# ELSA-2026-50145: Security update for 19 packages ELSA-2026-50145, released March 10, 2026, fixes 145 CVEs across 19 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/elsa-2026-50145 - Platform: Linux - Released: Mar 10, 2026 - Priority: Urgent (Closes CVE-2025-68366, rated Critical) - CVEs: 145, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2026-50145.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [bpftool](https://patchblox.com/security/data/product/linux/bpftool.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-container](https://patchblox.com/security/data/product/linux/kernel-uek-container.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-container-debug](https://patchblox.com/security/data/product/linux/kernel-uek-container-debug.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 8 | 0:5.15.0-318.199.3.2.el9uek | | [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 9 | 0:5.15.0-318.199.3.2.el9uek | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2025-68366](https://patchblox.com/security/data/cve/CVE-2025-68366.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect Th... | 8.8 | 0.0020 | | | [CVE-2025-68819](https://patchblox.com/security/data/cve/CVE-2025-68819.md) | Urgent | media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() | 9.8 | 0.0016 | | | [CVE-2025-71098](https://patchblox.com/security/data/cve/CVE-2025-71098.md) | Urgent | ip6_gre: make ip6gre_header() robust | 9.8 | 0.0014 | | | [CVE-2026-22998](https://patchblox.com/security/data/cve/CVE-2026-22998.md) | High | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: v... | 7.5 | 0.0078 | | | [CVE-2025-68349](https://patchblox.com/security/data/cve/CVE-2025-68349.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_m... | 7.5 | 0.0071 | | | [CVE-2025-68782](https://patchblox.com/security/data/cve/CVE-2025-68782.md) | High | scsi: target: Reset t_task_cdb pointer in error case | 8.6 | 0.0069 | | | [CVE-2025-68261](https://patchblox.com/security/data/cve/CVE-2025-68261.md) | High | ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() | 7.5 | 0.0055 | | | [CVE-2025-68337](https://patchblox.com/security/data/cve/CVE-2025-68337.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: jbd2: avoid bug_on in jbd2_journal_get_create_ac... | 7.5 | 0.0055 | | | [CVE-2026-23003](https://patchblox.com/security/data/cve/CVE-2026-23003.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k... | 8.8 | 0.0055 | | | [CVE-2025-71120](https://patchblox.com/security/data/cve/CVE-2025-71120.md) | High | SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf | 7.5 | 0.0053 | | | [CVE-2026-23111](https://patchblox.com/security/data/cve/CVE-2026-23111.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0052 | | | [CVE-2025-71116](https://patchblox.com/security/data/cve/CVE-2025-71116.md) | High | libceph: make decode_pool() more resilient against corrupted osdmaps | 8.1 | 0.0046 | | | [CVE-2025-68803](https://patchblox.com/security/data/cve/CVE-2025-68803.md) | High | NFSD: NFSv4 file creation neglects setting ACL | 8.0 | 0.0045 | | | [CVE-2026-22984](https://patchblox.com/security/data/cve/CVE-2026-22984.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in... | 8.8 | 0.0041 | | | [CVE-2026-22990](https://patchblox.com/security/data/cve/CVE-2026-22990.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: libceph: replace overzealous BUG_ON in osdmap_app... | 8.8 | 0.0040 | | | [CVE-2026-23139](https://patchblox.com/security/data/cve/CVE-2026-23139.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: update last_gc only whe... | 7.6 | 0.0038 | | | [CVE-2025-71068](https://patchblox.com/security/data/cve/CVE-2025-71068.md) | High | svcrdma: bound check rq_pages index in inline path | 7.8 | 0.0038 | | | [CVE-2025-68255](https://patchblox.com/security/data/cve/CVE-2025-68255.md) | High | staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing | 8.8 | 0.0037 | | | [CVE-2025-68818](https://patchblox.com/security/data/cve/CVE-2025-68818.md) | High | scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" | 8.8 | 0.0033 | | | [CVE-2025-71085](https://patchblox.com/security/data/cve/CVE-2025-71085.md) | High | kernel-tools: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... | 7.8 | 0.0031 | | | [CVE-2025-71093](https://patchblox.com/security/data/cve/CVE-2025-71093.md) | High | e1000: fix OOB in e1000_tbi_should_accept() | 7.1 | 0.0029 | | | [CVE-2025-68254](https://patchblox.com/security/data/cve/CVE-2025-68254.md) | High | staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing | 7.1 | 0.0028 | | | [CVE-2025-71197](https://patchblox.com/security/data/cve/CVE-2025-71197.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in ala... | n/a | 0.0026 | | | [CVE-2024-46830](https://patchblox.com/security/data/cve/CVE-2024-46830.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire kvm->srcu when handling KVM_SE... | 7.8 | 0.0025 | | | [CVE-2025-71127](https://patchblox.com/security/data/cve/CVE-2025-71127.md) | High | wifi: mac80211: Discard Beacon frames to non-broadcast address | 7.9 | 0.0023 | | | [CVE-2025-68364](https://patchblox.com/security/data/cve/CVE-2025-68364.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: relax BUG() to ocfs2_error() in __ocfs2_m... | n/a | 0.0022 | | | [CVE-2025-71132](https://patchblox.com/security/data/cve/CVE-2025-71132.md) | High | smc91x: fix broken irq-context in PREEMPT_RT | 8.8 | 0.0022 | | | [CVE-2025-22121](https://patchblox.com/security/data/cve/CVE-2025-22121.md) | High | ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() | 7.1 | 0.0022 | | | [CVE-2025-21979](https://patchblox.com/security/data/cve/CVE-2025-21979.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0021 | | | [CVE-2025-68771](https://patchblox.com/security/data/cve/CVE-2025-68771.md) | High | ocfs2: fix kernel BUG in ocfs2_find_victim_chain | 7.1 | 0.0021 | | | [CVE-2026-23049](https://patchblox.com/security/data/cve/CVE-2026-23049.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/panel-simple: fix connector type for DataIma... | n/a | 0.0021 | | | [CVE-2026-23001](https://patchblox.com/security/data/cve/CVE-2026-23001.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: i... | 7.8 | 0.0021 | | | [CVE-2025-22022](https://patchblox.com/security/data/cve/CVE-2025-22022.md) | High | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0020 | | | [CVE-2025-38022](https://patchblox.com/security/data/cve/CVE-2025-38022.md) | High | RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem | 7.8 | 0.0020 | | | [CVE-2025-38129](https://patchblox.com/security/data/cve/CVE-2025-38129.md) | High | page_pool: Fix use-after-free in page_pool_recycle_in_ring | 7.8 | 0.0020 | | | [CVE-2025-68759](https://patchblox.com/security/data/cve/CVE-2025-68759.md) | High | wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() | 7.1 | 0.0020 | | | [CVE-2026-22977](https://patchblox.com/security/data/cve/CVE-2026-22977.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: sock: fix hardened usercopy panic in sock_r... | 9.8 | 0.0019 | | | [CVE-2026-23074](https://patchblox.com/security/data/cve/CVE-2026-23074.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: p... | 7.8 | 0.0019 | | | [CVE-2025-71133](https://patchblox.com/security/data/cve/CVE-2025-71133.md) | High | RDMA/irdma: avoid invalid read in irdma_net_event | 7.1 | 0.0018 | | | [CVE-2026-23073](https://patchblox.com/security/data/cve/CVE-2026-23073.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Fix memory corruption due to not set... | 7.8 | 0.0018 | | | [CVE-2025-71114](https://patchblox.com/security/data/cve/CVE-2025-71114.md) | High | via_wdt: fix critical boot hang due to unnamed resource allocation | 7.1 | 0.0018 | | | [CVE-2026-23076](https://patchblox.com/security/data/cve/CVE-2026-23076.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix potential OOB access in audio m... | 7.1 | 0.0018 | | | [CVE-2026-23209](https://patchblox.com/security/data/cve/CVE-2026-23209.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... | 7.8 | 0.0018 | | | [CVE-2025-71066](https://patchblox.com/security/data/cve/CVE-2025-71066.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Always remove class from active... | 7.8 | 0.0017 | | | [CVE-2026-23099](https://patchblox.com/security/data/cve/CVE-2026-23099.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bonding: limit BOND_MODE_8023AD to Ethernet devi... | 7.1 | 0.0017 | | | [CVE-2025-38556](https://patchblox.com/security/data/cve/CVE-2025-38556.md) | High | HID: core: Harden s32ton() against conversion to 0 bits | 8.0 | 0.0017 | | | [CVE-2025-68795](https://patchblox.com/security/data/cve/CVE-2025-68795.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: Avoid overflowing userspace buffer on s... | 7.8 | 0.0017 | | | [CVE-2025-68764](https://patchblox.com/security/data/cve/CVE-2025-68764.md) | High | NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags | 7.8 | 0.0017 | | | [CVE-2026-23089](https://patchblox.com/security/data/cve/CVE-2026-23089.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 7.8 | 0.0016 | | | [CVE-2025-68785](https://patchblox.com/security/data/cve/CVE-2025-68785.md) | High | net: openvswitch: fix middle attribute validation in push_nsh() action | 7.1 | 0.0016 | | | [CVE-2025-68815](https://patchblox.com/security/data/cve/CVE-2025-68815.md) | High | net/sched: ets: Remove drr class from the active list if it changes to strict | 7.8 | 0.0016 | | | [CVE-2025-71075](https://patchblox.com/security/data/cve/CVE-2025-71075.md) | High | scsi: aic94xx: fix use-after-free in device removal path | 7.8 | 0.0015 | | | [CVE-2025-71113](https://patchblox.com/security/data/cve/CVE-2025-71113.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated... | 7.8 | 0.0015 | | | [CVE-2025-68211](https://patchblox.com/security/data/cve/CVE-2025-68211.md) | High | ksm: use range-walk function to jump over holes in scan_get_next_rmap_item | 8.1 | 0.0015 | | | [CVE-2026-22980](https://patchblox.com/security/data/cve/CVE-2026-22980.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: provide locking for v4_end_grace Writing... | 7.8 | 0.0015 | | | [CVE-2026-23105](https://patchblox.com/security/data/cve/CVE-2026-23105.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: qfq: Use cl_is_active to determine wh... | 8.8 | 0.0015 | | | [CVE-2025-71082](https://patchblox.com/security/data/cve/CVE-2025-71082.md) | High | Bluetooth: btusb: revert use of devm_kzalloc in btusb | 7.8 | 0.0015 | | | [CVE-2025-71091](https://patchblox.com/security/data/cve/CVE-2025-71091.md) | High | team: fix check for port enabled in team_queue_override_port_prio_changed() | 7.8 | 0.0015 | | | [CVE-2025-68746](https://patchblox.com/security/data/cve/CVE-2025-68746.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: spi: tegra210-quad: Fix timeout handling When t... | 7.8 | 0.0014 | | | [CVE-2025-71147](https://patchblox.com/security/data/cve/CVE-2025-71147.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix a memory leak in tpm2_load_cmd... | 8.8 | 0.0014 | | | [CVE-2025-68724](https://patchblox.com/security/data/cve/CVE-2025-68724.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in as... | 8.1 | 0.0014 | | | [CVE-2025-71087](https://patchblox.com/security/data/cve/CVE-2025-71087.md) | High | iavf: fix off-by-one issues in iavf_config_rss_reg() | 7.1 | 0.0014 | | | [CVE-2025-71096](https://patchblox.com/security/data/cve/CVE-2025-71096.md) | High | RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly | 7.1 | 0.0014 | | | [CVE-2026-23103](https://patchblox.com/security/data/cve/CVE-2026-23103.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipvlan: Make the addrs_lock be per port Make the... | 8.8 | 0.0013 | | | [CVE-2026-23097](https://patchblox.com/security/data/cve/CVE-2026-23097.md) | High | kernel-core: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: L... | 7.5 | 0.0011 | | | [CVE-2025-38057](https://patchblox.com/security/data/cve/CVE-2025-38057.md) | Routine | espintcp: fix skb leaks | 5.5 | 0.0048 | | | [CVE-2026-22991](https://patchblox.com/security/data/cve/CVE-2026-22991.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: libceph: make free_choose_arg_map() resilient to... | 5.5 | 0.0047 | | | [CVE-2026-22997](https://patchblox.com/security/data/cve/CVE-2026-22997.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: j1939_xtp_rx_rts_session_active... | 5.5 | 0.0047 | | | [CVE-2026-22992](https://patchblox.com/security/data/cve/CVE-2026-22992.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: libceph: return the handler error from mon_handl... | 6.5 | 0.0045 | | | [CVE-2025-37860](https://patchblox.com/security/data/cve/CVE-2025-37860.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0032 | | | [CVE-2025-71131](https://patchblox.com/security/data/cve/CVE-2025-71131.md) | Routine | kernel: In the Linux kernel, the following vulnerability has been resolved: crypto: seqiv - Do not use req->iv after crypto_a... | 5.5 | 0.0031 | | | [CVE-2025-71146](https://patchblox.com/security/data/cve/CVE-2025-71146.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix leaked ct in error... | 5.5 | 0.0029 | | | [CVE-2026-23038](https://patchblox.com/security/data/cve/CVE-2026-23038.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc... | 5.5 | 0.0028 | | | [CVE-2025-68788](https://patchblox.com/security/data/cve/CVE-2025-68788.md) | Routine | fsnotify: do not generate ACCESS/MODIFY events on child for special files | 5.5 | 0.0028 | | | [CVE-2024-26655](https://patchblox.com/security/data/cve/CVE-2024-26655.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: Fix memory leak in posix_clock_open() If the cl... | 5.5 | 0.0026 | | | [CVE-2024-49968](https://patchblox.com/security/data/cve/CVE-2024-49968.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: d... | 5.5 | 0.0025 | | | [CVE-2024-36903](https://patchblox.com/security/data/cve/CVE-2024-36903.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0024 | | | [CVE-2025-68816](https://patchblox.com/security/data/cve/CVE-2025-68816.md) | Routine | net/mlx5: fw_tracer, Validate format string parameters | 6.6 | 0.0024 | | | [CVE-2025-68820](https://patchblox.com/security/data/cve/CVE-2025-68820.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4_raw_... | 5.5 | 0.0024 | | | [CVE-2026-22999](https://patchblox.com/security/data/cve/CVE-2026-22999.md) | Routine | kernel-livepatch-SLE15-SP6_Update_12: This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.53 fixes various security issues The following secu... | 5.5 | 0.0024 | | | [CVE-2025-68346](https://patchblox.com/security/data/cve/CVE-2025-68346.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detect_stream... | 6.8 | 0.0023 | | | [CVE-2025-68776](https://patchblox.com/security/data/cve/CVE-2025-68776.md) | Routine | net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() | 5.5 | 0.0023 | | | [CVE-2024-40928](https://patchblox.com/security/data/cve/CVE-2024-40928.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0023 | | | [CVE-2025-68264](https://patchblox.com/security/data/cve/CVE-2025-68264.md) | Routine | ext4: refresh inline data size before write operations | 5.5 | 0.0022 | | | [CVE-2025-71190](https://patchblox.com/security/data/cve/CVE-2025-71190.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on prob... | 5.5 | 0.0022 | | | [CVE-2025-68362](https://patchblox.com/security/data/cve/CVE-2025-68362.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: rtl8187: Fix potential buffer und... | 6.5 | 0.0021 | | | [CVE-2025-68354](https://patchblox.com/security/data/cve/CVE-2025-68354.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: regulator: core: Protect regulator_supply_alias_... | 5.5 | 0.0021 | | | [CVE-2026-23011](https://patchblox.com/security/data/cve/CVE-2026-23011.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_gre: make ipgre_header() robust Analog... | 6.6 | 0.0021 | | | [CVE-2025-38591](https://patchblox.com/security/data/cve/CVE-2025-38591.md) | Routine | bpf: Reject narrower access to pointer ctx fields | 5.5 | 0.0021 | | | [CVE-2025-68740](https://patchblox.com/security/data/cve/CVE-2025-68740.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ima: Handle error code returned by ima_filter_ru... | 5.5 | 0.0021 | | | [CVE-2025-68780](https://patchblox.com/security/data/cve/CVE-2025-68780.md) | Routine | sched/deadline: only set free_cpus for online runqueues | 5.5 | 0.0021 | | | [CVE-2025-68783](https://patchblox.com/security/data/cve/CVE-2025-68783.md) | Routine | ALSA: usb-mixer: us16x08: validate meter packet indices | 5.5 | 0.0021 | | | [CVE-2025-68813](https://patchblox.com/security/data/cve/CVE-2025-68813.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error pat... | 5.5 | 0.0021 | | | [CVE-2026-23058](https://patchblox.com/security/data/cve/CVE-2026-23058.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: can: ems_usb: ems_usb_read_bulk_callback(): fix... | 5.5 | 0.0021 | | | [CVE-2025-40110](https://patchblox.com/security/data/cve/CVE-2025-40110.md) | Routine | drm/vmwgfx: Fix a null-ptr access in the cursor snooper | 4.7 | 0.0021 | | | [CVE-2025-68282](https://patchblox.com/security/data/cve/CVE-2025-68282.md) | Routine | usb: gadget: udc: fix use-after-free in usb_gadget_state_work | 6.3 | 0.0021 | | | [CVE-2025-22111](https://patchblox.com/security/data/cve/CVE-2025-22111.md) | Routine | kernel-64k: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 5.5 | 0.0021 | | | [CVE-2026-23021](https://patchblox.com/security/data/cve/CVE-2026-23021.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: fix memory leak in update_eth... | 5.5 | 0.0021 | | | [CVE-2025-68757](https://patchblox.com/security/data/cve/CVE-2025-68757.md) | Routine | drm/vgem-fence: Fix potential deadlock on release | 6.2 | 0.0020 | | | [CVE-2025-68372](https://patchblox.com/security/data/cve/CVE-2025-68372.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nbd: defer config put in recv_work There is one... | 5.5 | 0.0020 | | | [CVE-2025-68367](https://patchblox.com/security/data/cve/CVE-2025-68367.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: macintosh/mac_hid: fix race condition in mac_hid... | 5.3 | 0.0020 | | | [CVE-2025-38007](https://patchblox.com/security/data/cve/CVE-2025-38007.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0020 | | | [CVE-2025-40164](https://patchblox.com/security/data/cve/CVE-2025-40164.md) | Routine | usbnet: Fix using smp_processor_id() in preemptible code warnings | 5.5 | 0.0019 | | | [CVE-2025-68732](https://patchblox.com/security/data/cve/CVE-2025-68732.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix race in syncpt alloc/free Fix... | 5.5 | 0.0019 | | | [CVE-2026-23047](https://patchblox.com/security/data/cve/CVE-2026-23047.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: libceph: make calc_target() set t->paused, not j... | 5.5 | 0.0019 | | | [CVE-2025-22119](https://patchblox.com/security/data/cve/CVE-2025-22119.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 5.5 | 0.0019 | | | [CVE-2025-68725](https://patchblox.com/security/data/cve/CVE-2025-68725.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO... | 5.5 | 0.0019 | | | [CVE-2026-22976](https://patchblox.com/security/data/cve/CVE-2026-22976.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix NULL deref when deactiva... | 5.5 | 0.0018 | | | [CVE-2026-23060](https://patchblox.com/security/data/cve/CVE-2026-23060.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 6.5 | 0.0018 | | | [CVE-2024-36927](https://patchblox.com/security/data/cve/CVE-2024-36927.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0018 | | | [CVE-2026-23164](https://patchblox.com/security/data/cve/CVE-2026-23164.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: rocker: fix memory leak in rocker_world_port_pos... | 5.5 | 0.0018 | | | [CVE-2025-71194](https://patchblox.com/security/data/cve/CVE-2025-71194.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix deadlock in wait_current_trans() due... | 5.5 | 0.0018 | | | [CVE-2025-71118](https://patchblox.com/security/data/cve/CVE-2025-71118.md) | Routine | ACPICA: Avoid walking the Namespace if start_node is NULL | 5.5 | 0.0017 | | | [CVE-2026-23061](https://patchblox.com/security/data/cve/CVE-2026-23061.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: kvaser_usb_read_bulk_callback()... | 5.5 | 0.0017 | | | [CVE-2025-38232](https://patchblox.com/security/data/cve/CVE-2025-38232.md) | Routine | NFSD: fix race between nfsd registration and exports_proc | 4.7 | 0.0017 | | | [CVE-2025-71125](https://patchblox.com/security/data/cve/CVE-2025-71125.md) | Routine | tracing: Do not register unsupported perf events | 5.5 | 0.0016 | | | [CVE-2026-23108](https://patchblox.com/security/data/cve/CVE-2026-23108.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: can: usb_8dev: usb_8dev_read_bulk_callback(): fi... | 5.5 | 0.0015 | | | [CVE-2026-23084](https://patchblox.com/security/data/cve/CVE-2026-23084.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: be2net: Fix NULL pointer dereference in be_cmd_g... | 5.5 | 0.0015 | | | [CVE-2026-23087](https://patchblox.com/security/data/cve/CVE-2026-23087.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: xen: scsiback: Fix potential memory leak i... | 5.5 | 0.0015 | | | [CVE-2025-71077](https://patchblox.com/security/data/cve/CVE-2025-71077.md) | Routine | tpm: Cap the number of PCR banks | 6.1 | 0.0015 | | | [CVE-2025-71108](https://patchblox.com/security/data/cve/CVE-2025-71108.md) | Routine | usb: typec: ucsi: Handle incorrect num_connectors capability | 5.5 | 0.0015 | | | [CVE-2026-23085](https://patchblox.com/security/data/cve/CVE-2026-23085.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Avoid truncating memory addr... | 5.5 | 0.0015 | | | [CVE-2026-23091](https://patchblox.com/security/data/cve/CVE-2026-23091.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: intel_th: fix device leak on output open() Make... | 5.5 | 0.0015 | | | [CVE-2026-23133](https://patchblox.com/security/data/cve/CVE-2026-23133.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: fix dma_free_coherent() pointer d... | 5.5 | 0.0014 | | | [CVE-2026-23145](https://patchblox.com/security/data/cve/CVE-2026-23145.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix iloc.bh leak in ext4_xattr_inode_updat... | 5.5 | 0.0014 | | | [CVE-2026-22988](https://patchblox.com/security/data/cve/CVE-2026-22988.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: arp: do not assume dev_hard_header() does not ch... | 5.5 | 0.0014 | | | [CVE-2025-71154](https://patchblox.com/security/data/cve/CVE-2025-71154.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix memory leak on usb_submit... | 5.5 | 0.0014 | | | [CVE-2025-71097](https://patchblox.com/security/data/cve/CVE-2025-71097.md) | Routine | ipv4: Fix reference count leak when using error routes with nexthop objects | 6.5 | 0.0014 | | | [CVE-2026-22978](https://patchblox.com/security/data/cve/CVE-2026-22978.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: avoid kernel-infoleak from struct iw_point... | 5.5 | 0.0014 | | | [CVE-2026-23071](https://patchblox.com/security/data/cve/CVE-2026-23071.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: regmap: Fix race condition in hwspinlock irqsave... | 5.5 | 0.0014 | | | [CVE-2025-71083](https://patchblox.com/security/data/cve/CVE-2025-71083.md) | Routine | drm/ttm: Avoid NULL pointer deref for evicted BOs | 5.5 | 0.0014 | | | [CVE-2025-71084](https://patchblox.com/security/data/cve/CVE-2025-71084.md) | Routine | RDMA/cm: Fix leaking the multicast GID table reference | 5.5 | 0.0014 | | | [CVE-2025-71094](https://patchblox.com/security/data/cve/CVE-2025-71094.md) | Routine | net: usb: asix: validate PHY address before use | 5.5 | 0.0014 | | | [CVE-2025-71182](https://patchblox.com/security/data/cve/CVE-2025-71182.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: can: j1939: make j1939_session_activate() fail i... | 5.5 | 0.0014 | | | [CVE-2026-23020](https://patchblox.com/security/data/cve/CVE-2026-23020.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: 3com: 3c59x: fix possible null dereference... | 5.5 | 0.0014 | | | [CVE-2026-23119](https://patchblox.com/security/data/cve/CVE-2026-23119.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bonding: provide a net pointer to __skb_flow_dis... | 5.5 | 0.0013 | | | [CVE-2026-23125](https://patchblox.com/security/data/cve/CVE-2026-23125.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP... | 5.5 | 0.0013 | | | [CVE-2026-23146](https://patchblox.com/security/data/cve/CVE-2026-23146.md) | Routine | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: c... | 5.5 | 0.0013 | | | [CVE-2025-71104](https://patchblox.com/security/data/cve/CVE-2025-71104.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix VM hard lockup after prolonged ina... | 5.5 | 0.0011 | | | [CVE-2026-23101](https://patchblox.com/security/data/cve/CVE-2026-23101.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: leds: led-class: Only Add LED to leds_list when... | 4.7 | 0.0011 | | | [CVE-2026-23121](https://patchblox.com/security/data/cve/CVE-2026-23121.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mISDN: annotate data-race around dev->work dev-... | 5.5 | 0.0011 | | | [CVE-2025-71111](https://patchblox.com/security/data/cve/CVE-2025-71111.md) | Routine | hwmon: (w83791d) Convert macros to functions to avoid TOCTOU | 6.3 | 0.0011 | | | [CVE-2026-23124](https://patchblox.com/security/data/cve/CVE-2026-23124.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: annotate data-race in ndisc_router_discove... | 5.9 | 0.0011 | | | [CVE-2026-23120](https://patchblox.com/security/data/cve/CVE-2026-23120.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: l2tp: avoid one data-race in l2tp_tunnel_del_wor... | 5.8 | 0.0011 | | | [CVE-2026-23202](https://patchblox.com/security/data/cve/CVE-2026-23202.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu... | 5.5 | 0.0010 | | --- Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.