{ "fix": "ALAS2023-2026-3336", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3336", "summary": "ALAS2023-2026-3336, released November 7, 2026, fixes 197 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 19 packages", "released": "2026-11-07T01:06:52Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-90048, rated Critical", "supported": true, "cveCount": 197, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00745, "maxCvss": 9.8, "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2026-3336.html", "appliesTo": [ { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "bpftool-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "kernel", "productUrl": "https://patchblox.com/security/product/linux/kernel", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "kernel-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-aarch64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "kernel-debuginfo-common-x86_64", "productUrl": "https://patchblox.com/security/product/linux/kernel-debuginfo-common-x86-64", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "kernel-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "kernel-headers", "productUrl": "https://patchblox.com/security/product/linux/kernel-headers", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "kernel-livepatch-6.1.189-236.399", "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-6.1.189-236.399", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "supported": true }, { "product": "kernel-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "kernel-modules-extra-common", "productUrl": "https://patchblox.com/security/product/linux/kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "kernel-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "kernel-tools-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "kernel-tools-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "microvm-kernel", "productUrl": "https://patchblox.com/security/product/linux/microvm-kernel", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "perf", "productUrl": "https://patchblox.com/security/product/linux/perf", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "python3-perf", "productUrl": "https://patchblox.com/security/product/linux/python3-perf", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true }, { "product": "python3-perf-debuginfo", "productUrl": "https://patchblox.com/security/product/linux/python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.1.189-236.399.amzn2023", "supported": true } ], "cves": [ { "cveId": "CVE-2026-90048", "url": "https://patchblox.com/security/cve/CVE-2026-90048", "title": "fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00721, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98171", "url": "https://patchblox.com/security/cve/CVE-2026-98171", "title": "smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98167", "url": "https://patchblox.com/security/cve/CVE-2026-98167", "title": "smb: client: fix server-\u003Etotal_read for compound encrypted PDUs", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00222, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98573", "url": "https://patchblox.com/security/cve/CVE-2026-98573", "title": "net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()", "priority": "Urgent", "severity": "Critical", "cvss": 9.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98621", "url": "https://patchblox.com/security/cve/CVE-2026-98621", "title": "net: gue: reject invalid REMCSUM offsets", "priority": "Urgent", "severity": "Critical", "cvss": 9.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98319", "url": "https://patchblox.com/security/cve/CVE-2026-98319", "title": "drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98322", "url": "https://patchblox.com/security/cve/CVE-2026-98322", "title": "netfilter: nft_nat: fully initialise new_addr in netmap setup", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98301", "url": "https://patchblox.com/security/cve/CVE-2026-98301", "title": "net: bridge: mst: move switchdev call outside rcu", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98303", "url": "https://patchblox.com/security/cve/CVE-2026-98303", "title": "ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98233", "url": "https://patchblox.com/security/cve/CVE-2026-98233", "title": "net/packet: clear RX owner on VNET header error", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98255", "url": "https://patchblox.com/security/cve/CVE-2026-98255", "title": "tcp: exclude old ACKs from tcp fast path", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98221", "url": "https://patchblox.com/security/cve/CVE-2026-98221", "title": "KEYS: trusted: Fix tpm2_load_cmd() boundary check", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98249", "url": "https://patchblox.com/security/cve/CVE-2026-98249", "title": "arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98363", "url": "https://patchblox.com/security/cve/CVE-2026-98363", "title": "firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98222", "url": "https://patchblox.com/security/cve/CVE-2026-98222", "title": "KEYS: encrypted: fix integer overflow of datablob_len", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98320", "url": "https://patchblox.com/security/cve/CVE-2026-98320", "title": "netfilter: flowtable: hold reference on ct until flow is released", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98251", "url": "https://patchblox.com/security/cve/CVE-2026-98251", "title": "openvswitch: avoid reallocating confirmed conntrack labels", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98253", "url": "https://patchblox.com/security/cve/CVE-2026-98253", "title": "RDMA/ucma: Serialize join and leave on copy_to_user failure", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98252", "url": "https://patchblox.com/security/cve/CVE-2026-98252", "title": "RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98368", "url": "https://patchblox.com/security/cve/CVE-2026-98368", "title": "esp: downgrade zerocopy managed frags before mutating skb frags", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97524", "url": "https://patchblox.com/security/cve/CVE-2026-97524", "title": "mptcp: avoid unneeded actions on subflow reset", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97523", "url": "https://patchblox.com/security/cve/CVE-2026-97523", "title": "mptcp: close race between scheduler and state change", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00728, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98548", "url": "https://patchblox.com/security/cve/CVE-2026-98548", "title": "sctp: discard the rest of the packet on a stale-cookie error", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68161", "url": "https://patchblox.com/security/cve/CVE-2026-68161", "title": "sctp: close UDP tunnel sockets during netns teardown", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00682, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98550", "url": "https://patchblox.com/security/cve/CVE-2026-98550", "title": "tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00677, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89648", "url": "https://patchblox.com/security/cve/CVE-2026-89648", "title": "ceph: cap delegated inode count in ceph_parse_deleg_inos()", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00675, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98532", "url": "https://patchblox.com/security/cve/CVE-2026-98532", "title": "ipv6: do not let ipv6_find_hdr() return an offset past the packet end", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00613, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98069", "url": "https://patchblox.com/security/cve/CVE-2026-98069", "title": "net/rds: acquire the fastpath locks in rds_conn_shutdown()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00562, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97417", "url": "https://patchblox.com/security/cve/CVE-2026-97417", "title": "netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98070", "url": "https://patchblox.com/security/cve/CVE-2026-98070", "title": "net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98130", "url": "https://patchblox.com/security/cve/CVE-2026-98130", "title": "sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00453, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98169", "url": "https://patchblox.com/security/cve/CVE-2026-98169", "title": "smb: client: fix potential OOB read in smb3_enum_snapshots()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00448, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98479", "url": "https://patchblox.com/security/cve/CVE-2026-98479", "title": "scsi: libiscsi_tcp: Check the data direction of a Data-In PDU", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00392, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93787", "url": "https://patchblox.com/security/cve/CVE-2026-93787", "title": "smb: client: bound dirent name against end of SMB response in cifs_filldir", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98374", "url": "https://patchblox.com/security/cve/CVE-2026-98374", "title": "tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00293, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89796", "url": "https://patchblox.com/security/cve/CVE-2026-89796", "title": "mm/damon/core: avoid infinite kdamond_merge_regions() internal loop", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97564", "url": "https://patchblox.com/security/cve/CVE-2026-97564", "title": "smb: client: reject userspace cifs.idmap descriptions", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97598", "url": "https://patchblox.com/security/cve/CVE-2026-97598", "title": "ipv4: fib: bound automatic table ID allocation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97998", "url": "https://patchblox.com/security/cve/CVE-2026-97998", "title": "netfilter: nfnetlink_log: cope with concurrent instance destruction", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98076", "url": "https://patchblox.com/security/cve/CVE-2026-98076", "title": "tracing/probes: Fix use-after-free on field name/type of events with multiple probes", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97568", "url": "https://patchblox.com/security/cve/CVE-2026-97568", "title": "mptcp: syncookies: remember the request backup flag", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97904", "url": "https://patchblox.com/security/cve/CVE-2026-97904", "title": "cpufreq: initialize policy rwsem before sysfs publication", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98626", "url": "https://patchblox.com/security/cve/CVE-2026-98626", "title": "bpf: Restrict CO-RE poisoning to relocatable instructions", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97556", "url": "https://patchblox.com/security/cve/CVE-2026-97556", "title": "smb: client: avoid leaking refcount when cifs_sb_tlink() fails", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98104", "url": "https://patchblox.com/security/cve/CVE-2026-98104", "title": "net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98034", "url": "https://patchblox.com/security/cve/CVE-2026-98034", "title": "bpf: Mark NULL kptr stores precise", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98260", "url": "https://patchblox.com/security/cve/CVE-2026-98260", "title": "exec: Cleanup POSIX timers right after de_thread()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68289", "url": "https://patchblox.com/security/cve/CVE-2026-68289", "title": "tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98900", "url": "https://patchblox.com/security/cve/CVE-2026-98900", "title": "xen/gntalloc: validate grant count before allocation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98881", "url": "https://patchblox.com/security/cve/CVE-2026-98881", "title": "net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98902", "url": "https://patchblox.com/security/cve/CVE-2026-98902", "title": "md/raid5: let stripe batch bm_seq comparison wrap-safe", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89638", "url": "https://patchblox.com/security/cve/CVE-2026-89638", "title": "smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97959", "url": "https://patchblox.com/security/cve/CVE-2026-97959", "title": "net/sched: cls_route: free emptied bucket on filter move", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97995", "url": "https://patchblox.com/security/cve/CVE-2026-97995", "title": "virtio_console: do not free control-out buffers on remove", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98011", "url": "https://patchblox.com/security/cve/CVE-2026-98011", "title": "net/sched: hhf: clamp quantum in change and init paths", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98015", "url": "https://patchblox.com/security/cve/CVE-2026-98015", "title": "net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98074", "url": "https://patchblox.com/security/cve/CVE-2026-98074", "title": "bonding: do not clear curr_active_slave prematurely when releasing all slaves", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98342", "url": "https://patchblox.com/security/cve/CVE-2026-98342", "title": "dmaengine: wait for RCU readers before releasing dma_device", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98343", "url": "https://patchblox.com/security/cve/CVE-2026-98343", "title": "dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97951", "url": "https://patchblox.com/security/cve/CVE-2026-97951", "title": "scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98063", "url": "https://patchblox.com/security/cve/CVE-2026-98063", "title": "bpf: Fix NULL-ptr-deref in btf_var_show()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98064", "url": "https://patchblox.com/security/cve/CVE-2026-98064", "title": "bpf: Fix NULL-ptr-deref when showing a void BTF type", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98072", "url": "https://patchblox.com/security/cve/CVE-2026-98072", "title": "net/rds: use wq_has_sleeper() in release_in_xmit()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98201", "url": "https://patchblox.com/security/cve/CVE-2026-98201", "title": "Input: zero ff_effect before compat copy in input_ff_effect_from_user", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98234", "url": "https://patchblox.com/security/cve/CVE-2026-98234", "title": "net/sched: hhf: cap hh_flows_limit at change time", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98068", "url": "https://patchblox.com/security/cve/CVE-2026-98068", "title": "net/rds: don\u0027t let rds_conn_shutdown() consume a concurrent drop", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98089", "url": "https://patchblox.com/security/cve/CVE-2026-98089", "title": "bonding: alb: fix uninitialized transport header access in alb_determine_nd()", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93785", "url": "https://patchblox.com/security/cve/CVE-2026-93785", "title": "cifs: validate idmap key payload length", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97441", "url": "https://patchblox.com/security/cve/CVE-2026-97441", "title": "ata: ahci: fail probe if BAR too small for claimed ports", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97964", "url": "https://patchblox.com/security/cve/CVE-2026-97964", "title": "ppp_synctty: ensure a writeable skb header", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98016", "url": "https://patchblox.com/security/cve/CVE-2026-98016", "title": "net/mlx5e: Fix use-after-free race in sample_restore_put()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98014", "url": "https://patchblox.com/security/cve/CVE-2026-98014", "title": "net/mlx5: E-Switch, prevent mc_list repopulation during vport disable", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98046", "url": "https://patchblox.com/security/cve/CVE-2026-98046", "title": "bpf: Mark bpf_btf_find_by_name_kind() as sleepable", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98075", "url": "https://patchblox.com/security/cve/CVE-2026-98075", "title": "bpf: reject BPF_PSEUDO_FUNC reference to the main program", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98485", "url": "https://patchblox.com/security/cve/CVE-2026-98485", "title": "netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97430", "url": "https://patchblox.com/security/cve/CVE-2026-97430", "title": "xhci: Prevent queuing new commands if xhci is inaccessible", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98088", "url": "https://patchblox.com/security/cve/CVE-2026-98088", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumask_of_no...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97612", "url": "https://patchblox.com/security/cve/CVE-2026-97612", "title": "net: mpls: clear inner_protocol when the last label is popped", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97940", "url": "https://patchblox.com/security/cve/CVE-2026-97940", "title": "ipv6: fix fib6 walker UAF on seq stop", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98491", "url": "https://patchblox.com/security/cve/CVE-2026-98491", "title": "net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98899", "url": "https://patchblox.com/security/cve/CVE-2026-98899", "title": "netfilter: ipset: mark the rcu locked areas properly", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90227", "url": "https://patchblox.com/security/cve/CVE-2026-90227", "title": "nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97611", "url": "https://patchblox.com/security/cve/CVE-2026-97611", "title": "net: openvswitch: fix use-after-free of the flow table mask array", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98383", "url": "https://patchblox.com/security/cve/CVE-2026-98383", "title": "bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97445", "url": "https://patchblox.com/security/cve/CVE-2026-97445", "title": "ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98078", "url": "https://patchblox.com/security/cve/CVE-2026-98078", "title": "ipvs: fix reversed sequence option serialization", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97608", "url": "https://patchblox.com/security/cve/CVE-2026-97608", "title": "netfilter: nf_log: unregister loggers before per-net teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97450", "url": "https://patchblox.com/security/cve/CVE-2026-97450", "title": "ACPICA: validate handler object type in two places", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97451", "url": "https://patchblox.com/security/cve/CVE-2026-97451", "title": "ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97452", "url": "https://patchblox.com/security/cve/CVE-2026-97452", "title": "ACPICA: Prevent adding invalid references", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97444", "url": "https://patchblox.com/security/cve/CVE-2026-97444", "title": "ACPICA: add boundary checks in two places", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97454", "url": "https://patchblox.com/security/cve/CVE-2026-97454", "title": "ACPICA: add boundary checks in acpi_ps_get_next_field()", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97455", "url": "https://patchblox.com/security/cve/CVE-2026-97455", "title": "ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97448", "url": "https://patchblox.com/security/cve/CVE-2026-97448", "title": "ACPICA: Add validation for node in acpi_ns_build_normalized_path()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97437", "url": "https://patchblox.com/security/cve/CVE-2026-97437", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfs_dir_emit()...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98369", "url": "https://patchblox.com/security/cve/CVE-2026-98369", "title": "xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98080", "url": "https://patchblox.com/security/cve/CVE-2026-98080", "title": "btrfs: do not force reloc root creation during qgroup_account_snapshot()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97415", "url": "https://patchblox.com/security/cve/CVE-2026-97415", "title": "btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97438", "url": "https://patchblox.com/security/cve/CVE-2026-97438", "title": "fs/ntfs3: validate index entry key bounds", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93288", "url": "https://patchblox.com/security/cve/CVE-2026-93288", "title": "netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93817", "url": "https://patchblox.com/security/cve/CVE-2026-93817", "title": "perf: Fix addr_filter_ranges lifetime", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93287", "url": "https://patchblox.com/security/cve/CVE-2026-93287", "title": "i2c: smbus: reject oversized block transfers in the common path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93798", "url": "https://patchblox.com/security/cve/CVE-2026-93798", "title": "btrfs: fix reloc root cleanup in merge_reloc_roots()", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93813", "url": "https://patchblox.com/security/cve/CVE-2026-93813", "title": "btrfs: tree-checker: validate INODE_REF\u0027s namelen", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97421", "url": "https://patchblox.com/security/cve/CVE-2026-97421", "title": "RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98017", "url": "https://patchblox.com/security/cve/CVE-2026-98017", "title": "net/sched: defer qdisc freeing after failed creation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98241", "url": "https://patchblox.com/security/cve/CVE-2026-98241", "title": "ipv6: xfrm: use full sockets in local error paths", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74496", "url": "https://patchblox.com/security/cve/CVE-2026-74496", "title": "fou: Fix use-after-free in fou_create()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74289", "url": "https://patchblox.com/security/cve/CVE-2026-74289", "title": "ipv4: fib: Don\u0027t dump dying fib_info in fib_leaf_notify().", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98023", "url": "https://patchblox.com/security/cve/CVE-2026-98023", "title": "vxlan: reject dynamic fdb entries that reference a nexthop id", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98276", "url": "https://patchblox.com/security/cve/CVE-2026-98276", "title": "net: lock the socket in sock_gettstamp()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98381", "url": "https://patchblox.com/security/cve/CVE-2026-98381", "title": "veth: manage XDP program pointers during channel resize", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98095", "url": "https://patchblox.com/security/cve/CVE-2026-98095", "title": "af_packet: Don\u0027t cast tpacket_hdr.tp_len to int in tpacket_parse_header().", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98364", "url": "https://patchblox.com/security/cve/CVE-2026-98364", "title": "xfrm: hold net_device reference under RCU in bundle creation", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93810", "url": "https://patchblox.com/security/cve/CVE-2026-93810", "title": "cachefiles: Fix double fput", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98098", "url": "https://patchblox.com/security/cve/CVE-2026-98098", "title": "tipc: fix NULL deref in tipc_named_node_up() on empty publication list", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98378", "url": "https://patchblox.com/security/cve/CVE-2026-98378", "title": "bpf: Skip unsettled links in link iterator", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98359", "url": "https://patchblox.com/security/cve/CVE-2026-98359", "title": "RDMA/core: Reject unregistering netdevs in ib_get_eth_speed", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00116, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98158", "url": "https://patchblox.com/security/cve/CVE-2026-98158", "title": "ppp_async: drop the errored frame instead of resetting its headroom", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98413", "url": "https://patchblox.com/security/cve/CVE-2026-98413", "title": "selinux: always fill AVC decision in avc_has_perm_noaudit()", "priority": "Routine", "severity": "Low", "cvss": 6.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98537", "url": "https://patchblox.com/security/cve/CVE-2026-98537", "title": "workqueue: Fix NULL current_pwq deref in flush dependency check", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98531", "url": "https://patchblox.com/security/cve/CVE-2026-98531", "title": "ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98567", "url": "https://patchblox.com/security/cve/CVE-2026-98567", "title": "net: xps: reject an out of range traffic class", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98590", "url": "https://patchblox.com/security/cve/CVE-2026-98590", "title": "bpf: Fix bpf_sock context code generation", "priority": "Routine", "severity": "Moderate", "cvss": 6.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98495", "url": "https://patchblox.com/security/cve/CVE-2026-98495", "title": "net: arp: terminate device name before lookup", "priority": "Routine", "severity": "Low", "cvss": 6.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98541", "url": "https://patchblox.com/security/cve/CVE-2026-98541", "title": "fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98610", "url": "https://patchblox.com/security/cve/CVE-2026-98610", "title": "net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97905", "url": "https://patchblox.com/security/cve/CVE-2026-97905", "title": "cpufreq: zero-initialize policy cpumask before sysfs publication", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98077", "url": "https://patchblox.com/security/cve/CVE-2026-98077", "title": "netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98388", "url": "https://patchblox.com/security/cve/CVE-2026-98388", "title": "exec: do_close_on_exec() before taking exec_update_lock", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98554", "url": "https://patchblox.com/security/cve/CVE-2026-98554", "title": "vlan: ensure sufficient headroom in vlan_dev_hard_header()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97596", "url": "https://patchblox.com/security/cve/CVE-2026-97596", "title": "ipvs: reject invalid states in connection template sync records", "priority": "Routine", "severity": "Moderate", "cvss": 4.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98404", "url": "https://patchblox.com/security/cve/CVE-2026-98404", "title": "drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98547", "url": "https://patchblox.com/security/cve/CVE-2026-98547", "title": "af_packet: fix integer overflow in prb_calc_retire_blk_tmo()", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98569", "url": "https://patchblox.com/security/cve/CVE-2026-98569", "title": "ip_gre: Reject enabling collect metadata through changelink", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98553", "url": "https://patchblox.com/security/cve/CVE-2026-98553", "title": "autofs: fix sbi-\u003Epipe file reference leak in autofs_kill_sb()", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98521", "url": "https://patchblox.com/security/cve/CVE-2026-98521", "title": "drm/i915: fix incorrect RCU teardown order", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98536", "url": "https://patchblox.com/security/cve/CVE-2026-98536", "title": "writeback: report a Tasks-RCU quiescent state per cgwb drain pass", "priority": "Routine", "severity": "Moderate", "cvss": 4.1, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97925", "url": "https://patchblox.com/security/cve/CVE-2026-97925", "title": "tick/broadcast: Plug clockevents replacement race", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98606", "url": "https://patchblox.com/security/cve/CVE-2026-98606", "title": "drm/virtio: release the GEM object on virtio_gpu_vram_create() errors", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98588", "url": "https://patchblox.com/security/cve/CVE-2026-98588", "title": "bpf, sockmap: Reject max_entries \u003E INT_MAX in sock_map_alloc", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98625", "url": "https://patchblox.com/security/cve/CVE-2026-98625", "title": "netfilter: flowtable: publish HW_DEAD after worker is done", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72402", "url": "https://patchblox.com/security/cve/CVE-2026-72402", "title": "bpf: Mask pseudo pointer values in verifier logs", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98643", "url": "https://patchblox.com/security/cve/CVE-2026-98643", "title": "bpf: Fix out-of-bounds read of rtt_min in sock_ops", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98631", "url": "https://patchblox.com/security/cve/CVE-2026-98631", "title": "xsk: Use a 32-bit compare in xsk_map_gen_lookup", "priority": "Routine", "severity": "Moderate", "cvss": 6, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98644", "url": "https://patchblox.com/security/cve/CVE-2026-98644", "title": "bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98629", "url": "https://patchblox.com/security/cve/CVE-2026-98629", "title": "net/sched: cls_u32: fix manual hash table handle IDR aliasing", "priority": "Routine", "severity": "Low", "cvss": 3.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98925", "url": "https://patchblox.com/security/cve/CVE-2026-98925", "title": "bpf, sockmap: Fix self-redirect copied_seq double-counting", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98888", "url": "https://patchblox.com/security/cve/CVE-2026-98888", "title": "arm64: kprobes: Allow reentering kprobes while single-stepping", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98306", "url": "https://patchblox.com/security/cve/CVE-2026-98306", "title": "seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98877", "url": "https://patchblox.com/security/cve/CVE-2026-98877", "title": "irqchip/gic-v4: Don\u0027t advertise VLPIs if no ITS is probed", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98873", "url": "https://patchblox.com/security/cve/CVE-2026-98873", "title": "netfilter: nf_conntrack_expect: zero at allocation time", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98879", "url": "https://patchblox.com/security/cve/CVE-2026-98879", "title": "isofs: handle set_blocksize failures", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98885", "url": "https://patchblox.com/security/cve/CVE-2026-98885", "title": "ima: return error early if file xattr cannot be changed", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98010", "url": "https://patchblox.com/security/cve/CVE-2026-98010", "title": "net/sched: drr: clamp quantum in change class", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98205", "url": "https://patchblox.com/security/cve/CVE-2026-98205", "title": "Input: evdev - zero absinfo before partial copy in EVIOCSABS", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98614", "url": "https://patchblox.com/security/cve/CVE-2026-98614", "title": "sctp: avoid livelock while updating retransmit path", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97899", "url": "https://patchblox.com/security/cve/CVE-2026-97899", "title": "drm/i915: Fix memory leak in query_perf_config_list()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97958", "url": "https://patchblox.com/security/cve/CVE-2026-97958", "title": "net/sched: cls_api: Don\u0027t replay RTM_GETCHAIN in tc_ctl_chain().", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98012", "url": "https://patchblox.com/security/cve/CVE-2026-98012", "title": "net/sched: sfq: clamp quantum in change path", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98022", "url": "https://patchblox.com/security/cve/CVE-2026-98022", "title": "net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98071", "url": "https://patchblox.com/security/cve/CVE-2026-98071", "title": "net/rds: clear cp_flags bits individually in rds_conn_path_reset()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98262", "url": "https://patchblox.com/security/cve/CVE-2026-98262", "title": "ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98299", "url": "https://patchblox.com/security/cve/CVE-2026-98299", "title": "tcp: do not let tcp_rmem be set below 4096", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98300", "url": "https://patchblox.com/security/cve/CVE-2026-98300", "title": "tcp: Don\u0027t call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98344", "url": "https://patchblox.com/security/cve/CVE-2026-98344", "title": "dmaengine: Fix device kref underflow in dma_chan_put()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98380", "url": "https://patchblox.com/security/cve/CVE-2026-98380", "title": "net/sched: reject IDR error pointers when deleting actions", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98608", "url": "https://patchblox.com/security/cve/CVE-2026-98608", "title": "drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98609", "url": "https://patchblox.com/security/cve/CVE-2026-98609", "title": "drm/virtio: fix object leak when drm_gem_handle_create() fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98624", "url": "https://patchblox.com/security/cve/CVE-2026-98624", "title": "netfilter: nfnetlink_queue: hold nfnl mutex in event notifier", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98636", "url": "https://patchblox.com/security/cve/CVE-2026-98636", "title": "squashfs: Add dictionary size range check to prevent shift-out-of-bounds", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93800", "url": "https://patchblox.com/security/cve/CVE-2026-93800", "title": "btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97416", "url": "https://patchblox.com/security/cve/CVE-2026-97416", "title": "btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97476", "url": "https://patchblox.com/security/cve/CVE-2026-97476", "title": "rds: filter RDS_INFO_* getsockopt by caller\u0027s netns", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98586", "url": "https://patchblox.com/security/cve/CVE-2026-98586", "title": "sctp: hold asoc or transport before mod_timer() in timer handlers", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97439", "url": "https://patchblox.com/security/cve/CVE-2026-97439", "title": "fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib", "priority": "Routine", "severity": "Moderate", "cvss": 5.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97456", "url": "https://patchblox.com/security/cve/CVE-2026-97456", "title": "ACPICA: Fix condition check in acpi_ps_parse_loop()", "priority": "Routine", "severity": "Moderate", "cvss": 5.6, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97481", "url": "https://patchblox.com/security/cve/CVE-2026-97481", "title": "serial: 8250: fix possible ISR soft lockup", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97483", "url": "https://patchblox.com/security/cve/CVE-2026-97483", "title": "usb: core: hcd: fix possible deadlock in rh control transfers", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98031", "url": "https://patchblox.com/security/cve/CVE-2026-98031", "title": "nexthop: Initialize extack in remove_nh_grp_entry()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98647", "url": "https://patchblox.com/security/cve/CVE-2026-98647", "title": "bpf: Fix divide-by-zero in btf_struct_walk()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97453", "url": "https://patchblox.com/security/cve/CVE-2026-97453", "title": "ACPICA: validate byte_count in acpi_ps_get_next_package_length()", "priority": "Routine", "severity": "Moderate", "cvss": 5.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97484", "url": "https://patchblox.com/security/cve/CVE-2026-97484", "title": "usbip: vhci_hcd: fix NULL deref in status_show_vhci", "priority": "Routine", "severity": "Moderate", "cvss": 5.1, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93795", "url": "https://patchblox.com/security/cve/CVE-2026-93795", "title": "blk-cgroup: fix leaks and online flag on radix_tree_insert failure", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97446", "url": "https://patchblox.com/security/cve/CVE-2026-97446", "title": "ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97420", "url": "https://patchblox.com/security/cve/CVE-2026-97420", "title": "bpf: NUL-terminate replaced sysctl value", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97472", "url": "https://patchblox.com/security/cve/CVE-2026-97472", "title": "ipv6: addrconf: fix temp address generation after prefix deprecation", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97449", "url": "https://patchblox.com/security/cve/CVE-2026-97449", "title": "ACPICA: Add package limit checks in parser functions", "priority": "Routine", "severity": "Moderate", "cvss": 4, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98607", "url": "https://patchblox.com/security/cve/CVE-2026-98607", "title": "drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98379", "url": "https://patchblox.com/security/cve/CVE-2026-98379", "title": "netfilter: ip6t_rpfilter: reject routes without inet6_dev", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93824", "url": "https://patchblox.com/security/cve/CVE-2026-93824", "title": "tls: reject the combination of TLS and sockmap", "priority": "Routine", "severity": "Low", "cvss": 6.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93781", "url": "https://patchblox.com/security/cve/CVE-2026-93781", "title": "scsi: core: Do not block on tag allocation in scsi_eh_lock_door()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98354", "url": "https://patchblox.com/security/cve/CVE-2026-98354", "title": "RDMA/mad: Fix receive buffer leak when PKey enforcement fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98090", "url": "https://patchblox.com/security/cve/CVE-2026-98090", "title": "btrfs: restore active device pointers after failed sprout", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98091", "url": "https://patchblox.com/security/cve/CVE-2026-98091", "title": "btrfs: detach failed sprout device from transaction update list", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98157", "url": "https://patchblox.com/security/cve/CVE-2026-98157", "title": "EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98123", "url": "https://patchblox.com/security/cve/CVE-2026-98123", "title": "sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T07:50:38Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }