# ELSA-2026-500248: Security update for 35 packages ELSA-2026-500248, released September 4, 2026, fixes 1,162 CVEs across 35 products. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/elsa-2026-500248 - Platform: Linux - Released: Sep 4, 2026 - Priority: Patch now (Closes CVE-2026-53266, exploited (CISA KEV)) - CVEs: 1,162, exploited: 1, on CISA KEV: 1 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2026-500248.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 10 | 0:6.12.0-206.104.3.3.el9uek | | [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 9 | 0:6.12.0-206.104.3.3.el9uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-53266](https://patchblox.com/security/data/cve/CVE-2026-53266.md) | Patch now | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | CISA KEV | | [CVE-2026-64564](https://patchblox.com/security/data/cve/CVE-2026-64564.md) | Urgent | sctp: don't free the ASCONF's own transport in DEL-IP processing | 9.8 | 0.0143 | | | [CVE-2026-72130](https://patchblox.com/security/data/cve/CVE-2026-72130.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers n... | 9.8 | 0.0080 | | | [CVE-2026-68160](https://patchblox.com/security/data/cve/CVE-2026-68160.md) | Urgent | ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() | 9.8 | 0.0077 | | | [CVE-2026-74279](https://patchblox.com/security/data/cve/CVE-2026-74279.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong... | 10.0 | 0.0076 | | | [CVE-2026-72226](https://patchblox.com/security/data/cve/CVE-2026-72226.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow... | 9.8 | 0.0076 | | | [CVE-2026-74427](https://patchblox.com/security/data/cve/CVE-2026-74427.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocat... | 9.8 | 0.0076 | | | [CVE-2026-72084](https://patchblox.com/security/data/cve/CVE-2026-72084.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t... | 9.8 | 0.0075 | | | [CVE-2026-72299](https://patchblox.com/security/data/cve/CVE-2026-72299.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tra... | 9.8 | 0.0075 | | | [CVE-2026-72319](https://patchblox.com/security/data/cve/CVE-2026-72319.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in... | 9.8 | 0.0075 | | | [CVE-2026-72339](https://patchblox.com/security/data/cve/CVE-2026-72339.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on b... | 9.8 | 0.0075 | | | [CVE-2026-72351](https://patchblox.com/security/data/cve/CVE-2026-72351.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE... | 9.8 | 0.0075 | | | [CVE-2026-72466](https://patchblox.com/security/data/cve/CVE-2026-72466.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek... | 9.8 | 0.0074 | | | [CVE-2026-72234](https://patchblox.com/security/data/cve/CVE-2026-72234.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only a... | 9.8 | 0.0073 | | | [CVE-2026-72065](https://patchblox.com/security/data/cve/CVE-2026-72065.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported b... | 9.8 | 0.0073 | | | [CVE-2026-72322](https://patchblox.com/security/data/cve/CVE-2026-72322.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed wo... | 9.8 | 0.0072 | | | [CVE-2026-72323](https://patchblox.com/security/data/cve/CVE-2026-72323.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t... | 9.8 | 0.0072 | | | [CVE-2026-72491](https://patchblox.com/security/data/cve/CVE-2026-72491.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma->state in tra... | 9.8 | 0.0072 | | | [CVE-2026-72014](https://patchblox.com/security/data/cve/CVE-2026-72014.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range p... | 9.8 | 0.0072 | | | [CVE-2026-72473](https://patchblox.com/security/data/cve/CVE-2026-72473.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC comple... | 9.8 | 0.0072 | | | [CVE-2026-68476](https://patchblox.com/security/data/cve/CVE-2026-68476.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reload ip header after head reallocation... | 9.8 | 0.0071 | | | [CVE-2026-68477](https://patchblox.com/security/data/cve/CVE-2026-68477.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport... | 9.8 | 0.0071 | | | [CVE-2026-72020](https://patchblox.com/security/data/cve/CVE-2026-72020.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn... | 9.8 | 0.0071 | | | [CVE-2026-72129](https://patchblox.com/security/data/cve/CVE-2026-72129.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero of... | 9.8 | 0.0071 | | | [CVE-2026-72251](https://patchblox.com/security/data/cve/CVE-2026-72251.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat... | 9.8 | 0.0071 | | | [CVE-2026-74267](https://patchblox.com/security/data/cve/CVE-2026-74267.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_red... | 9.8 | 0.0071 | | | [CVE-2026-72436](https://patchblox.com/security/data/cve/CVE-2026-72436.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don't use test_bit() in lockle... | 9.8 | 0.0071 | | | [CVE-2026-74401](https://patchblox.com/security/data/cve/CVE-2026-74401.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: dlm: fix add msg handle in send_queue ordered I... | 9.8 | 0.0070 | | | [CVE-2026-72451](https://patchblox.com/security/data/cve/CVE-2026-72451.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix xfrm state cache insertion race The x... | 9.8 | 0.0067 | | | [CVE-2026-63800](https://patchblox.com/security/data/cve/CVE-2026-63800.md) | Urgent | pNFS: Fix use-after-free in pnfs_update_layout() | 9.8 | 0.0064 | | | [CVE-2026-72317](https://patchblox.com/security/data/cve/CVE-2026-72317.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connec... | 9.8 | 0.0064 | | | [CVE-2026-72046](https://patchblox.com/security/data/cve/CVE-2026-72046.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: gve: fix header buffer corruption with header-sp... | 9.8 | 0.0064 | | | [CVE-2026-72217](https://patchblox.com/security/data/cve/CVE-2026-72217.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores bef... | 9.8 | 0.0064 | | | [CVE-2026-72221](https://patchblox.com/security/data/cve/CVE-2026-72221.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callbac... | 9.8 | 0.0064 | | | [CVE-2026-72222](https://patchblox.com/security/data/cve/CVE-2026-72222.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS... | 9.8 | 0.0064 | | | [CVE-2026-64122](https://patchblox.com/security/data/cve/CVE-2026-64122.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_report... | 9.8 | 0.0063 | | | [CVE-2026-72348](https://patchblox.com/security/data/cve/CVE-2026-72348.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extens... | 9.1 | 0.0063 | | | [CVE-2026-72318](https://patchblox.com/security/data/cve/CVE-2026-72318.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: validate DFS referral string offsets pars... | 9.4 | 0.0059 | | | [CVE-2026-72421](https://patchblox.com/security/data/cve/CVE-2026-72421.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/mai... | 10.0 | 0.0057 | | | [CVE-2026-64319](https://patchblox.com/security/data/cve/CVE-2026-64319.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bound... | 9.1 | 0.0056 | | | [CVE-2026-64535](https://patchblox.com/security/data/cve/CVE-2026-64535.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch... | 9.8 | 0.0055 | | | [CVE-2026-74394](https://patchblox.com/security/data/cve/CVE-2026-74394.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate dat... | 9.8 | 0.0054 | | | [CVE-2026-68131](https://patchblox.com/security/data/cve/CVE-2026-68131.md) | Urgent | rbd: Reset positive result codes to zero in object map update path | 9.8 | 0.0052 | | | [CVE-2026-53384](https://patchblox.com/security/data/cve/CVE-2026-53384.md) | Urgent | serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails | 9.8 | 0.0052 | | | [CVE-2026-63984](https://patchblox.com/security/data/cve/CVE-2026-63984.md) | Urgent | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | | | [CVE-2026-74384](https://patchblox.com/security/data/cve/CVE-2026-74384.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nv... | 9.8 | 0.0051 | | | [CVE-2026-74398](https://patchblox.com/security/data/cve/CVE-2026-74398.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad_failure when sta... | 9.8 | 0.0051 | | | [CVE-2026-74406](https://patchblox.com/security/data/cve/CVE-2026-74406.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro... | 9.8 | 0.0051 | | | [CVE-2026-64551](https://patchblox.com/security/data/cve/CVE-2026-64551.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before... | 9.1 | 0.0051 | | | [CVE-2026-74287](https://patchblox.com/security/data/cve/CVE-2026-74287.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length... | 9.1 | 0.0051 | | | [CVE-2026-53215](https://patchblox.com/security/data/cve/CVE-2026-53215.md) | Urgent | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0050 | | | [CVE-2026-53216](https://patchblox.com/security/data/cve/CVE-2026-53216.md) | Urgent | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0050 | | | [CVE-2026-74376](https://patchblox.com/security/data/cve/CVE-2026-74376.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio f... | 9.8 | 0.0050 | | | [CVE-2026-74255](https://patchblox.com/security/data/cve/CVE-2026-74255.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc_l2_send_msg() Syzbot repo... | 9.8 | 0.0050 | | | [CVE-2026-64000](https://patchblox.com/security/data/cve/CVE-2026-64000.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervisio... | 9.8 | 0.0049 | | | [CVE-2026-64091](https://patchblox.com/security/data/cve/CVE-2026-64091.md) | Urgent | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0043 | | | [CVE-2026-74436](https://patchblox.com/security/data/cve/CVE-2026-74436.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: rxrpc: serialize kernel accept preallocation wit... | 9.8 | 0.0040 | | | [CVE-2026-74665](https://patchblox.com/security/data/cve/CVE-2026-74665.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP... | 9.1 | 0.0037 | | | [CVE-2026-68121](https://patchblox.com/security/data/cve/CVE-2026-68121.md) | Urgent | pppoe: reload header pointer after dev_hard_header() | 9.8 | 0.0037 | | | [CVE-2026-63974](https://patchblox.com/security/data/cve/CVE-2026-63974.md) | Urgent | Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close | 9.8 | 0.0035 | | | [CVE-2026-64534](https://patchblox.com/security/data/cve/CVE-2026-64534.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_un... | 9.8 | 0.0032 | | | [CVE-2026-53175](https://patchblox.com/security/data/cve/CVE-2026-53175.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the fq... | 9.8 | 0.0031 | | | [CVE-2026-53260](https://patchblox.com/security/data/cve/CVE-2026-53260.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in re... | 9.8 | 0.0029 | | | [CVE-2026-68198](https://patchblox.com/security/data/cve/CVE-2026-68198.md) | Urgent | wifi: ath6kl: fix use-after-free in aggr_reset_state() | 9.8 | 0.0028 | | | [CVE-2026-68402](https://patchblox.com/security/data/cve/CVE-2026-68402.md) | Urgent | wifi: cfg80211: bound element ID read when checking non-inheritance | 9.8 | 0.0027 | | | [CVE-2026-52934](https://patchblox.com/security/data/cve/CVE-2026-52934.md) | Urgent | batman-adv: tvlv: reject oversized TVLV packets | 9.8 | 0.0024 | | | [CVE-2026-63882](https://patchblox.com/security/data/cve/CVE-2026-63882.md) | Urgent | drm/amdkfd: fix NULL pointer bug in svm_range_set_attr | 9.8 | 0.0022 | | | [CVE-2026-68212](https://patchblox.com/security/data/cve/CVE-2026-68212.md) | Urgent | media: saa7134: Fix a possible memory leak in saa7134_video_init1 | 9.8 | 0.0022 | | | [CVE-2026-68214](https://patchblox.com/security/data/cve/CVE-2026-68214.md) | Urgent | media: rtl2832: fix use-after-free in rtl2832_remove() | 9.8 | 0.0022 | | | [CVE-2026-68218](https://patchblox.com/security/data/cve/CVE-2026-68218.md) | Urgent | media: pci: dm1105: Free allocated workqueue | 9.8 | 0.0022 | | | [CVE-2026-68180](https://patchblox.com/security/data/cve/CVE-2026-68180.md) | Urgent | intel_th: fix MSC output device reference leak | 9.8 | 0.0022 | | | [CVE-2026-68166](https://patchblox.com/security/data/cve/CVE-2026-68166.md) | Urgent | userfaultfd: prevent registration of special VMAs | 9.8 | 0.0021 | | | [CVE-2026-68349](https://patchblox.com/security/data/cve/CVE-2026-68349.md) | Urgent | wifi: carl9170: fix buffer overflow in rx_stream failover path | 9.8 | 0.0020 | | | [CVE-2026-63939](https://patchblox.com/security/data/cve/CVE-2026-63939.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the... | 9.3 | 0.0020 | | | [CVE-2026-63938](https://patchblox.com/security/data/cve/CVE-2026-63938.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the... | 9.3 | 0.0020 | | | [CVE-2026-74439](https://patchblox.com/security/data/cve/CVE-2026-74439.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing dow... | 9.3 | 0.0020 | | | [CVE-2026-63881](https://patchblox.com/security/data/cve/CVE-2026-63881.md) | Urgent | drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger | 9.8 | 0.0019 | | | [CVE-2026-68146](https://patchblox.com/security/data/cve/CVE-2026-68146.md) | Urgent | ftrace: Add global mutex to serialize trace_parser access | 9.8 | 0.0018 | | | [CVE-2026-68325](https://patchblox.com/security/data/cve/CVE-2026-68325.md) | Urgent | iommu/amd: Bound the early ACPI HID map | 9.8 | 0.0018 | | | [CVE-2026-68406](https://patchblox.com/security/data/cve/CVE-2026-68406.md) | Urgent | wifi: cfg80211: validate PMSR FTM preamble range | 9.8 | 0.0018 | | | [CVE-2026-72085](https://patchblox.com/security/data/cve/CVE-2026-72085.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free unsubmitted command in... | 9.3 | 0.0018 | | | [CVE-2026-68310](https://patchblox.com/security/data/cve/CVE-2026-68310.md) | Urgent | wifi: mt76: mt7915: guard HE capability lookups | 9.8 | 0.0017 | | | [CVE-2026-68407](https://patchblox.com/security/data/cve/CVE-2026-68407.md) | Urgent | wifi: nl80211: free RNR data on MBSSID mismatch | 9.8 | 0.0017 | | | [CVE-2026-63824](https://patchblox.com/security/data/cve/CVE-2026-63824.md) | Urgent | KEYS: fix overflow in keyctl_pkey_params_get_2() | 9.8 | 0.0017 | | | [CVE-2026-63983](https://patchblox.com/security/data/cve/CVE-2026-63983.md) | Urgent | net/sched: fix packet loop on netem when duplicate is on | 9.8 | 0.0017 | | | [CVE-2026-64562](https://patchblox.com/security/data/cve/CVE-2026-64562.md) | Urgent | KVM: nVMX: Hide shadow VMCS right after VMCLEAR | 9.8 | 0.0016 | | | [CVE-2026-74712](https://patchblox.com/security/data/cve/CVE-2026-74712.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create_direct_ke... | 9.3 | 0.0014 | | | [CVE-2026-74310](https://patchblox.com/security/data/cve/CVE-2026-74310.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: vhost/net: complete zerocopy ubufs only once vh... | 9.3 | 0.0014 | | | [CVE-2026-74517](https://patchblox.com/security/data/cve/CVE-2026-74517.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Cancel delayed I/O APIC EOI handling b... | 9.3 | 0.0014 | | | [CVE-2026-53403](https://patchblox.com/security/data/cve/CVE-2026-53403.md) | Urgent | fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var | 9.8 | 0.0013 | | | [CVE-2026-68391](https://patchblox.com/security/data/cve/CVE-2026-68391.md) | Urgent | Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds | 9.8 | 0.0013 | | | [CVE-2026-68377](https://patchblox.com/security/data/cve/CVE-2026-68377.md) | Urgent | net/sched: act_tunnel_key: Defer dst_release to RCU callback | 9.8 | 0.0013 | | | [CVE-2026-68153](https://patchblox.com/security/data/cve/CVE-2026-68153.md) | Urgent | libceph: remove debugfs files before client teardown | 9.8 | 0.0013 | | | [CVE-2026-68236](https://patchblox.com/security/data/cve/CVE-2026-68236.md) | Urgent | drm/amd/display: set new_stream to NULL after release | 9.8 | 0.0013 | | | [CVE-2026-68142](https://patchblox.com/security/data/cve/CVE-2026-68142.md) | Urgent | geneve: require CAP_NET_ADMIN in the device netns for changelink | 9.8 | 0.0012 | | | [CVE-2026-68143](https://patchblox.com/security/data/cve/CVE-2026-68143.md) | Urgent | net: slip: serialize receive against buffer reallocation | 9.8 | 0.0011 | | | [CVE-2026-52947](https://patchblox.com/security/data/cve/CVE-2026-52947.md) | Urgent | net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove | 9.8 | 0.0011 | | | [CVE-2026-74469](https://patchblox.com/security/data/cve/CVE-2026-74469.md) | High | sctp: prevent peer transport count overflow | 8.8 | 0.0147 | | | [CVE-2026-63913](https://patchblox.com/security/data/cve/CVE-2026-63913.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 8.8 | 0.0097 | | | [CVE-2026-52929](https://patchblox.com/security/data/cve/CVE-2026-52929.md) | High | sctp: stream: fully roll back denied add-stream state | 9.8 | 0.0087 | | | [CVE-2026-64320](https://patchblox.com/security/data/cve/CVE-2026-64320.md) | High | nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page | 9.1 | 0.0080 | | | [CVE-2026-53176](https://patchblox.com/security/data/cve/CVE-2026-53176.md) | High | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN | 9.8 | 0.0076 | | | [CVE-2026-72083](https://patchblox.com/security/data/cve/CVE-2026-72083.md) | High | kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 9.8 | 0.0072 | | | [CVE-2026-72374](https://patchblox.com/security/data/cve/CVE-2026-72374.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pas... | 7.5 | 0.0072 | | | [CVE-2026-72378](https://patchblox.com/security/data/cve/CVE-2026-72378.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afs_extract_vl_addrs() T... | 7.5 | 0.0072 | | | [CVE-2026-72409](https://patchblox.com/security/data/cve/CVE-2026-72409.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resum... | 7.5 | 0.0072 | | | [CVE-2026-72418](https://patchblox.com/security/data/cve/CVE-2026-72418.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: prevent connlimit drops... | 7.5 | 0.0072 | | | [CVE-2026-72502](https://patchblox.com/security/data/cve/CVE-2026-72502.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid... | 7.5 | 0.0072 | | | [CVE-2026-74321](https://patchblox.com/security/data/cve/CVE-2026-74321.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrf... | 7.5 | 0.0072 | | | [CVE-2026-63912](https://patchblox.com/security/data/cve/CVE-2026-63912.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0071 | | | [CVE-2026-63922](https://patchblox.com/security/data/cve/CVE-2026-63922.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0071 | | | [CVE-2026-63924](https://patchblox.com/security/data/cve/CVE-2026-63924.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0071 | | | [CVE-2026-68154](https://patchblox.com/security/data/cve/CVE-2026-68154.md) | High | libceph: reject zero bucket types in crush_decode | 9.8 | 0.0071 | | | [CVE-2026-68158](https://patchblox.com/security/data/cve/CVE-2026-68158.md) | High | libceph: Fix multiplication overflow in decode_new_up_state_weight() | 9.8 | 0.0071 | | | [CVE-2026-68155](https://patchblox.com/security/data/cve/CVE-2026-68155.md) | High | libceph: Reject monmaps advertising zero monitors | 8.8 | 0.0070 | | | [CVE-2026-72242](https://patchblox.com/security/data/cve/CVE-2026-72242.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_... | 8.8 | 0.0070 | | | [CVE-2026-68157](https://patchblox.com/security/data/cve/CVE-2026-68157.md) | High | libceph: guard missing CRUSH type name lookup | 7.8 | 0.0070 | | | [CVE-2026-72247](https://patchblox.com/security/data/cve/CVE-2026-72247.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in... | 7.5 | 0.0070 | | | [CVE-2026-72253](https://patchblox.com/security/data/cve/CVE-2026-72253.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst()... | 7.5 | 0.0070 | | | [CVE-2026-74282](https://patchblox.com/security/data/cve/CVE-2026-74282.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK... | 7.5 | 0.0070 | | | [CVE-2026-68156](https://patchblox.com/security/data/cve/CVE-2026-68156.md) | High | libceph: refresh auth->authorizer_buf{,_len} after authorizer update | 9.8 | 0.0069 | | | [CVE-2026-72465](https://patchblox.com/security/data/cve/CVE-2026-72465.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after... | 7.5 | 0.0068 | | | [CVE-2026-68161](https://patchblox.com/security/data/cve/CVE-2026-68161.md) | High | sctp: close UDP tunnel sockets during netns teardown | 9.8 | 0.0068 | | | [CVE-2026-74281](https://patchblox.com/security/data/cve/CVE-2026-74281.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer b... | 7.5 | 0.0068 | | | [CVE-2026-72231](https://patchblox.com/security/data/cve/CVE-2026-72231.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pend... | 7.5 | 0.0068 | | | [CVE-2026-72464](https://patchblox.com/security/data/cve/CVE-2026-72464.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed r... | 7.5 | 0.0068 | | | [CVE-2026-53151](https://patchblox.com/security/data/cve/CVE-2026-53151.md) | High | rxrpc: Fix the ACK parser to extract the SACK table for parsing | 9.8 | 0.0067 | | | [CVE-2026-63968](https://patchblox.com/security/data/cve/CVE-2026-63968.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_select_... | 7.5 | 0.0067 | | | [CVE-2026-72254](https://patchblox.com/security/data/cve/CVE-2026-72254.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: reject fib expression on the... | 7.5 | 0.0067 | | | [CVE-2026-53399](https://patchblox.com/security/data/cve/CVE-2026-53399.md) | High | nfsd: release layout stid on setlease failure | 9.8 | 0.0066 | | | [CVE-2026-52924](https://patchblox.com/security/data/cve/CVE-2026-52924.md) | High | sctp: purge outqueue on stale COOKIE-ECHO handling | 9.8 | 0.0066 | | | [CVE-2026-64530](https://patchblox.com/security/data/cve/CVE-2026-64530.md) | High | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle | 9.8 | 0.0066 | | | [CVE-2026-72472](https://patchblox.com/security/data/cve/CVE-2026-72472.md) | High | nfs: use nfsi->rwsem to protect traversal of the file lock list | 9.8 | 0.0065 | | | [CVE-2026-63919](https://patchblox.com/security/data/cve/CVE-2026-63919.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0065 | | | [CVE-2026-72107](https://patchblox.com/security/data/cve/CVE-2026-72107.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm era: fix out-of-bounds memory access for non-... | 8.8 | 0.0065 | | | [CVE-2026-72160](https://patchblox.com/security/data/cve/CVE-2026-72160.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical i_mode... | 8.8 | 0.0065 | | | [CVE-2026-72420](https://patchblox.com/security/data/cve/CVE-2026-72420.md) | High | md/raid5: avoid R5_Overlap races while breaking stripe batches | 8.8 | 0.0065 | | | [CVE-2026-72310](https://patchblox.com/security/data/cve/CVE-2026-72310.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl b... | 8.1 | 0.0064 | | | [CVE-2026-53394](https://patchblox.com/security/data/cve/CVE-2026-53394.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on u... | 7.5 | 0.0063 | | | [CVE-2026-72356](https://patchblox.com/security/data/cve/CVE-2026-72356.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in c... | 7.5 | 0.0063 | | | [CVE-2026-72373](https://patchblox.com/security/data/cve/CVE-2026-72373.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs_break... | 7.5 | 0.0063 | | | [CVE-2026-74316](https://patchblox.com/security/data/cve/CVE-2026-74316.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4_drop_revoked_s... | 7.5 | 0.0063 | | | [CVE-2026-74435](https://patchblox.com/security/data/cve/CVE-2026-74435.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: rxrpc: rxrpc_verify_data ensure rx_dec_buffer al... | 7.5 | 0.0063 | | | [CVE-2026-72330](https://patchblox.com/security/data/cve/CVE-2026-72330.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_re... | 7.5 | 0.0062 | | | [CVE-2026-63795](https://patchblox.com/security/data/cve/CVE-2026-63795.md) | High | 9p: avoid putting oldfid in p9_client_walk() error path | 10.0 | 0.0062 | | | [CVE-2026-68376](https://patchblox.com/security/data/cve/CVE-2026-68376.md) | High | sctp: fix auth_hmacs array size in struct sctp_cookie | 8.1 | 0.0061 | | | [CVE-2026-72021](https://patchblox.com/security/data/cve/CVE-2026-72021.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state... | 8.2 | 0.0059 | | | [CVE-2026-72035](https://patchblox.com/security/data/cve/CVE-2026-72035.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: Replace direct dequeue ca... | 8.2 | 0.0059 | | | [CVE-2026-63796](https://patchblox.com/security/data/cve/CVE-2026-63796.md) | High | ocfs2: reject oversized group bitmap descriptors | 8.8 | 0.0059 | | | [CVE-2026-72057](https://patchblox.com/security/data/cve/CVE-2026-72057.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across def... | 8.2 | 0.0059 | | | [CVE-2026-43197](https://patchblox.com/security/data/cve/CVE-2026-43197.md) | High | netconsole: avoid OOB reads, msg is not nul-terminated | 9.1 | 0.0058 | | | [CVE-2026-68300](https://patchblox.com/security/data/cve/CVE-2026-68300.md) | High | sctp: auth: verify auth requirement when auth_chunk is NULL | 9.8 | 0.0058 | | | [CVE-2026-74480](https://patchblox.com/security/data/cve/CVE-2026-74480.md) | High | net: bridge: stop fast-leave after deleting a port group | 9.8 | 0.0058 | | | [CVE-2026-80590](https://patchblox.com/security/data/cve/CVE-2026-80590.md) | High | inet: frags: strip GSO state from fragments before reassembly | 8.8 | 0.0058 | | | [CVE-2026-64545](https://patchblox.com/security/data/cve/CVE-2026-64545.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_re... | 7.5 | 0.0058 | | | [CVE-2026-53221](https://patchblox.com/security/data/cve/CVE-2026-53221.md) | High | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | 9.8 | 0.0058 | | | [CVE-2026-53228](https://patchblox.com/security/data/cve/CVE-2026-53228.md) | High | ipv6: sit: reload inner IPv6 header after GSO offloads | 9.8 | 0.0058 | | | [CVE-2026-53225](https://patchblox.com/security/data/cve/CVE-2026-53225.md) | High | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 9.1 | 0.0058 | | | [CVE-2026-64577](https://patchblox.com/security/data/cve/CVE-2026-64577.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: gtp: check skb_pull_data() return in gtp1u_send_... | 7.5 | 0.0058 | | | [CVE-2026-72320](https://patchblox.com/security/data/cve/CVE-2026-72320.md) | High | netfilter: nft_lookup: fix catchall element handling with inverted lookups | 9.1 | 0.0057 | | | [CVE-2026-63976](https://patchblox.com/security/data/cve/CVE-2026-63976.md) | High | kernel-uek-debug-devel: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.8 | 0.0057 | | | [CVE-2026-68123](https://patchblox.com/security/data/cve/CVE-2026-68123.md) | High | openvswitch: fix GSO userspace truncation underflow | 9.8 | 0.0055 | | | [CVE-2026-72099](https://patchblox.com/security/data/cve/CVE-2026-72099.md) | High | kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 7.8 | 0.0055 | | | [CVE-2026-53398](https://patchblox.com/security/data/cve/CVE-2026-53398.md) | High | NFSD: Fix SECINFO_NO_NAME decode error cleanup | 9.8 | 0.0054 | | | [CVE-2026-74597](https://patchblox.com/security/data/cve/CVE-2026-74597.md) | High | ip6_tunnel: clear skb2->cb[] in ip6ip6_err() | 9.8 | 0.0054 | | | [CVE-2026-68136](https://patchblox.com/security/data/cve/CVE-2026-68136.md) | High | net: gro: fix double aggregation of flush-marked skbs | 9.8 | 0.0054 | | | [CVE-2026-64450](https://patchblox.com/security/data/cve/CVE-2026-64450.md) | High | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 9.1 | 0.0054 | | | [CVE-2026-68096](https://patchblox.com/security/data/cve/CVE-2026-68096.md) | High | audit: fix recursive locking deadlock in audit_dupe_exe() | 7.5 | 0.0053 | | | [CVE-2026-74341](https://patchblox.com/security/data/cve/CVE-2026-74341.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix heap overflow from oversized... | 8.8 | 0.0053 | | | [CVE-2026-53392](https://patchblox.com/security/data/cve/CVE-2026-53392.md) | High | NFSv4/flexfiles: reject zero filehandle version count | 8.8 | 0.0053 | | | [CVE-2026-53397](https://patchblox.com/security/data/cve/CVE-2026-53397.md) | High | nfsd: fix posix_acl leak on SETACL decode failure | 8.8 | 0.0053 | | | [CVE-2026-63808](https://patchblox.com/security/data/cve/CVE-2026-63808.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0053 | | | [CVE-2026-68117](https://patchblox.com/security/data/cve/CVE-2026-68117.md) | High | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 9.8 | 0.0053 | | | [CVE-2026-74473](https://patchblox.com/security/data/cve/CVE-2026-74473.md) | High | vxlan: use pskb_network_may_pull() in route_shortcircuit() | 9.8 | 0.0053 | | | [CVE-2026-53268](https://patchblox.com/security/data/cve/CVE-2026-53268.md) | High | netfilter: conntrack_irc: fix possible out-of-bounds read | 8.2 | 0.0052 | | | [CVE-2026-53391](https://patchblox.com/security/data/cve/CVE-2026-53391.md) | High | NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr | 8.8 | 0.0052 | | | [CVE-2026-63993](https://patchblox.com/security/data/cve/CVE-2026-63993.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after s... | 9.8 | 0.0051 | | | [CVE-2026-63994](https://patchblox.com/security/data/cve/CVE-2026-63994.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0051 | | | [CVE-2026-64007](https://patchblox.com/security/data/cve/CVE-2026-64007.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 9.8 | 0.0051 | | | [CVE-2026-68388](https://patchblox.com/security/data/cve/CVE-2026-68388.md) | High | smb/client: handle overlapping allocated ranges in fallocate | 9.8 | 0.0051 | | | [CVE-2026-74495](https://patchblox.com/security/data/cve/CVE-2026-74495.md) | High | igbvf: Fix leak in TX DMA error cleanup | 9.8 | 0.0051 | | | [CVE-2026-74669](https://patchblox.com/security/data/cve/CVE-2026-74669.md) | High | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 9.8 | 0.0051 | | | [CVE-2026-53186](https://patchblox.com/security/data/cve/CVE-2026-53186.md) | High | RDMA/srp: bound SRP_RSP sense copy by the received length | 9.1 | 0.0051 | | | [CVE-2026-63992](https://patchblox.com/security/data/cve/CVE-2026-63992.md) | High | kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.1 | 0.0051 | | | [CVE-2026-64355](https://patchblox.com/security/data/cve/CVE-2026-64355.md) | High | bpf: Reject fragmented frames in devmap | 9.8 | 0.0051 | | | [CVE-2026-74616](https://patchblox.com/security/data/cve/CVE-2026-74616.md) | High | xdp: reject clones that overrun skb_shared_info tailroom | 9.8 | 0.0051 | | | [CVE-2026-68343](https://patchblox.com/security/data/cve/CVE-2026-68343.md) | High | smb: client: validate DFS referral PathConsumed | 9.1 | 0.0051 | | | [CVE-2026-63801](https://patchblox.com/security/data/cve/CVE-2026-63801.md) | High | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 8.8 | 0.0051 | | | [CVE-2026-68315](https://patchblox.com/security/data/cve/CVE-2026-68315.md) | High | sctp: validate stream count in sctp_process_strreset_inreq() | 8.8 | 0.0051 | | | [CVE-2026-68129](https://patchblox.com/security/data/cve/CVE-2026-68129.md) | High | gve: fix Rx queue stall on alloc failure | 7.5 | 0.0051 | | | [CVE-2026-74730](https://patchblox.com/security/data/cve/CVE-2026-74730.md) | High | NFS: Pin the 'struct nfs_server' during a FREE_STATEID call | 9.8 | 0.0051 | | | [CVE-2026-64560](https://patchblox.com/security/data/cve/CVE-2026-64560.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-lead... | 7.8 | 0.0050 | | | [CVE-2026-68299](https://patchblox.com/security/data/cve/CVE-2026-68299.md) | High | vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets | 8.8 | 0.0050 | | | [CVE-2026-53199](https://patchblox.com/security/data/cve/CVE-2026-53199.md) | High | hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf | 7.5 | 0.0050 | | | [CVE-2026-64312](https://patchblox.com/security/data/cve/CVE-2026-64312.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall... | 7.5 | 0.0050 | | | [CVE-2026-74523](https://patchblox.com/security/data/cve/CVE-2026-74523.md) | High | qede: sync udp_tunnel ports outside qede_lock in the recovery path | 7.5 | 0.0050 | | | [CVE-2026-74625](https://patchblox.com/security/data/cve/CVE-2026-74625.md) | High | netfilter: bridge: release template ct on non-IP path | 7.5 | 0.0050 | | | [CVE-2026-74717](https://patchblox.com/security/data/cve/CVE-2026-74717.md) | High | net/mlx5: fw_tracer, return NULL on create error | 7.5 | 0.0050 | | | [CVE-2026-74705](https://patchblox.com/security/data/cve/CVE-2026-74705.md) | High | udp: fix potential use-after-free in tunnel segmentation | 10.0 | 0.0050 | | | [CVE-2026-74586](https://patchblox.com/security/data/cve/CVE-2026-74586.md) | High | sctp: clear new_transport when removing a peer | 9.8 | 0.0050 | | | [CVE-2026-74587](https://patchblox.com/security/data/cve/CVE-2026-74587.md) | High | sctp: fix use-after-free of cached ASCONF chunk | 9.8 | 0.0050 | | | [CVE-2026-74588](https://patchblox.com/security/data/cve/CVE-2026-74588.md) | High | sctp: keep chunk->transport in step with the list it is queued on | 9.8 | 0.0050 | | | [CVE-2026-74688](https://patchblox.com/security/data/cve/CVE-2026-74688.md) | High | sctp: clear control chunk transport if it is being removed | 9.8 | 0.0050 | | | [CVE-2026-74612](https://patchblox.com/security/data/cve/CVE-2026-74612.md) | High | veth: fix skb length accounting after XDP frag adjustment | 10.0 | 0.0049 | | | [CVE-2026-74476](https://patchblox.com/security/data/cve/CVE-2026-74476.md) | High | veth: convert frag_list skbs before running XDP | 9.1 | 0.0049 | | | [CVE-2026-63978](https://patchblox.com/security/data/cve/CVE-2026-63978.md) | High | net/handshake: Drain pending requests at net namespace exit | 9.8 | 0.0049 | | | [CVE-2026-53183](https://patchblox.com/security/data/cve/CVE-2026-53183.md) | High | mptcp: allow subflow rcv wnd to shrink | 7.5 | 0.0049 | | | [CVE-2026-53184](https://patchblox.com/security/data/cve/CVE-2026-53184.md) | High | udp: clear skb->dev before running a sockmap verdict | 7.5 | 0.0049 | | | [CVE-2026-74621](https://patchblox.com/security/data/cve/CVE-2026-74621.md) | High | net/sched: act_ct: fix sk_buff leak when the header checks reject a packet | 7.5 | 0.0049 | | | [CVE-2026-74696](https://patchblox.com/security/data/cve/CVE-2026-74696.md) | High | tcp: fix TFO max_qlen accounting across reuseport migration | 7.5 | 0.0049 | | | [CVE-2026-53264](https://patchblox.com/security/data/cve/CVE-2026-53264.md) | High | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 7.8 | 0.0049 | | | [CVE-2026-53229](https://patchblox.com/security/data/cve/CVE-2026-53229.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XD... | 7.5 | 0.0048 | | | [CVE-2026-74550](https://patchblox.com/security/data/cve/CVE-2026-74550.md) | High | net: do not send ICMP/NDISC Redirects when peer allocation fails | 7.5 | 0.0048 | | | [CVE-2026-74624](https://patchblox.com/security/data/cve/CVE-2026-74624.md) | High | netfilter: nf_conntrack: defer invalid log until after unlock | 7.5 | 0.0048 | | | [CVE-2026-74678](https://patchblox.com/security/data/cve/CVE-2026-74678.md) | High | net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() | 7.5 | 0.0048 | | | [CVE-2026-74608](https://patchblox.com/security/data/cve/CVE-2026-74608.md) | High | smb: client: Fix use-after-free in cifs_try_adding_channels() | 9.8 | 0.0048 | | | [CVE-2026-64600](https://patchblox.com/security/data/cve/CVE-2026-64600.md) | High | xfs: resample the data fork mapping after cycling ILOCK | 7.8 | 0.0047 | | | [CVE-2026-52946](https://patchblox.com/security/data/cve/CVE-2026-52946.md) | High | fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling | 7.5 | 0.0047 | | | [CVE-2026-72100](https://patchblox.com/security/data/cve/CVE-2026-72100.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of lim... | 8.8 | 0.0046 | | | [CVE-2026-64448](https://patchblox.com/security/data/cve/CVE-2026-64448.md) | High | smb: client: restrict implied bcc[0] exemption to responses without data area | 8.2 | 0.0046 | | | [CVE-2026-64383](https://patchblox.com/security/data/cve/CVE-2026-64383.md) | High | smb: client: fix double-free in SMB2_flush() replay | 9.8 | 0.0046 | | | [CVE-2026-64384](https://patchblox.com/security/data/cve/CVE-2026-64384.md) | High | smb: client: fix change notify replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64385](https://patchblox.com/security/data/cve/CVE-2026-64385.md) | High | smb: client: fix double-free in SMB2_ioctl() replay | 9.8 | 0.0046 | | | [CVE-2026-64386](https://patchblox.com/security/data/cve/CVE-2026-64386.md) | High | smb: client: fix query_info() replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64387](https://patchblox.com/security/data/cve/CVE-2026-64387.md) | High | smb: client: fix query directory replay double-free | 9.8 | 0.0046 | | | [CVE-2026-74490](https://patchblox.com/security/data/cve/CVE-2026-74490.md) | High | tipc: avoid use-after-free in poll trace queue dumps | 8.8 | 0.0046 | | | [CVE-2026-74475](https://patchblox.com/security/data/cve/CVE-2026-74475.md) | High | vxlan: use neigh_ha_snapshot() in route_shortcircuit() | 10.0 | 0.0045 | | | [CVE-2026-64523](https://patchblox.com/security/data/cve/CVE-2026-64523.md) | High | net/handshake: Take a long-lived file reference at submit | 9.8 | 0.0045 | | | [CVE-2026-64380](https://patchblox.com/security/data/cve/CVE-2026-64380.md) | High | smb: client: harden POSIX SID length parsing | 8.2 | 0.0044 | | | [CVE-2026-74704](https://patchblox.com/security/data/cve/CVE-2026-74704.md) | High | net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter | 8.2 | 0.0044 | | | [CVE-2026-63830](https://patchblox.com/security/data/cve/CVE-2026-63830.md) | High | net: skmsg: preserve sg.copy across SG transforms | 9.4 | 0.0044 | | | [CVE-2026-53235](https://patchblox.com/security/data/cve/CVE-2026-53235.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: add pskb_may_pull() to skb_gro_receive_list... | 7.8 | 0.0044 | | | [CVE-2026-64414](https://patchblox.com/security/data/cve/CVE-2026-64414.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko repo... | 7.8 | 0.0044 | | | [CVE-2026-64003](https://patchblox.com/security/data/cve/CVE-2026-64003.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Run queues for all non-SDEV_DEL devi... | 7.5 | 0.0044 | | | [CVE-2026-53131](https://patchblox.com/security/data/cve/CVE-2026-53131.md) | High | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 | | | [CVE-2026-74598](https://patchblox.com/security/data/cve/CVE-2026-74598.md) | High | ipv6: fix Route Information option length validation | 7.5 | 0.0043 | | | [CVE-2026-74581](https://patchblox.com/security/data/cve/CVE-2026-74581.md) | High | net: ipv6: clear suppressed fib6 rule result | 9.8 | 0.0042 | | | [CVE-2026-74340](https://patchblox.com/security/data/cve/CVE-2026-74340.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from firmware count... | 8.1 | 0.0042 | | | [CVE-2026-74410](https://patchblox.com/security/data/cve/CVE-2026-74410.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix OOB read from firmware RX descr... | 8.1 | 0.0042 | | | [CVE-2026-64368](https://patchblox.com/security/data/cve/CVE-2026-64368.md) | High | mm/slab: do not limit zeroing to orig_size when only red zoning is enabled | 8.1 | 0.0042 | | | [CVE-2026-68352](https://patchblox.com/security/data/cve/CVE-2026-68352.md) | High | wifi: ath6kl: fix OOB read from firmware IE lengths in connect event | 8.3 | 0.0042 | | | [CVE-2026-74408](https://patchblox.com/security/data/cve/CVE-2026-74408.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: fix OOB access from firmware tx sta... | 8.8 | 0.0041 | | | [CVE-2026-74580](https://patchblox.com/security/data/cve/CVE-2026-74580.md) | High | vhost: reset the vring metadata cache on vring reconfiguration | 8.8 | 0.0041 | | | [CVE-2026-68192](https://patchblox.com/security/data/cve/CVE-2026-68192.md) | High | wifi: brcmfmac: make release_scratchbuffers idempotent | 8.8 | 0.0041 | | | [CVE-2026-68118](https://patchblox.com/security/data/cve/CVE-2026-68118.md) | High | tcp: challenge ACK for non-exact RST in SYN-RECEIVED | 8.2 | 0.0041 | | | [CVE-2026-74300](https://patchblox.com/security/data/cve/CVE-2026-74300.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: validate codec capability elemen... | 8.8 | 0.0040 | | | [CVE-2026-74556](https://patchblox.com/security/data/cve/CVE-2026-74556.md) | High | scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer | 9.8 | 0.0040 | | | [CVE-2026-72029](https://patchblox.com/security/data/cve/CVE-2026-72029.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: bound device offsets in the MUX... | 8.8 | 0.0040 | | | [CVE-2026-72469](https://patchblox.com/security/data/cve/CVE-2026-72469.md) | High | xprtrdma: Fix ep kref imbalance on ADDR_CHANGE | 8.8 | 0.0040 | | | [CVE-2026-74411](https://patchblox.com/security/data/cve/CVE-2026-74411.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Correct data type for scan index to... | 8.8 | 0.0040 | | | [CVE-2026-74569](https://patchblox.com/security/data/cve/CVE-2026-74569.md) | High | netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() | 9.8 | 0.0039 | | | [CVE-2026-63893](https://patchblox.com/security/data/cve/CVE-2026-63893.md) | High | kernel-uek-debug-modules-extra: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.1 | 0.0039 | | | [CVE-2026-64374](https://patchblox.com/security/data/cve/CVE-2026-64374.md) | High | sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT | 7.5 | 0.0039 | | | [CVE-2026-53217](https://patchblox.com/security/data/cve/CVE-2026-53217.md) | High | net: mvpp2: sync RX data at the hardware packet offset | 8.6 | 0.0038 | | | [CVE-2026-68199](https://patchblox.com/security/data/cve/CVE-2026-68199.md) | High | wifi: ath6kl: fix OOB access from firmware ADDBA window size | 8.8 | 0.0038 | | | [CVE-2026-68119](https://patchblox.com/security/data/cve/CVE-2026-68119.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: initialize standalone TCP-AO response paddi... | 7.5 | 0.0037 | | | [CVE-2026-68433](https://patchblox.com/security/data/cve/CVE-2026-68433.md) | High | libceph: bound get_version reply decode to front len | 8.6 | 0.0036 | | | [CVE-2026-64597](https://patchblox.com/security/data/cve/CVE-2026-64597.md) | High | smb: client: fix double-free in SMB2_close() replay | 9.8 | 0.0036 | | | [CVE-2026-63916](https://patchblox.com/security/data/cve/CVE-2026-63916.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacom_hid_set_devic... | 8.8 | 0.0036 | | | [CVE-2026-64313](https://patchblox.com/security/data/cve/CVE-2026-64313.md) | High | crypto: ecc - Fix carry overflow in vli multiplication | 8.8 | 0.0036 | | | [CVE-2026-64364](https://patchblox.com/security/data/cve/CVE-2026-64364.md) | High | HID: multitouch: fix out-of-bounds bit access on mt_io_flags | 8.8 | 0.0036 | | | [CVE-2026-64382](https://patchblox.com/security/data/cve/CVE-2026-64382.md) | High | smb: client: fix double-free in SMB2_open() replay | 8.8 | 0.0035 | | | [CVE-2026-72121](https://patchblox.com/security/data/cve/CVE-2026-72121.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and t... | 8.8 | 0.0035 | | | [CVE-2026-72124](https://patchblox.com/security/data/cve/CVE-2026-72124.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: isotp: serialize TX state transitions under... | 8.8 | 0.0035 | | | [CVE-2026-72157](https://patchblox.com/security/data/cve/CVE-2026-72157.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags[] overflow by boundi... | 8.8 | 0.0035 | | | [CVE-2026-63947](https://patchblox.com/security/data/cve/CVE-2026-63947.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0035 | | | [CVE-2026-63925](https://patchblox.com/security/data/cve/CVE-2026-63925.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0035 | | | [CVE-2026-64093](https://patchblox.com/security/data/cve/CVE-2026-64093.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: directly shut down timer o... | 8.8 | 0.0035 | | | [CVE-2026-74425](https://patchblox.com/security/data/cve/CVE-2026-74425.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: afs: handle CB.InitCallBackState3 requests witho... | 7.5 | 0.0035 | | | [CVE-2026-74572](https://patchblox.com/security/data/cve/CVE-2026-74572.md) | High | btrfs: zoned: fix deadlock between metadata writeback and transaction commit | 7.5 | 0.0035 | | | [CVE-2026-72233](https://patchblox.com/security/data/cve/CVE-2026-72233.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb... | 8.8 | 0.0034 | | | [CVE-2026-72235](https://patchblox.com/security/data/cve/CVE-2026-72235.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb... | 8.8 | 0.0034 | | | [CVE-2026-74592](https://patchblox.com/security/data/cve/CVE-2026-74592.md) | High | ima: Instantiate file_truncate and path_truncate hooks | 8.1 | 0.0034 | | | [CVE-2026-53180](https://patchblox.com/security/data/cve/CVE-2026-53180.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock in tmigr_handle_r... | 7.5 | 0.0034 | | | [CVE-2026-63980](https://patchblox.com/security/data/cve/CVE-2026-63980.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/handshake: Use spin_lock_bh for hn_lock nvm... | 7.5 | 0.0034 | | | [CVE-2026-63944](https://patchblox.com/security/data/cve/CVE-2026-63944.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix UAF in hci_le_create_cis... | 8.8 | 0.0033 | | | [CVE-2026-64435](https://patchblox.com/security/data/cve/CVE-2026-64435.md) | High | audit: Fix data races of skb_queue_len() readers on audit_queue | 8.2 | 0.0033 | | | [CVE-2026-72227](https://patchblox.com/security/data/cve/CVE-2026-72227.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: avoid OOB read of num_dests h... | 8.1 | 0.0033 | | | [CVE-2026-74557](https://patchblox.com/security/data/cve/CVE-2026-74557.md) | High | scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer | 7.5 | 0.0033 | | | [CVE-2026-64235](https://patchblox.com/security/data/cve/CVE-2026-64235.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs i... | 8.1 | 0.0033 | | | [CVE-2026-68125](https://patchblox.com/security/data/cve/CVE-2026-68125.md) | High | mac802154: llsec: reject frames shorter than the authentication tag | 8.8 | 0.0032 | | | [CVE-2026-64379](https://patchblox.com/security/data/cve/CVE-2026-64379.md) | High | smb: client: mask server-provided mode to 07777 in modefromsid | 7.8 | 0.0031 | | | [CVE-2026-63831](https://patchblox.com/security/data/cve/CVE-2026-63831.md) | High | mac802154: llsec: add skb_cow_data() before in-place crypto | 8.8 | 0.0031 | | | [CVE-2026-72115](https://patchblox.com/security/data/cve/CVE-2026-72115.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: track a single source interface for AN... | 8.1 | 0.0030 | | | [CVE-2026-53360](https://patchblox.com/security/data/cve/CVE-2026-53360.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2... | 8.8 | 0.0030 | | | [CVE-2026-64557](https://patchblox.com/security/data/cve/CVE-2026-64557.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free in l2cap_so... | 8.8 | 0.0029 | | | [CVE-2026-68353](https://patchblox.com/security/data/cve/CVE-2026-68353.md) | High | wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler | 8.1 | 0.0029 | | | [CVE-2026-64547](https://patchblox.com/security/data/cve/CVE-2026-64547.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packet_len before pa... | 8.1 | 0.0028 | | | [CVE-2026-53358](https://patchblox.com/security/data/cve/CVE-2026-53358.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.8 | 0.0028 | | | [CVE-2026-64598](https://patchblox.com/security/data/cve/CVE-2026-64598.md) | High | smb/client: Fix error code in smb2_aead_req_alloc() | 8.8 | 0.0028 | | | [CVE-2026-53254](https://patchblox.com/security/data/cve/CVE-2026-53254.md) | High | Bluetooth: RFCOMM: validate skb length in MCC handlers | 8.1 | 0.0028 | | | [CVE-2026-64540](https://patchblox.com/security/data/cve/CVE-2026-64540.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in geneli... | 8.1 | 0.0028 | | | [CVE-2026-68373](https://patchblox.com/security/data/cve/CVE-2026-68373.md) | High | wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() | 8.1 | 0.0028 | | | [CVE-2026-64406](https://patchblox.com/security/data/cve/CVE-2026-64406.md) | High | Bluetooth: fix UAF in bt_accept_dequeue() | 8.0 | 0.0028 | | | [CVE-2026-63891](https://patchblox.com/security/data/cve/CVE-2026-63891.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Cap recursion depth in __... | 7.0 | 0.0028 | | | [CVE-2026-63975](https://patchblox.com/security/data/cve/CVE-2026-63975.md) | High | kernel-rt-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0027 | | | [CVE-2026-63867](https://patchblox.com/security/data/cve/CVE-2026-63867.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.2 | 0.0027 | | | [CVE-2026-53196](https://patchblox.com/security/data/cve/CVE-2026-53196.md) | High | USB: serial: io_ti: fix heap overflow in get_manuf_info() | 8.8 | 0.0027 | | | [CVE-2026-53147](https://patchblox.com/security/data/cve/CVE-2026-53147.md) | High | thunderbolt: Validate XDomain request packet size before type cast | 8.1 | 0.0027 | | | [CVE-2026-64095](https://patchblox.com/security/data/cve/CVE-2026-64095.md) | High | kernel-uek64k-devel: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.1 | 0.0027 | | | [CVE-2026-53253](https://patchblox.com/security/data/cve/CVE-2026-53253.md) | High | Bluetooth: bnep: reject short frames before parsing | 7.1 | 0.0027 | | | [CVE-2026-64403](https://patchblox.com/security/data/cve/CVE-2026-64403.md) | High | Bluetooth: L2CAP: validate option length before reading conf opt value | 7.1 | 0.0027 | | | [CVE-2026-53256](https://patchblox.com/security/data/cve/CVE-2026-53256.md) | High | kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0026 | | | [CVE-2026-64408](https://patchblox.com/security/data/cve/CVE-2026-64408.md) | High | Bluetooth: bnep: pin L2CAP connection during netdev registration | 8.8 | 0.0026 | | | [CVE-2026-68091](https://patchblox.com/security/data/cve/CVE-2026-68091.md) | High | HID: wacom: stop hardware after post-start probe failures | 8.8 | 0.0026 | | | [CVE-2026-68326](https://patchblox.com/security/data/cve/CVE-2026-68326.md) | High | wifi: mwifiex: bound uAP association event IEs to the event buffer | 8.8 | 0.0026 | | | [CVE-2026-53275](https://patchblox.com/security/data/cve/CVE-2026-53275.md) | High | ipv6: mcast: Fix use-after-free when processing MLD queries | 8.8 | 0.0026 | | | [CVE-2026-74508](https://patchblox.com/security/data/cve/CVE-2026-74508.md) | High | Bluetooth: HIDP: reject frames without a transaction header | 8.8 | 0.0026 | | | [CVE-2026-63946](https://patchblox.com/security/data/cve/CVE-2026-63946.md) | High | kernel-64k-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0026 | | | [CVE-2026-68425](https://patchblox.com/security/data/cve/CVE-2026-68425.md) | High | IB/mad: Drop unmatched RMPP responses before reassembly | 7.1 | 0.0026 | | | [CVE-2026-53146](https://patchblox.com/security/data/cve/CVE-2026-53146.md) | High | thunderbolt: Limit XDomain response copy to actual frame size | 7.1 | 0.0026 | | | [CVE-2026-53361](https://patchblox.com/security/data/cve/CVE-2026-53361.md) | High | af_unix: Set gc_in_progress to true in unix_gc(). | 8.8 | 0.0026 | | | [CVE-2026-53232](https://patchblox.com/security/data/cve/CVE-2026-53232.md) | High | net: phy: clean the sfp upstream if phy probing fails | 8.8 | 0.0026 | | | [CVE-2026-72108](https://patchblox.com/security/data/cve/CVE-2026-72108.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consiste... | 7.8 | 0.0026 | | | [CVE-2026-64434](https://patchblox.com/security/data/cve/CVE-2026-64434.md) | High | Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref | 8.8 | 0.0026 | | | [CVE-2026-64554](https://patchblox.com/security/data/cve/CVE-2026-64554.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in... | 8.8 | 0.0026 | | | [CVE-2026-74691](https://patchblox.com/security/data/cve/CVE-2026-74691.md) | High | net: thunderbolt: Tear down DMA paths before stopping the rings | 8.8 | 0.0026 | | | [CVE-2026-63869](https://patchblox.com/security/data/cve/CVE-2026-63869.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0026 | | | [CVE-2026-74488](https://patchblox.com/security/data/cve/CVE-2026-74488.md) | High | wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames | 8.8 | 0.0026 | | | [CVE-2026-74540](https://patchblox.com/security/data/cve/CVE-2026-74540.md) | High | Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp | 8.8 | 0.0026 | | | [CVE-2026-74531](https://patchblox.com/security/data/cve/CVE-2026-74531.md) | High | Bluetooth: hci_conn: hold conn reference in abort_conn_sync() | 8.8 | 0.0025 | | | [CVE-2026-64206](https://patchblox.com/security/data/cve/CVE-2026-64206.md) | High | Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock | 8.8 | 0.0025 | | | [CVE-2026-64586](https://patchblox.com/security/data/cve/CVE-2026-64586.md) | High | wifi: brcmfmac: drain bus_reset work on device removal | 8.8 | 0.0025 | | | [CVE-2026-74509](https://patchblox.com/security/data/cve/CVE-2026-74509.md) | High | Bluetooth: hci_sync: Fix advertising data UAFs | 8.8 | 0.0025 | | | [CVE-2026-74541](https://patchblox.com/security/data/cve/CVE-2026-74541.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: clear iso_data always when detac... | 8.8 | 0.0025 | | | [CVE-2026-74356](https://patchblox.com/security/data/cve/CVE-2026-74356.md) | High | vhost: fix vhost_get_avail_idx for a non empty ring | 7.4 | 0.0025 | | | [CVE-2026-74507](https://patchblox.com/security/data/cve/CVE-2026-74507.md) | High | Bluetooth: HIDP: validate numbered report payloads | 7.1 | 0.0024 | | | [CVE-2026-74535](https://patchblox.com/security/data/cve/CVE-2026-74535.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid deadlocks in iso_sock_time... | 8.8 | 0.0024 | | | [CVE-2026-74575](https://patchblox.com/security/data/cve/CVE-2026-74575.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Prevent XDomain delayed work use-af... | 8.8 | 0.0024 | | | [CVE-2026-68278](https://patchblox.com/security/data/cve/CVE-2026-68278.md) | High | drm/dp/mst: fix buffer overflows in sideband chunk accumulation | 8.1 | 0.0024 | | | [CVE-2026-68398](https://patchblox.com/security/data/cve/CVE-2026-68398.md) | High | ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF | 9.8 | 0.0023 | | | [CVE-2026-68414](https://patchblox.com/security/data/cve/CVE-2026-68414.md) | High | wifi: cfg80211: cancel sched scan results work on unregister | 7.5 | 0.0023 | | | [CVE-2026-63981](https://patchblox.com/security/data/cve/CVE-2026-63981.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_mirred: Fix blockcast recursion b... | 7.0 | 0.0023 | | | [CVE-2026-68138](https://patchblox.com/security/data/cve/CVE-2026-68138.md) | High | net/sched: serialize qdisc_rtab_list against concurrent get/put | 8.8 | 0.0022 | | | [CVE-2026-64452](https://patchblox.com/security/data/cve/CVE-2026-64452.md) | High | 6lowpan: fix NHC entry use-after-free on error path | 7.1 | 0.0022 | | | [CVE-2026-68351](https://patchblox.com/security/data/cve/CVE-2026-68351.md) | High | wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read | 7.1 | 0.0022 | | | [CVE-2026-68188](https://patchblox.com/security/data/cve/CVE-2026-68188.md) | High | Bluetooth: RFCOMM: Fix session UAF in set_termios | 8.8 | 0.0022 | | | [CVE-2026-68186](https://patchblox.com/security/data/cve/CVE-2026-68186.md) | High | binfmt_misc: set have_execfd only once the interpreter is opened | 7.8 | 0.0022 | | | [CVE-2026-72218](https://patchblox.com/security/data/cve/CVE-2026-72218.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file refcount leak on cached nlm... | 7.0 | 0.0022 | | | [CVE-2026-72219](https://patchblox.com/security/data/cve/CVE-2026-72219.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fa... | 7.0 | 0.0022 | | | [CVE-2026-52923](https://patchblox.com/security/data/cve/CVE-2026-52923.md) | High | ipc: limit next_id allocation to the valid ID range | 7.8 | 0.0022 | | | [CVE-2026-74271](https://patchblox.com/security/data/cve/CVE-2026-74271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: core: fix supplied_from allocatio... | 7.0 | 0.0022 | | | [CVE-2026-72306](https://patchblox.com/security/data/cve/CVE-2026-72306.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vduse: Fix race in vduse_dev_msg_sync and vduse_... | n/a | 0.0022 | | | [CVE-2026-68169](https://patchblox.com/security/data/cve/CVE-2026-68169.md) | High | mptcp: pm: userspace: fix use-after-free in get_local_id | 9.8 | 0.0021 | | | [CVE-2026-68181](https://patchblox.com/security/data/cve/CVE-2026-68181.md) | High | mei: bus: access mei_device under device_lock on cleanup | 7.8 | 0.0021 | | | [CVE-2026-68165](https://patchblox.com/security/data/cve/CVE-2026-68165.md) | High | mm/damon/core: validate ranges in damon_set_regions() | 7.1 | 0.0021 | | | [CVE-2026-72361](https://patchblox.com/security/data/cve/CVE-2026-72361.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/hw_engine: Fix double-free of managed BO... | 7.0 | 0.0021 | | | [CVE-2026-72443](https://patchblox.com/security/data/cve/CVE-2026-72443.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill MIDI 2.0 URBs before freei... | 7.0 | 0.0021 | | | [CVE-2026-63810](https://patchblox.com/security/data/cve/CVE-2026-63810.md) | High | block: Avoid mounting the bdev pseudo-filesystem in userspace | 7.1 | 0.0021 | | | [CVE-2026-68193](https://patchblox.com/security/data/cve/CVE-2026-68193.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio... | 8.1 | 0.0021 | | | [CVE-2026-64572](https://patchblox.com/security/data/cve/CVE-2026-64572.md) | High | ipv4: fib: free fib_alias with kfree_rcu() on insert error path | 8.8 | 0.0020 | | | [CVE-2026-68162](https://patchblox.com/security/data/cve/CVE-2026-68162.md) | High | sctp: avoid auth_enable sysctl UAF during netns teardown | 8.8 | 0.0020 | | | [CVE-2026-53365](https://patchblox.com/security/data/cve/CVE-2026-53365.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-... | 8.8 | 0.0020 | | | [CVE-2026-72151](https://patchblox.com/security/data/cve/CVE-2026-72151.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm2-sessions: wait for async KPP completio... | 8.4 | 0.0020 | | | [CVE-2026-72342](https://patchblox.com/security/data/cve/CVE-2026-72342.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration... | 8.4 | 0.0020 | | | [CVE-2026-72343](https://patchblox.com/security/data/cve/CVE-2026-72343.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer a... | 8.4 | 0.0020 | | | [CVE-2026-74332](https://patchblox.com/security/data/cve/CVE-2026-74332.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-sof: Bound DAI link iteration... | 8.4 | 0.0020 | | | [CVE-2026-68085](https://patchblox.com/security/data/cve/CVE-2026-68085.md) | High | Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled | 8.0 | 0.0020 | | | [CVE-2026-53212](https://patchblox.com/security/data/cve/CVE-2026-53212.md) | High | netfilter: nft_tunnel: fix use-after-free on object destroy | 7.8 | 0.0019 | | | [CVE-2026-68276](https://patchblox.com/security/data/cve/CVE-2026-68276.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: fix cleaner shader IB buffer ove... | 7.0 | 0.0019 | | | [CVE-2026-64490](https://patchblox.com/security/data/cve/CVE-2026-64490.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the... | 8.8 | 0.0019 | | | [CVE-2026-72284](https://patchblox.com/security/data/cve/CVE-2026-72284.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore pending PV EOI if the vCPU has... | 7.1 | 0.0019 | | | [CVE-2026-64508](https://patchblox.com/security/data/cve/CVE-2026-64508.md) | High | bpf: Support for hardening against JIT spraying | 7.8 | 0.0019 | | | [CVE-2026-74404](https://patchblox.com/security/data/cve/CVE-2026-74404.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix snp_filter_reserved_mem_region... | 7.8 | 0.0019 | | | [CVE-2026-68255](https://patchblox.com/security/data/cve/CVE-2026-68255.md) | High | drm/virtio: bound EDID block reads to the response buffer | 7.7 | 0.0019 | | | [CVE-2026-63940](https://patchblox.com/security/data/cve/CVE-2026-63940.md) | High | KVM: SEV: Ignore Port I/O requests of length '0' | 9.3 | 0.0019 | | | [CVE-2026-63926](https://patchblox.com/security/data/cve/CVE-2026-63926.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.4 | 0.0019 | | | [CVE-2026-72116](https://patchblox.com/security/data/cve/CVE-2026-72116.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix stale rx/tx ops after device remov... | 7.1 | 0.0019 | | | [CVE-2026-72280](https://patchblox.com/security/data/cve/CVE-2026-72280.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR... | 7.1 | 0.0019 | | | [CVE-2026-68093](https://patchblox.com/security/data/cve/CVE-2026-68093.md) | High | KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug | 7.0 | 0.0019 | | | [CVE-2026-72289](https://patchblox.com/security/data/cve/CVE-2026-72289.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.3 | 0.0019 | | | [CVE-2026-72298](https://patchblox.com/security/data/cve/CVE-2026-72298.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... | 8.8 | 0.0019 | | | [CVE-2026-74256](https://patchblox.com/security/data/cve/CVE-2026-74256.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_po... | 8.4 | 0.0019 | | | [CVE-2026-72487](https://patchblox.com/security/data/cve/CVE-2026-72487.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr be... | 7.7 | 0.0019 | | | [CVE-2026-64484](https://patchblox.com/security/data/cve/CVE-2026-64484.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_new1() return value... | n/a | 0.0019 | | | [CVE-2026-68363](https://patchblox.com/security/data/cve/CVE-2026-68363.md) | High | wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request | 8.8 | 0.0018 | | | [CVE-2026-64529](https://patchblox.com/security/data/cve/CVE-2026-64529.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and... | 7.8 | 0.0018 | | | [CVE-2026-64470](https://patchblox.com/security/data/cve/CVE-2026-64470.md) | High | Bluetooth: btusb: fix use-after-free on marvell probe failure | 7.1 | 0.0018 | | | [CVE-2026-64471](https://patchblox.com/security/data/cve/CVE-2026-64471.md) | High | Bluetooth: btusb: fix use-after-free on registration failure | 7.1 | 0.0018 | | | [CVE-2026-68350](https://patchblox.com/security/data/cve/CVE-2026-68350.md) | High | wifi: carl9170: fix OOB read from off-by-two in TX status handler | 7.1 | 0.0018 | | | [CVE-2026-68365](https://patchblox.com/security/data/cve/CVE-2026-68365.md) | High | USB: serial: io_edgeport: cap received transmit credits | 7.1 | 0.0018 | | | [CVE-2026-64461](https://patchblox.com/security/data/cve/CVE-2026-64461.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fai... | n/a | 0.0018 | | | [CVE-2026-64570](https://patchblox.com/security/data/cve/CVE-2026-64570.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix fils_discovery double free o... | 7.8 | 0.0018 | | | [CVE-2026-72425](https://patchblox.com/security/data/cve/CVE-2026-72425.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_rese... | 7.1 | 0.0018 | | | [CVE-2026-72262](https://patchblox.com/security/data/cve/CVE-2026-72262.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix heap overflow in by... | 8.8 | 0.0018 | | | [CVE-2026-72395](https://patchblox.com/security/data/cve/CVE-2026-72395.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus) Fix passing events to regulator c... | 7.1 | 0.0018 | | | [CVE-2026-74584](https://patchblox.com/security/data/cve/CVE-2026-74584.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page before exposing t... | 7.1 | 0.0018 | | | [CVE-2026-68202](https://patchblox.com/security/data/cve/CVE-2026-68202.md) | High | ALSA: seq: close a re-opened queue timer in the destructor | 7.8 | 0.0018 | | | [CVE-2026-68206](https://patchblox.com/security/data/cve/CVE-2026-68206.md) | High | media: v4l2-ctrls: validate HEVC active reference counts | 7.8 | 0.0018 | | | [CVE-2026-68213](https://patchblox.com/security/data/cve/CVE-2026-68213.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on sta... | 7.8 | 0.0018 | | | [CVE-2026-68216](https://patchblox.com/security/data/cve/CVE-2026-68216.md) | High | media: pwc: Return queued buffers on start_streaming() failure | 7.8 | 0.0018 | | | [CVE-2026-72066](https://patchblox.com/security/data/cve/CVE-2026-72066.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output... | 7.8 | 0.0018 | | | [CVE-2026-72067](https://patchblox.com/security/data/cve/CVE-2026-72067.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback err... | 7.8 | 0.0018 | | | [CVE-2026-72225](https://patchblox.com/security/data/cve/CVE-2026-72225.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2_journal_init... | 7.8 | 0.0018 | | | [CVE-2026-72302](https://patchblox.com/security/data/cve/CVE-2026-72302.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Use overflow checks in... | 7.8 | 0.0018 | | | [CVE-2026-64514](https://patchblox.com/security/data/cve/CVE-2026-64514.md) | High | userfaultfd: gate must_wait writability check on pte_present() | 7.1 | 0.0018 | | | [CVE-2026-74498](https://patchblox.com/security/data/cve/CVE-2026-74498.md) | High | ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set | 7.0 | 0.0018 | | | [CVE-2026-74499](https://patchblox.com/security/data/cve/CVE-2026-74499.md) | High | ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() | 7.0 | 0.0018 | | | [CVE-2026-74682](https://patchblox.com/security/data/cve/CVE-2026-74682.md) | High | ALSA: usb-audio: fix OOB write on Type II inbound URBs | 7.0 | 0.0018 | | | [CVE-2026-64503](https://patchblox.com/security/data/cve/CVE-2026-64503.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on w... | n/a | 0.0018 | | | [CVE-2026-63875](https://patchblox.com/security/data/cve/CVE-2026-63875.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0018 | | | [CVE-2026-63899](https://patchblox.com/security/data/cve/CVE-2026-63899.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0018 | | | [CVE-2026-63970](https://patchblox.com/security/data/cve/CVE-2026-63970.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy... | 8.8 | 0.0018 | | | [CVE-2026-72111](https://patchblox.com/security/data/cve/CVE-2026-72111.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Reset register bounds before narrowing retv... | 8.8 | 0.0018 | | | [CVE-2026-72255](https://patchblox.com/security/data/cve/CVE-2026-72255.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 8.8 | 0.0018 | | | [CVE-2026-74380](https://patchblox.com/security/data/cve/CVE-2026-74380.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix iommu_map_sgtable() return valu... | 8.8 | 0.0018 | | | [CVE-2026-64286](https://patchblox.com/security/data/cve/CVE-2026-64286.md) | High | KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU | 8.2 | 0.0018 | | | [CVE-2026-64287](https://patchblox.com/security/data/cve/CVE-2026-64287.md) | High | KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU | 8.2 | 0.0018 | | | [CVE-2026-63884](https://patchblox.com/security/data/cve/CVE-2026-63884.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... | 7.8 | 0.0018 | | | [CVE-2026-63898](https://patchblox.com/security/data/cve/CVE-2026-63898.md) | High | kernel-uek-container: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0018 | | | [CVE-2026-63901](https://patchblox.com/security/data/cve/CVE-2026-63901.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0018 | | | [CVE-2026-64481](https://patchblox.com/security/data/cve/CVE-2026-64481.md) | High | ALSA: hda/cs35l41: Fix firmware load work teardown | 7.8 | 0.0018 | | | [CVE-2026-68461](https://patchblox.com/security/data/cve/CVE-2026-68461.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields... | 7.8 | 0.0018 | | | [CVE-2026-72282](https://patchblox.com/security/data/cve/CVE-2026-72282.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsib... | 7.8 | 0.0018 | | | [CVE-2026-72314](https://patchblox.com/security/data/cve/CVE-2026-72314.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulator_lock_two() should tes... | 7.8 | 0.0018 | | | [CVE-2026-72350](https://patchblox.com/security/data/cve/CVE-2026-72350.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts... | 7.8 | 0.0018 | | | [CVE-2026-72371](https://patchblox.com/security/data/cve/CVE-2026-72371.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFS_VOLUME_RM_TREE is set on... | 7.8 | 0.0018 | | | [CVE-2026-72400](https://patchblox.com/security/data/cve/CVE-2026-72400.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed f... | 7.8 | 0.0018 | | | [CVE-2026-72419](https://patchblox.com/security/data/cve/CVE-2026-72419.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: avoid invalid nat_net pointer... | 7.8 | 0.0018 | | | [CVE-2026-74296](https://patchblox.com/security/data/cve/CVE-2026-74296.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW‑provided UAR index rat... | 7.8 | 0.0018 | | | [CVE-2026-74297](https://patchblox.com/security/data/cve/CVE-2026-74297.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE si... | 7.8 | 0.0018 | | | [CVE-2026-74305](https://patchblox.com/security/data/cve/CVE-2026-74305.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for pr... | 7.8 | 0.0018 | | | [CVE-2026-74417](https://patchblox.com/security/data/cve/CVE-2026-74417.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeon_align... | 7.8 | 0.0018 | | | [CVE-2026-72286](https://patchblox.com/security/data/cve/CVE-2026-72286.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirr... | 8.8 | 0.0018 | | | [CVE-2026-53191](https://patchblox.com/security/data/cve/CVE-2026-53191.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: inherit IORING_CQE_F_BUF_MORE acro... | 7.8 | 0.0018 | | | [CVE-2026-53233](https://patchblox.com/security/data/cve/CVE-2026-53233.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netdev: fix double-free in netdev_nl_bind_rx_doi... | 7.8 | 0.0018 | | | [CVE-2026-72027](https://patchblox.com/security/data/cve/CVE-2026-72027.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/compaction: handle free_pages_prepare() prope... | 7.8 | 0.0018 | | | [CVE-2026-72034](https://patchblox.com/security/data/cve/CVE-2026-72034.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fhandle: reject detached mounts in capable_wrt_m... | 7.8 | 0.0018 | | | [CVE-2026-72372](https://patchblox.com/security/data/cve/CVE-2026-72372.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of... | 7.8 | 0.0018 | | | [CVE-2026-72452](https://patchblox.com/security/data/cve/CVE-2026-72452.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/i915: clear CRTC color blob pointers after d... | 7.8 | 0.0018 | | | [CVE-2026-64473](https://patchblox.com/security/data/cve/CVE-2026-64473.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing dev... | 7.0 | 0.0018 | | | [CVE-2026-72183](https://patchblox.com/security/data/cve/CVE-2026-72183.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on th... | 8.4 | 0.0017 | | | [CVE-2026-72390](https://patchblox.com/security/data/cve/CVE-2026-72390.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: Introduce slaves_lock to av... | 7.8 | 0.0017 | | | [CVE-2026-63836](https://patchblox.com/security/data/cve/CVE-2026-63836.md) | High | batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd | 7.5 | 0.0017 | | | [CVE-2026-72347](https://patchblox.com/security/data/cve/CVE-2026-72347.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift par... | 7.3 | 0.0017 | | | [CVE-2026-72416](https://patchblox.com/security/data/cve/CVE-2026-72416.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_compat: ebtables emulation must r... | 7.3 | 0.0017 | | | [CVE-2026-63807](https://patchblox.com/security/data/cve/CVE-2026-63807.md) | High | KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level | 8.8 | 0.0017 | | | [CVE-2026-72019](https://patchblox.com/security/data/cve/CVE-2026-72019.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsec... | 7.3 | 0.0017 | | | [CVE-2026-74391](https://patchblox.com/security/data/cve/CVE-2026-74391.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seq_... | 7.0 | 0.0017 | | | [CVE-2026-74441](https://patchblox.com/security/data/cve/CVE-2026-74441.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix race condition and orderin... | 7.0 | 0.0017 | | | [CVE-2026-74472](https://patchblox.com/security/data/cve/CVE-2026-74472.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ublk: reset kernel-owned dev_info fields in ublk... | 7.0 | 0.0017 | | | [CVE-2026-74346](https://patchblox.com/security/data/cve/CVE-2026-74346.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registrati... | n/a | 0.0017 | | | [CVE-2026-63920](https://patchblox.com/security/data/cve/CVE-2026-63920.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0017 | | | [CVE-2026-43303](https://patchblox.com/security/data/cve/CVE-2026-43303.md) | High | mm/page_alloc: clear page->private in free_pages_prepare() | 7.8 | 0.0017 | | | [CVE-2026-64265](https://patchblox.com/security/data/cve/CVE-2026-64265.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_r... | 7.8 | 0.0017 | | | [CVE-2026-64317](https://patchblox.com/security/data/cve/CVE-2026-64317.md) | High | isofs: bound Rock Ridge symlink components to the SL record | 7.1 | 0.0017 | | | [CVE-2026-72175](https://patchblox.com/security/data/cve/CVE-2026-72175.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: fix make_uffd_wp_huge_pte() pr... | 7.1 | 0.0017 | | | [CVE-2026-64604](https://patchblox.com/security/data/cve/CVE-2026-64604.md) | High | KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode | 8.4 | 0.0017 | | | [CVE-2026-72360](https://patchblox.com/security/data/cve/CVE-2026-72360.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FAST_REQ or... | 8.4 | 0.0017 | | | [CVE-2026-68201](https://patchblox.com/security/data/cve/CVE-2026-68201.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its... | 8.3 | 0.0017 | | | [CVE-2026-72126](https://patchblox.com/security/data/cve/CVE-2026-72126.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: isotp: use unconditional synchronize_rcu()... | 7.8 | 0.0017 | | | [CVE-2026-72335](https://patchblox.com/security/data/cve/CVE-2026-72335.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix adv monitor add failure cle... | 7.8 | 0.0017 | | | [CVE-2026-72449](https://patchblox.com/security/data/cve/CVE-2026-72449.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix list_del corruption in kfd_criu_... | 7.8 | 0.0017 | | | [CVE-2026-72476](https://patchblox.com/security/data/cve/CVE-2026-72476.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma_r... | 7.8 | 0.0017 | | | [CVE-2026-74387](https://patchblox.com/security/data/cve/CVE-2026-74387.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: midi: Serialize output teardown with... | 7.8 | 0.0017 | | | [CVE-2026-53402](https://patchblox.com/security/data/cve/CVE-2026-53402.md) | High | fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | 7.1 | 0.0017 | | | [CVE-2026-63902](https://patchblox.com/security/data/cve/CVE-2026-63902.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.1 | 0.0017 | | | [CVE-2026-63903](https://patchblox.com/security/data/cve/CVE-2026-63903.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.1 | 0.0017 | | | [CVE-2026-63904](https://patchblox.com/security/data/cve/CVE-2026-63904.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.1 | 0.0017 | | | [CVE-2026-72364](https://patchblox.com/security/data/cve/CVE-2026-72364.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writeback error handling Fix the err... | 7.1 | 0.0017 | | | [CVE-2026-64251](https://patchblox.com/security/data/cve/CVE-2026-64251.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: pwrseq: core: fix use-after-free in pwrseq_debug... | 7.8 | 0.0017 | | | [CVE-2026-72427](https://patchblox.com/security/data/cve/CVE-2026-72427.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF_F_P... | 7.8 | 0.0017 | | | [CVE-2026-63826](https://patchblox.com/security/data/cve/CVE-2026-63826.md) | High | fbdev: fix use-after-free in store_modes() | 7.1 | 0.0017 | | | [CVE-2026-74283](https://patchblox.com/security/data/cve/CVE-2026-74283.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: tipc: require net admin for TIPCv2 netlink mutato... | 9.8 | 0.0017 | | | [CVE-2026-63917](https://patchblox.com/security/data/cve/CVE-2026-63917.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0017 | | | [CVE-2026-64276](https://patchblox.com/security/data/cve/CVE-2026-64276.md) | High | Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count | 8.8 | 0.0017 | | | [CVE-2026-64304](https://patchblox.com/security/data/cve/CVE-2026-64304.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths... | 8.8 | 0.0017 | | | [CVE-2026-72102](https://patchblox.com/security/data/cve/CVE-2026-72102.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_re... | 8.8 | 0.0017 | | | [CVE-2026-72136](https://patchblox.com/security/data/cve/CVE-2026-72136.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in t... | 8.8 | 0.0017 | | | [CVE-2026-72261](https://patchblox.com/security/data/cve/CVE-2026-72261.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Validate size in snd_so... | 8.3 | 0.0017 | | | [CVE-2026-63928](https://patchblox.com/security/data/cve/CVE-2026-63928.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0017 | | | [CVE-2026-63956](https://patchblox.com/security/data/cve/CVE-2026-63956.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0017 | | | [CVE-2026-63957](https://patchblox.com/security/data/cve/CVE-2026-63957.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0017 | | | [CVE-2026-64270](https://patchblox.com/security/data/cve/CVE-2026-64270.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packe... | 7.8 | 0.0017 | | | [CVE-2026-64271](https://patchblox.com/security/data/cve/CVE-2026-64271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on ever... | 7.8 | 0.0017 | | | [CVE-2026-64272](https://patchblox.com/security/data/cve/CVE-2026-64272.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S a... | 7.8 | 0.0017 | | | [CVE-2026-64296](https://patchblox.com/security/data/cve/CVE-2026-64296.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_e... | 7.8 | 0.0017 | | | [CVE-2026-64322](https://patchblox.com/security/data/cve/CVE-2026-64322.md) | High | udf: validate sparing table length as an entry count, not a byte count | 7.8 | 0.0017 | | | [CVE-2026-64333](https://patchblox.com/security/data/cve/CVE-2026-64333.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer c... | 7.8 | 0.0017 | | | [CVE-2026-64363](https://patchblox.com/security/data/cve/CVE-2026-64363.md) | High | HID: appleir: fix UAF on pending key_up_timer in remove() | 7.8 | 0.0017 | | | [CVE-2026-68479](https://patchblox.com/security/data/cve/CVE-2026-68479.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds... | 7.8 | 0.0017 | | | [CVE-2026-72036](https://patchblox.com/security/data/cve/CVE-2026-72036.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue ca... | 7.8 | 0.0017 | | | [CVE-2026-72105](https://patchblox.com/security/data/cve/CVE-2026-72105.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit mach... | 7.8 | 0.0017 | | | [CVE-2026-72110](https://patchblox.com/security/data/cve/CVE-2026-72110.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe ->bpf_storage before bailouts tha... | 7.8 | 0.0017 | | | [CVE-2026-72113](https://patchblox.com/security/data/cve/CVE-2026-72113.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing device refcount for CAN fi... | 7.8 | 0.0017 | | | [CVE-2026-72114](https://patchblox.com/security/data/cve/CVE-2026-72114.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcm_rx_setup(... | 7.8 | 0.0017 | | | [CVE-2026-72119](https://patchblox.com/security/data/cve/CVE-2026-72119.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: extend bcm_tx_lock usage for data and... | 7.8 | 0.0017 | | | [CVE-2026-72120](https://patchblox.com/security/data/cve/CVE-2026-72120.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu list annotations and o... | 7.8 | 0.0017 | | | [CVE-2026-72123](https://patchblox.com/security/data/cve/CVE-2026-72123.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: can: bcm: defer rx_op deallocation to workqueue t... | 7.8 | 0.0017 | | | [CVE-2026-72135](https://patchblox.com/security/data/cve/CVE-2026-72135.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable... | 7.8 | 0.0017 | | | [CVE-2026-72164](https://patchblox.com/security/data/cve/CVE-2026-72164.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters... | 7.8 | 0.0017 | | | [CVE-2026-72170](https://patchblox.com/security/data/cve/CVE-2026-72170.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: 9p: skip nlink update in cacheless mode to fix W... | 7.8 | 0.0017 | | | [CVE-2026-72172](https://patchblox.com/security/data/cve/CVE-2026-72172.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/mm_init: fix uninitialized struct pages for Z... | 7.8 | 0.0017 | | | [CVE-2026-72250](https://patchblox.com/security/data/cve/CVE-2026-72250.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_reasm: guard mac_header... | 7.8 | 0.0017 | | | [CVE-2026-72252](https://patchblox.com/security/data/cve/CVE-2026-72252.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: don't leak bad clone... | 7.8 | 0.0017 | | | [CVE-2026-72301](https://patchblox.com/security/data/cve/CVE-2026-72301.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put... | 7.8 | 0.0017 | | | [CVE-2026-72406](https://patchblox.com/security/data/cve/CVE-2026-72406.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup gem_init_o... | 7.8 | 0.0017 | | | [CVE-2026-72435](https://patchblox.com/security/data/cve/CVE-2026-72435.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and r... | 7.8 | 0.0017 | | | [CVE-2026-72450](https://patchblox.com/security/data/cve/CVE-2026-72450.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen dur... | 7.8 | 0.0017 | | | [CVE-2026-64582](https://patchblox.com/security/data/cve/CVE-2026-64582.md) | High | RDMA/rxe: Fix a use-after-free problem in rxe_mmap | 8.8 | 0.0017 | | Showing 500 of 1,162 CVEs; the web page lists them all. --- Data as of 2026-11-08T06:59:42Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.