{ "fix": "ELSA-2026-500249", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500249", "summary": "ELSA-2026-500249, released September 4, 2026, fixes 588 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 19 packages", "released": "2026-09-04T00:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-68160, rated Critical", "supported": true, "cveCount": 588, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.01467, "maxCvss": 10, "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2026-500249.html", "appliesTo": [ { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "bpftool", "productUrl": "https://patchblox.com/security/product/linux/bpftool", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-container", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-container", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-container", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-container", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-container-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-container-debug", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-container-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-container-debug", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 8", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:5.15.0-324.217.5.2.el9uek", "supported": true } ], "cves": [ { "cveId": "CVE-2026-68160", "url": "https://patchblox.com/security/cve/CVE-2026-68160", "title": "ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00772, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74279", "url": "https://patchblox.com/security/cve/CVE-2026-74279", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: cavium/cpt - fix DMA cleanup using wrong...", "priority": "Urgent", "severity": "critical", "cvss": 10, "epss": 0.00755, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72226", "url": "https://patchblox.com/security/cve/CVE-2026-72226", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: prevent TVLV OOB check overflow...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00755, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80630", "url": "https://patchblox.com/security/cve/CVE-2026-80630", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_fq_codel: Do not call qdisc_tree_...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00755, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72084", "url": "https://patchblox.com/security/cve/CVE-2026-72084", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72299", "url": "https://patchblox.com/security/cve/CVE-2026-72299", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tra...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72319", "url": "https://patchblox.com/security/cve/CVE-2026-72319", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72339", "url": "https://patchblox.com/security/cve/CVE-2026-72339", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on b...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72351", "url": "https://patchblox.com/security/cve/CVE-2026-72351", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72466", "url": "https://patchblox.com/security/cve/CVE-2026-72466", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80609", "url": "https://patchblox.com/security/cve/CVE-2026-80609", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-\u003Elen_list[...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72234", "url": "https://patchblox.com/security/cve/CVE-2026-72234", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb-\u003Edata only a...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00734, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72065", "url": "https://patchblox.com/security/cve/CVE-2026-72065", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: Validate the packet length reported b...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00728, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72322", "url": "https://patchblox.com/security/cve/CVE-2026-72322", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed wo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72491", "url": "https://patchblox.com/security/cve/CVE-2026-72491", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-\u003Estate in tra...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72014", "url": "https://patchblox.com/security/cve/CVE-2026-72014", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drbd: reject data replies with an out-of-range p...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00723, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68477", "url": "https://patchblox.com/security/cve/CVE-2026-68477", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72020", "url": "https://patchblox.com/security/cve/CVE-2026-72020", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72129", "url": "https://patchblox.com/security/cve/CVE-2026-72129", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero of...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72251", "url": "https://patchblox.com/security/cve/CVE-2026-72251", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74267", "url": "https://patchblox.com/security/cve/CVE-2026-74267", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_red...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72348", "url": "https://patchblox.com/security/cve/CVE-2026-72348", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extens...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00626, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80603", "url": "https://patchblox.com/security/cve/CVE-2026-80603", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00595, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72421", "url": "https://patchblox.com/security/cve/CVE-2026-72421", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don\u0027t ignore error route in local/mai...", "priority": "Urgent", "severity": "critical", "cvss": 10, "epss": 0.00571, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64535", "url": "https://patchblox.com/security/cve/CVE-2026-64535", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00547, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74394", "url": "https://patchblox.com/security/cve/CVE-2026-74394", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate dat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.0054, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68144", "url": "https://patchblox.com/security/cve/CVE-2026-68144", "title": "phonet: pep: fix use-after-free in pep_get_sb()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68131", "url": "https://patchblox.com/security/cve/CVE-2026-68131", "title": "rbd: Reset positive result codes to zero in object map update path", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74384", "url": "https://patchblox.com/security/cve/CVE-2026-74384", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nv...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74398", "url": "https://patchblox.com/security/cve/CVE-2026-74398", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad_failure when sta...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64551", "url": "https://patchblox.com/security/cve/CVE-2026-64551", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74287", "url": "https://patchblox.com/security/cve/CVE-2026-74287", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded address parameter length...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74376", "url": "https://patchblox.com/security/cve/CVE-2026-74376", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio f...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74255", "url": "https://patchblox.com/security/cve/CVE-2026-74255", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc_l2_send_msg() Syzbot repo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80681", "url": "https://patchblox.com/security/cve/CVE-2026-80681", "title": "vxlan: re-fetch eth header after route_shortcircuit()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68121", "url": "https://patchblox.com/security/cve/CVE-2026-68121", "title": "pppoe: reload header pointer after dev_hard_header()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00367, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64534", "url": "https://patchblox.com/security/cve/CVE-2026-64534", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_un...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00323, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68354", "url": "https://patchblox.com/security/cve/CVE-2026-68354", "title": "firewire: net: Fix fragmented datagram reassembly", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00282, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68198", "url": "https://patchblox.com/security/cve/CVE-2026-68198", "title": "wifi: ath6kl: fix use-after-free in aggr_reset_state()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68402", "url": "https://patchblox.com/security/cve/CVE-2026-68402", "title": "wifi: cfg80211: bound element ID read when checking non-inheritance", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68212", "url": "https://patchblox.com/security/cve/CVE-2026-68212", "title": "media: saa7134: Fix a possible memory leak in saa7134_video_init1", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68214", "url": "https://patchblox.com/security/cve/CVE-2026-68214", "title": "media: rtl2832: fix use-after-free in rtl2832_remove()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68218", "url": "https://patchblox.com/security/cve/CVE-2026-68218", "title": "media: pci: dm1105: Free allocated workqueue", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68180", "url": "https://patchblox.com/security/cve/CVE-2026-68180", "title": "intel_th: fix MSC output device reference leak", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68349", "url": "https://patchblox.com/security/cve/CVE-2026-68349", "title": "wifi: carl9170: fix buffer overflow in rx_stream failover path", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68132", "url": "https://patchblox.com/security/cve/CVE-2026-68132", "title": "super: fix emergency thaw deadlock on frozen block devices", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68146", "url": "https://patchblox.com/security/cve/CVE-2026-68146", "title": "ftrace: Add global mutex to serialize trace_parser access", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68325", "url": "https://patchblox.com/security/cve/CVE-2026-68325", "title": "iommu/amd: Bound the early ACPI HID map", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68406", "url": "https://patchblox.com/security/cve/CVE-2026-68406", "title": "wifi: cfg80211: validate PMSR FTM preamble range", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72085", "url": "https://patchblox.com/security/cve/CVE-2026-72085", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free unsubmitted command in...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64562", "url": "https://patchblox.com/security/cve/CVE-2026-64562", "title": "KVM: nVMX: Hide shadow VMCS right after VMCLEAR", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80715", "url": "https://patchblox.com/security/cve/CVE-2026-80715", "title": "igc: remove napi_synchronize() in igc_down()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74517", "url": "https://patchblox.com/security/cve/CVE-2026-74517", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Cancel delayed I/O APIC EOI handling b...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68377", "url": "https://patchblox.com/security/cve/CVE-2026-68377", "title": "net/sched: act_tunnel_key: Defer dst_release to RCU callback", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68153", "url": "https://patchblox.com/security/cve/CVE-2026-68153", "title": "libceph: remove debugfs files before client teardown", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68142", "url": "https://patchblox.com/security/cve/CVE-2026-68142", "title": "geneve: require CAP_NET_ADMIN in the device netns for changelink", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68143", "url": "https://patchblox.com/security/cve/CVE-2026-68143", "title": "net: slip: serialize receive against buffer reallocation", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74469", "url": "https://patchblox.com/security/cve/CVE-2026-74469", "title": "sctp: prevent peer transport count overflow", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.01467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68159", "url": "https://patchblox.com/security/cve/CVE-2026-68159", "title": "libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72083", "url": "https://patchblox.com/security/cve/CVE-2026-72083", "title": "kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72409", "url": "https://patchblox.com/security/cve/CVE-2026-72409", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resum...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72418", "url": "https://patchblox.com/security/cve/CVE-2026-72418", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: prevent connlimit drops...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72502", "url": "https://patchblox.com/security/cve/CVE-2026-72502", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74321", "url": "https://patchblox.com/security/cve/CVE-2026-74321", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrf...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80646", "url": "https://patchblox.com/security/cve/CVE-2026-80646", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68154", "url": "https://patchblox.com/security/cve/CVE-2026-68154", "title": "libceph: reject zero bucket types in crush_decode", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68158", "url": "https://patchblox.com/security/cve/CVE-2026-68158", "title": "libceph: Fix multiplication overflow in decode_new_up_state_weight()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68155", "url": "https://patchblox.com/security/cve/CVE-2026-68155", "title": "libceph: Reject monmaps advertising zero monitors", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72242", "url": "https://patchblox.com/security/cve/CVE-2026-72242", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68157", "url": "https://patchblox.com/security/cve/CVE-2026-68157", "title": "libceph: guard missing CRUSH type name lookup", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72247", "url": "https://patchblox.com/security/cve/CVE-2026-72247", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72253", "url": "https://patchblox.com/security/cve/CVE-2026-72253", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: validate skb_dst()...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74282", "url": "https://patchblox.com/security/cve/CVE-2026-74282", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68156", "url": "https://patchblox.com/security/cve/CVE-2026-68156", "title": "libceph: refresh auth-\u003Eauthorizer_buf{,_len} after authorizer update", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74281", "url": "https://patchblox.com/security/cve/CVE-2026-74281", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer b...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0068, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72231", "url": "https://patchblox.com/security/cve/CVE-2026-72231", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid request storms during pend...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00677, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53399", "url": "https://patchblox.com/security/cve/CVE-2026-53399", "title": "nfsd: release layout stid on setlease failure", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00663, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64530", "url": "https://patchblox.com/security/cve/CVE-2026-64530", "title": "net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00655, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72107", "url": "https://patchblox.com/security/cve/CVE-2026-72107", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm era: fix out-of-bounds memory access for non-...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0065, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72160", "url": "https://patchblox.com/security/cve/CVE-2026-72160", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject dinodes with non-canonical i_mode...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0065, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72310", "url": "https://patchblox.com/security/cve/CVE-2026-72310", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix overflow in passthrough ioctl b...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00643, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68376", "url": "https://patchblox.com/security/cve/CVE-2026-68376", "title": "sctp: fix auth_hmacs array size in struct sctp_cookie", "priority": "High", "severity": "Low", "cvss": 8.1, "epss": 0.00605, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72021", "url": "https://patchblox.com/security/cve/CVE-2026-72021", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: use parsed transport offset in SCTP state...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72035", "url": "https://patchblox.com/security/cve/CVE-2026-72035", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: Replace direct dequeue ca...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72057", "url": "https://patchblox.com/security/cve/CVE-2026-72057", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across def...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00585, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68300", "url": "https://patchblox.com/security/cve/CVE-2026-68300", "title": "sctp: auth: verify auth requirement when auth_chunk is NULL", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0058, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74480", "url": "https://patchblox.com/security/cve/CVE-2026-74480", "title": "net: bridge: stop fast-leave after deleting a port group", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00579, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80590", "url": "https://patchblox.com/security/cve/CVE-2026-80590", "title": "inet: frags: strip GSO state from fragments before reassembly", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64545", "url": "https://patchblox.com/security/cve/CVE-2026-64545", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_re...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68123", "url": "https://patchblox.com/security/cve/CVE-2026-68123", "title": "openvswitch: fix GSO userspace truncation underflow", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72099", "url": "https://patchblox.com/security/cve/CVE-2026-72099", "title": "kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00546, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74597", "url": "https://patchblox.com/security/cve/CVE-2026-74597", "title": "ip6_tunnel: clear skb2-\u003Ecb[] in ip6ip6_err()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00543, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64450", "url": "https://patchblox.com/security/cve/CVE-2026-64450", "title": "tipc: fix out-of-bounds read in broadcast Gap ACK blocks", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74746", "url": "https://patchblox.com/security/cve/CVE-2026-74746", "title": "netfilter: flowtable: publish GC-visible tuple last", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68096", "url": "https://patchblox.com/security/cve/CVE-2026-68096", "title": "audit: fix recursive locking deadlock in audit_dupe_exe()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00533, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53392", "url": "https://patchblox.com/security/cve/CVE-2026-53392", "title": "NFSv4/flexfiles: reject zero filehandle version count", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00529, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68117", "url": "https://patchblox.com/security/cve/CVE-2026-68117", "title": "tipc: clear sock-\u003Esk on the failed-insert path in tipc_sk_create()", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74473", "url": "https://patchblox.com/security/cve/CVE-2026-74473", "title": "vxlan: use pskb_network_may_pull() in route_shortcircuit()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74495", "url": "https://patchblox.com/security/cve/CVE-2026-74495", "title": "igbvf: Fix leak in TX DMA error cleanup", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74669", "url": "https://patchblox.com/security/cve/CVE-2026-74669", "title": "ipvs: clear IPv4 options after rebasing tunnel ICMP errors", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80528", "url": "https://patchblox.com/security/cve/CVE-2026-80528", "title": "ceph: avoid fs reclaim while using current-\u003Ejournal_info", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80558", "url": "https://patchblox.com/security/cve/CVE-2026-80558", "title": "libceph: Avoid using invalid osd indices from primary_temp", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80561", "url": "https://patchblox.com/security/cve/CVE-2026-80561", "title": "libceph: fix multiple unsafe decodes in decode_locker()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64355", "url": "https://patchblox.com/security/cve/CVE-2026-64355", "title": "bpf: Reject fragmented frames in devmap", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74616", "url": "https://patchblox.com/security/cve/CVE-2026-74616", "title": "xdp: reject clones that overrun skb_shared_info tailroom", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68315", "url": "https://patchblox.com/security/cve/CVE-2026-68315", "title": "sctp: validate stream count in sctp_process_strreset_inreq()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68129", "url": "https://patchblox.com/security/cve/CVE-2026-68129", "title": "gve: fix Rx queue stall on alloc failure", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00511, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74730", "url": "https://patchblox.com/security/cve/CVE-2026-74730", "title": "NFS: Pin the \u0027struct nfs_server\u0027 during a FREE_STATEID call", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0051, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64560", "url": "https://patchblox.com/security/cve/CVE-2026-64560", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-lead...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00503, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68299", "url": "https://patchblox.com/security/cve/CVE-2026-68299", "title": "vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80527", "url": "https://patchblox.com/security/cve/CVE-2026-80527", "title": "ceph: fix hanging __ceph_get_caps() with stale mds_wanted", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64312", "url": "https://patchblox.com/security/cve/CVE-2026-64312", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74523", "url": "https://patchblox.com/security/cve/CVE-2026-74523", "title": "qede: sync udp_tunnel ports outside qede_lock in the recovery path", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74625", "url": "https://patchblox.com/security/cve/CVE-2026-74625", "title": "netfilter: bridge: release template ct on non-IP path", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74717", "url": "https://patchblox.com/security/cve/CVE-2026-74717", "title": "net/mlx5: fw_tracer, return NULL on create error", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74705", "url": "https://patchblox.com/security/cve/CVE-2026-74705", "title": "udp: fix potential use-after-free in tunnel segmentation", "priority": "High", "severity": "Moderate", "cvss": 10, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74586", "url": "https://patchblox.com/security/cve/CVE-2026-74586", "title": "sctp: clear new_transport when removing a peer", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74587", "url": "https://patchblox.com/security/cve/CVE-2026-74587", "title": "sctp: fix use-after-free of cached ASCONF chunk", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74588", "url": "https://patchblox.com/security/cve/CVE-2026-74588", "title": "sctp: keep chunk-\u003Etransport in step with the list it is queued on", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74688", "url": "https://patchblox.com/security/cve/CVE-2026-74688", "title": "sctp: clear control chunk transport if it is being removed", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68082", "url": "https://patchblox.com/security/cve/CVE-2026-68082", "title": "libceph: fix two unsafe bare decodes in decode_lockers()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00499, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74621", "url": "https://patchblox.com/security/cve/CVE-2026-74621", "title": "net/sched: act_ct: fix sk_buff leak when the header checks reject a packet", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74696", "url": "https://patchblox.com/security/cve/CVE-2026-74696", "title": "tcp: fix TFO max_qlen accounting across reuseport migration", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80714", "url": "https://patchblox.com/security/cve/CVE-2026-80714", "title": "ipvs: do not propagate one-packet flag to synced conns", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64448", "url": "https://patchblox.com/security/cve/CVE-2026-64448", "title": "smb: client: restrict implied bcc[0] exemption to responses without data area", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74490", "url": "https://patchblox.com/security/cve/CVE-2026-74490", "title": "tipc: avoid use-after-free in poll trace queue dumps", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74475", "url": "https://patchblox.com/security/cve/CVE-2026-74475", "title": "vxlan: use neigh_ha_snapshot() in route_shortcircuit()", "priority": "High", "severity": "Low", "cvss": 10, "epss": 0.00454, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74697", "url": "https://patchblox.com/security/cve/CVE-2026-74697", "title": "bnxt_en: Disable EOP for TPA on all chips to prevent data corruption", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64380", "url": "https://patchblox.com/security/cve/CVE-2026-64380", "title": "smb: client: harden POSIX SID length parsing", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74704", "url": "https://patchblox.com/security/cve/CVE-2026-74704", "title": "net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63830", "url": "https://patchblox.com/security/cve/CVE-2026-63830", "title": "net: skmsg: preserve sg.copy across SG transforms", "priority": "High", "severity": "Moderate", "cvss": 9.4, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74598", "url": "https://patchblox.com/security/cve/CVE-2026-74598", "title": "ipv6: fix Route Information option length validation", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74581", "url": "https://patchblox.com/security/cve/CVE-2026-74581", "title": "net: ipv6: clear suppressed fib6 rule result", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00421, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74340", "url": "https://patchblox.com/security/cve/CVE-2026-74340", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from firmware count...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00419, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74410", "url": "https://patchblox.com/security/cve/CVE-2026-74410", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix OOB read from firmware RX descr...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00419, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80599", "url": "https://patchblox.com/security/cve/CVE-2026-80599", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: ensure accessible eth_hdr proto...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00419, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68352", "url": "https://patchblox.com/security/cve/CVE-2026-68352", "title": "wifi: ath6kl: fix OOB read from firmware IE lengths in connect event", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74408", "url": "https://patchblox.com/security/cve/CVE-2026-74408", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: fix OOB access from firmware tx sta...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80604", "url": "https://patchblox.com/security/cve/CVE-2026-80604", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix OOB read in hid_get_report for nu...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74580", "url": "https://patchblox.com/security/cve/CVE-2026-74580", "title": "vhost: reset the vring metadata cache on vring reconfiguration", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00409, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68192", "url": "https://patchblox.com/security/cve/CVE-2026-68192", "title": "wifi: brcmfmac: make release_scratchbuffers idempotent", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00408, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80601", "url": "https://patchblox.com/security/cve/CVE-2026-80601", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: gw: acquire ethernet header only aft...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.004, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74556", "url": "https://patchblox.com/security/cve/CVE-2026-74556", "title": "scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80586", "url": "https://patchblox.com/security/cve/CVE-2026-80586", "title": "mptcp: options: reset DSS fields in case of unexpected size", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46135", "url": "https://patchblox.com/security/cve/CVE-2026-46135", "title": "nvmet-tcp: fix race between ICReq handling and queue teardown", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00397, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74569", "url": "https://patchblox.com/security/cve/CVE-2026-74569", "title": "netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00388, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64374", "url": "https://patchblox.com/security/cve/CVE-2026-64374", "title": "sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68199", "url": "https://patchblox.com/security/cve/CVE-2026-68199", "title": "wifi: ath6kl: fix OOB access from firmware ADDBA window size", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00383, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68433", "url": "https://patchblox.com/security/cve/CVE-2026-68433", "title": "libceph: bound get_version reply decode to front len", "priority": "High", "severity": "Low", "cvss": 8.6, "epss": 0.00364, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64313", "url": "https://patchblox.com/security/cve/CVE-2026-64313", "title": "crypto: ecc - Fix carry overflow in vli multiplication", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64364", "url": "https://patchblox.com/security/cve/CVE-2026-64364", "title": "HID: multitouch: fix out-of-bounds bit access on mt_io_flags", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72121", "url": "https://patchblox.com/security/cve/CVE-2026-72121", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add locking when updating filter and t...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72124", "url": "https://patchblox.com/security/cve/CVE-2026-72124", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: isotp: serialize TX state transitions under...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72233", "url": "https://patchblox.com/security/cve/CVE-2026-72233", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: reacquire gw address after skb...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72235", "url": "https://patchblox.com/security/cve/CVE-2026-72235", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: retrieve ethhdr after potential skb...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-58240", "url": "https://patchblox.com/security/cve/CVE-2024-58240", "title": "tls: separate no-async decryption request handling from async", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00342, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64435", "url": "https://patchblox.com/security/cve/CVE-2026-64435", "title": "audit: Fix data races of skb_queue_len() readers on audit_queue", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00331, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74557", "url": "https://patchblox.com/security/cve/CVE-2026-74557", "title": "scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80707", "url": "https://patchblox.com/security/cve/CVE-2026-80707", "title": "can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer", "priority": "High", "severity": "Low", "cvss": 7.5, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80717", "url": "https://patchblox.com/security/cve/CVE-2026-80717", "title": "sctp: validate Adaptation Indication parameter length", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64445", "url": "https://patchblox.com/security/cve/CVE-2026-64445", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00317, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68125", "url": "https://patchblox.com/security/cve/CVE-2026-68125", "title": "mac802154: llsec: reject frames shorter than the authentication tag", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00317, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64379", "url": "https://patchblox.com/security/cve/CVE-2026-64379", "title": "smb: client: mask server-provided mode to 07777 in modefromsid", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00309, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72115", "url": "https://patchblox.com/security/cve/CVE-2026-72115", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: track a single source interface for AN...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00303, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74649", "url": "https://patchblox.com/security/cve/CVE-2026-74649", "title": "staging: rtl8723bs: fix missing shared-key auth challenge length check", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00288, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64442", "url": "https://patchblox.com/security/cve/CVE-2026-64442", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64444", "url": "https://patchblox.com/security/cve/CVE-2026-64444", "title": "staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68353", "url": "https://patchblox.com/security/cve/CVE-2026-68353", "title": "wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64547", "url": "https://patchblox.com/security/cve/CVE-2026-64547", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packet_len before pa...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00284, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64443", "url": "https://patchblox.com/security/cve/CVE-2026-64443", "title": "staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.0028, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64540", "url": "https://patchblox.com/security/cve/CVE-2026-64540", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in geneli...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68373", "url": "https://patchblox.com/security/cve/CVE-2026-68373", "title": "wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64406", "url": "https://patchblox.com/security/cve/CVE-2026-64406", "title": "Bluetooth: fix UAF in bt_accept_dequeue()", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74651", "url": "https://patchblox.com/security/cve/CVE-2026-74651", "title": "staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00274, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64440", "url": "https://patchblox.com/security/cve/CVE-2026-64440", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HT_caps_han...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00267, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64403", "url": "https://patchblox.com/security/cve/CVE-2026-64403", "title": "Bluetooth: L2CAP: validate option length before reading conf opt value", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64408", "url": "https://patchblox.com/security/cve/CVE-2026-64408", "title": "Bluetooth: bnep: pin L2CAP connection during netdev registration", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68091", "url": "https://patchblox.com/security/cve/CVE-2026-68091", "title": "HID: wacom: stop hardware after post-start probe failures", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68326", "url": "https://patchblox.com/security/cve/CVE-2026-68326", "title": "wifi: mwifiex: bound uAP association event IEs to the event buffer", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74508", "url": "https://patchblox.com/security/cve/CVE-2026-74508", "title": "Bluetooth: HIDP: reject frames without a transaction header", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00262, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68425", "url": "https://patchblox.com/security/cve/CVE-2026-68425", "title": "IB/mad: Drop unmatched RMPP responses before reassembly", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64536", "url": "https://patchblox.com/security/cve/CVE-2026-64536", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tk...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64441", "url": "https://patchblox.com/security/cve/CVE-2026-64441", "title": "staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72108", "url": "https://patchblox.com/security/cve/CVE-2026-72108", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consiste...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64434", "url": "https://patchblox.com/security/cve/CVE-2026-64434", "title": "Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64554", "url": "https://patchblox.com/security/cve/CVE-2026-64554", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74488", "url": "https://patchblox.com/security/cve/CVE-2026-74488", "title": "wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00255, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74540", "url": "https://patchblox.com/security/cve/CVE-2026-74540", "title": "Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00255, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64206", "url": "https://patchblox.com/security/cve/CVE-2026-64206", "title": "Bluetooth: L2CAP: cancel pending_rx_work before taking conn-\u003Elock", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00252, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64586", "url": "https://patchblox.com/security/cve/CVE-2026-64586", "title": "wifi: brcmfmac: drain bus_reset work on device removal", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0025, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74507", "url": "https://patchblox.com/security/cve/CVE-2026-74507", "title": "Bluetooth: HIDP: validate numbered report payloads", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00242, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80722", "url": "https://patchblox.com/security/cve/CVE-2026-80722", "title": "wifi: mac80211: validate individual TWT params before driver setup", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00239, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74575", "url": "https://patchblox.com/security/cve/CVE-2026-74575", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Prevent XDomain delayed work use-af...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68398", "url": "https://patchblox.com/security/cve/CVE-2026-68398", "title": "ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00232, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68414", "url": "https://patchblox.com/security/cve/CVE-2026-68414", "title": "wifi: cfg80211: cancel sched scan results work on unregister", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68138", "url": "https://patchblox.com/security/cve/CVE-2026-68138", "title": "net/sched: serialize qdisc_rtab_list against concurrent get/put", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64452", "url": "https://patchblox.com/security/cve/CVE-2026-64452", "title": "6lowpan: fix NHC entry use-after-free on error path", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68351", "url": "https://patchblox.com/security/cve/CVE-2026-68351", "title": "wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68188", "url": "https://patchblox.com/security/cve/CVE-2026-68188", "title": "Bluetooth: RFCOMM: Fix session UAF in set_termios", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68186", "url": "https://patchblox.com/security/cve/CVE-2026-68186", "title": "binfmt_misc: set have_execfd only once the interpreter is opened", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68368", "url": "https://patchblox.com/security/cve/CVE-2026-68368", "title": "usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72218", "url": "https://patchblox.com/security/cve/CVE-2026-72218", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file refcount leak on cached nlm...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72219", "url": "https://patchblox.com/security/cve/CVE-2026-72219", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fa...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72306", "url": "https://patchblox.com/security/cve/CVE-2026-72306", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vduse: Fix race in vduse_dev_msg_sync and vduse_...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63810", "url": "https://patchblox.com/security/cve/CVE-2026-63810", "title": "block: Avoid mounting the bdev pseudo-filesystem in userspace", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64572", "url": "https://patchblox.com/security/cve/CVE-2026-64572", "title": "ipv4: fib: free fib_alias with kfree_rcu() on insert error path", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68162", "url": "https://patchblox.com/security/cve/CVE-2026-68162", "title": "sctp: avoid auth_enable sysctl UAF during netns teardown", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80593", "url": "https://patchblox.com/security/cve/CVE-2026-80593", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (asus_atk0110) Check package count before...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68255", "url": "https://patchblox.com/security/cve/CVE-2026-68255", "title": "drm/virtio: bound EDID block reads to the response buffer", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72116", "url": "https://patchblox.com/security/cve/CVE-2026-72116", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix stale rx/tx ops after device remov...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72289", "url": "https://patchblox.com/security/cve/CVE-2026-72289", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72298", "url": "https://patchblox.com/security/cve/CVE-2026-72298", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: L...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74256", "url": "https://patchblox.com/security/cve/CVE-2026-74256", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_po...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64484", "url": "https://patchblox.com/security/cve/CVE-2026-64484", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_new1() return value...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68363", "url": "https://patchblox.com/security/cve/CVE-2026-68363", "title": "wifi: ath9k: hif_usb: don\u0027t dereference hif_dev after re-arming firmware request", "priority": "High", "severity": "Low", "cvss": 8.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64470", "url": "https://patchblox.com/security/cve/CVE-2026-64470", "title": "Bluetooth: btusb: fix use-after-free on marvell probe failure", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64471", "url": "https://patchblox.com/security/cve/CVE-2026-64471", "title": "Bluetooth: btusb: fix use-after-free on registration failure", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68350", "url": "https://patchblox.com/security/cve/CVE-2026-68350", "title": "wifi: carl9170: fix OOB read from off-by-two in TX status handler", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68365", "url": "https://patchblox.com/security/cve/CVE-2026-68365", "title": "USB: serial: io_edgeport: cap received transmit credits", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64483", "url": "https://patchblox.com/security/cve/CVE-2026-64483", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: bound the sample count t...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64461", "url": "https://patchblox.com/security/cve/CVE-2026-64461", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI: mediatek: Fix IRQ domain leak when port fai...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38560", "url": "https://patchblox.com/security/cve/CVE-2025-38560", "title": "x86/sev: Evict cache lines during SNP memory validation", "priority": "High", "severity": "medium", "cvss": 7.5, "epss": 0.00179, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68202", "url": "https://patchblox.com/security/cve/CVE-2026-68202", "title": "ALSA: seq: close a re-opened queue timer in the destructor", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68213", "url": "https://patchblox.com/security/cve/CVE-2026-68213", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on sta...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68216", "url": "https://patchblox.com/security/cve/CVE-2026-68216", "title": "media: pwc: Return queued buffers on start_streaming() failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72066", "url": "https://patchblox.com/security/cve/CVE-2026-72066", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72067", "url": "https://patchblox.com/security/cve/CVE-2026-72067", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Preserve per instance callback err...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72225", "url": "https://patchblox.com/security/cve/CVE-2026-72225", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: fix integer underflow in jbd2_journal_init...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64514", "url": "https://patchblox.com/security/cve/CVE-2026-64514", "title": "userfaultfd: gate must_wait writability check on pte_present()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74498", "url": "https://patchblox.com/security/cve/CVE-2026-74498", "title": "ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74499", "url": "https://patchblox.com/security/cve/CVE-2026-74499", "title": "ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74682", "url": "https://patchblox.com/security/cve/CVE-2026-74682", "title": "ALSA: usb-audio: fix OOB write on Type II inbound URBs", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64503", "url": "https://patchblox.com/security/cve/CVE-2026-64503", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on w...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72255", "url": "https://patchblox.com/security/cve/CVE-2026-72255", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68461", "url": "https://patchblox.com/security/cve/CVE-2026-68461", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: device property: initialize the remaining fields...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72282", "url": "https://patchblox.com/security/cve/CVE-2026-72282", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsib...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72314", "url": "https://patchblox.com/security/cve/CVE-2026-72314", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: regulator: core: regulator_lock_two() should tes...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72350", "url": "https://patchblox.com/security/cve/CVE-2026-72350", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72400", "url": "https://patchblox.com/security/cve/CVE-2026-72400", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: seg6: validate SRH length before reading fixed f...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74297", "url": "https://patchblox.com/security/cve/CVE-2026-74297", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE si...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74305", "url": "https://patchblox.com/security/cve/CVE-2026-74305", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Tighten cgroup storage cookie checks for pr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80677", "url": "https://patchblox.com/security/cve/CVE-2026-80677", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: driver core: use READ_ONCE() for dev-\u003Edriver in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72347", "url": "https://patchblox.com/security/cve/CVE-2026-72347", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift par...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72019", "url": "https://patchblox.com/security/cve/CVE-2026-72019", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: macsec: don\u0027t read an unset MAC header in macsec...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74346", "url": "https://patchblox.com/security/cve/CVE-2026-74346", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registrati...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64317", "url": "https://patchblox.com/security/cve/CVE-2026-64317", "title": "isofs: bound Rock Ridge symlink components to the SL record", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64604", "url": "https://patchblox.com/security/cve/CVE-2026-64604", "title": "KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72126", "url": "https://patchblox.com/security/cve/CVE-2026-72126", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: isotp: use unconditional synchronize_rcu()...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72476", "url": "https://patchblox.com/security/cve/CVE-2026-72476", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix possible use after free In dma_r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80622", "url": "https://patchblox.com/security/cve/CVE-2026-80622", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: char: tlclk: fix use-after-free in tlclk_cleanup...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53402", "url": "https://patchblox.com/security/cve/CVE-2026-53402", "title": "fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74283", "url": "https://patchblox.com/security/cve/CVE-2026-74283", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ntipc: require net admin for TIPCv2 netlink mutato...", "priority": "High", "severity": "moderate", "cvss": 9.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64276", "url": "https://patchblox.com/security/cve/CVE-2026-64276", "title": "Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64304", "url": "https://patchblox.com/security/cve/CVE-2026-64304", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72102", "url": "https://patchblox.com/security/cve/CVE-2026-72102", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_re...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72136", "url": "https://patchblox.com/security/cve/CVE-2026-72136", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in t...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64270", "url": "https://patchblox.com/security/cve/CVE-2026-64270", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packe...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64271", "url": "https://patchblox.com/security/cve/CVE-2026-64271", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on ever...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64272", "url": "https://patchblox.com/security/cve/CVE-2026-64272", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S a...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64296", "url": "https://patchblox.com/security/cve/CVE-2026-64296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_e...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64322", "url": "https://patchblox.com/security/cve/CVE-2026-64322", "title": "udf: validate sparing table length as an entry count, not a byte count", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64333", "url": "https://patchblox.com/security/cve/CVE-2026-64333", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer c...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64363", "url": "https://patchblox.com/security/cve/CVE-2026-64363", "title": "HID: appleir: fix UAF on pending key_up_timer in remove()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68479", "url": "https://patchblox.com/security/cve/CVE-2026-68479", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: validate firmware patch bounds...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72036", "url": "https://patchblox.com/security/cve/CVE-2026-72036", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue ca...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72105", "url": "https://patchblox.com/security/cve/CVE-2026-72105", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-log: fix a bitset_size overflow on 32bit mach...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72110", "url": "https://patchblox.com/security/cve/CVE-2026-72110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf,fork: wipe -\u003Ebpf_storage before bailouts tha...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72113", "url": "https://patchblox.com/security/cve/CVE-2026-72113", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing device refcount for CAN fi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72114", "url": "https://patchblox.com/security/cve/CVE-2026-72114", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: validate frame length in bcm_rx_setup(...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72119", "url": "https://patchblox.com/security/cve/CVE-2026-72119", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: extend bcm_tx_lock usage for data and...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72120", "url": "https://patchblox.com/security/cve/CVE-2026-72120", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu list annotations and o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72123", "url": "https://patchblox.com/security/cve/CVE-2026-72123", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ncan: bcm: defer rx_op deallocation to workqueue t...", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72135", "url": "https://patchblox.com/security/cve/CVE-2026-72135", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: Make the TPM character devices non-seekable...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72164", "url": "https://patchblox.com/security/cve/CVE-2026-72164", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72170", "url": "https://patchblox.com/security/cve/CVE-2026-72170", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: 9p: skip nlink update in cacheless mode to fix W...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72250", "url": "https://patchblox.com/security/cve/CVE-2026-72250", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_reasm: guard mac_header...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72252", "url": "https://patchblox.com/security/cve/CVE-2026-72252", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: don\u0027t leak bad clone...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72406", "url": "https://patchblox.com/security/cve/CVE-2026-72406", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup gem_init_o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72435", "url": "https://patchblox.com/security/cve/CVE-2026-72435", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72450", "url": "https://patchblox.com/security/cve/CVE-2026-72450", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen dur...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64563", "url": "https://patchblox.com/security/cve/CVE-2026-64563", "title": "rhashtable: clear stale iter-\u003Ep on table restart", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74295", "url": "https://patchblox.com/security/cve/CVE-2026-74295", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: hdac_hdmi: Validate written enum v...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64593", "url": "https://patchblox.com/security/cve/CVE-2026-64593", "title": "btrfs: do not trim a device which is not writeable", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64299", "url": "https://patchblox.com/security/cve/CVE-2026-64299", "title": "tracing: Prevent out-of-bounds read in glob matching", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64323", "url": "https://patchblox.com/security/cve/CVE-2026-64323", "title": "udf: validate VAT header length against the VAT inode size", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64504", "url": "https://patchblox.com/security/cve/CVE-2026-64504", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FI...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64346", "url": "https://patchblox.com/security/cve/CVE-2026-64346", "title": "usb: gadget: udc: Fix use-after-free in gadget_match_driver", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72005", "url": "https://patchblox.com/security/cve/CVE-2026-72005", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: avoid full teardown before work se...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72125", "url": "https://patchblox.com/security/cve/CVE-2026-72125", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix use-after-free race with concurr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72165", "url": "https://patchblox.com/security/cve/CVE-2026-72165", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: fix condition in \u0027nand_select_targ...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72389", "url": "https://patchblox.com/security/cve/CVE-2026-72389", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bridge: stp: Fix a potential use-after-free when...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72122", "url": "https://patchblox.com/security/cve/CVE-2026-72122", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix lockless bound/ifindex race and si...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72297", "url": "https://patchblox.com/security/cve/CVE-2026-72297", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64324", "url": "https://patchblox.com/security/cve/CVE-2026-64324", "title": "udf: validate free block extents against the partition length", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64294", "url": "https://patchblox.com/security/cve/CVE-2026-64294", "title": "mm: do file ownership checks with the proper mount idmap", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64306", "url": "https://patchblox.com/security/cve/CVE-2026-64306", "title": "crypto: drbg - Fix returning success on failure in CTR_DRBG", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72061", "url": "https://patchblox.com/security/cve/CVE-2026-72061", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAP_NET_ADMIN in the device ne...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72232", "url": "https://patchblox.com/security/cve/CVE-2026-72232", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: ensure minimal ethernet header on TX...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63806", "url": "https://patchblox.com/security/cve/CVE-2026-63806", "title": "KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()", "priority": "High", "severity": "Important", "cvss": 7.3, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74465", "url": "https://patchblox.com/security/cve/CVE-2026-74465", "title": "net: openvswitch: fix potential UAF on meter attach failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68294", "url": "https://patchblox.com/security/cve/CVE-2026-68294", "title": "net: qrtr: restrict socket creation to the initial network namespace", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72045", "url": "https://patchblox.com/security/cve/CVE-2026-72045", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72051", "url": "https://patchblox.com/security/cve/CVE-2026-72051", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_tunnel: require CAP_NET_ADMIN in the de...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72052", "url": "https://patchblox.com/security/cve/CVE-2026-72052", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the devic...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72053", "url": "https://patchblox.com/security/cve/CVE-2026-72053", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAP_NET_ADMIN in the device n...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72054", "url": "https://patchblox.com/security/cve/CVE-2026-72054", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip_vti: require CAP_NET_ADMIN in the device...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72055", "url": "https://patchblox.com/security/cve/CVE-2026-72055", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the devic...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64456", "url": "https://patchblox.com/security/cve/CVE-2026-64456", "title": "hwrng: virtio: clamp device-reported used.len at copy_data()", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43491", "url": "https://patchblox.com/security/cve/CVE-2026-43491", "title": "net: qrtr: ns: Limit the maximum server registration per node", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63829", "url": "https://patchblox.com/security/cve/CVE-2026-63829", "title": "net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64298", "url": "https://patchblox.com/security/cve/CVE-2026-64298", "title": "NFSv4: include MAY_WRITE in open permission mask for O_TRUNC", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68432", "url": "https://patchblox.com/security/cve/CVE-2026-68432", "title": "vxlan: require CAP_NET_ADMIN in the device netns for changelink", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74519", "url": "https://patchblox.com/security/cve/CVE-2026-74519", "title": "pinctrl: devicetree: don\u0027t free uninitialized dev_name on error path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74684", "url": "https://patchblox.com/security/cve/CVE-2026-74684", "title": "net: tap: set skb-\u003Edev before parsing virtio net header in tap_get_user_xdp()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64446", "url": "https://patchblox.com/security/cve/CVE-2026-64446", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64510", "url": "https://patchblox.com/security/cve/CVE-2026-64510", "title": "ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72049", "url": "https://patchblox.com/security/cve/CVE-2026-72049", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ieee802154: admin-gate legacy LLSEC dump operati...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68253", "url": "https://patchblox.com/security/cve/CVE-2026-68253", "title": "drm/i915/hdcp: check streams[] bounds before overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64548", "url": "https://patchblox.com/security/cve/CVE-2026-64548", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy \u002B len in b...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74492", "url": "https://patchblox.com/security/cve/CVE-2026-74492", "title": "netfilter: ipset: do not update comments from kernel-side hash adds", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74497", "url": "https://patchblox.com/security/cve/CVE-2026-74497", "title": "ALSA: usb-audio: Clamp frame size in implicit-feedback mode", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74614", "url": "https://patchblox.com/security/cve/CVE-2026-74614", "title": "vsock/virtio: read virtqueues under worker locks", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80678", "url": "https://patchblox.com/security/cve/CVE-2026-80678", "title": "i2c: imx: Fix slave registration race and error handling", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80731", "url": "https://patchblox.com/security/cve/CVE-2026-80731", "title": "net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53090", "url": "https://patchblox.com/security/cve/CVE-2026-53090", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix ld_{abs,ind} failure path analysis in s...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64475", "url": "https://patchblox.com/security/cve/CVE-2026-64475", "title": "vfio/pci: Release the VGA arbiter client on register_device() failure", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74748", "url": "https://patchblox.com/security/cve/CVE-2026-74748", "title": "netfilter: ipset: fix refcount race between list:set GC and swap", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74461", "url": "https://patchblox.com/security/cve/CVE-2026-74461", "title": "i2c: imx: Cancel hrtimer before clearing slave pointer", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74589", "url": "https://patchblox.com/security/cve/CVE-2026-74589", "title": "bpf, sockmap: Fix sk_redir use-after-free in send verdict", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74604", "url": "https://patchblox.com/security/cve/CVE-2026-74604", "title": "Revert \u0022thermal/drivers/hwmon: Cleanup coding style a bit\u0022", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64422", "url": "https://patchblox.com/security/cve/CVE-2026-64422", "title": "net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68338", "url": "https://patchblox.com/security/cve/CVE-2026-68338", "title": "net/packet: avoid fanout hook re-registration after unregister", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53400", "url": "https://patchblox.com/security/cve/CVE-2026-53400", "title": "i2c: core: fix adapter registration race", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74601", "url": "https://patchblox.com/security/cve/CVE-2026-74601", "title": "ring-buffer: Use current_context for safe per-CPU buffer swap", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74667", "url": "https://patchblox.com/security/cve/CVE-2026-74667", "title": "net/packet: reset the MAC header on the packet-socket transmit path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68284", "url": "https://patchblox.com/security/cve/CVE-2026-68284", "title": "bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64279", "url": "https://patchblox.com/security/cve/CVE-2026-64279", "title": "i2c: core: fix adapter deregistration race", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80574", "url": "https://patchblox.com/security/cve/CVE-2026-80574", "title": "Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64423", "url": "https://patchblox.com/security/cve/CVE-2026-64423", "title": "ipv4: igmp: remove multicast group from hash table on device destruction", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74481", "url": "https://patchblox.com/security/cve/CVE-2026-74481", "title": "mm/page_reporting: use system_freezable_wq to fix UAF during suspend", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64411", "url": "https://patchblox.com/security/cve/CVE-2026-64411", "title": "netfilter: ebtables: terminate table name before find_table_lock()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64412", "url": "https://patchblox.com/security/cve/CVE-2026-64412", "title": "netfilter: ebtables: module names must be null-terminated", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68104", "url": "https://patchblox.com/security/cve/CVE-2026-68104", "title": "drm/amdgpu: invoke pm_genpd_remove() before freeing genpd", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68106", "url": "https://patchblox.com/security/cve/CVE-2026-68106", "title": "drm/amdgpu: fix division by zero with invalid uvd dimensions", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68297", "url": "https://patchblox.com/security/cve/CVE-2026-68297", "title": "tipc: fix u16 MTU truncation in media and bearer MTU validation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74390", "url": "https://patchblox.com/security/cve/CVE-2026-74390", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix out-of-bounds write in irdma_cop...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74701", "url": "https://patchblox.com/security/cve/CVE-2026-74701", "title": "net/openvswitch: check Ethernet header length in key_extract()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64546", "url": "https://patchblox.com/security/cve/CVE-2026-64546", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block(...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74443", "url": "https://patchblox.com/security/cve/CVE-2026-74443", "title": "drm/vmwgfx: bound DMA command body size against suffix pointer", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74641", "url": "https://patchblox.com/security/cve/CVE-2026-74641", "title": "ALSA: usx2y: bound the hwdep mmap fault offset", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64330", "url": "https://patchblox.com/security/cve/CVE-2026-64330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdm_co...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64352", "url": "https://patchblox.com/security/cve/CVE-2026-64352", "title": "bpf: Allow LPM map access from sleepable BPF programs", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64381", "url": "https://patchblox.com/security/cve/CVE-2026-64381", "title": "smb: client: Fix next buffer leak in receive_encrypted_standard()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74288", "url": "https://patchblox.com/security/cve/CVE-2026-74288", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don\u0027t dump dying fib_rule in fib...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74312", "url": "https://patchblox.com/security/cve/CVE-2026-74312", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vhost/vdpa: validate virtqueue index in mmap and...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74330", "url": "https://patchblox.com/security/cve/CVE-2026-74330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -\u003Es_childre...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74444", "url": "https://patchblox.com/security/cve/CVE-2026-74444", "title": "drm/vmwgfx: validate DRAW_PRIMITIVES header size before division", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74453", "url": "https://patchblox.com/security/cve/CVE-2026-74453", "title": "drm/vc4: Zero the tile state data array before each BIN job", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74456", "url": "https://patchblox.com/security/cve/CVE-2026-74456", "title": "can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74470", "url": "https://patchblox.com/security/cve/CVE-2026-74470", "title": "scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74594", "url": "https://patchblox.com/security/cve/CVE-2026-74594", "title": "sched/psi: Shut down rtpoll_timer in psi_cgroup_free()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74635", "url": "https://patchblox.com/security/cve/CVE-2026-74635", "title": "fbdev: bitblit: bound-check glyph index in bit_cursor()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74648", "url": "https://patchblox.com/security/cve/CVE-2026-74648", "title": "staging: rtl8723bs: validate monitor transmit frame lengths", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74675", "url": "https://patchblox.com/security/cve/CVE-2026-74675", "title": "vt: stabilize tty reference in kbd_keycode with tty_port_tty_get", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74720", "url": "https://patchblox.com/security/cve/CVE-2026-74720", "title": "bpf: Preserve pointer state for commuted arithmetic", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80540", "url": "https://patchblox.com/security/cve/CVE-2026-80540", "title": "drm/amdgpu: Fix UVD decode image min size calculation", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80541", "url": "https://patchblox.com/security/cve/CVE-2026-80541", "title": "drm/amdgpu: validate GEM_CREATE domain combinations", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80613", "url": "https://patchblox.com/security/cve/CVE-2026-80613", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path Du...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53393", "url": "https://patchblox.com/security/cve/CVE-2026-53393", "title": "nfsd: reset write verifier on deferred writeback errors", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64371", "url": "https://patchblox.com/security/cve/CVE-2026-64371", "title": "proc: protect ptrace_may_access() with exec_update_lock (part 1)", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74630", "url": "https://patchblox.com/security/cve/CVE-2026-74630", "title": "ipv6: prevent in6_dev_get() from resurrecting inet6_dev", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68320", "url": "https://patchblox.com/security/cve/CVE-2026-68320", "title": "sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64436", "url": "https://patchblox.com/security/cve/CVE-2026-64436", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: af_key: initialize alg_key_len for IPComp s...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64413", "url": "https://patchblox.com/security/cve/CVE-2026-64413", "title": "netfilter: ebtables: zero chainstack array", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64266", "url": "https://patchblox.com/security/cve/CVE-2026-64266", "title": "fuse: re-lock request before returning from fuse_ref_folio()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72024", "url": "https://patchblox.com/security/cve/CVE-2026-72024", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mac802154: remove interfaces with RCU list delet...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80664", "url": "https://patchblox.com/security/cve/CVE-2026-80664", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nat: reject unsupported target fam...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64189", "url": "https://patchblox.com/security/cve/CVE-2026-64189", "title": "netfilter: ipset: fix race between dump and ip_set_list resize", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74313", "url": "https://patchblox.com/security/cve/CVE-2026-74313", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vduse: hold vduse_lock across IDR lookup in open...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74518", "url": "https://patchblox.com/security/cve/CVE-2026-74518", "title": "mm/hugetlb: fix list corruption in allocate_file_region_entries()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74615", "url": "https://patchblox.com/security/cve/CVE-2026-74615", "title": "vxlan: do not arm the ageing timer on a device that is down", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64340", "url": "https://patchblox.com/security/cve/CVE-2026-64340", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: USB: legousbtower: fix use-after-free on disconn...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64342", "url": "https://patchblox.com/security/cve/CVE-2026-64342", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: USB: iowarrior: fix use-after-free on disconnect...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64343", "url": "https://patchblox.com/security/cve/CVE-2026-64343", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: USB: ldusb: fix use-after-free on disconnect rac...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64344", "url": "https://patchblox.com/security/cve/CVE-2026-64344", "title": "linux-6.12: In the Linux kernel, the following vulnerability has been resolved: USB: idmouse: fix use-after-free on disconnect r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64362", "url": "https://patchblox.com/security/cve/CVE-2026-64362", "title": "HID: lg-g15: cancel pending work on remove to fix a use-after-free", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64372", "url": "https://patchblox.com/security/cve/CVE-2026-64372", "title": "cpufreq: pcc: fix use-after-free and double free in _OSC evaluation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64401", "url": "https://patchblox.com/security/cve/CVE-2026-64401", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registra...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64543", "url": "https://patchblox.com/security/cve/CVE-2026-64543", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free of the discoverer in ti...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74359", "url": "https://patchblox.com/security/cve/CVE-2026-74359", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: configfs_lookup(): don\u0027t leave -\u003Es_dentry dangli...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74363", "url": "https://patchblox.com/security/cve/CVE-2026-74363", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix UAF by restoring RCU-delayed inode free...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74471", "url": "https://patchblox.com/security/cve/CVE-2026-74471", "title": "tracing: Check return value of __register_event() in trace_module_add_events()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74479", "url": "https://patchblox.com/security/cve/CVE-2026-74479", "title": "net: pktgen: fix proc entry use-after-free", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74482", "url": "https://patchblox.com/security/cve/CVE-2026-74482", "title": "mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74512", "url": "https://patchblox.com/security/cve/CVE-2026-74512", "title": "audit: fix potential use-after-free in audit_del_rule()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74548", "url": "https://patchblox.com/security/cve/CVE-2026-74548", "title": "forcedeth: fix UAF of txrx_stats in nv_remove", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74609", "url": "https://patchblox.com/security/cve/CVE-2026-74609", "title": "tipc: read le-\u003Elink under the node lock in tipc_node_link_down()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74613", "url": "https://patchblox.com/security/cve/CVE-2026-74613", "title": "vsock/virtio: avoid refilling the RX queue after teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74656", "url": "https://patchblox.com/security/cve/CVE-2026-74656", "title": "ipv4: fix use-after-free in fib_nhc_update_mtu()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74660", "url": "https://patchblox.com/security/cve/CVE-2026-74660", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt_nflog: pin the NFLOG backend nf_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74726", "url": "https://patchblox.com/security/cve/CVE-2026-74726", "title": "bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74349", "url": "https://patchblox.com/security/cve/CVE-2026-74349", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject FITRIM ranges shorter than a clust...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74485", "url": "https://patchblox.com/security/cve/CVE-2026-74485", "title": "binfmt_misc: reject a flag character as the field delimiter", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64567", "url": "https://patchblox.com/security/cve/CVE-2026-64567", "title": "btrfs: reject free space cache with more entries than pages", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64427", "url": "https://patchblox.com/security/cve/CVE-2026-64427", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix maxfield check in DJ short...", "priority": "High", "severity": "medium", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80716", "url": "https://patchblox.com/security/cve/CVE-2026-80716", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: wake linked drain waiters on unlink...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64496", "url": "https://patchblox.com/security/cve/CVE-2026-64496", "title": "iio: event: Fix event FIFO reset race", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68446", "url": "https://patchblox.com/security/cve/CVE-2026-68446", "title": "drm/vmwgfx: Validate vmw_surface_metadata::array_size", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64576", "url": "https://patchblox.com/security/cve/CVE-2026-64576", "title": "nexthop: initialize extack in nh_res_bucket_migrate()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80706", "url": "https://patchblox.com/security/cve/CVE-2026-80706", "title": "can: softing: fw_parse(): validate firmware record spans", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80754", "url": "https://patchblox.com/security/cve/CVE-2026-80754", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter elec...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74579", "url": "https://patchblox.com/security/cve/CVE-2026-74579", "title": "netfilter: nft_payload: fix mask build for partial field offload", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64420", "url": "https://patchblox.com/security/cve/CVE-2026-64420", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mfd: cros_ec: Delay dev_set_drvdata() until prob...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64192", "url": "https://patchblox.com/security/cve/CVE-2026-64192", "title": "bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74564", "url": "https://patchblox.com/security/cve/CVE-2026-74564", "title": "netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74583", "url": "https://patchblox.com/security/cve/CVE-2026-74583", "title": "net/sched: cls_route: fix fastmap use-after-free on filter", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64599", "url": "https://patchblox.com/security/cve/CVE-2026-64599", "title": "crypto: amlogic - avoid double cleanup in meson_crypto_probe()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74567", "url": "https://patchblox.com/security/cve/CVE-2026-74567", "title": "keys: fix out-of-bounds read in keyring_get_key_chunk()", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64098", "url": "https://patchblox.com/security/cve/CVE-2026-64098", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00113, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64375", "url": "https://patchblox.com/security/cve/CVE-2026-64375", "title": "proc: protect ptrace_may_access() with exec_update_lock (FD links)", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74595", "url": "https://patchblox.com/security/cve/CVE-2026-74595", "title": "fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00092, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-27012", "url": "https://patchblox.com/security/cve/CVE-2024-27012", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00272, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68469", "url": "https://patchblox.com/security/cve/CVE-2026-68469", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix permanently busy scans after...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72441", "url": "https://patchblox.com/security/cve/CVE-2026-72441", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ieee802154: fix kernel-infoleak in dgram_recvmsg...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74331", "url": "https://patchblox.com/security/cve/CVE-2026-74331", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware_loader: Fix recursive lock in device_ca...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72245", "url": "https://patchblox.com/security/cve/CVE-2026-72245", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix device reference leak in host1x...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68187", "url": "https://patchblox.com/security/cve/CVE-2026-68187", "title": "exec: fix unsigned loop counter wrap in transfer_args_to_stack()", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68217", "url": "https://patchblox.com/security/cve/CVE-2026-68217", "title": "media: pwc: Drain fill_buf on start_streaming() failure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68226", "url": "https://patchblox.com/security/cve/CVE-2026-68226", "title": "media: cx23885: add ioremap return check and cleanup", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68227", "url": "https://patchblox.com/security/cve/CVE-2026-68227", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68405", "url": "https://patchblox.com/security/cve/CVE-2026-68405", "title": "wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68475", "url": "https://patchblox.com/security/cve/CVE-2026-68475", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: reset: sunxi: fix memory region leak on ioremap...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72004", "url": "https://patchblox.com/security/cve/CVE-2026-72004", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix memory leak in ieee80211_reg...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72010", "url": "https://patchblox.com/security/cve/CVE-2026-72010", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: rebind mm mempolicy to effective_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72039", "url": "https://patchblox.com/security/cve/CVE-2026-72039", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bnx2x: fix potential memory leak in bnx2x_alloc_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72056", "url": "https://patchblox.com/security/cve/CVE-2026-72056", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ena: clean up XDP TX queues when regular TX...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72063", "url": "https://patchblox.com/security/cve/CVE-2026-72063", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gpio: tegra: do not call pinctrl for GPIO direct...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72068", "url": "https://patchblox.com/security/cve/CVE-2026-72068", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Use u64 multiplication in upda...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72070", "url": "https://patchblox.com/security/cve/CVE-2026-72070", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: libertas_tf: fix use-after-free in lbtf_fr...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72087", "url": "https://patchblox.com/security/cve/CVE-2026-72087", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix memory leak in lpfc_sli4_driver_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72088", "url": "https://patchblox.com/security/cve/CVE-2026-72088", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: hpsa: Fix DMA mapping leak on IOACCEL2 res...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72159", "url": "https://patchblox.com/security/cve/CVE-2026-72159", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with i_size and...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72182", "url": "https://patchblox.com/security/cve/CVE-2026-72182", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: charger-manager: fix refcount lea...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72223", "url": "https://patchblox.com/security/cve/CVE-2026-72223", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arena sub-allocations on discov...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72224", "url": "https://patchblox.com/security/cve/CVE-2026-72224", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on btt_init() error path...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72228", "url": "https://patchblox.com/security/cve/CVE-2026-72228", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: fix primary_if leak on failed...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72229", "url": "https://patchblox.com/security/cve/CVE-2026-72229", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: clean untagged VLAN on netdev regist...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72230", "url": "https://patchblox.com/security/cve/CVE-2026-72230", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: frag: free unfragmentable packet Th...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72240", "url": "https://patchblox.com/security/cve/CVE-2026-72240", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mfd: sm501: Fix reference leak on failed device...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72241", "url": "https://patchblox.com/security/cve/CVE-2026-72241", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: leds: uleds: Fix potential buffer overread The...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72265", "url": "https://patchblox.com/security/cve/CVE-2026-72265", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: nvidia: fix potential memory leak in nvid...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72272", "url": "https://patchblox.com/security/cve/CVE-2026-72272", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: radeon: fix potential memory leak in rade...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72326", "url": "https://patchblox.com/security/cve/CVE-2026-72326", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cake: reject overhead values that und...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72349", "url": "https://patchblox.com/security/cve/CVE-2026-72349", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72396", "url": "https://patchblox.com/security/cve/CVE-2026-72396", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: adm1275: Prevent reading uninitialized st...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72447", "url": "https://patchblox.com/security/cve/CVE-2026-72447", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72481", "url": "https://patchblox.com/security/cve/CVE-2026-72481", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iio: magnetometer: ak8975: fix potential kernel...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74320", "url": "https://patchblox.com/security/cve/CVE-2026-74320", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbdev: sm501fb: Fix buffer errors in OF binding...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74339", "url": "https://patchblox.com/security/cve/CVE-2026-74339", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Clear variable event pointer on read...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74348", "url": "https://patchblox.com/security/cve/CVE-2026-74348", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2/dlm: require a ref for locking_state debug...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74351", "url": "https://patchblox.com/security/cve/CVE-2026-74351", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: rebase copied fsdlm LVB pointers in locki...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74395", "url": "https://patchblox.com/security/cve/CVE-2026-74395", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix devx subscribe-event unwind NULL...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74416", "url": "https://patchblox.com/security/cve/CVE-2026-74416", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix memory leak in radeon_ring_resto...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80605", "url": "https://patchblox.com/security/cve/CVE-2026-80605", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: picolcd: prevent NULL pointer dereference i...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80644", "url": "https://patchblox.com/security/cve/CVE-2026-80644", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: don\u0027t BUG_ON an invalid journal dinode [...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80652", "url": "https://patchblox.com/security/cve/CVE-2026-80652", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as qu...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80659", "url": "https://patchblox.com/security/cve/CVE-2026-80659", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mmc: vub300: defer reset until cmd_mutex is unlo...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72316", "url": "https://patchblox.com/security/cve/CVE-2026-72316", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm era: fix NULL pointer dereference in metadata...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.7, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72073", "url": "https://patchblox.com/security/cve/CVE-2026-72073", "title": "mmc: vub300: fix use-after-free on probe failure", "priority": "Routine", "severity": "Moderate", "cvss": 6.3, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72428", "url": "https://patchblox.com/security/cve/CVE-2026-72428", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks chec...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68184", "url": "https://patchblox.com/security/cve/CVE-2026-68184", "title": "cdrom: fix stack out-of-bounds read in CDROMVOLCTRL", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68197", "url": "https://patchblox.com/security/cve/CVE-2026-68197", "title": "wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68250", "url": "https://patchblox.com/security/cve/CVE-2026-68250", "title": "drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68304", "url": "https://patchblox.com/security/cve/CVE-2026-68304", "title": "wifi: brcmfmac: fix 802.1X-SHA256 call trace warning", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68313", "url": "https://patchblox.com/security/cve/CVE-2026-68313", "title": "tipc: fix infinite loop in __tipc_nl_compat_dumpit", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68344", "url": "https://patchblox.com/security/cve/CVE-2026-68344", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: reject descriptors that co...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68410", "url": "https://patchblox.com/security/cve/CVE-2026-68410", "title": "wifi: libertas: fix memory leak in helper_firmware_cb()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72015", "url": "https://patchblox.com/security/cve/CVE-2026-72015", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/resctrl: Fix double-add of pseudo-locked regi...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72096", "url": "https://patchblox.com/security/cve/CVE-2026-72096", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity: make error counter atomic The error...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72117", "url": "https://patchblox.com/security/cve/CVE-2026-72117", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix data race on rx_stamp/rx_ifindex i...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72118", "url": "https://patchblox.com/security/cve/CVE-2026-72118", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix CAN frame rx/tx statistics KCSAN...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72138", "url": "https://patchblox.com/security/cve/CVE-2026-72138", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xen/gntdev: fix error handling in ioctl When gn...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72142", "url": "https://patchblox.com/security/cve/CVE-2026-72142", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72152", "url": "https://patchblox.com/security/cve/CVE-2026-72152", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_tis_spi: Use wait_woken() in wait_for_t...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72155", "url": "https://patchblox.com/security/cve/CVE-2026-72155", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experien...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72163", "url": "https://patchblox.com/security/cve/CVE-2026-72163", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix NULL h_transaction deref in ocfs2_ass...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72166", "url": "https://patchblox.com/security/cve/CVE-2026-72166", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9_client_rpc on fa...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72256", "url": "https://patchblox.com/security/cve/CVE-2026-72256", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_cluster: reject template conntrack...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72392", "url": "https://patchblox.com/security/cve/CVE-2026-72392", "title": "ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72433", "url": "https://patchblox.com/security/cve/CVE-2026-72433", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIF...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74284", "url": "https://patchblox.com/security/cve/CVE-2026-74284", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: Don\u0027t make class passive tw...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68205", "url": "https://patchblox.com/security/cve/CVE-2026-68205", "title": "media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68422", "url": "https://patchblox.com/security/cve/CVE-2026-68422", "title": "btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74265", "url": "https://patchblox.com/security/cve/CVE-2026-74265", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALID_Q...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74327", "url": "https://patchblox.com/security/cve/CVE-2026-74327", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix NULL pointer dereference in is_vm_a...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74329", "url": "https://patchblox.com/security/cve/CVE-2026-74329", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: watchdog: unregister PM notifier on watchdog unr...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74399", "url": "https://patchblox.com/security/cve/CVE-2026-74399", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: evm: terminate and bound the evm_xattrs read buf...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72086", "url": "https://patchblox.com/security/cve/CVE-2026-72086", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Free the command tag on the...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68190", "url": "https://patchblox.com/security/cve/CVE-2026-68190", "title": "staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72305", "url": "https://patchblox.com/security/cve/CVE-2026-72305", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: VDUSE: avoid leaking information to userspace T...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "cvesTruncated": true, "dataAsOf": "2026-11-07T18:46:35Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }