{ "fix": "ELSA-2026-500248", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500248", "summary": "ELSA-2026-500248, released September 4, 2026, fixes 1,162 CVEs across 35 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.", "platform": "linux", "type": "advisory", "title": "Security update for 35 packages", "released": "2026-09-04T00:00:00Z", "priority": "Patch now", "priorityTier": 1, "priorityReason": "Closes CVE-2026-53266, exploited (CISA KEV)", "supported": true, "cveCount": 1162, "exploitedCveCount": 1, "kevCveCount": 1, "ransomwareCveCount": 0, "maxEpss": 0.01467, "maxCvss": 10, "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2026-500248.html", "appliesTo": [ { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-206.104.3.3.el9uek", "supported": true } ], "cves": [ { "cveId": "CVE-2026-53266", "url": "https://patchblox.com/security/cve/CVE-2026-53266", "title": "netfilter: bridge: make ebt_snat ARP rewrite writable", "priority": "Patch now", "severity": "Moderate", "cvss": 8.8, "epss": 0.00934, "kev": true, "ransomware": false, "exploited": true, "disclosed": false }, { "cveId": "CVE-2026-64564", "url": "https://patchblox.com/security/cve/CVE-2026-64564", "title": "sctp: don\u0027t free the ASCONF\u0027s own transport in DEL-IP processing", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.01432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72130", "url": "https://patchblox.com/security/cve/CVE-2026-72130", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers n...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00803, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68160", "url": "https://patchblox.com/security/cve/CVE-2026-68160", "title": "ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00772, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74279", "url": "https://patchblox.com/security/cve/CVE-2026-74279", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong...", "priority": "Urgent", "severity": "critical", "cvss": 10, "epss": 0.00755, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72226", "url": "https://patchblox.com/security/cve/CVE-2026-72226", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00755, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74427", "url": "https://patchblox.com/security/cve/CVE-2026-74427", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00755, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72084", "url": "https://patchblox.com/security/cve/CVE-2026-72084", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72299", "url": "https://patchblox.com/security/cve/CVE-2026-72299", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tra...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72319", "url": "https://patchblox.com/security/cve/CVE-2026-72319", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72339", "url": "https://patchblox.com/security/cve/CVE-2026-72339", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on b...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72351", "url": "https://patchblox.com/security/cve/CVE-2026-72351", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72466", "url": "https://patchblox.com/security/cve/CVE-2026-72466", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74287", "url": "https://patchblox.com/security/cve/CVE-2026-74287", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00735, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72234", "url": "https://patchblox.com/security/cve/CVE-2026-72234", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb-\u003Edata only a...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00734, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72065", "url": "https://patchblox.com/security/cve/CVE-2026-72065", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported b...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00728, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72322", "url": "https://patchblox.com/security/cve/CVE-2026-72322", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed wo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72323", "url": "https://patchblox.com/security/cve/CVE-2026-72323", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72491", "url": "https://patchblox.com/security/cve/CVE-2026-72491", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-\u003Estate in tra...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72014", "url": "https://patchblox.com/security/cve/CVE-2026-72014", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range p...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00723, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72473", "url": "https://patchblox.com/security/cve/CVE-2026-72473", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC comple...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00721, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68476", "url": "https://patchblox.com/security/cve/CVE-2026-68476", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68477", "url": "https://patchblox.com/security/cve/CVE-2026-68477", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72020", "url": "https://patchblox.com/security/cve/CVE-2026-72020", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72129", "url": "https://patchblox.com/security/cve/CVE-2026-72129", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero of...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72251", "url": "https://patchblox.com/security/cve/CVE-2026-72251", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74267", "url": "https://patchblox.com/security/cve/CVE-2026-74267", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_red...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72436", "url": "https://patchblox.com/security/cve/CVE-2026-72436", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don\u0027t use test_bit() in lockle...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00712, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74401", "url": "https://patchblox.com/security/cve/CVE-2026-74401", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dlm: fix add msg handle in send_queue ordered I...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00701, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72451", "url": "https://patchblox.com/security/cve/CVE-2026-72451", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The x...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00671, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63800", "url": "https://patchblox.com/security/cve/CVE-2026-63800", "title": "pNFS: Fix use-after-free in pnfs_update_layout()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00644, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72317", "url": "https://patchblox.com/security/cve/CVE-2026-72317", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connec...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00644, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72046", "url": "https://patchblox.com/security/cve/CVE-2026-72046", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gve: fix header buffer corruption with header-sp...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72217", "url": "https://patchblox.com/security/cve/CVE-2026-72217", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores bef...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72221", "url": "https://patchblox.com/security/cve/CVE-2026-72221", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callbac...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72222", "url": "https://patchblox.com/security/cve/CVE-2026-72222", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64122", "url": "https://patchblox.com/security/cve/CVE-2026-64122", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_report...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00631, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72348", "url": "https://patchblox.com/security/cve/CVE-2026-72348", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extens...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00626, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72318", "url": "https://patchblox.com/security/cve/CVE-2026-72318", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets pars...", "priority": "Urgent", "severity": "critical", "cvss": 9.4, "epss": 0.00586, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72421", "url": "https://patchblox.com/security/cve/CVE-2026-72421", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don\u0027t ignore error route in local/mai...", "priority": "Urgent", "severity": "critical", "cvss": 10, "epss": 0.00571, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64319", "url": "https://patchblox.com/security/cve/CVE-2026-64319", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bound...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00563, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64535", "url": "https://patchblox.com/security/cve/CVE-2026-64535", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00547, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74394", "url": "https://patchblox.com/security/cve/CVE-2026-74394", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate dat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.0054, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68131", "url": "https://patchblox.com/security/cve/CVE-2026-68131", "title": "rbd: Reset positive result codes to zero in object map update path", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53384", "url": "https://patchblox.com/security/cve/CVE-2026-53384", "title": "serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00515, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63984", "url": "https://patchblox.com/security/cve/CVE-2026-63984", "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74384", "url": "https://patchblox.com/security/cve/CVE-2026-74384", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nv...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74398", "url": "https://patchblox.com/security/cve/CVE-2026-74398", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad_failure when sta...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74406", "url": "https://patchblox.com/security/cve/CVE-2026-74406", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64551", "url": "https://patchblox.com/security/cve/CVE-2026-64551", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53215", "url": "https://patchblox.com/security/cve/CVE-2026-53215", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53216", "url": "https://patchblox.com/security/cve/CVE-2026-53216", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74376", "url": "https://patchblox.com/security/cve/CVE-2026-74376", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio f...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74255", "url": "https://patchblox.com/security/cve/CVE-2026-74255", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc_l2_send_msg() Syzbot repo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64000", "url": "https://patchblox.com/security/cve/CVE-2026-64000", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervisio...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64091", "url": "https://patchblox.com/security/cve/CVE-2026-64091", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00426, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74436", "url": "https://patchblox.com/security/cve/CVE-2026-74436", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: rxrpc: serialize kernel accept preallocation wit...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74665", "url": "https://patchblox.com/security/cve/CVE-2026-74665", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00373, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68121", "url": "https://patchblox.com/security/cve/CVE-2026-68121", "title": "pppoe: reload header pointer after dev_hard_header()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00367, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63974", "url": "https://patchblox.com/security/cve/CVE-2026-63974", "title": "Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64534", "url": "https://patchblox.com/security/cve/CVE-2026-64534", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_un...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00323, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53175", "url": "https://patchblox.com/security/cve/CVE-2026-53175", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the fq...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00313, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53260", "url": "https://patchblox.com/security/cve/CVE-2026-53260", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in re...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68198", "url": "https://patchblox.com/security/cve/CVE-2026-68198", "title": "wifi: ath6kl: fix use-after-free in aggr_reset_state()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68402", "url": "https://patchblox.com/security/cve/CVE-2026-68402", "title": "wifi: cfg80211: bound element ID read when checking non-inheritance", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52934", "url": "https://patchblox.com/security/cve/CVE-2026-52934", "title": "batman-adv: tvlv: reject oversized TVLV packets", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00244, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63882", "url": "https://patchblox.com/security/cve/CVE-2026-63882", "title": "drm/amdkfd: fix NULL pointer bug in svm_range_set_attr", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68212", "url": "https://patchblox.com/security/cve/CVE-2026-68212", "title": "media: saa7134: Fix a possible memory leak in saa7134_video_init1", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68214", "url": "https://patchblox.com/security/cve/CVE-2026-68214", "title": "media: rtl2832: fix use-after-free in rtl2832_remove()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68218", "url": "https://patchblox.com/security/cve/CVE-2026-68218", "title": "media: pci: dm1105: Free allocated workqueue", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68180", "url": "https://patchblox.com/security/cve/CVE-2026-68180", "title": "intel_th: fix MSC output device reference leak", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68166", "url": "https://patchblox.com/security/cve/CVE-2026-68166", "title": "userfaultfd: prevent registration of special VMAs", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68349", "url": "https://patchblox.com/security/cve/CVE-2026-68349", "title": "wifi: carl9170: fix buffer overflow in rx_stream failover path", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63939", "url": "https://patchblox.com/security/cve/CVE-2026-63939", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63938", "url": "https://patchblox.com/security/cve/CVE-2026-63938", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74439", "url": "https://patchblox.com/security/cve/CVE-2026-74439", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing dow...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63881", "url": "https://patchblox.com/security/cve/CVE-2026-63881", "title": "drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68146", "url": "https://patchblox.com/security/cve/CVE-2026-68146", "title": "ftrace: Add global mutex to serialize trace_parser access", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68325", "url": "https://patchblox.com/security/cve/CVE-2026-68325", "title": "iommu/amd: Bound the early ACPI HID map", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68406", "url": "https://patchblox.com/security/cve/CVE-2026-68406", "title": "wifi: cfg80211: validate PMSR FTM preamble range", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72085", "url": "https://patchblox.com/security/cve/CVE-2026-72085", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free unsubmitted command in...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68310", "url": "https://patchblox.com/security/cve/CVE-2026-68310", "title": "wifi: mt76: mt7915: guard HE capability lookups", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68407", "url": "https://patchblox.com/security/cve/CVE-2026-68407", "title": "wifi: nl80211: free RNR data on MBSSID mismatch", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63824", "url": "https://patchblox.com/security/cve/CVE-2026-63824", "title": "KEYS: fix overflow in keyctl_pkey_params_get_2()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63983", "url": "https://patchblox.com/security/cve/CVE-2026-63983", "title": "net/sched: fix packet loop on netem when duplicate is on", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64562", "url": "https://patchblox.com/security/cve/CVE-2026-64562", "title": "KVM: nVMX: Hide shadow VMCS right after VMCLEAR", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74712", "url": "https://patchblox.com/security/cve/CVE-2026-74712", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create_direct_ke...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74310", "url": "https://patchblox.com/security/cve/CVE-2026-74310", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vhost/net: complete zerocopy ubufs only once vh...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74517", "url": "https://patchblox.com/security/cve/CVE-2026-74517", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Cancel delayed I/O APIC EOI handling b...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53403", "url": "https://patchblox.com/security/cve/CVE-2026-53403", "title": "fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68391", "url": "https://patchblox.com/security/cve/CVE-2026-68391", "title": "Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68377", "url": "https://patchblox.com/security/cve/CVE-2026-68377", "title": "net/sched: act_tunnel_key: Defer dst_release to RCU callback", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68153", "url": "https://patchblox.com/security/cve/CVE-2026-68153", "title": "libceph: remove debugfs files before client teardown", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68236", "url": "https://patchblox.com/security/cve/CVE-2026-68236", "title": "drm/amd/display: set new_stream to NULL after release", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68142", "url": "https://patchblox.com/security/cve/CVE-2026-68142", "title": "geneve: require CAP_NET_ADMIN in the device netns for changelink", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68143", "url": "https://patchblox.com/security/cve/CVE-2026-68143", "title": "net: slip: serialize receive against buffer reallocation", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52947", "url": "https://patchblox.com/security/cve/CVE-2026-52947", "title": "net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00106, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74469", "url": "https://patchblox.com/security/cve/CVE-2026-74469", "title": "sctp: prevent peer transport count overflow", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.01467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63913", "url": "https://patchblox.com/security/cve/CVE-2026-63913", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00971, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52929", "url": "https://patchblox.com/security/cve/CVE-2026-52929", "title": "sctp: stream: fully roll back denied add-stream state", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00873, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64320", "url": "https://patchblox.com/security/cve/CVE-2026-64320", "title": "nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00803, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53176", "url": "https://patchblox.com/security/cve/CVE-2026-53176", "title": "IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00761, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72083", "url": "https://patchblox.com/security/cve/CVE-2026-72083", "title": "kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72374", "url": "https://patchblox.com/security/cve/CVE-2026-72374", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pas...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72378", "url": "https://patchblox.com/security/cve/CVE-2026-72378", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afs_extract_vl_addrs() T...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72409", "url": "https://patchblox.com/security/cve/CVE-2026-72409", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resum...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72418", "url": "https://patchblox.com/security/cve/CVE-2026-72418", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: prevent connlimit drops...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72502", "url": "https://patchblox.com/security/cve/CVE-2026-72502", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74321", "url": "https://patchblox.com/security/cve/CVE-2026-74321", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrf...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63912", "url": "https://patchblox.com/security/cve/CVE-2026-63912", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63922", "url": "https://patchblox.com/security/cve/CVE-2026-63922", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63924", "url": "https://patchblox.com/security/cve/CVE-2026-63924", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68154", "url": "https://patchblox.com/security/cve/CVE-2026-68154", "title": "libceph: reject zero bucket types in crush_decode", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68158", "url": "https://patchblox.com/security/cve/CVE-2026-68158", "title": "libceph: Fix multiplication overflow in decode_new_up_state_weight()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68155", "url": "https://patchblox.com/security/cve/CVE-2026-68155", "title": "libceph: Reject monmaps advertising zero monitors", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72242", "url": "https://patchblox.com/security/cve/CVE-2026-72242", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68157", "url": "https://patchblox.com/security/cve/CVE-2026-68157", "title": "libceph: guard missing CRUSH type name lookup", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72247", "url": "https://patchblox.com/security/cve/CVE-2026-72247", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72253", "url": "https://patchblox.com/security/cve/CVE-2026-72253", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst()...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74282", "url": "https://patchblox.com/security/cve/CVE-2026-74282", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68156", "url": "https://patchblox.com/security/cve/CVE-2026-68156", "title": "libceph: refresh auth-\u003Eauthorizer_buf{,_len} after authorizer update", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72465", "url": "https://patchblox.com/security/cve/CVE-2026-72465", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00684, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68161", "url": "https://patchblox.com/security/cve/CVE-2026-68161", "title": "sctp: close UDP tunnel sockets during netns teardown", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00682, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74281", "url": "https://patchblox.com/security/cve/CVE-2026-74281", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer b...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0068, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72231", "url": "https://patchblox.com/security/cve/CVE-2026-72231", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pend...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00677, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72464", "url": "https://patchblox.com/security/cve/CVE-2026-72464", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed r...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00675, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53151", "url": "https://patchblox.com/security/cve/CVE-2026-53151", "title": "rxrpc: Fix the ACK parser to extract the SACK table for parsing", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00671, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63968", "url": "https://patchblox.com/security/cve/CVE-2026-63968", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_select_...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00665, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72254", "url": "https://patchblox.com/security/cve/CVE-2026-72254", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: reject fib expression on the...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00665, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53399", "url": "https://patchblox.com/security/cve/CVE-2026-53399", "title": "nfsd: release layout stid on setlease failure", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00663, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52924", "url": "https://patchblox.com/security/cve/CVE-2026-52924", "title": "sctp: purge outqueue on stale COOKIE-ECHO handling", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00659, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64530", "url": "https://patchblox.com/security/cve/CVE-2026-64530", "title": "net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00655, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72472", "url": "https://patchblox.com/security/cve/CVE-2026-72472", "title": "nfs: use nfsi-\u003Erwsem to protect traversal of the file lock list", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00652, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63919", "url": "https://patchblox.com/security/cve/CVE-2026-63919", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.0065, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72107", "url": "https://patchblox.com/security/cve/CVE-2026-72107", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm era: fix out-of-bounds memory access for non-...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0065, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72160", "url": "https://patchblox.com/security/cve/CVE-2026-72160", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical i_mode...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0065, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72420", "url": "https://patchblox.com/security/cve/CVE-2026-72420", "title": "md/raid5: avoid R5_Overlap races while breaking stripe batches", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00648, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72310", "url": "https://patchblox.com/security/cve/CVE-2026-72310", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl b...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00643, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53394", "url": "https://patchblox.com/security/cve/CVE-2026-53394", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on u...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0063, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72356", "url": "https://patchblox.com/security/cve/CVE-2026-72356", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in c...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0063, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72373", "url": "https://patchblox.com/security/cve/CVE-2026-72373", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs_break...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0063, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74316", "url": "https://patchblox.com/security/cve/CVE-2026-74316", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4_drop_revoked_s...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0063, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74435", "url": "https://patchblox.com/security/cve/CVE-2026-74435", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: rxrpc: rxrpc_verify_data ensure rx_dec_buffer al...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0063, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72330", "url": "https://patchblox.com/security/cve/CVE-2026-72330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_re...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00622, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63795", "url": "https://patchblox.com/security/cve/CVE-2026-63795", "title": "9p: avoid putting oldfid in p9_client_walk() error path", "priority": "High", "severity": "Moderate", "cvss": 10, "epss": 0.00615, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68376", "url": "https://patchblox.com/security/cve/CVE-2026-68376", "title": "sctp: fix auth_hmacs array size in struct sctp_cookie", "priority": "High", "severity": "Low", "cvss": 8.1, "epss": 0.00605, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72021", "url": "https://patchblox.com/security/cve/CVE-2026-72021", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72035", "url": "https://patchblox.com/security/cve/CVE-2026-72035", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: Replace direct dequeue ca...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63796", "url": "https://patchblox.com/security/cve/CVE-2026-63796", "title": "ocfs2: reject oversized group bitmap descriptors", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00587, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72057", "url": "https://patchblox.com/security/cve/CVE-2026-72057", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across def...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00585, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43197", "url": "https://patchblox.com/security/cve/CVE-2026-43197", "title": "netconsole: avoid OOB reads, msg is not nul-terminated", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00583, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68300", "url": "https://patchblox.com/security/cve/CVE-2026-68300", "title": "sctp: auth: verify auth requirement when auth_chunk is NULL", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0058, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74480", "url": "https://patchblox.com/security/cve/CVE-2026-74480", "title": "net: bridge: stop fast-leave after deleting a port group", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00579, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80590", "url": "https://patchblox.com/security/cve/CVE-2026-80590", "title": "inet: frags: strip GSO state from fragments before reassembly", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64545", "url": "https://patchblox.com/security/cve/CVE-2026-64545", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_re...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53221", "url": "https://patchblox.com/security/cve/CVE-2026-53221", "title": "ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53228", "url": "https://patchblox.com/security/cve/CVE-2026-53228", "title": "ipv6: sit: reload inner IPv6 header after GSO offloads", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53225", "url": "https://patchblox.com/security/cve/CVE-2026-53225", "title": "sctp: fix uninit-value in __sctp_rcv_asconf_lookup()", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64577", "url": "https://patchblox.com/security/cve/CVE-2026-64577", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gtp: check skb_pull_data() return in gtp1u_send_...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72320", "url": "https://patchblox.com/security/cve/CVE-2026-72320", "title": "netfilter: nft_lookup: fix catchall element handling with inverted lookups", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00569, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63976", "url": "https://patchblox.com/security/cve/CVE-2026-63976", "title": "kernel-uek-debug-devel: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00569, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68123", "url": "https://patchblox.com/security/cve/CVE-2026-68123", "title": "openvswitch: fix GSO userspace truncation underflow", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72099", "url": "https://patchblox.com/security/cve/CVE-2026-72099", "title": "kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00546, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53398", "url": "https://patchblox.com/security/cve/CVE-2026-53398", "title": "NFSD: Fix SECINFO_NO_NAME decode error cleanup", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00543, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74597", "url": "https://patchblox.com/security/cve/CVE-2026-74597", "title": "ip6_tunnel: clear skb2-\u003Ecb[] in ip6ip6_err()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00543, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68136", "url": "https://patchblox.com/security/cve/CVE-2026-68136", "title": "net: gro: fix double aggregation of flush-marked skbs", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00539, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64450", "url": "https://patchblox.com/security/cve/CVE-2026-64450", "title": "tipc: fix out-of-bounds read in broadcast Gap ACK blocks", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68096", "url": "https://patchblox.com/security/cve/CVE-2026-68096", "title": "audit: fix recursive locking deadlock in audit_dupe_exe()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00533, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74341", "url": "https://patchblox.com/security/cve/CVE-2026-74341", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix heap overflow from oversized...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00532, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53392", "url": "https://patchblox.com/security/cve/CVE-2026-53392", "title": "NFSv4/flexfiles: reject zero filehandle version count", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00529, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53397", "url": "https://patchblox.com/security/cve/CVE-2026-53397", "title": "nfsd: fix posix_acl leak on SETACL decode failure", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00529, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63808", "url": "https://patchblox.com/security/cve/CVE-2026-63808", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68117", "url": "https://patchblox.com/security/cve/CVE-2026-68117", "title": "tipc: clear sock-\u003Esk on the failed-insert path in tipc_sk_create()", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74473", "url": "https://patchblox.com/security/cve/CVE-2026-74473", "title": "vxlan: use pskb_network_may_pull() in route_shortcircuit()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53268", "url": "https://patchblox.com/security/cve/CVE-2026-53268", "title": "netfilter: conntrack_irc: fix possible out-of-bounds read", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53391", "url": "https://patchblox.com/security/cve/CVE-2026-53391", "title": "NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00517, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63993", "url": "https://patchblox.com/security/cve/CVE-2026-63993", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nvxlan: do not reuse cached ip_hdr() value after s...", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63994", "url": "https://patchblox.com/security/cve/CVE-2026-63994", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64007", "url": "https://patchblox.com/security/cve/CVE-2026-64007", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68388", "url": "https://patchblox.com/security/cve/CVE-2026-68388", "title": "smb/client: handle overlapping allocated ranges in fallocate", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74495", "url": "https://patchblox.com/security/cve/CVE-2026-74495", "title": "igbvf: Fix leak in TX DMA error cleanup", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74669", "url": "https://patchblox.com/security/cve/CVE-2026-74669", "title": "ipvs: clear IPv4 options after rebasing tunnel ICMP errors", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53186", "url": "https://patchblox.com/security/cve/CVE-2026-53186", "title": "RDMA/srp: bound SRP_RSP sense copy by the received length", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63992", "url": "https://patchblox.com/security/cve/CVE-2026-63992", "title": "kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64355", "url": "https://patchblox.com/security/cve/CVE-2026-64355", "title": "bpf: Reject fragmented frames in devmap", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74616", "url": "https://patchblox.com/security/cve/CVE-2026-74616", "title": "xdp: reject clones that overrun skb_shared_info tailroom", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68343", "url": "https://patchblox.com/security/cve/CVE-2026-68343", "title": "smb: client: validate DFS referral PathConsumed", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63801", "url": "https://patchblox.com/security/cve/CVE-2026-63801", "title": "tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68315", "url": "https://patchblox.com/security/cve/CVE-2026-68315", "title": "sctp: validate stream count in sctp_process_strreset_inreq()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68129", "url": "https://patchblox.com/security/cve/CVE-2026-68129", "title": "gve: fix Rx queue stall on alloc failure", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00511, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74730", "url": "https://patchblox.com/security/cve/CVE-2026-74730", "title": "NFS: Pin the \u0027struct nfs_server\u0027 during a FREE_STATEID call", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0051, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64560", "url": "https://patchblox.com/security/cve/CVE-2026-64560", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-lead...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00503, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68299", "url": "https://patchblox.com/security/cve/CVE-2026-68299", "title": "vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53199", "url": "https://patchblox.com/security/cve/CVE-2026-53199", "title": "hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64312", "url": "https://patchblox.com/security/cve/CVE-2026-64312", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74523", "url": "https://patchblox.com/security/cve/CVE-2026-74523", "title": "qede: sync udp_tunnel ports outside qede_lock in the recovery path", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74625", "url": "https://patchblox.com/security/cve/CVE-2026-74625", "title": "netfilter: bridge: release template ct on non-IP path", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74717", "url": "https://patchblox.com/security/cve/CVE-2026-74717", "title": "net/mlx5: fw_tracer, return NULL on create error", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74705", "url": "https://patchblox.com/security/cve/CVE-2026-74705", "title": "udp: fix potential use-after-free in tunnel segmentation", "priority": "High", "severity": "Moderate", "cvss": 10, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74586", "url": "https://patchblox.com/security/cve/CVE-2026-74586", "title": "sctp: clear new_transport when removing a peer", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74587", "url": "https://patchblox.com/security/cve/CVE-2026-74587", "title": "sctp: fix use-after-free of cached ASCONF chunk", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74588", "url": "https://patchblox.com/security/cve/CVE-2026-74588", "title": "sctp: keep chunk-\u003Etransport in step with the list it is queued on", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74688", "url": "https://patchblox.com/security/cve/CVE-2026-74688", "title": "sctp: clear control chunk transport if it is being removed", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74612", "url": "https://patchblox.com/security/cve/CVE-2026-74612", "title": "veth: fix skb length accounting after XDP frag adjustment", "priority": "High", "severity": "Moderate", "cvss": 10, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74476", "url": "https://patchblox.com/security/cve/CVE-2026-74476", "title": "veth: convert frag_list skbs before running XDP", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63978", "url": "https://patchblox.com/security/cve/CVE-2026-63978", "title": "net/handshake: Drain pending requests at net namespace exit", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53183", "url": "https://patchblox.com/security/cve/CVE-2026-53183", "title": "mptcp: allow subflow rcv wnd to shrink", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53184", "url": "https://patchblox.com/security/cve/CVE-2026-53184", "title": "udp: clear skb-\u003Edev before running a sockmap verdict", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74621", "url": "https://patchblox.com/security/cve/CVE-2026-74621", "title": "net/sched: act_ct: fix sk_buff leak when the header checks reject a packet", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74696", "url": "https://patchblox.com/security/cve/CVE-2026-74696", "title": "tcp: fix TFO max_qlen accounting across reuseport migration", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53264", "url": "https://patchblox.com/security/cve/CVE-2026-53264", "title": "net/sched: act_api: use RCU with deferred freeing for action lifecycle", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00485, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53229", "url": "https://patchblox.com/security/cve/CVE-2026-53229", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XD...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74550", "url": "https://patchblox.com/security/cve/CVE-2026-74550", "title": "net: do not send ICMP/NDISC Redirects when peer allocation fails", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74624", "url": "https://patchblox.com/security/cve/CVE-2026-74624", "title": "netfilter: nf_conntrack: defer invalid log until after unlock", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74678", "url": "https://patchblox.com/security/cve/CVE-2026-74678", "title": "net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()", "priority": "High", "severity": "Low", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74608", "url": "https://patchblox.com/security/cve/CVE-2026-74608", "title": "smb: client: Fix use-after-free in cifs_try_adding_channels()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00477, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64600", "url": "https://patchblox.com/security/cve/CVE-2026-64600", "title": "xfs: resample the data fork mapping after cycling ILOCK", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52946", "url": "https://patchblox.com/security/cve/CVE-2026-52946", "title": "fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72100", "url": "https://patchblox.com/security/cve/CVE-2026-72100", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of lim...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00464, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64448", "url": "https://patchblox.com/security/cve/CVE-2026-64448", "title": "smb: client: restrict implied bcc[0] exemption to responses without data area", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64383", "url": "https://patchblox.com/security/cve/CVE-2026-64383", "title": "smb: client: fix double-free in SMB2_flush() replay", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64384", "url": "https://patchblox.com/security/cve/CVE-2026-64384", "title": "smb: client: fix change notify replay double-free", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64385", "url": "https://patchblox.com/security/cve/CVE-2026-64385", "title": "smb: client: fix double-free in SMB2_ioctl() replay", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64386", "url": "https://patchblox.com/security/cve/CVE-2026-64386", "title": "smb: client: fix query_info() replay double-free", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64387", "url": "https://patchblox.com/security/cve/CVE-2026-64387", "title": "smb: client: fix query directory replay double-free", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74490", "url": "https://patchblox.com/security/cve/CVE-2026-74490", "title": "tipc: avoid use-after-free in poll trace queue dumps", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74475", "url": "https://patchblox.com/security/cve/CVE-2026-74475", "title": "vxlan: use neigh_ha_snapshot() in route_shortcircuit()", "priority": "High", "severity": "Low", "cvss": 10, "epss": 0.00454, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64523", "url": "https://patchblox.com/security/cve/CVE-2026-64523", "title": "net/handshake: Take a long-lived file reference at submit", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64380", "url": "https://patchblox.com/security/cve/CVE-2026-64380", "title": "smb: client: harden POSIX SID length parsing", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74704", "url": "https://patchblox.com/security/cve/CVE-2026-74704", "title": "net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63830", "url": "https://patchblox.com/security/cve/CVE-2026-63830", "title": "net: skmsg: preserve sg.copy across SG transforms", "priority": "High", "severity": "Moderate", "cvss": 9.4, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53235", "url": "https://patchblox.com/security/cve/CVE-2026-53235", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: add pskb_may_pull() to skb_gro_receive_list...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64414", "url": "https://patchblox.com/security/cve/CVE-2026-64414", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko repo...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64003", "url": "https://patchblox.com/security/cve/CVE-2026-64003", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Run queues for all non-SDEV_DEL devi...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53131", "url": "https://patchblox.com/security/cve/CVE-2026-53131", "title": "netfilter: require Ethernet MAC header before using eth_hdr()", "priority": "High", "severity": "Moderate", "cvss": 9.4, "epss": 0.00435, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74598", "url": "https://patchblox.com/security/cve/CVE-2026-74598", "title": "ipv6: fix Route Information option length validation", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74581", "url": "https://patchblox.com/security/cve/CVE-2026-74581", "title": "net: ipv6: clear suppressed fib6 rule result", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00421, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74340", "url": "https://patchblox.com/security/cve/CVE-2026-74340", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from firmware count...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00419, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74410", "url": "https://patchblox.com/security/cve/CVE-2026-74410", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix OOB read from firmware RX descr...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00419, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64368", "url": "https://patchblox.com/security/cve/CVE-2026-64368", "title": "mm/slab: do not limit zeroing to orig_size when only red zoning is enabled", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00417, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68352", "url": "https://patchblox.com/security/cve/CVE-2026-68352", "title": "wifi: ath6kl: fix OOB read from firmware IE lengths in connect event", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74408", "url": "https://patchblox.com/security/cve/CVE-2026-74408", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: fix OOB access from firmware tx sta...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74580", "url": "https://patchblox.com/security/cve/CVE-2026-74580", "title": "vhost: reset the vring metadata cache on vring reconfiguration", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00409, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68192", "url": "https://patchblox.com/security/cve/CVE-2026-68192", "title": "wifi: brcmfmac: make release_scratchbuffers idempotent", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00408, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68118", "url": "https://patchblox.com/security/cve/CVE-2026-68118", "title": "tcp: challenge ACK for non-exact RST in SYN-RECEIVED", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00405, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74300", "url": "https://patchblox.com/security/cve/CVE-2026-74300", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: validate codec capability elemen...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00403, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74556", "url": "https://patchblox.com/security/cve/CVE-2026-74556", "title": "scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72029", "url": "https://patchblox.com/security/cve/CVE-2026-72029", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: bound device offsets in the MUX...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72469", "url": "https://patchblox.com/security/cve/CVE-2026-72469", "title": "xprtrdma: Fix ep kref imbalance on ADDR_CHANGE", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00398, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74411", "url": "https://patchblox.com/security/cve/CVE-2026-74411", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Correct data type for scan index to...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00398, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74569", "url": "https://patchblox.com/security/cve/CVE-2026-74569", "title": "netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00388, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63893", "url": "https://patchblox.com/security/cve/CVE-2026-63893", "title": "kernel-uek-debug-modules-extra: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.1, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64374", "url": "https://patchblox.com/security/cve/CVE-2026-64374", "title": "sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53217", "url": "https://patchblox.com/security/cve/CVE-2026-53217", "title": "net: mvpp2: sync RX data at the hardware packet offset", "priority": "High", "severity": "Moderate", "cvss": 8.6, "epss": 0.00384, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68199", "url": "https://patchblox.com/security/cve/CVE-2026-68199", "title": "wifi: ath6kl: fix OOB access from firmware ADDBA window size", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00383, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68119", "url": "https://patchblox.com/security/cve/CVE-2026-68119", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: initialize standalone TCP-AO response paddi...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00373, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68433", "url": "https://patchblox.com/security/cve/CVE-2026-68433", "title": "libceph: bound get_version reply decode to front len", "priority": "High", "severity": "Low", "cvss": 8.6, "epss": 0.00364, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64597", "url": "https://patchblox.com/security/cve/CVE-2026-64597", "title": "smb: client: fix double-free in SMB2_close() replay", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00359, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63916", "url": "https://patchblox.com/security/cve/CVE-2026-63916", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacom_hid_set_devic...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64313", "url": "https://patchblox.com/security/cve/CVE-2026-64313", "title": "crypto: ecc - Fix carry overflow in vli multiplication", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64364", "url": "https://patchblox.com/security/cve/CVE-2026-64364", "title": "HID: multitouch: fix out-of-bounds bit access on mt_io_flags", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64382", "url": "https://patchblox.com/security/cve/CVE-2026-64382", "title": "smb: client: fix double-free in SMB2_open() replay", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72121", "url": "https://patchblox.com/security/cve/CVE-2026-72121", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and t...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72124", "url": "https://patchblox.com/security/cve/CVE-2026-72124", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: isotp: serialize TX state transitions under...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72157", "url": "https://patchblox.com/security/cve/CVE-2026-72157", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags[] overflow by boundi...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63947", "url": "https://patchblox.com/security/cve/CVE-2026-63947", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63925", "url": "https://patchblox.com/security/cve/CVE-2026-63925", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64093", "url": "https://patchblox.com/security/cve/CVE-2026-64093", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: directly shut down timer o...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00346, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74425", "url": "https://patchblox.com/security/cve/CVE-2026-74425", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: afs: handle CB.InitCallBackState3 requests witho...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00346, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74572", "url": "https://patchblox.com/security/cve/CVE-2026-74572", "title": "btrfs: zoned: fix deadlock between metadata writeback and transaction commit", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00346, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72233", "url": "https://patchblox.com/security/cve/CVE-2026-72233", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72235", "url": "https://patchblox.com/security/cve/CVE-2026-72235", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74592", "url": "https://patchblox.com/security/cve/CVE-2026-74592", "title": "ima: Instantiate file_truncate and path_truncate hooks", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00341, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53180", "url": "https://patchblox.com/security/cve/CVE-2026-53180", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock in tmigr_handle_r...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0034, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63980", "url": "https://patchblox.com/security/cve/CVE-2026-63980", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/handshake: Use spin_lock_bh for hn_lock nvm...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0034, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63944", "url": "https://patchblox.com/security/cve/CVE-2026-63944", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: hci_sync: fix UAF in hci_le_create_cis...", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00334, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64435", "url": "https://patchblox.com/security/cve/CVE-2026-64435", "title": "audit: Fix data races of skb_queue_len() readers on audit_queue", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00331, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72227", "url": "https://patchblox.com/security/cve/CVE-2026-72227", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num_dests h...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00331, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74557", "url": "https://patchblox.com/security/cve/CVE-2026-74557", "title": "scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64235", "url": "https://patchblox.com/security/cve/CVE-2026-64235", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs i...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00327, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68125", "url": "https://patchblox.com/security/cve/CVE-2026-68125", "title": "mac802154: llsec: reject frames shorter than the authentication tag", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00317, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64379", "url": "https://patchblox.com/security/cve/CVE-2026-64379", "title": "smb: client: mask server-provided mode to 07777 in modefromsid", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00309, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63831", "url": "https://patchblox.com/security/cve/CVE-2026-63831", "title": "mac802154: llsec: add skb_cow_data() before in-place crypto", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00307, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72115", "url": "https://patchblox.com/security/cve/CVE-2026-72115", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: track a single source interface for AN...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00303, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53360", "url": "https://patchblox.com/security/cve/CVE-2026-53360", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nKVM: SEV: Require in-GHCB scratch area if GHCB v2...", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00297, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64557", "url": "https://patchblox.com/security/cve/CVE-2026-64557", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_so...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68353", "url": "https://patchblox.com/security/cve/CVE-2026-68353", "title": "wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64547", "url": "https://patchblox.com/security/cve/CVE-2026-64547", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packet_len before pa...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00284, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53358", "url": "https://patchblox.com/security/cve/CVE-2026-53358", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00281, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64598", "url": "https://patchblox.com/security/cve/CVE-2026-64598", "title": "smb/client: Fix error code in smb2_aead_req_alloc()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53254", "url": "https://patchblox.com/security/cve/CVE-2026-53254", "title": "Bluetooth: RFCOMM: validate skb length in MCC handlers", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64540", "url": "https://patchblox.com/security/cve/CVE-2026-64540", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in geneli...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68373", "url": "https://patchblox.com/security/cve/CVE-2026-68373", "title": "wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64406", "url": "https://patchblox.com/security/cve/CVE-2026-64406", "title": "Bluetooth: fix UAF in bt_accept_dequeue()", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63891", "url": "https://patchblox.com/security/cve/CVE-2026-63891", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Cap recursion depth in __...", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63975", "url": "https://patchblox.com/security/cve/CVE-2026-63975", "title": "kernel-rt-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00274, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63867", "url": "https://patchblox.com/security/cve/CVE-2026-63867", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.2, "epss": 0.00274, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53196", "url": "https://patchblox.com/security/cve/CVE-2026-53196", "title": "USB: serial: io_ti: fix heap overflow in get_manuf_info()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00271, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53147", "url": "https://patchblox.com/security/cve/CVE-2026-53147", "title": "thunderbolt: Validate XDomain request packet size before type cast", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00269, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64095", "url": "https://patchblox.com/security/cve/CVE-2026-64095", "title": "kernel-uek64k-devel: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00267, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53253", "url": "https://patchblox.com/security/cve/CVE-2026-53253", "title": "Bluetooth: bnep: reject short frames before parsing", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64403", "url": "https://patchblox.com/security/cve/CVE-2026-64403", "title": "Bluetooth: L2CAP: validate option length before reading conf opt value", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53256", "url": "https://patchblox.com/security/cve/CVE-2026-53256", "title": "kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00264, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64408", "url": "https://patchblox.com/security/cve/CVE-2026-64408", "title": "Bluetooth: bnep: pin L2CAP connection during netdev registration", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68091", "url": "https://patchblox.com/security/cve/CVE-2026-68091", "title": "HID: wacom: stop hardware after post-start probe failures", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68326", "url": "https://patchblox.com/security/cve/CVE-2026-68326", "title": "wifi: mwifiex: bound uAP association event IEs to the event buffer", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53275", "url": "https://patchblox.com/security/cve/CVE-2026-53275", "title": "ipv6: mcast: Fix use-after-free when processing MLD queries", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00262, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74508", "url": "https://patchblox.com/security/cve/CVE-2026-74508", "title": "Bluetooth: HIDP: reject frames without a transaction header", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00262, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63946", "url": "https://patchblox.com/security/cve/CVE-2026-63946", "title": "kernel-64k-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68425", "url": "https://patchblox.com/security/cve/CVE-2026-68425", "title": "IB/mad: Drop unmatched RMPP responses before reassembly", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53146", "url": "https://patchblox.com/security/cve/CVE-2026-53146", "title": "thunderbolt: Limit XDomain response copy to actual frame size", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0026, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53232", "url": "https://patchblox.com/security/cve/CVE-2026-53232", "title": "net: phy: clean the sfp upstream if phy probing fails", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72108", "url": "https://patchblox.com/security/cve/CVE-2026-72108", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consiste...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64434", "url": "https://patchblox.com/security/cve/CVE-2026-64434", "title": "Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64554", "url": "https://patchblox.com/security/cve/CVE-2026-64554", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74691", "url": "https://patchblox.com/security/cve/CVE-2026-74691", "title": "net: thunderbolt: Tear down DMA paths before stopping the rings", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63869", "url": "https://patchblox.com/security/cve/CVE-2026-63869", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00255, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74488", "url": "https://patchblox.com/security/cve/CVE-2026-74488", "title": "wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00255, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74540", "url": "https://patchblox.com/security/cve/CVE-2026-74540", "title": "Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00255, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74531", "url": "https://patchblox.com/security/cve/CVE-2026-74531", "title": "Bluetooth: hci_conn: hold conn reference in abort_conn_sync()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64206", "url": "https://patchblox.com/security/cve/CVE-2026-64206", "title": "Bluetooth: L2CAP: cancel pending_rx_work before taking conn-\u003Elock", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64586", "url": "https://patchblox.com/security/cve/CVE-2026-64586", "title": "wifi: brcmfmac: drain bus_reset work on device removal", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0025, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74509", "url": "https://patchblox.com/security/cve/CVE-2026-74509", "title": "Bluetooth: hci_sync: Fix advertising data UAFs", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00249, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74541", "url": "https://patchblox.com/security/cve/CVE-2026-74541", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: clear iso_data always when detac...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00247, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74356", "url": "https://patchblox.com/security/cve/CVE-2026-74356", "title": "vhost: fix vhost_get_avail_idx for a non empty ring", "priority": "High", "severity": "Moderate", "cvss": 7.4, "epss": 0.00247, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74507", "url": "https://patchblox.com/security/cve/CVE-2026-74507", "title": "Bluetooth: HIDP: validate numbered report payloads", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00242, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74535", "url": "https://patchblox.com/security/cve/CVE-2026-74535", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid deadlocks in iso_sock_time...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00241, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74575", "url": "https://patchblox.com/security/cve/CVE-2026-74575", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Prevent XDomain delayed work use-af...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68278", "url": "https://patchblox.com/security/cve/CVE-2026-68278", "title": "drm/dp/mst: fix buffer overflows in sideband chunk accumulation", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68398", "url": "https://patchblox.com/security/cve/CVE-2026-68398", "title": "ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00232, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68414", "url": "https://patchblox.com/security/cve/CVE-2026-68414", "title": "wifi: cfg80211: cancel sched scan results work on unregister", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63981", "url": "https://patchblox.com/security/cve/CVE-2026-63981", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: Fix blockcast recursion b...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68138", "url": "https://patchblox.com/security/cve/CVE-2026-68138", "title": "net/sched: serialize qdisc_rtab_list against concurrent get/put", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64452", "url": "https://patchblox.com/security/cve/CVE-2026-64452", "title": "6lowpan: fix NHC entry use-after-free on error path", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68351", "url": "https://patchblox.com/security/cve/CVE-2026-68351", "title": "wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68188", "url": "https://patchblox.com/security/cve/CVE-2026-68188", "title": "Bluetooth: RFCOMM: Fix session UAF in set_termios", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68186", "url": "https://patchblox.com/security/cve/CVE-2026-68186", "title": "binfmt_misc: set have_execfd only once the interpreter is opened", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72218", "url": "https://patchblox.com/security/cve/CVE-2026-72218", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file refcount leak on cached nlm...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72219", "url": "https://patchblox.com/security/cve/CVE-2026-72219", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fa...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52923", "url": "https://patchblox.com/security/cve/CVE-2026-52923", "title": "ipc: limit next_id allocation to the valid ID range", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74271", "url": "https://patchblox.com/security/cve/CVE-2026-74271", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix supplied_from allocatio...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72306", "url": "https://patchblox.com/security/cve/CVE-2026-72306", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vduse: Fix race in vduse_dev_msg_sync and vduse_...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68169", "url": "https://patchblox.com/security/cve/CVE-2026-68169", "title": "mptcp: pm: userspace: fix use-after-free in get_local_id", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68181", "url": "https://patchblox.com/security/cve/CVE-2026-68181", "title": "mei: bus: access mei_device under device_lock on cleanup", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68165", "url": "https://patchblox.com/security/cve/CVE-2026-68165", "title": "mm/damon/core: validate ranges in damon_set_regions()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72361", "url": "https://patchblox.com/security/cve/CVE-2026-72361", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/hw_engine: Fix double-free of managed BO...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72443", "url": "https://patchblox.com/security/cve/CVE-2026-72443", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill MIDI 2.0 URBs before freei...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63810", "url": "https://patchblox.com/security/cve/CVE-2026-63810", "title": "block: Avoid mounting the bdev pseudo-filesystem in userspace", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68193", "url": "https://patchblox.com/security/cve/CVE-2026-68193", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio...", "priority": "High", "severity": "moderate", "cvss": 8.1, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64572", "url": "https://patchblox.com/security/cve/CVE-2026-64572", "title": "ipv4: fib: free fib_alias with kfree_rcu() on insert error path", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68162", "url": "https://patchblox.com/security/cve/CVE-2026-68162", "title": "sctp: avoid auth_enable sysctl UAF during netns teardown", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53365", "url": "https://patchblox.com/security/cve/CVE-2026-53365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-...", "priority": "High", "severity": "medium", "cvss": 8.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72151", "url": "https://patchblox.com/security/cve/CVE-2026-72151", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completio...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72342", "url": "https://patchblox.com/security/cve/CVE-2026-72342", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72343", "url": "https://patchblox.com/security/cve/CVE-2026-72343", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer a...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74332", "url": "https://patchblox.com/security/cve/CVE-2026-74332", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-sof: Bound DAI link iteration...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68085", "url": "https://patchblox.com/security/cve/CVE-2026-68085", "title": "Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53212", "url": "https://patchblox.com/security/cve/CVE-2026-53212", "title": "netfilter: nft_tunnel: fix use-after-free on object destroy", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68276", "url": "https://patchblox.com/security/cve/CVE-2026-68276", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: fix cleaner shader IB buffer ove...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64490", "url": "https://patchblox.com/security/cve/CVE-2026-64490", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72284", "url": "https://patchblox.com/security/cve/CVE-2026-72284", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64508", "url": "https://patchblox.com/security/cve/CVE-2026-64508", "title": "bpf: Support for hardening against JIT spraying", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74404", "url": "https://patchblox.com/security/cve/CVE-2026-74404", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix snp_filter_reserved_mem_region...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68255", "url": "https://patchblox.com/security/cve/CVE-2026-68255", "title": "drm/virtio: bound EDID block reads to the response buffer", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63940", "url": "https://patchblox.com/security/cve/CVE-2026-63940", "title": "KVM: SEV: Ignore Port I/O requests of length \u00270\u0027", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63926", "url": "https://patchblox.com/security/cve/CVE-2026-63926", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72116", "url": "https://patchblox.com/security/cve/CVE-2026-72116", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix stale rx/tx ops after device remov...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72280", "url": "https://patchblox.com/security/cve/CVE-2026-72280", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68093", "url": "https://patchblox.com/security/cve/CVE-2026-68093", "title": "KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72289", "url": "https://patchblox.com/security/cve/CVE-2026-72289", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72298", "url": "https://patchblox.com/security/cve/CVE-2026-72298", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: L...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74256", "url": "https://patchblox.com/security/cve/CVE-2026-74256", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_po...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72487", "url": "https://patchblox.com/security/cve/CVE-2026-72487", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr be...", "priority": "High", "severity": "high", "cvss": 7.7, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64484", "url": "https://patchblox.com/security/cve/CVE-2026-64484", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_new1() return value...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68363", "url": "https://patchblox.com/security/cve/CVE-2026-68363", "title": "wifi: ath9k: hif_usb: don\u0027t dereference hif_dev after re-arming firmware request", "priority": "High", "severity": "Low", "cvss": 8.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64529", "url": "https://patchblox.com/security/cve/CVE-2026-64529", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64470", "url": "https://patchblox.com/security/cve/CVE-2026-64470", "title": "Bluetooth: btusb: fix use-after-free on marvell probe failure", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64471", "url": "https://patchblox.com/security/cve/CVE-2026-64471", "title": "Bluetooth: btusb: fix use-after-free on registration failure", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68350", "url": "https://patchblox.com/security/cve/CVE-2026-68350", "title": "wifi: carl9170: fix OOB read from off-by-two in TX status handler", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68365", "url": "https://patchblox.com/security/cve/CVE-2026-68365", "title": "USB: serial: io_edgeport: cap received transmit credits", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64461", "url": "https://patchblox.com/security/cve/CVE-2026-64461", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fai...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64570", "url": "https://patchblox.com/security/cve/CVE-2026-64570", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix fils_discovery double free o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72425", "url": "https://patchblox.com/security/cve/CVE-2026-72425", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_rese...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72262", "url": "https://patchblox.com/security/cve/CVE-2026-72262", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix heap overflow in by...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72395", "url": "https://patchblox.com/security/cve/CVE-2026-72395", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix passing events to regulator c...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74584", "url": "https://patchblox.com/security/cve/CVE-2026-74584", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page before exposing t...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53361", "url": "https://patchblox.com/security/cve/CVE-2026-53361", "title": "af_unix: Set gc_in_progress to true in unix_gc().", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68202", "url": "https://patchblox.com/security/cve/CVE-2026-68202", "title": "ALSA: seq: close a re-opened queue timer in the destructor", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68206", "url": "https://patchblox.com/security/cve/CVE-2026-68206", "title": "media: v4l2-ctrls: validate HEVC active reference counts", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68213", "url": "https://patchblox.com/security/cve/CVE-2026-68213", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on sta...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68216", "url": "https://patchblox.com/security/cve/CVE-2026-68216", "title": "media: pwc: Return queued buffers on start_streaming() failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72066", "url": "https://patchblox.com/security/cve/CVE-2026-72066", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72067", "url": "https://patchblox.com/security/cve/CVE-2026-72067", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback err...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72225", "url": "https://patchblox.com/security/cve/CVE-2026-72225", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2_journal_init...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72302", "url": "https://patchblox.com/security/cve/CVE-2026-72302", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Use overflow checks in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64514", "url": "https://patchblox.com/security/cve/CVE-2026-64514", "title": "userfaultfd: gate must_wait writability check on pte_present()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74498", "url": "https://patchblox.com/security/cve/CVE-2026-74498", "title": "ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74499", "url": "https://patchblox.com/security/cve/CVE-2026-74499", "title": "ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74682", "url": "https://patchblox.com/security/cve/CVE-2026-74682", "title": "ALSA: usb-audio: fix OOB write on Type II inbound URBs", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64503", "url": "https://patchblox.com/security/cve/CVE-2026-64503", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on w...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63875", "url": "https://patchblox.com/security/cve/CVE-2026-63875", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63899", "url": "https://patchblox.com/security/cve/CVE-2026-63899", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63970", "url": "https://patchblox.com/security/cve/CVE-2026-63970", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72111", "url": "https://patchblox.com/security/cve/CVE-2026-72111", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register bounds before narrowing retv...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72255", "url": "https://patchblox.com/security/cve/CVE-2026-72255", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74380", "url": "https://patchblox.com/security/cve/CVE-2026-74380", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return valu...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64286", "url": "https://patchblox.com/security/cve/CVE-2026-64286", "title": "KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64287", "url": "https://patchblox.com/security/cve/CVE-2026-64287", "title": "KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63884", "url": "https://patchblox.com/security/cve/CVE-2026-63884", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: m...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63898", "url": "https://patchblox.com/security/cve/CVE-2026-63898", "title": "kernel-uek-container: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63901", "url": "https://patchblox.com/security/cve/CVE-2026-63901", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64481", "url": "https://patchblox.com/security/cve/CVE-2026-64481", "title": "ALSA: hda/cs35l41: Fix firmware load work teardown", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68461", "url": "https://patchblox.com/security/cve/CVE-2026-68461", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72282", "url": "https://patchblox.com/security/cve/CVE-2026-72282", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsib...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72314", "url": "https://patchblox.com/security/cve/CVE-2026-72314", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulator_lock_two() should tes...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72350", "url": "https://patchblox.com/security/cve/CVE-2026-72350", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72371", "url": "https://patchblox.com/security/cve/CVE-2026-72371", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFS_VOLUME_RM_TREE is set on...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72400", "url": "https://patchblox.com/security/cve/CVE-2026-72400", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed f...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72419", "url": "https://patchblox.com/security/cve/CVE-2026-72419", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: avoid invalid nat_net pointer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74296", "url": "https://patchblox.com/security/cve/CVE-2026-74296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW\u2011provided UAR index rat...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74297", "url": "https://patchblox.com/security/cve/CVE-2026-74297", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE si...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74305", "url": "https://patchblox.com/security/cve/CVE-2026-74305", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for pr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74417", "url": "https://patchblox.com/security/cve/CVE-2026-74417", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeon_align...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72286", "url": "https://patchblox.com/security/cve/CVE-2026-72286", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirr...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53191", "url": "https://patchblox.com/security/cve/CVE-2026-53191", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: inherit IORING_CQE_F_BUF_MORE acro...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53233", "url": "https://patchblox.com/security/cve/CVE-2026-53233", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netdev: fix double-free in netdev_nl_bind_rx_doi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72027", "url": "https://patchblox.com/security/cve/CVE-2026-72027", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle free_pages_prepare() prope...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72034", "url": "https://patchblox.com/security/cve/CVE-2026-72034", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fhandle: reject detached mounts in capable_wrt_m...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72372", "url": "https://patchblox.com/security/cve/CVE-2026-72372", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72452", "url": "https://patchblox.com/security/cve/CVE-2026-72452", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after d...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64473", "url": "https://patchblox.com/security/cve/CVE-2026-64473", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing dev...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72183", "url": "https://patchblox.com/security/cve/CVE-2026-72183", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on th...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72390", "url": "https://patchblox.com/security/cve/CVE-2026-72390", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: Introduce slaves_lock to av...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63836", "url": "https://patchblox.com/security/cve/CVE-2026-63836", "title": "batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72347", "url": "https://patchblox.com/security/cve/CVE-2026-72347", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift par...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72416", "url": "https://patchblox.com/security/cve/CVE-2026-72416", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_compat: ebtables emulation must r...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63807", "url": "https://patchblox.com/security/cve/CVE-2026-63807", "title": "KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72019", "url": "https://patchblox.com/security/cve/CVE-2026-72019", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: macsec: don\u0027t read an unset MAC header in macsec...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74391", "url": "https://patchblox.com/security/cve/CVE-2026-74391", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seq_...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74441", "url": "https://patchblox.com/security/cve/CVE-2026-74441", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix race condition and orderin...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74472", "url": "https://patchblox.com/security/cve/CVE-2026-74472", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ublk: reset kernel-owned dev_info fields in ublk...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74346", "url": "https://patchblox.com/security/cve/CVE-2026-74346", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registrati...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63920", "url": "https://patchblox.com/security/cve/CVE-2026-63920", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43303", "url": "https://patchblox.com/security/cve/CVE-2026-43303", "title": "mm/page_alloc: clear page-\u003Eprivate in free_pages_prepare()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64265", "url": "https://patchblox.com/security/cve/CVE-2026-64265", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64317", "url": "https://patchblox.com/security/cve/CVE-2026-64317", "title": "isofs: bound Rock Ridge symlink components to the SL record", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72175", "url": "https://patchblox.com/security/cve/CVE-2026-72175", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix make_uffd_wp_huge_pte() pr...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72360", "url": "https://patchblox.com/security/cve/CVE-2026-72360", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don\u0027t attempt to process FAST_REQ or...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68201", "url": "https://patchblox.com/security/cve/CVE-2026-68201", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave\u0027s callback before its...", "priority": "High", "severity": "high", "cvss": 8.3, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72126", "url": "https://patchblox.com/security/cve/CVE-2026-72126", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: isotp: use unconditional synchronize_rcu()...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72335", "url": "https://patchblox.com/security/cve/CVE-2026-72335", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix adv monitor add failure cle...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72449", "url": "https://patchblox.com/security/cve/CVE-2026-72449", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix list_del corruption in kfd_criu_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72476", "url": "https://patchblox.com/security/cve/CVE-2026-72476", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma_r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74387", "url": "https://patchblox.com/security/cve/CVE-2026-74387", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize output teardown with...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53402", "url": "https://patchblox.com/security/cve/CVE-2026-53402", "title": "fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63902", "url": "https://patchblox.com/security/cve/CVE-2026-63902", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63903", "url": "https://patchblox.com/security/cve/CVE-2026-63903", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63904", "url": "https://patchblox.com/security/cve/CVE-2026-63904", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72364", "url": "https://patchblox.com/security/cve/CVE-2026-72364", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writeback error handling Fix the err...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64251", "url": "https://patchblox.com/security/cve/CVE-2026-64251", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseq_debug...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72427", "url": "https://patchblox.com/security/cve/CVE-2026-72427", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF_F_P...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63826", "url": "https://patchblox.com/security/cve/CVE-2026-63826", "title": "fbdev: fix use-after-free in store_modes()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74283", "url": "https://patchblox.com/security/cve/CVE-2026-74283", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ntipc: require net admin for TIPCv2 netlink mutato...", "priority": "High", "severity": "moderate", "cvss": 9.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63917", "url": "https://patchblox.com/security/cve/CVE-2026-63917", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64276", "url": "https://patchblox.com/security/cve/CVE-2026-64276", "title": "Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64304", "url": "https://patchblox.com/security/cve/CVE-2026-64304", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72102", "url": "https://patchblox.com/security/cve/CVE-2026-72102", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_re...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72136", "url": "https://patchblox.com/security/cve/CVE-2026-72136", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in t...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72261", "url": "https://patchblox.com/security/cve/CVE-2026-72261", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Validate size in snd_so...", "priority": "High", "severity": "high", "cvss": 8.3, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63928", "url": "https://patchblox.com/security/cve/CVE-2026-63928", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63956", "url": "https://patchblox.com/security/cve/CVE-2026-63956", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63957", "url": "https://patchblox.com/security/cve/CVE-2026-63957", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64270", "url": "https://patchblox.com/security/cve/CVE-2026-64270", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packe...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64271", "url": "https://patchblox.com/security/cve/CVE-2026-64271", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on ever...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64272", "url": "https://patchblox.com/security/cve/CVE-2026-64272", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S a...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64296", "url": "https://patchblox.com/security/cve/CVE-2026-64296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_e...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64322", "url": "https://patchblox.com/security/cve/CVE-2026-64322", "title": "udf: validate sparing table length as an entry count, not a byte count", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64333", "url": "https://patchblox.com/security/cve/CVE-2026-64333", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer c...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64363", "url": "https://patchblox.com/security/cve/CVE-2026-64363", "title": "HID: appleir: fix UAF on pending key_up_timer in remove()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68479", "url": "https://patchblox.com/security/cve/CVE-2026-68479", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72036", "url": "https://patchblox.com/security/cve/CVE-2026-72036", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue ca...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72105", "url": "https://patchblox.com/security/cve/CVE-2026-72105", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit mach...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72110", "url": "https://patchblox.com/security/cve/CVE-2026-72110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe -\u003Ebpf_storage before bailouts tha...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72113", "url": "https://patchblox.com/security/cve/CVE-2026-72113", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing device refcount for CAN fi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72114", "url": "https://patchblox.com/security/cve/CVE-2026-72114", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcm_rx_setup(...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72119", "url": "https://patchblox.com/security/cve/CVE-2026-72119", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: extend bcm_tx_lock usage for data and...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72120", "url": "https://patchblox.com/security/cve/CVE-2026-72120", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu list annotations and o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72123", "url": "https://patchblox.com/security/cve/CVE-2026-72123", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ncan: bcm: defer rx_op deallocation to workqueue t...", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72135", "url": "https://patchblox.com/security/cve/CVE-2026-72135", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72164", "url": "https://patchblox.com/security/cve/CVE-2026-72164", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72170", "url": "https://patchblox.com/security/cve/CVE-2026-72170", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: 9p: skip nlink update in cacheless mode to fix W...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72172", "url": "https://patchblox.com/security/cve/CVE-2026-72172", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for Z...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72250", "url": "https://patchblox.com/security/cve/CVE-2026-72250", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_reasm: guard mac_header...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72252", "url": "https://patchblox.com/security/cve/CVE-2026-72252", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: don\u0027t leak bad clone...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72301", "url": "https://patchblox.com/security/cve/CVE-2026-72301", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72406", "url": "https://patchblox.com/security/cve/CVE-2026-72406", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup gem_init_o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72435", "url": "https://patchblox.com/security/cve/CVE-2026-72435", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72450", "url": "https://patchblox.com/security/cve/CVE-2026-72450", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen dur...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64582", "url": "https://patchblox.com/security/cve/CVE-2026-64582", "title": "RDMA/rxe: Fix a use-after-free problem in rxe_mmap", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68307", "url": "https://patchblox.com/security/cve/CVE-2026-68307", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link repl...", "priority": "High", "severity": "moderate", "cvss": 8.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "cvesTruncated": true, "dataAsOf": "2026-11-07T06:34:28Z" }