https://patchblox.com/security/cve/CVE-2026-98523", "title": "drm/client: fix restore of partially initialized client", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98528", "url": "https://patchblox.com/security/cve/CVE-2026-98528", "title": "gpio: cdev: fix kernel stack leak to user-space in error path", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98851", "url": "https://patchblox.com/security/cve/CVE-2026-98851", "title": "netfilter: nft_flow_offload: drop flowtable reference on init error path", "priority": "Routine", "severity": "Low", "cvss": 2.3, "epss": 0.00208, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98545", "url": "https://patchblox.com/security/cve/CVE-2026-98545", "title": "ata: libata-scsi: bound the ATA passthru sense descriptor writes", "priority": "Routine", "severity": "Moderate", "cvss": 6.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98468", "url": "https://patchblox.com/security/cve/CVE-2026-98468", "title": "KVM: arm64: Fix spurious warning for benign stage 2 teardown race", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98644", "url": "https://patchblox.com/security/cve/CVE-2026-98644", "title": "bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98484", "url": "https://patchblox.com/security/cve/CVE-2026-98484", "title": "netfilter: nf_tables: skip expired catchall elements on insert and delete", "priority": "Routine", "severity": "Low", "cvss": 3.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98629", "url": "https://patchblox.com/security/cve/CVE-2026-98629", "title": "net/sched: cls_u32: fix manual hash table handle IDR aliasing", "priority": "Routine", "severity": "Low", "cvss": 3.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98596", "url": "https://patchblox.com/security/cve/CVE-2026-98596", "title": "ipv6: Fix dst leak for uncached routes.", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99071", "url": "https://patchblox.com/security/cve/CVE-2026-99071", "title": "ipv4: do not warn on route notification size race", "priority": "Routine", "severity": "Low", "cvss": 1.9, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99080", "url": "https://patchblox.com/security/cve/CVE-2026-99080", "title": "fs: Free any excess xarray nodes in clear_inode()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98591", "url": "https://patchblox.com/security/cve/CVE-2026-98591", "title": "bpf: Fix bounds check for skb-backed dynptrs", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98862", "url": "https://patchblox.com/security/cve/CVE-2026-98862", "title": "audit: fix exe mark UAF in kill_rules()", "priority": "Routine", "severity": "Moderate", "cvss": 6, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98855", "url": "https://patchblox.com/security/cve/CVE-2026-98855", "title": "of/overlay: put property on deadprops only after changeset add succeeds", "priority": "Routine", "severity": "Moderate", "cvss": 5.2, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98850", "url": "https://patchblox.com/security/cve/CVE-2026-98850", "title": "net/packet: prevent TX_RING byte count overflow", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98503", "url": "https://patchblox.com/security/cve/CVE-2026-98503", "title": "packet: use ubuf_info completion for TX_RING packets", "priority": "Routine", "severity": "Moderate", "cvss": 6, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98506", "url": "https://patchblox.com/security/cve/CVE-2026-98506", "title": "mm/hugetlb: do not dissolve gigantic pages without runtime support", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98508", "url": "https://patchblox.com/security/cve/CVE-2026-98508", "title": "drm/virtio: fix NULL pointer dereference on fence allocation failure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98717", "url": "https://patchblox.com/security/cve/CVE-2026-98717", "title": "KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98509", "url": "https://patchblox.com/security/cve/CVE-2026-98509", "title": "drm/virtio: fix memory leak of fence event on execbuffer failure", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98505", "url": "https://patchblox.com/security/cve/CVE-2026-98505", "title": "mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()", "priority": "Routine", "severity": "Low", "cvss": 1.9, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99005", "url": "https://patchblox.com/security/cve/CVE-2026-99005", "title": "drm/i915/gt: Unmask interrupts only when ACTIVE is true", "priority": "Routine", "severity": "Low", "cvss": 2.5, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99040", "url": "https://patchblox.com/security/cve/CVE-2026-99040", "title": "KEYS: Fix add_key() race with keyring restriction", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89766", "url": "https://patchblox.com/security/cve/CVE-2026-89766", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: pidfd: hold exec_update_lock around namespace io...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99058", "url": "https://patchblox.com/security/cve/CVE-2026-99058", "title": "workqueue: Fix NULL current_pwq deref in chained work check", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00191, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98655", "url": "https://patchblox.com/security/cve/CVE-2026-98655", "title": "perf: Require kernel access for text poke events", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98925", "url": "https://patchblox.com/security/cve/CVE-2026-98925", "title": "bpf, sockmap: Fix self-redirect copied_seq double-counting", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98990", "url": "https://patchblox.com/security/cve/CVE-2026-98990", "title": "namespace: check a submount for references right before unmounting it", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99057", "url": "https://patchblox.com/security/cve/CVE-2026-99057", "title": "xen/netfront: don\u0027t leak the skb when xennet_fill_frags() fails", "priority": "Routine", "severity": "Moderate", "cvss": 4.5, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99033", "url": "https://patchblox.com/security/cve/CVE-2026-99033", "title": "net/packet: guard the ll header push in packet_rcv_spkt()", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98950", "url": "https://patchblox.com/security/cve/CVE-2026-98950", "title": "flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()", "priority": "Routine", "severity": "Low", "cvss": 3.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98306", "url": "https://patchblox.com/security/cve/CVE-2026-98306", "title": "seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98763", "url": "https://patchblox.com/security/cve/CVE-2026-98763", "title": "usb: core: clear both ep_in and ep_out for non-ep0 control endpoints", "priority": "Routine", "severity": "Moderate", "cvss": 6.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99043", "url": "https://patchblox.com/security/cve/CVE-2026-99043", "title": "ice: fix metadata_dst refcount handling on representor teardown", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98805", "url": "https://patchblox.com/security/cve/CVE-2026-98805", "title": "tipc: prevent GCM nonce reuse on peer key changes", "priority": "Routine", "severity": "Moderate", "cvss": 6.8, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98790", "url": "https://patchblox.com/security/cve/CVE-2026-98790", "title": "perf: Fix race between perf_event_exit_task() and perf_pending_task()", "priority": "Routine", "severity": "Low", "cvss": 2.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98811", "url": "https://patchblox.com/security/cve/CVE-2026-98811", "title": "net/sched: cls_api: reclaim an empty proto on the error path", "priority": "Routine", "severity": "Low", "cvss": 1.9, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98205", "url": "https://patchblox.com/security/cve/CVE-2026-98205", "title": "Input: evdev - zero absinfo before partial copy in EVIOCSABS", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99037", "url": "https://patchblox.com/security/cve/CVE-2026-99037", "title": "dm-crypt: reject the lmk IV mode with AEAD ciphers", "priority": "Routine", "severity": "Moderate", "cvss": 6, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99052", "url": "https://patchblox.com/security/cve/CVE-2026-99052", "title": "selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts", "priority": "Routine", "severity": "Moderate", "cvss": 6, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98614", "url": "https://patchblox.com/security/cve/CVE-2026-98614", "title": "sctp: avoid livelock while updating retransmit path", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98772", "url": "https://patchblox.com/security/cve/CVE-2026-98772", "title": "USB: serial: fix port tear down use-after-free", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98262", "url": "https://patchblox.com/security/cve/CVE-2026-98262", "title": "ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98299", "url": "https://patchblox.com/security/cve/CVE-2026-98299", "title": "tcp: do not let tcp_rmem be set below 4096", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98300", "url": "https://patchblox.com/security/cve/CVE-2026-98300", "title": "tcp: Don\u0027t call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98344", "url": "https://patchblox.com/security/cve/CVE-2026-98344", "title": "dmaengine: Fix device kref underflow in dma_chan_put()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98380", "url": "https://patchblox.com/security/cve/CVE-2026-98380", "title": "net/sched: reject IDR error pointers when deleting actions", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98608", "url": "https://patchblox.com/security/cve/CVE-2026-98608", "title": "drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98609", "url": "https://patchblox.com/security/cve/CVE-2026-98609", "title": "drm/virtio: fix object leak when drm_gem_handle_create() fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98624", "url": "https://patchblox.com/security/cve/CVE-2026-98624", "title": "netfilter: nfnetlink_queue: hold nfnl mutex in event notifier", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98636", "url": "https://patchblox.com/security/cve/CVE-2026-98636", "title": "squashfs: Add dictionary size range check to prevent shift-out-of-bounds", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98992", "url": "https://patchblox.com/security/cve/CVE-2026-98992", "title": "namespace: don\u0027t copy an unmounted mount tree", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99031", "url": "https://patchblox.com/security/cve/CVE-2026-99031", "title": "net: bridge: avoid recursive multicast port cleanup", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98453", "url": "https://patchblox.com/security/cve/CVE-2026-98453", "title": "smb: client: close handle after create-context parsing failure", "priority": "Routine", "severity": "Moderate", "cvss": 4.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99025", "url": "https://patchblox.com/security/cve/CVE-2026-99025", "title": "openvswitch: fix soft lockup in the netlink flow dump", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93231", "url": "https://patchblox.com/security/cve/CVE-2026-93231", "title": "lockd: fix swapped arguments in nlmsvc_match_ip()", "priority": "Routine", "severity": "Low", "cvss": 3.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98613", "url": "https://patchblox.com/security/cve/CVE-2026-98613", "title": "bpf: Bound ownership depth through local kptrs and graph roots", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98450", "url": "https://patchblox.com/security/cve/CVE-2026-98450", "title": "smb: client: close completed creates on compound wait errors", "priority": "Routine", "severity": "Low", "cvss": 3.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98984", "url": "https://patchblox.com/security/cve/CVE-2026-98984", "title": "dcache: don\u0027t put a mountpoint on a dentry that\u0027s being removed", "priority": "Routine", "severity": "Low", "cvss": 2.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99007", "url": "https://patchblox.com/security/cve/CVE-2026-99007", "title": "drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN", "priority": "Routine", "severity": "Low", "cvss": 2.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98831", "url": "https://patchblox.com/security/cve/CVE-2026-98831", "title": "of/overlay: don\u0027t leak fragment references when changeset init fails", "priority": "Routine", "severity": "Low", "cvss": 2.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99063", "url": "https://patchblox.com/security/cve/CVE-2026-99063", "title": "dm ioctl: don\u0027t let data_start run past the buffer", "priority": "Routine", "severity": "Low", "cvss": 2.3, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99067", "url": "https://patchblox.com/security/cve/CVE-2026-99067", "title": "btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()", "priority": "Routine", "severity": "Low", "cvss": 1.9, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98750", "url": "https://patchblox.com/security/cve/CVE-2026-98750", "title": "tty: fix saved termios reset race", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98752", "url": "https://patchblox.com/security/cve/CVE-2026-98752", "title": "tty: port: fix tty_port_tty_vhangup() race", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98696", "url": "https://patchblox.com/security/cve/CVE-2026-98696", "title": "USB: serial: fix driver deregistration order", "priority": "Routine", "severity": "Moderate", "cvss": 5.2, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98681", "url": "https://patchblox.com/security/cve/CVE-2026-98681", "title": "smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races", "priority": "Routine", "severity": "Moderate", "cvss": 5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98751", "url": "https://patchblox.com/security/cve/CVE-2026-98751", "title": "tty: abort break signalling on hangup", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98753", "url": "https://patchblox.com/security/cve/CVE-2026-98753", "title": "tty: tty_port: restore TTY_IO_ERROR on activation failure", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98840", "url": "https://patchblox.com/security/cve/CVE-2026-98840", "title": "vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98771", "url": "https://patchblox.com/security/cve/CVE-2026-98771", "title": "usb: storage: sierra_ms: reject short SWoC info transfers", "priority": "Routine", "severity": "Moderate", "cvss": 4.3, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98697", "url": "https://patchblox.com/security/cve/CVE-2026-98697", "title": "USB: serial: fix dynamic id driver deregistration race", "priority": "Routine", "severity": "Low", "cvss": 1.9, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98452", "url": "https://patchblox.com/security/cve/CVE-2026-98452", "title": "smb: client: clean up failed cached directory opens", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98807", "url": "https://patchblox.com/security/cve/CVE-2026-98807", "title": "net/mlx5: Fix slab-out-of-bounds when handling team device events", "priority": "Routine", "severity": "Low", "cvss": 3.4, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98448", "url": "https://patchblox.com/security/cve/CVE-2026-98448", "title": "xfs: release orphanage dir inode if chown fails", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98793", "url": "https://patchblox.com/security/cve/CVE-2026-98793", "title": "netfilter: bpf: reject invalid NAT manipulation types", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98586", "url": "https://patchblox.com/security/cve/CVE-2026-98586", "title": "sctp: hold asoc or transport before mod_timer() in timer handlers", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98647", "url": "https://patchblox.com/security/cve/CVE-2026-98647", "title": "bpf: Fix divide-by-zero in btf_struct_walk()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98833", "url": "https://patchblox.com/security/cve/CVE-2026-98833", "title": "mtd: core: call _get_device() with the master MTD", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98607", "url": "https://patchblox.com/security/cve/CVE-2026-98607", "title": "drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99070", "url": "https://patchblox.com/security/cve/CVE-2026-99070", "title": "ipv6: do not warn on route notification size race", "priority": "Routine", "severity": "Low", "cvss": 1.9, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98773", "url": "https://patchblox.com/security/cve/CVE-2026-98773", "title": "USB: cdc-acm: skip URB restart in port_shutdown if disconnected", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99088", "url": "https://patchblox.com/security/cve/CVE-2026-99088", "title": "net: openvswitch: validate transport header presence in set_ipv6_addr", "priority": "Routine", "severity": "Low", "cvss": 2.3, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98377", "url": "https://patchblox.com/security/cve/CVE-2026-98377", "title": "vlan: require the MAC header to be present in __vlan_insert_inner_tag()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98379", "url": "https://patchblox.com/security/cve/CVE-2026-98379", "title": "netfilter: ip6t_rpfilter: reject routes without inet6_dev", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98642", "url": "https://patchblox.com/security/cve/CVE-2026-98642", "title": "bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98084", "url": "https://patchblox.com/security/cve/CVE-2026-98084", "title": "bpf: backtracking shouldn\u0027t clear outer frame R1-R5 for callbacks", "priority": "Routine", "severity": "Moderate", "cvss": 6.3, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98271", "url": "https://patchblox.com/security/cve/CVE-2026-98271", "title": "net: skbuff: do not leave stale header offsets after pskb_carve()", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98634", "url": "https://patchblox.com/security/cve/CVE-2026-98634", "title": "scsi: sd_zbc: Reject disks with too many zones", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98235", "url": "https://patchblox.com/security/cve/CVE-2026-98235", "title": "net/sched: act_api: release tail references on DELACTION failure", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98646", "url": "https://patchblox.com/security/cve/CVE-2026-98646", "title": "tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98792", "url": "https://patchblox.com/security/cve/CVE-2026-98792", "title": "netfilter: flowtable: generalize pending status bit", "priority": "Routine", "severity": "Moderate", "cvss": 5.2, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98641", "url": "https://patchblox.com/security/cve/CVE-2026-98641", "title": "bpf, arm64: set up the frame pointer for the exception callback", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98477", "url": "https://patchblox.com/security/cve/CVE-2026-98477", "title": "perf/core: Fix NULL pmu_ctx passed to pmu-\u003Esched_task()", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98947", "url": "https://patchblox.com/security/cve/CVE-2026-98947", "title": "vsock: Fix memory leak in vmci_transport_recv_dgram_cb()", "priority": "Routine", "severity": "Low", "cvss": 2.6, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98354", "url": "https://patchblox.com/security/cve/CVE-2026-98354", "title": "RDMA/mad: Fix receive buffer leak when PKey enforcement fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98373", "url": "https://patchblox.com/security/cve/CVE-2026-98373", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when s...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98854", "url": "https://patchblox.com/security/cve/CVE-2026-98854", "title": "of/overlay: only treat a positive changeset id as registered", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-99072", "url": "https://patchblox.com/security/cve/CVE-2026-99072", "title": "ipv4: stop route notification sizing when nexthop group shrinks", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98797", "url": "https://patchblox.com/security/cve/CVE-2026-98797", "title": "net: cap skb-\u003Equeue_mapping when the tx queue is picked", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98859", "url": "https://patchblox.com/security/cve/CVE-2026-98859", "title": "HID: multitouch: stop the release timer from being rearmed on remove", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98852", "url": "https://patchblox.com/security/cve/CVE-2026-98852", "title": "net: extend IPv6 exthdr detection of tunneled packets", "priority": "Routine", "severity": "Low", "cvss": 3.7, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98384", "url": "https://patchblox.com/security/cve/CVE-2026-98384", "title": "bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98161", "url": "https://patchblox.com/security/cve/CVE-2026-98161", "title": "nvdimm: pmem: keep PREFLUSH before data writes", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97618", "url": "https://patchblox.com/security/cve/CVE-2026-97618", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don\u0027t overconsume buffers when usi...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T13:56:55Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }