{ "fix": "ELSA-2026-50372", "url": "https://patchblox.com/security/fix/linux/elsa-2026-50372", "summary": "ELSA-2026-50372, released July 2, 2026, fixes 679 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 35 packages", "released": "2026-07-02T00:00:00Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-43407, rated Critical", "supported": true, "cveCount": 679, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.04576, "maxCvss": 9.8, "vendorAdvisory": "https://linux.oracle.com/errata/ELSA-2026-50372.html", "appliesTo": [ { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-debug-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-doc", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek-tools", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-devel", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-core", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-deprecated", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-desktop", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-extra-netfilter", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-usb", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true }, { "product": "kernel-uek64k-modules-wireless", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-204.92.4.2.el9uek", "supported": true } ], "cves": [ { "cveId": "CVE-2026-43407", "url": "https://patchblox.com/security/cve/CVE-2026-43407", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in c...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00656, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43186", "url": "https://patchblox.com/security/cve/CVE-2026-43186", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix heap buffer overflow in __ioam6_...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00642, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43304", "url": "https://patchblox.com/security/cve/CVE-2026-43304", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN Wh...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00613, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43406", "url": "https://patchblox.com/security/cve/CVE-2026-43406", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads i...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00613, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31405", "url": "https://patchblox.com/security/cve/CVE-2026-31405", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.0056, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43383", "url": "https://patchblox.com/security/cve/CVE-2026-43383", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-t...", "priority": "Urgent", "severity": "critical", "cvss": 9.4, "epss": 0.00541, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45898", "url": "https://patchblox.com/security/cve/CVE-2026-45898", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix workqueue list corruption by remo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00529, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43341", "url": "https://patchblox.com/security/cve/CVE-2026-43341", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/ipv6: ioam6: prevent schema length wraparoun...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43071", "url": "https://patchblox.com/security/cve/CVE-2026-43071", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dcache: Limit the minimal number of bucket to tw...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00459, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43117", "url": "https://patchblox.com/security/cve/CVE-2026-43117", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00458, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31436", "url": "https://patchblox.com/security/cve/CVE-2026-31436", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45988", "url": "https://patchblox.com/security/cve/CVE-2026-45988", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix re-decryption of RESPONSE packets If...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45972", "url": "https://patchblox.com/security/cve/CVE-2026-45972", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential UAF and double free i...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23395", "url": "https://patchblox.com/security/cve/CVE-2026-23395", "title": "Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ", "priority": "Urgent", "severity": "Critical", "cvss": 9.1, "epss": 0.00273, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71305", "url": "https://patchblox.com/security/cve/CVE-2025-71305", "title": "drm/display/dp_mst: Add protection against 0 vcpi", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45899", "url": "https://patchblox.com/security/cve/CVE-2026-45899", "title": "ext4: drop extent cache when splitting extent fails", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46242", "url": "https://patchblox.com/security/cve/CVE-2026-46242", "title": "kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.04576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43503", "url": "https://patchblox.com/security/cve/CVE-2026-43503", "title": "net: skbuff: propagate shared-frag marker through frag-transfer helpers", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.01987, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23455", "url": "https://patchblox.com/security/cve/CVE-2026-23455", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: nf_conntrack_h323: check for zero leng...", "priority": "High", "severity": "moderate", "cvss": 9.1, "epss": 0.01587, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53359", "url": "https://patchblox.com/security/cve/CVE-2026-53359", "title": "kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.01368, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45860", "url": "https://patchblox.com/security/cve/CVE-2026-45860", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: increase the connection...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43501", "url": "https://patchblox.com/security/cve/CVE-2026-43501", "title": "ipv6: rpl: reserve mac_len headroom when recompressed SRH grows", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00732, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45859", "url": "https://patchblox.com/security/cve/CVE-2026-45859", "title": "netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00712, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43493", "url": "https://patchblox.com/security/cve/CVE-2026-43493", "title": "crypto: pcrypt - Fix handling of MAY_BACKLOG requests", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00681, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46331", "url": "https://patchblox.com/security/cve/CVE-2026-46331", "title": "net/sched: fix pedit partial COW leading to page cache corruption", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00639, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31682", "url": "https://patchblox.com/security/cve/CVE-2026-31682", "title": "bridge: br_nd_send: linearize skb before parsing ND options", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00638, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43405", "url": "https://patchblox.com/security/cve/CVE-2026-43405", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: Use u32 for non-negative values in ceph...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00598, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43441", "url": "https://patchblox.com/security/cve/CVE-2026-43441", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: bonding: Fix nd_tbl NULL dereference when I...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00585, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31563", "url": "https://patchblox.com/security/cve/CVE-2026-31563", "title": "net: macb: Use dev_consume_skb_any() to free TX SKBs", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00564, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46102", "url": "https://patchblox.com/security/cve/CVE-2026-46102", "title": "net: strparser: fix skb_head leak in strp_abort_strp()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00564, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31414", "url": "https://patchblox.com/security/cve/CVE-2026-31414", "title": "netfilter: nf_conntrack_expect: use expect-\u003Ehelper", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00559, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23456", "url": "https://patchblox.com/security/cve/CVE-2026-23456", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: fix OOB read in de...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00543, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43452", "url": "https://patchblox.com/security/cve/CVE-2026-43452", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers agains...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00541, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43125", "url": "https://patchblox.com/security/cve/CVE-2026-43125", "title": "dlm: validate length in dlm_search_rsb_tree", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00538, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43194", "url": "https://patchblox.com/security/cve/CVE-2026-43194", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: consume xmit errors of GSO frames udpgro_f...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00533, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46043", "url": "https://patchblox.com/security/cve/CVE-2026-46043", "title": "RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46037", "url": "https://patchblox.com/security/cve/CVE-2026-46037", "title": "ipv4: icmp: validate reply type before using icmp_pointers", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43365", "url": "https://patchblox.com/security/cve/CVE-2026-43365", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00506, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31552", "url": "https://patchblox.com/security/cve/CVE-2026-31552", "title": "wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43099", "url": "https://patchblox.com/security/cve/CVE-2026-43099", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: fix null-ptr-deref in icmp_build_pro...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46052", "url": "https://patchblox.com/security/cve/CVE-2026-46052", "title": "ceph: only d_add() negative dentries when they are unhashed", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31448", "url": "https://patchblox.com/security/cve/CVE-2026-31448", "title": "ext4: avoid infinite loops caused by residual data", "priority": "High", "severity": "Important", "cvss": 9.4, "epss": 0.00499, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46024", "url": "https://patchblox.com/security/cve/CVE-2026-46024", "title": "libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31685", "url": "https://patchblox.com/security/cve/CVE-2026-31685", "title": "netfilter: ip6t_eui64: reject invalid MAC header for all packets", "priority": "High", "severity": "Moderate", "cvss": 9.4, "epss": 0.00485, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31676", "url": "https://patchblox.com/security/cve/CVE-2026-31676", "title": "rxrpc: only handle RESPONSE during service challenge", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00471, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43158", "url": "https://patchblox.com/security/cve/CVE-2026-43158", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43187", "url": "https://patchblox.com/security/cve/CVE-2026-43187", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfs: delete attr leaf freemap entries when empty...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43190", "url": "https://patchblox.com/security/cve/CVE-2026-43190", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: xt_tcpmss: check remaining length befo...", "priority": "High", "severity": "moderate", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43233", "url": "https://patchblox.com/security/cve/CVE-2026-43233", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31649", "url": "https://patchblox.com/security/cve/CVE-2026-31649", "title": "net: stmmac: fix integer underflow in chain mode", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00459, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31557", "url": "https://patchblox.com/security/cve/CVE-2026-31557", "title": "nvmet: move async event work off nvmet-wq", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00451, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23457", "url": "https://patchblox.com/security/cve/CVE-2026-23457", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix Content-Length...", "priority": "High", "severity": "high", "cvss": 8.6, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31668", "url": "https://patchblox.com/security/cve/CVE-2026-31668", "title": "seg6: separate dst_cache for input and output paths in seg6 lwtunnel", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31638", "url": "https://patchblox.com/security/cve/CVE-2026-31638", "title": "rxrpc: Only put the call ref if one was acquired", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46085", "url": "https://patchblox.com/security/cve/CVE-2026-46085", "title": "rxrpc: Fix rxkad crypto unalignment handling", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43057", "url": "https://patchblox.com/security/cve/CVE-2026-43057", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_C...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00437, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31598", "url": "https://patchblox.com/security/cve/CVE-2026-31598", "title": "ocfs2: fix possible deadlock between unlink and dio_end_io_write", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00435, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43336", "url": "https://patchblox.com/security/cve/CVE-2026-43336", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permuted_state befor...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31659", "url": "https://patchblox.com/security/cve/CVE-2026-31659", "title": "batman-adv: reject oversized global TT response buffers", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00421, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43199", "url": "https://patchblox.com/security/cve/CVE-2026-43199", "title": "net/mlx5e: Fix \u0022scheduling while atomic\u0022 in IPsec MAC address query", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46243", "url": "https://patchblox.com/security/cve/CVE-2026-46243", "title": "smb: client: reject userspace cifs.spnego descriptions", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00413, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31450", "url": "https://patchblox.com/security/cve/CVE-2026-31450", "title": "ext4: publish jinode after initialization", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43466", "url": "https://patchblox.com/security/cve/CVE-2026-43466", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ r...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00412, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43469", "url": "https://patchblox.com/security/cve/CVE-2026-43469", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decrement re_receiving on the early ex...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31662", "url": "https://patchblox.com/security/cve/CVE-2026-31662", "title": "tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00389, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31467", "url": "https://patchblox.com/security/cve/CVE-2026-31467", "title": "erofs: add GFP_NOIO in the bio completion if needed", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00378, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43139", "url": "https://patchblox.com/security/cve/CVE-2026-43139", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6_get_sadd...", "priority": "High", "severity": "high", "cvss": 8.6, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43114", "url": "https://patchblox.com/security/cve/CVE-2026-43114", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: k...", "priority": "High", "severity": "Important", "cvss": 9.4, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43253", "url": "https://patchblox.com/security/cve/CVE-2026-43253", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move wait_on_sem() out of spinlock W...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43112", "url": "https://patchblox.com/security/cve/CVE-2026-43112", "title": "kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00352, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31708", "url": "https://patchblox.com/security/cve/CVE-2026-31708", "title": "smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00352, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31709", "url": "https://patchblox.com/security/cve/CVE-2026-31709", "title": "smb: client: validate the whole DACL before rewriting it in cifsacl", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00345, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43350", "url": "https://patchblox.com/security/cve/CVE-2026-43350", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: require a full NFS mode SID before...", "priority": "High", "severity": "high", "cvss": 7.6, "epss": 0.00324, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31408", "url": "https://patchblox.com/security/cve/CVE-2026-31408", "title": "Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00322, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43215", "url": "https://patchblox.com/security/cve/CVE-2026-43215", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: Fix locking usage for tcon fields We used...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0032, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31607", "url": "https://patchblox.com/security/cve/CVE-2026-31607", "title": "usbip: validate number_of_packets in usbip_pack_ret_submit()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00311, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43239", "url": "https://patchblox.com/security/cve/CVE-2026-43239", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: prevent races in -\u003Equery_interfaces...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23246", "url": "https://patchblox.com/security/cve/CVE-2026-23246", "title": "wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00288, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46099", "url": "https://patchblox.com/security/cve/CVE-2026-46099", "title": "net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00288, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31694", "url": "https://patchblox.com/security/cve/CVE-2026-31694", "title": "fuse: reject oversized dirents in page cache", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00284, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46056", "url": "https://patchblox.com/security/cve/CVE-2026-46056", "title": "Bluetooth: hci_event: fix potential UAF in SSP passkey handlers", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00282, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31773", "url": "https://patchblox.com/security/cve/CVE-2026-31773", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK auth...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00279, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43334", "url": "https://patchblox.com/security/cve/CVE-2026-43334", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: SMP: force responder MITM requirements...", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23462", "url": "https://patchblox.com/security/cve/CVE-2026-23462", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00276, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31779", "url": "https://patchblox.com/security/cve/CVE-2026-31779", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential out-of-bounds...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00272, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43110", "url": "https://patchblox.com/security/cve/CVE-2026-43110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF ev...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0027, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31393", "url": "https://patchblox.com/security/cve/CVE-2026-31393", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payloa...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00268, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31570", "url": "https://patchblox.com/security/cve/CVE-2026-31570", "title": "can: gw: fix OOB heap access in cgw_csum_crc8_rel()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43362", "url": "https://patchblox.com/security/cve/CVE-2026-43362", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00258, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43018", "url": "https://patchblox.com/security/cve/CVE-2026-43018", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in hci_l...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43051", "url": "https://patchblox.com/security/cve/CVE-2026-43051", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intu...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43038", "url": "https://patchblox.com/security/cve/CVE-2026-43038", "title": "kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00255, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31513", "url": "https://patchblox.com/security/cve/CVE-2026-31513", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix stack-out-of-bounds read i...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00253, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43113", "url": "https://patchblox.com/security/cve/CVE-2026-43113", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: validate packet IDs before indexin...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00244, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23461", "url": "https://patchblox.com/security/cve/CVE-2026-23461", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00239, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43062", "url": "https://patchblox.com/security/cve/CVE-2026-43062", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix type confusion in l2cap_ec...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31554", "url": "https://patchblox.com/security/cve/CVE-2026-31554", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: f...", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45878", "url": "https://patchblox.com/security/cve/CVE-2026-45878", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-21709", "url": "https://patchblox.com/security/cve/CVE-2025-21709", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: kernel: be more careful about dup_mmap() failure...", "priority": "High", "severity": "medium", "cvss": 7.1, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45852", "url": "https://patchblox.com/security/cve/CVE-2026-45852", "title": "kernel-uek-modules: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00199, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31786", "url": "https://patchblox.com/security/cve/CVE-2026-31786", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nBuffer overflow in drivers/xen/sys-hypervisor.c\nT...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45933", "url": "https://patchblox.com/security/cve/CVE-2026-45933", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve id of register in sync_linked_regs...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31588", "url": "https://patchblox.com/security/cve/CVE-2026-31588", "title": "KVM: x86: Use scratch field in MMIO fragment to hold small write values", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31788", "url": "https://patchblox.com/security/cve/CVE-2026-31788", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: restrict usage in unprivileged domU...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00192, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43456", "url": "https://patchblox.com/security/cve/CVE-2026-43456", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:\n\nThe following security issues we...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00188, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45856", "url": "https://patchblox.com/security/cve/CVE-2026-45856", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Validate wqe_size before using it i...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45861", "url": "https://patchblox.com/security/cve/CVE-2026-45861", "title": "gfs2: Fix slab-use-after-free in qd_put", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45984", "url": "https://patchblox.com/security/cve/CVE-2026-45984", "title": "kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23274", "url": "https://patchblox.com/security/cve/CVE-2026-23274", "title": "netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31787", "url": "https://patchblox.com/security/cve/CVE-2026-31787", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nxen/privcmd: fix double free via VMA splitting\npr...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38584", "url": "https://patchblox.com/security/cve/CVE-2025-38584", "title": "padata: Fix pd UAF once and for all", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31407", "url": "https://patchblox.com/security/cve/CVE-2026-31407", "title": "netfilter: conntrack: add missing netlink policy validations", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43329", "url": "https://patchblox.com/security/cve/CVE-2026-43329", "title": "kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43153", "url": "https://patchblox.com/security/cve/CVE-2026-43153", "title": "xfs: remove xfs_attr_leaf_hasname", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23383", "url": "https://patchblox.com/security/cve/CVE-2026-23383", "title": "bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31693", "url": "https://patchblox.com/security/cve/CVE-2026-31693", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31674", "url": "https://patchblox.com/security/cve/CVE-2026-31674", "title": "netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23392", "url": "https://patchblox.com/security/cve/CVE-2026-23392", "title": "netfilter: nf_tables: release flowtable after rcu grace period on error", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31532", "url": "https://patchblox.com/security/cve/CVE-2026-31532", "title": "can: raw: fix ro-\u003Euniq use-after-free in raw_rcv()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43059", "url": "https://patchblox.com/security/cve/CVE-2026-43059", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix list corruption and UAF in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43248", "url": "https://patchblox.com/security/cve/CVE-2026-43248", "title": "vhost: move vdpa group bound check to vhost_vdpa", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31505", "url": "https://patchblox.com/security/cve/CVE-2026-31505", "title": "iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31675", "url": "https://patchblox.com/security/cve/CVE-2026-31675", "title": "net/sched: sch_netem: fix out-of-bounds access in packet corruption", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31680", "url": "https://patchblox.com/security/cve/CVE-2026-31680", "title": "net: ipv6: flowlabel: defer exclusive option free until RCU teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43126", "url": "https://patchblox.com/security/cve/CVE-2026-43126", "title": "ALSA: mixer: oss: Add card disconnect checkpoints", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45853", "url": "https://patchblox.com/security/cve/CVE-2026-45853", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Use kvfree instead of kfree in amdgp...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45916", "url": "https://patchblox.com/security/cve/CVE-2026-45916", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: sbs-battery: Fix use-after-free i...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45851", "url": "https://patchblox.com/security/cve/CVE-2026-45851", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: efi: Fix reservation of unaccepted memory table...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43368", "url": "https://patchblox.com/security/cve/CVE-2026-43368", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ndrm/i915: Fix potential overflow of shmem scatter...", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31506", "url": "https://patchblox.com/security/cve/CVE-2026-31506", "title": "net: bcmasp: fix double free of WoL irq", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31525", "url": "https://patchblox.com/security/cve/CVE-2026-31525", "title": "bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43332", "url": "https://patchblox.com/security/cve/CVE-2026-43332", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43408", "url": "https://patchblox.com/security/cve/CVE-2026-43408", "title": "kernel-rt-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31406", "url": "https://patchblox.com/security/cve/CVE-2026-31406", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix work re-schedule after cancel in xfrm_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23413", "url": "https://patchblox.com/security/cve/CVE-2026-23413", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: clsact: Fix use-after-free in init/destroy rollb...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31679", "url": "https://patchblox.com/security/cve/CVE-2026-31679", "title": "openvswitch: validate MPLS set/set_masked payload length", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45886", "url": "https://patchblox.com/security/cve/CVE-2026-45886", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_xdp_store_bytes proto for read-only...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45892", "url": "https://patchblox.com/security/cve/CVE-2026-45892", "title": "ext4: drop extent cache after doing PARTIAL_VALID1 zeroout", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45962", "url": "https://patchblox.com/security/cve/CVE-2026-45962", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ublk: Validate SQE128 flag before accessing the...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31530", "url": "https://patchblox.com/security/cve/CVE-2026-31530", "title": "cxl/port: Fix use after free of parent_port in cxl_detach_ep()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43374", "url": "https://patchblox.com/security/cve/CVE-2026-43374", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix percpu use-after-free in remov...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43437", "url": "https://patchblox.com/security/cve/CVE-2026-43437", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: fix use-after-free on linked stream r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45943", "url": "https://patchblox.com/security/cve/CVE-2026-45943", "title": "erofs: fix inline data read failure for ztailpacking pclusters", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43339", "url": "https://patchblox.com/security/cve/CVE-2026-43339", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv6: prevent possible UaF in addrconf_permanent_...", "priority": "High", "severity": "moderate", "cvss": 8.1, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23412", "url": "https://patchblox.com/security/cve/CVE-2026-23412", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: defer hook memory release until...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43049", "url": "https://patchblox.com/security/cve/CVE-2026-43049", "title": "HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43491", "url": "https://patchblox.com/security/cve/CVE-2026-43491", "title": "net: qrtr: ns: Limit the maximum server registration per node", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39979", "url": "https://patchblox.com/security/cve/CVE-2025-39979", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fs, fix UAF in flow counter release F...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31449", "url": "https://patchblox.com/security/cve/CVE-2026-31449", "title": "ext4: validate p_idx bounds in ext4_ext_correct_indexes", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43459", "url": "https://patchblox.com/security/cve/CVE-2026-43459", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: flush delayed work before removi...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45920", "url": "https://patchblox.com/security/cve/CVE-2026-45920", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix dirtyclusters double decrement on fs s...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23253", "url": "https://patchblox.com/security/cve/CVE-2026-23253", "title": "media: dvb-core: fix wrong reinitialization of ringbuffer on reopen", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68736", "url": "https://patchblox.com/security/cve/CVE-2025-68736", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: landlock: Fix handling of disconnected directori...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71152", "url": "https://patchblox.com/security/cve/CVE-2025-71152", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: dsa: properly keep track of conduit referen...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31426", "url": "https://patchblox.com/security/cve/CVE-2026-31426", "title": "ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31447", "url": "https://patchblox.com/security/cve/CVE-2026-31447", "title": "ext4: reject mount if bigalloc with s_first_data_block != 0", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46006", "url": "https://patchblox.com/security/cve/CVE-2026-46006", "title": "drm/nouveau: fix u32 overflow in pushbuf reloc bounds check", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31772", "url": "https://patchblox.com/security/cve/CVE-2026-31772", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix stack buffer overflow i...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46069", "url": "https://patchblox.com/security/cve/CVE-2026-46069", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46021", "url": "https://patchblox.com/security/cve/CVE-2026-46021", "title": "thermal: core: Fix thermal zone governor cleanup issues", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46076", "url": "https://patchblox.com/security/cve/CVE-2026-46076", "title": "KVM: nSVM: Raise #UD if unhandled VMMCALL isn\u0027t intercepted by L1", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23444", "url": "https://patchblox.com/security/cve/CVE-2026-23444", "title": "wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23343", "url": "https://patchblox.com/security/cve/CVE-2026-23343", "title": "xdp: produce a warning when calculated tailroom is negative", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23359", "url": "https://patchblox.com/security/cve/CVE-2026-23359", "title": "bpf: Fix stack-out-of-bounds write in devmap", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31488", "url": "https://patchblox.com/security/cve/CVE-2026-31488", "title": "drm/amd/display: Do not skip unrelated mode changes in DSC validation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43128", "url": "https://patchblox.com/security/cve/CVE-2026-43128", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix double dma_buf_unpin in failure p...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23245", "url": "https://patchblox.com/security/cve/CVE-2026-23245", "title": "net/sched: act_gate: snapshot parameters with RCU on replace", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23317", "url": "https://patchblox.com/security/cve/CVE-2026-23317", "title": "drm/vmwgfx: Return the correct value in vmw_translate_ptr functions", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31446", "url": "https://patchblox.com/security/cve/CVE-2026-31446", "title": "ext4: fix use-after-free in update_super_work when racing with umount", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43150", "url": "https://patchblox.com/security/cve/CVE-2026-43150", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/arm-cmn: Reject unsupported hardware config...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43206", "url": "https://patchblox.com/security/cve/CVE-2026-43206", "title": "kernel-zfcpdump-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: m...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23318", "url": "https://patchblox.com/security/cve/CVE-2026-23318", "title": "ALSA: usb-audio: Use correct version for UAC3 header validation", "priority": "High", "severity": "Important", "cvss": 7.7, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23336", "url": "https://patchblox.com/security/cve/CVE-2026-23336", "title": "wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43260", "url": "https://patchblox.com/security/cve/CVE-2026-43260", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix RSS context delete logic We need t...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23449", "url": "https://patchblox.com/security/cve/CVE-2026-23449", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23458", "url": "https://patchblox.com/security/cve/CVE-2026-23458", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45998", "url": "https://patchblox.com/security/cve/CVE-2026-45998", "title": "rxrpc: Fix potential UAF after skb_unshare() failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23319", "url": "https://patchblox.com/security/cve/CVE-2026-23319", "title": "bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23390", "url": "https://patchblox.com/security/cve/CVE-2026-23390", "title": "tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46033", "url": "https://patchblox.com/security/cve/CVE-2026-46033", "title": "crypto: authencesn - reject short ahash digests during instance creation", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46080", "url": "https://patchblox.com/security/cve/CVE-2026-46080", "title": "ocfs2: split transactions in dio completion to avoid credit exhaustion", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46015", "url": "https://patchblox.com/security/cve/CVE-2026-46015", "title": "tcp: call sk_data_ready() after listener migration", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31452", "url": "https://patchblox.com/security/cve/CVE-2026-31452", "title": "ext4: convert inline data to extents when truncate exceeds inline size", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31469", "url": "https://patchblox.com/security/cve/CVE-2026-31469", "title": "virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31494", "url": "https://patchblox.com/security/cve/CVE-2026-31494", "title": "net: macb: use the current queue number for stats", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31696", "url": "https://patchblox.com/security/cve/CVE-2026-31696", "title": "rxrpc: Fix missing validation of ticket length in non-XDR key preparsing", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43030", "url": "https://patchblox.com/security/cve/CVE-2026-43030", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix regsafe() for pointers to packet In ca...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43093", "url": "https://patchblox.com/security/cve/CVE-2026-43093", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23351", "url": "https://patchblox.com/security/cve/CVE-2026-23351", "title": "netfilter: nft_set_pipapo: split gc into unlink and reclaim phase", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23354", "url": "https://patchblox.com/security/cve/CVE-2026-23354", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/fred: Correct speculative safety in fred_ext...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23442", "url": "https://patchblox.com/security/cve/CVE-2026-23442", "title": "ipv6: add NULL checks for idev in SRv6 paths", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23447", "url": "https://patchblox.com/security/cve/CVE-2026-23447", "title": "net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23448", "url": "https://patchblox.com/security/cve/CVE-2026-23448", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc_ncm: add ndpoffset to NDP16 nframe...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23293", "url": "https://patchblox.com/security/cve/CVE-2026-23293", "title": "net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23300", "url": "https://patchblox.com/security/cve/CVE-2026-23300", "title": "net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23335", "url": "https://patchblox.com/security/cve/CVE-2026-23335", "title": "RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23352", "url": "https://patchblox.com/security/cve/CVE-2026-23352", "title": "x86/efi: defer freeing of boot services memory", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43133", "url": "https://patchblox.com/security/cve/CVE-2026-43133", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nKVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emu...", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23281", "url": "https://patchblox.com/security/cve/CVE-2026-23281", "title": "wifi: libertas: fix use-after-free in lbs_free_adapter()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46023", "url": "https://patchblox.com/security/cve/CVE-2026-46023", "title": "dm mirror: fix integer overflow in create_dirty_log()", "priority": "High", "severity": "Low", "cvss": 7, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31678", "url": "https://patchblox.com/security/cve/CVE-2026-31678", "title": "openvswitch: defer tunnel netdev_put to RCU release", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43450", "url": "https://patchblox.com/security/cve/CVE-2026-43450", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: f...", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31586", "url": "https://patchblox.com/security/cve/CVE-2026-31586", "title": "mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43178", "url": "https://patchblox.com/security/cve/CVE-2026-43178", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mmput() in do_procma...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31697", "url": "https://patchblox.com/security/cve/CVE-2026-31697", "title": "crypto: ccp: Don\u0027t attempt to copy ID to userspace if PSP command failed", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31698", "url": "https://patchblox.com/security/cve/CVE-2026-31698", "title": "crypto: ccp: Don\u0027t attempt to copy PDH cert to userspace if PSP command failed", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31699", "url": "https://patchblox.com/security/cve/CVE-2026-31699", "title": "crypto: ccp: Don\u0027t attempt to copy CSR to userspace if PSP command failed", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43028", "url": "https://patchblox.com/security/cve/CVE-2026-43028", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-termin...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43427", "url": "https://patchblox.com/security/cve/CVE-2026-43427", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in rea...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46078", "url": "https://patchblox.com/security/cve/CVE-2026-46078", "title": "erofs: fix the out-of-bounds nameoff handling for trailing dirents", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45894", "url": "https://patchblox.com/security/cve/CVE-2026-45894", "title": "iommu/vt-d: Clear Present bit before tearing down PASID entry", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23391", "url": "https://patchblox.com/security/cve/CVE-2026-23391", "title": "netfilter: xt_CT: drop pending enqueued packets on template removal", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31403", "url": "https://patchblox.com/security/cve/CVE-2026-31403", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31580", "url": "https://patchblox.com/security/cve/CVE-2026-31580", "title": "bcache: fix cached_dev.sb_bio use-after-free and crash", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31583", "url": "https://patchblox.com/security/cve/CVE-2026-31583", "title": "media: em28xx: fix use-after-free in em28xx_v4l2_open()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31602", "url": "https://patchblox.com/security/cve/CVE-2026-31602", "title": "ALSA: ctxfi: Limit PTP to a single page", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43027", "url": "https://patchblox.com/security/cve/CVE-2026-43027", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to e...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43076", "url": "https://patchblox.com/security/cve/CVE-2026-43076", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate inline data i_size during inode...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45862", "url": "https://patchblox.com/security/cve/CVE-2026-45862", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before u...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23315", "url": "https://patchblox.com/security/cve/CVE-2026-23315", "title": "wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23306", "url": "https://patchblox.com/security/cve/CVE-2026-23306", "title": "scsi: pm8001: Fix use-after-free in pm8001_queue_command()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31453", "url": "https://patchblox.com/security/cve/CVE-2026-31453", "title": "xfs: avoid dereferencing log items after push callbacks", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31673", "url": "https://patchblox.com/security/cve/CVE-2026-31673", "title": "af_unix: read UNIX_DIAG_VFS data under unix_state_lock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43091", "url": "https://patchblox.com/security/cve/CVE-2026-43091", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns e...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23367", "url": "https://patchblox.com/security/cve/CVE-2026-23367", "title": "wifi: radiotap: reject radiotap with unknown bits", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31479", "url": "https://patchblox.com/security/cve/CVE-2026-31479", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ndrm/xe: always keep track of remap prev/next\nDuri...", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43403", "url": "https://patchblox.com/security/cve/CVE-2026-43403", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nsfs: tighten permission checks for ns iteration...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31489", "url": "https://patchblox.com/security/cve/CVE-2026-31489", "title": "spi: meson-spicc: Fix double-put in remove path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31511", "url": "https://patchblox.com/security/cve/CVE-2026-31511", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmt_ad...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31527", "url": "https://patchblox.com/security/cve/CVE-2026-31527", "title": "driver core: platform: use generic driver_override infrastructure", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31528", "url": "https://patchblox.com/security/cve/CVE-2026-31528", "title": "perf: Make sure to use pmu_ctx-\u003Epmu for groups", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31729", "url": "https://patchblox.com/security/cve/CVE-2026-31729", "title": "usb: typec: ucsi: validate connector number in ucsi_notify_common()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31759", "url": "https://patchblox.com/security/cve/CVE-2026-31759", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_inte...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43020", "url": "https://patchblox.com/security/cve/CVE-2026-43020", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43328", "url": "https://patchblox.com/security/cve/CVE-2026-43328", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: fix double free in cpufreq_db...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46004", "url": "https://patchblox.com/security/cve/CVE-2026-46004", "title": "ALSA: caiaq: Handle probe errors properly", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46084", "url": "https://patchblox.com/security/cve/CVE-2026-46084", "title": "RDMA/mana_ib: Disable RX steering on RSS QP destroy", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46086", "url": "https://patchblox.com/security/cve/CVE-2026-46086", "title": "net: bridge: use a stable FDB dst snapshot in RCU readers", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31518", "url": "https://patchblox.com/security/cve/CVE-2026-31518", "title": "esp: fix skb leak with espintcp and async crypto", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31624", "url": "https://patchblox.com/security/cve/CVE-2026-31624", "title": "HID: core: clamp report_size in s32ton() to avoid undefined shift", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43040", "url": "https://patchblox.com/security/cve/CVE-2026-43040", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: fix ndisc_ra_useropt to initia...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23454", "url": "https://patchblox.com/security/cve/CVE-2026-23454", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:\n\nThe following security issues we...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31515", "url": "https://patchblox.com/security/cve/CVE-2026-31515", "title": "af_key: validate families in pfkey_send_migrate()", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31521", "url": "https://patchblox.com/security/cve/CVE-2026-31521", "title": "module: Fix kernel panic when a symbol st_shndx is out of bounds", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31555", "url": "https://patchblox.com/security/cve/CVE-2026-31555", "title": "futex: Clear stale exiting pointer in futex_lock_pi() retry path", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31581", "url": "https://patchblox.com/security/cve/CVE-2026-31581", "title": "ALSA: 6fire: fix use-after-free on disconnect", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23262", "url": "https://patchblox.com/security/cve/CVE-2026-23262", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gve: Fix stats report corruption on queue count...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31578", "url": "https://patchblox.com/security/cve/CVE-2026-31578", "title": "media: as102: fix to not free memory after the device is registered in as102_usb_probe()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31597", "url": "https://patchblox.com/security/cve/CVE-2026-31597", "title": "ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46047", "url": "https://patchblox.com/security/cve/CVE-2026-46047", "title": "net: qrtr: ns: Fix use-after-free in driver remove()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43025", "url": "https://patchblox.com/security/cve/CVE-2026-43025", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: ignore explicit helper on...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23244", "url": "https://patchblox.com/security/cve/CVE-2026-23244", "title": "nvme: fix memory allocation in nvme_pr_read_keys()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46070", "url": "https://patchblox.com/security/cve/CVE-2026-46070", "title": "md/raid5: validate payload size before accessing journal metadata", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45942", "url": "https://patchblox.com/security/cve/CVE-2026-45942", "title": "ext4: fix e4b bitmap inconsistency reports", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31396", "url": "https://patchblox.com/security/cve/CVE-2026-31396", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: macb: fix use-after-free access to PTP cloc...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43366", "url": "https://patchblox.com/security/cve/CVE-2026-43366", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23289", "url": "https://patchblox.com/security/cve/CVE-2026-23289", "title": "IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23296", "url": "https://patchblox.com/security/cve/CVE-2026-23296", "title": "scsi: core: Fix refcount leak for tagset_refcnt", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23310", "url": "https://patchblox.com/security/cve/CVE-2026-23310", "title": "bpf/bonding: reject vlan\u002Bsrcmac xmit_hash_policy change when XDP is loaded", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23397", "url": "https://patchblox.com/security/cve/CVE-2026-23397", "title": "nfnetlink_osf: validate individual option lengths in fingerprints", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31566", "url": "https://patchblox.com/security/cve/CVE-2026-31566", "title": "drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45970", "url": "https://patchblox.com/security/cve/CVE-2026-45970", "title": "kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31454", "url": "https://patchblox.com/security/cve/CVE-2026-31454", "title": "xfs: save ailp before dropping the AIL lock in push callbacks", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31455", "url": "https://patchblox.com/security/cve/CVE-2026-31455", "title": "xfs: stop reclaim before pushing AIL during unmount", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31500", "url": "https://patchblox.com/security/cve/CVE-2026-31500", "title": "Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31758", "url": "https://patchblox.com/security/cve/CVE-2026-31758", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43015", "url": "https://patchblox.com/security/cve/CVE-2026-43015", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43016", "url": "https://patchblox.com/security/cve/CVE-2026-43016", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk-\u003Esk_socke...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43063", "url": "https://patchblox.com/security/cve/CVE-2026-43063", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfs: don\u0027t irele after failing to iget in xfs_at...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43075", "url": "https://patchblox.com/security/cve/CVE-2026-43075", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix out-of-bounds write in ocfs2_write_en...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45914", "url": "https://patchblox.com/security/cve/CVE-2026-45914", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Revert \u0022hwmon: (ibmpex) fix use-after-free in hi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31470", "url": "https://patchblox.com/security/cve/CVE-2026-31470", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31614", "url": "https://patchblox.com/security/cve/CVE-2026-31614", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31774", "url": "https://patchblox.com/security/cve/CVE-2026-31774", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix slab-out-of-bounds read in io_...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31778", "url": "https://patchblox.com/security/cve/CVE-2026-31778", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix stack out-of-bounds read in ini...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43449", "url": "https://patchblox.com/security/cve/CVE-2026-43449", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_s...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43453", "url": "https://patchblox.com/security/cve/CVE-2026-43453", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: fix stack out-of-boun...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45957", "url": "https://patchblox.com/security/cve/CVE-2026-45957", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: rcu: Fix rcu_read_unlock() deadloop due to softi...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45910", "url": "https://patchblox.com/security/cve/CVE-2026-45910", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: L...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31503", "url": "https://patchblox.com/security/cve/CVE-2026-31503", "title": "udp: Fix wildcard bind conflict check when using hash2", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43438", "url": "https://patchblox.com/security/cve/CVE-2026-43438", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Remove redundant css_put() in scx_cgr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46094", "url": "https://patchblox.com/security/cve/CVE-2026-46094", "title": "ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23374", "url": "https://patchblox.com/security/cve/CVE-2026-23374", "title": "blktrace: fix __this_cpu_read/write in preemptible context", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31389", "url": "https://patchblox.com/security/cve/CVE-2026-31389", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: spi: fix use-after-free on controller registrati...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23388", "url": "https://patchblox.com/security/cve/CVE-2026-23388", "title": "Squashfs: check metadata block offset is within range", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43370", "url": "https://patchblox.com/security/cve/CVE-2026-43370", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ndrm/amdgpu: Fix use-after-free race in VM acquire...", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43077", "url": "https://patchblox.com/security/cve/CVE-2026-43077", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...", "priority": "High", "severity": "medium", "cvss": 8.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31665", "url": "https://patchblox.com/security/cve/CVE-2026-31665", "title": "netfilter: nft_ct: fix use-after-free in timeout object destroy", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43120", "url": "https://patchblox.com/security/cve/CVE-2026-43120", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix double free related to rereg_use...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43279", "url": "https://patchblox.com/security/cve/CVE-2026-43279", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nALSA: usb-audio: Add sanity check for OOB writes...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23375", "url": "https://patchblox.com/security/cve/CVE-2026-23375", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nmm: thp: deny THP for files on anonymous inodes\nf...", "priority": "High", "severity": "moderate", "cvss": 7.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23386", "url": "https://patchblox.com/security/cve/CVE-2026-23386", "title": "gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31492", "url": "https://patchblox.com/security/cve/CVE-2026-31492", "title": "RDMA/irdma: Initialize free_qp completion before using it", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31512", "url": "https://patchblox.com/security/cve/CVE-2026-31512", "title": "Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31519", "url": "https://patchblox.com/security/cve/CVE-2026-31519", "title": "btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43052", "url": "https://patchblox.com/security/cve/CVE-2026-43052", "title": "wifi: mac80211: check tdls flag in ieee80211_tdls_oper", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45912", "url": "https://patchblox.com/security/cve/CVE-2026-45912", "title": "ext4: don\u0027t cache extent during splitting extent", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46091", "url": "https://patchblox.com/security/cve/CVE-2026-46091", "title": "media: rc: igorplugusb: heed coherency rules", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31498", "url": "https://patchblox.com/security/cve/CVE-2026-31498", "title": "Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45983", "url": "https://patchblox.com/security/cve/CVE-2026-45983", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: never defer requests during idmap lookup...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45985", "url": "https://patchblox.com/security/cve/CVE-2026-45985", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: don\u0027t set EXT4_GET_BLOCKS_CONVERT when spl...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46028", "url": "https://patchblox.com/security/cve/CVE-2026-46028", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - snapshot IV for async AEAD...", "priority": "High", "severity": "medium", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31593", "url": "https://patchblox.com/security/cve/CVE-2026-31593", "title": "KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31399", "url": "https://patchblox.com/security/cve/CVE-2026-31399", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/bus: Fix potential use after free in asyn...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43306", "url": "https://patchblox.com/security/cve/CVE-2026-43306", "title": "bpf: crypto: Use the correct destructor kfunc type", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31392", "url": "https://patchblox.com/security/cve/CVE-2026-31392", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix krb5 mount with username option...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31683", "url": "https://patchblox.com/security/cve/CVE-2026-31683", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: avoid OGM aggregation when skb tailr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43047", "url": "https://patchblox.com/security/cve/CVE-2026-43047", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report response...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43060", "url": "https://patchblox.com/security/cve/CVE-2026-43060", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: drop pending enqueued packets...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31416", "url": "https://patchblox.com/security/cve/CVE-2026-31416", "title": "netfilter: nfnetlink_log: account for netlink header size", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31418", "url": "https://patchblox.com/security/cve/CVE-2026-31418", "title": "netfilter: ipset: drop logically empty buckets in mtype_del", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31427", "url": "https://patchblox.com/security/cve/CVE-2026-31427", "title": "netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31648", "url": "https://patchblox.com/security/cve/CVE-2026-31648", "title": "mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31666", "url": "https://patchblox.com/security/cve/CVE-2026-31666", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect return value after changing...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31776", "url": "https://patchblox.com/security/cve/CVE-2026-31776", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix missing SPDIFI1 index handling...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31658", "url": "https://patchblox.com/security/cve/CVE-2026-31658", "title": "net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31487", "url": "https://patchblox.com/security/cve/CVE-2026-31487", "title": "spi: use generic driver_override infrastructure", "priority": "High", "severity": "Important", "cvss": 7, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43281", "url": "https://patchblox.com/security/cve/CVE-2026-43281", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43050", "url": "https://patchblox.com/security/cve/CVE-2026-43050", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix use-after-free in sock_def_readabl...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43056", "url": "https://patchblox.com/security/cve/CVE-2026-43056", "title": "kernel-default-base: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:\n\nThe following security issues we...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43134", "url": "https://patchblox.com/security/cve/CVE-2026-43134", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23340", "url": "https://patchblox.com/security/cve/CVE-2026-23340", "title": "net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31684", "url": "https://patchblox.com/security/cve/CVE-2026-31684", "title": "net: sched: act_csum: validate nested VLAN headers", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43278", "url": "https://patchblox.com/security/cve/CVE-2026-43278", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last c...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23271", "url": "https://patchblox.com/security/cve/CVE-2026-23271", "title": "perf: Fix __perf_event_overflow() vs perf_remove_from_context() race", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00111, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31700", "url": "https://patchblox.com/security/cve/CVE-2026-31700", "title": "net/packet: fix TOCTOU race on mmap\u0027d vnet_hdr in tpacket_snd()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00111, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43211", "url": "https://patchblox.com/security/cve/CVE-2026-43211", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_slot_trylock() error handling Comm...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43214", "url": "https://patchblox.com/security/cve/CVE-2026-43214", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Add SRCU protection for reading PDPTRs...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31508", "url": "https://patchblox.com/security/cve/CVE-2026-31508", "title": "net: openvswitch: Avoid releasing netdev before teardown completes", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31474", "url": "https://patchblox.com/security/cve/CVE-2026-31474", "title": "can: isotp: fix tx.buf use-after-free in isotp_sendmsg()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31761", "url": "https://patchblox.com/security/cve/CVE-2026-31761", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Move iio_device_register() t...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31516", "url": "https://patchblox.com/security/cve/CVE-2026-31516", "title": "xfrm: prevent policy_hthresh.work from racing with netns teardown", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31548", "url": "https://patchblox.com/security/cve/CVE-2026-31548", "title": "wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43019", "url": "https://patchblox.com/security/cve/CVE-2026-43019", "title": "Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43180", "url": "https://patchblox.com/security/cve/CVE-2026-43180", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: remove TX queue manipulation i...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.001, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43111", "url": "https://patchblox.com/security/cve/CVE-2026-43111", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: roccat: fix use-after-free in roccat_report...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00098, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31473", "url": "https://patchblox.com/security/cve/CVE-2026-31473", "title": "media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31731", "url": "https://patchblox.com/security/cve/CVE-2026-31731", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: thermal: core: Address thermal zone removal race...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43023", "url": "https://patchblox.com/security/cve/CVE-2026-43023", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: SCO: fix race conditions in sco_sock_c...", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23210", "url": "https://patchblox.com/security/cve/CVE-2026-23210", "title": "kernel-rt-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: L...", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31667", "url": "https://patchblox.com/security/cve/CVE-2026-31667", "title": "Input: uinput - fix circular locking dependency with ff-core", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00096, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31656", "url": "https://patchblox.com/security/cve/CVE-2026-31656", "title": "drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00094, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23302", "url": "https://patchblox.com/security/cve/CVE-2026-23302", "title": "net: annotate data-races around sk-\u003Esk_{data_ready,write_space}", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00093, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43163", "url": "https://patchblox.com/security/cve/CVE-2026-43163", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/bitmap: fix GPF in write_page caused by resiz...", "priority": "High", "severity": "medium", "cvss": 8.1, "epss": 0.00091, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31523", "url": "https://patchblox.com/security/cve/CVE-2026-31523", "title": "nvme-pci: ensure we\u0027re polling a polled queue", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00089, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31430", "url": "https://patchblox.com/security/cve/CVE-2026-31430", "title": "X.509: Fix out-of-bounds access when parsing extensions", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00081, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31688", "url": "https://patchblox.com/security/cve/CVE-2026-31688", "title": "driver core: enforce device_lock for driver_match_device()", "priority": "High", "severity": "Important", "cvss": 7.8, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45992", "url": "https://patchblox.com/security/cve/CVE-2026-45992", "title": "kernel-uek: [6.12.0-204.92.4.2]\n- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [Orabug: 396...", "priority": "High", "severity": "IMPORTANT", "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71161", "url": "https://patchblox.com/security/cve/CVE-2025-71161", "title": "dm-verity: disable recursive forward error correction", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00468, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23414", "url": "https://patchblox.com/security/cve/CVE-2026-23414", "title": "tls: Purge async_hold in tls_decrypt_async_wait()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71268", "url": "https://patchblox.com/security/cve/CVE-2025-71268", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00326, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23440", "url": "https://patchblox.com/security/cve/CVE-2026-23440", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix race condition during IPSec ESN u...", "priority": "Routine", "severity": "medium", "cvss": 4.7, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40147", "url": "https://patchblox.com/security/cve/CVE-2025-40147", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: blk-throttle: fix access race during throttle po...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.2, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31429", "url": "https://patchblox.com/security/cve/CVE-2026-31429", "title": "net: skb: fix cross-cache free of KFENCE-allocated skb head", "priority": "Routine", "severity": "Moderate", "cvss": 6.6, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40219", "url": "https://patchblox.com/security/cve/CVE-2025-40219", "title": "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.0024, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-14027", "url": "https://patchblox.com/security/cve/CVE-2024-14027", "title": "xattr: switch to CLASS(fd)", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71269", "url": "https://patchblox.com/security/cve/CVE-2025-71269", "title": "btrfs: do not free data reservation in fallback from inline due to -ENOSPC", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00233, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-22116", "url": "https://patchblox.com/security/cve/CVE-2025-22116", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: c...", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00202, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68239", "url": "https://patchblox.com/security/cve/CVE-2025-68239", "title": "binfmt_misc: restore write access before closing files opened by open_exec()", "priority": "Routine", "severity": "Moderate", "cvss": 6.2, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-38426", "url": "https://patchblox.com/security/cve/CVE-2025-38426", "title": "drm/amdgpu: Add basic validation for RAS header", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-68334", "url": "https://patchblox.com/security/cve/CVE-2025-68334", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Add support for Van Gogh S...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00187, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45871", "url": "https://patchblox.com/security/cve/CVE-2026-45871", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Fix missing cleanup on get_burstc...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23276", "url": "https://patchblox.com/security/cve/CVE-2026-23276", "title": "net: add xmit recursion limit to tunnel xmit functions", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45877", "url": "https://patchblox.com/security/cve/CVE-2026-45877", "title": "HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46018", "url": "https://patchblox.com/security/cve/CVE-2026-46018", "title": "ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39764", "url": "https://patchblox.com/security/cve/CVE-2025-39764", "title": "netfilter: ctnetlink: remove refcounting in expectation dumpers", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45872", "url": "https://patchblox.com/security/cve/CVE-2026-45872", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix memory leak in pqi_report_ph...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31531", "url": "https://patchblox.com/security/cve/CVE-2026-31531", "title": "ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45855", "url": "https://patchblox.com/security/cve/CVE-2026-45855", "title": "ata: libata-scsi: avoid Non-NCQ command starvation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43360", "url": "https://patchblox.com/security/cve/CVE-2026-43360", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on file creation du...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45947", "url": "https://patchblox.com/security/cve/CVE-2026-45947", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix memory leak in amdgpu_acpi_enume...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31767", "url": "https://patchblox.com/security/cve/CVE-2026-31767", "title": "drm/i915/dsi: Don\u0027t do DSC horizontal timing adjustments in command mode", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45847", "url": "https://patchblox.com/security/cve/CVE-2026-45847", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE when accessing forward...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45857", "url": "https://patchblox.com/security/cve/CVE-2026-45857", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45858", "url": "https://patchblox.com/security/cve/CVE-2026-45858", "title": "ext4: don\u0027t zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45868", "url": "https://patchblox.com/security/cve/CVE-2026-45868", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix refcount leak in pcs_add_gp...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45870", "url": "https://patchblox.com/security/cve/CVE-2026-45870", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: auth_gss: fix memory leaks in XDR decodi...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45873", "url": "https://patchblox.com/security/cve/CVE-2026-45873", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_rbtree: check for partial ove...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45888", "url": "https://patchblox.com/security/cve/CVE-2026-45888", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix memory leak in raid1_run() raid1_...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45895", "url": "https://patchblox.com/security/cve/CVE-2026-45895", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: quota: fix livelock between quotactl and freeze_...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45913", "url": "https://patchblox.com/security/cve/CVE-2026-45913", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: always update mdb_n_entries...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45915", "url": "https://patchblox.com/security/cve/CVE-2026-45915", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fat: avoid parent link count underflow in rmdir...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45922", "url": "https://patchblox.com/security/cve/CVE-2026-45922", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SY...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45923", "url": "https://patchblox.com/security/cve/CVE-2026-45923", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: enable basic endpoint checking...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45925", "url": "https://patchblox.com/security/cve/CVE-2026-45925", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: thermal/of: Fix reference leak in thermal_of_cm_...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45948", "url": "https://patchblox.com/security/cve/CVE-2026-45948", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4_ext_shift_extents(...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45964", "url": "https://patchblox.com/security/cve/CVE-2026-45964", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gss_auth kref leak in gss_alloc_msg...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45973", "url": "https://patchblox.com/security/cve/CVE-2026-45973", "title": "RDMA/mlx5: Fix UMR hang in LAG error state unload", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46000", "url": "https://patchblox.com/security/cve/CVE-2026-46000", "title": "rxrpc: Fix conn-level packet handling to unshare RESPONSE packets", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43073", "url": "https://patchblox.com/security/cve/CVE-2026-43073", "title": "x86-64: rename misleadingly named \u0027__copy_user_nocache()\u0027 function", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71273", "url": "https://patchblox.com/security/cve/CVE-2025-71273", "title": "wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31462", "url": "https://patchblox.com/security/cve/CVE-2026-31462", "title": "drm/amdgpu: prevent immediate PASID reuse case", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31677", "url": "https://patchblox.com/security/cve/CVE-2026-31677", "title": "crypto: af_alg - limit RX SG extraction by receive buffer budget", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43036", "url": "https://patchblox.com/security/cve/CVE-2026-43036", "title": "net: use skb_header_pointer() for TCPv4 GSO frag_off check", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43107", "url": "https://patchblox.com/security/cve/CVE-2026-43107", "title": "xfrm: account XFRMA_IF_ID in aevent size calculation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45917", "url": "https://patchblox.com/security/cve/CVE-2026-45917", "title": "ipvs: do not keep dest_dst if dev is going down", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39816", "url": "https://patchblox.com/security/cve/CVE-2025-39816", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/kbuf: always use READ_ONCE() to read ri...", "priority": "Routine", "severity": "medium", "cvss": 6.1, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23474", "url": "https://patchblox.com/security/cve/CVE-2026-23474", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23279", "url": "https://patchblox.com/security/cve/CVE-2026-23279", "title": "wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23138", "url": "https://patchblox.com/security/cve/CVE-2026-23138", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Add recursion protection in kernel stac...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23157", "url": "https://patchblox.com/security/cve/CVE-2026-23157", "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.\n\n\nThe following security bu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71286", "url": "https://patchblox.com/security/cve/CVE-2025-71286", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Correct the allocation...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43314", "url": "https://patchblox.com/security/cve/CVE-2026-43314", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: remove fake timeout to avoid leak request S...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46079", "url": "https://patchblox.com/security/cve/CVE-2026-46079", "title": "rbd: fix null-ptr-deref when device_add_disk() fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23356", "url": "https://patchblox.com/security/cve/CVE-2026-23356", "title": "drbd: fix \u0022LOGIC BUG\u0022 in drbd_al_begin_io_nonblock()", "priority": "Routine", "severity": "Moderate", "cvss": 6.3, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46092", "url": "https://patchblox.com/security/cve/CVE-2026-46092", "title": "wifi: rtw88: check for PCI upstream bridge existence", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-22985", "url": "https://patchblox.com/security/cve/CVE-2026-22985", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL pointer crash on early et...", "priority": "Routine", "severity": "medium", "cvss": 6.2, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-22981", "url": "https://patchblox.com/security/cve/CVE-2026-22981", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: idpf: detach and close netdevs while handling a...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-22993", "url": "https://patchblox.com/security/cve/CVE-2026-22993", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL ptr issue after soft rese...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23104", "url": "https://patchblox.com/security/cve/CVE-2026-23104", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix devlink reload call trace Commit 4da71...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23207", "url": "https://patchblox.com/security/cve/CVE-2026-23207", "title": "spi: tegra210-quad: Protect curr_xfer check in IRQ handler", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46089", "url": "https://patchblox.com/security/cve/CVE-2026-46089", "title": "zram: do not forget to endio for partial discard requests", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23290", "url": "https://patchblox.com/security/cve/CVE-2026-23290", "title": "net: usb: pegasus: validate USB endpoints", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23304", "url": "https://patchblox.com/security/cve/CVE-2026-23304", "title": "ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23321", "url": "https://patchblox.com/security/cve/CVE-2026-23321", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always mark signal\u002Bsubflow...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23365", "url": "https://patchblox.com/security/cve/CVE-2026-23365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The ka...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23370", "url": "https://patchblox.com/security/cve/CVE-2026-23370", "title": "platform/x86: dell-wmi-sysman: Don\u0027t hex dump plaintext password data", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23438", "url": "https://patchblox.com/security/cve/CVE-2026-23438", "title": "net: mvpp2: guard flow control update with global_tx_fc in buffer switching", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23439", "url": "https://patchblox.com/security/cve/CVE-2026-23439", "title": "udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23445", "url": "https://patchblox.com/security/cve/CVE-2026-23445", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: igc: fix page fault in XDP TX timestamps handlin...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46026", "url": "https://patchblox.com/security/cve/CVE-2026-46026", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31596", "url": "https://patchblox.com/security/cve/CVE-2026-31596", "title": "ocfs2: handle invalid dinode in ocfs2_group_extend", "priority": "Routine", "severity": "Moderate", "cvss": 6.6, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23399", "url": "https://patchblox.com/security/cve/CVE-2026-23399", "title": "nf_tables: nft_dynset: fix possible stateful expression memleak in error path", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43089", "url": "https://patchblox.com/security/cve/CVE-2026-43089", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() str...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31428", "url": "https://patchblox.com/security/cve/CVE-2026-31428", "title": "netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-39858", "url": "https://patchblox.com/security/cve/CVE-2025-39858", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: eth: mlx4: Fix IS_ERR() vs NULL check bug in mlx...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23252", "url": "https://patchblox.com/security/cve/CVE-2026-23252", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfs: get rid of the xchk_xfile_*_descr calls Th...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23286", "url": "https://patchblox.com/security/cve/CVE-2026-23286", "title": "atm: lec: fix null-ptr-deref in lec_arp_clear_vccs", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23303", "url": "https://patchblox.com/security/cve/CVE-2026-23303", "title": "smb: client: Don\u0027t log plaintext credentials in cifs_set_cifscreds", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23312", "url": "https://patchblox.com/security/cve/CVE-2026-23312", "title": "net: usb: kaweth: validate USB endpoints", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23379", "url": "https://patchblox.com/security/cve/CVE-2026-23379", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: fix divide by zero in the offloa...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23475", "url": "https://patchblox.com/security/cve/CVE-2026-23475", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: spi: fix statistics allocation The controller p...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31733", "url": "https://patchblox.com/security/cve/CVE-2026-31733", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix stale direct dispatch state in dd...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43288", "url": "https://patchblox.com/security/cve/CVE-2026-43288", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ext4: move ext4_percpu_param_init() before ext4_...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43315", "url": "https://patchblox.com/security/cve/CVE-2026-43315", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Remove a user-triggerable WARN on nes...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43392", "url": "https://patchblox.com/security/cve/CVE-2026-43392", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix starvation of scx_enable() under...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45919", "url": "https://patchblox.com/security/cve/CVE-2026-45919", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sched/rt: Skip currently executing CPU in rto_ne...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45968", "url": "https://patchblox.com/security/cve/CVE-2026-45968", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpuidle: Skip governor when only one idle state...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45982", "url": "https://patchblox.com/security/cve/CVE-2026-45982", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi_ev_...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23398", "url": "https://patchblox.com/security/cve/CVE-2026-23398", "title": "icmp: fix NULL pointer dereference in icmp_tag_validation()", "priority": "Routine", "severity": "Moderate", "cvss": 6.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43026", "url": "https://patchblox.com/security/cve/CVE-2026-43026", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: zero expect NAT fields whe...", "priority": "Routine", "severity": "medium", "cvss": 6.1, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31451", "url": "https://patchblox.com/security/cve/CVE-2026-31451", "title": "ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31495", "url": "https://patchblox.com/security/cve/CVE-2026-31495", "title": "netfilter: ctnetlink: use netlink policy range checks", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31546", "url": "https://patchblox.com/security/cve/CVE-2026-31546", "title": "net: bonding: fix NULL deref in bond_debug_rlb_hash_show", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31625", "url": "https://patchblox.com/security/cve/CVE-2026-31625", "title": "HID: alps: fix NULL pointer dereference in alps_raw_event()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31634", "url": "https://patchblox.com/security/cve/CVE-2026-31634", "title": "rxrpc: fix reference count leak in rxrpc_server_keyring()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31642", "url": "https://patchblox.com/security/cve/CVE-2026-31642", "title": "rxrpc: Fix call removal to use RCU safe deletion", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31752", "url": "https://patchblox.com/security/cve/CVE-2026-31752", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: validate ND option lengths...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43024", "url": "https://patchblox.com/security/cve/CVE-2026-43024", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject immediate NF_QUEUE...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43035", "url": "https://patchblox.com/security/cve/CVE-2026-43035", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to i...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43085", "url": "https://patchblox.com/security/cve/CVE-2026-43085", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: initialize nfgenmsg in...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46003", "url": "https://patchblox.com/security/cve/CVE-2026-46003", "title": "net: qrtr: ns: Limit the total number of nodes", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46038", "url": "https://patchblox.com/security/cve/CVE-2026-46038", "title": "net: qrtr: ns: Free the node during ctrl_cmd_bye()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46040", "url": "https://patchblox.com/security/cve/CVE-2026-46040", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46046", "url": "https://patchblox.com/security/cve/CVE-2026-46046", "title": "ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46101", "url": "https://patchblox.com/security/cve/CVE-2026-46101", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23465", "url": "https://patchblox.com/security/cve/CVE-2026-23465", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: log new dentries when logging parent dir...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23468", "url": "https://patchblox.com/security/cve/CVE-2026-23468", "title": "drm/amdgpu: Limit BO list entry count to prevent resource exhaustion", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43123", "url": "https://patchblox.com/security/cve/CVE-2026-43123", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fbcon: check return value of con2fb_acquire_newi...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43124", "url": "https://patchblox.com/security/cve/CVE-2026-43124", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return w...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43132", "url": "https://patchblox.com/security/cve/CVE-2026-43132", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_crea...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43136", "url": "https://patchblox.com/security/cve/CVE-2026-43136", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: logitech-hidpp: Check maxfield in hidpp_get...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43140", "url": "https://patchblox.com/security/cve/CVE-2026-43140", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: magicmouse: Do not crash on missing msc-\u003Ein...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43143", "url": "https://patchblox.com/security/cve/CVE-2026-43143", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mfd: core: Add locking around \u0027mfd_of_node_list\u0027...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43152", "url": "https://patchblox.com/security/cve/CVE-2026-43152", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: hid-pl: handle probe errors Errors in init...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43218", "url": "https://patchblox.com/security/cve/CVE-2026-43218", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: i2c/tw9903: Fix potential memory leak in...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43223", "url": "https://patchblox.com/security/cve/CVE-2026-43223", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: pvrusb2: fix URB leak in pvr2_send_reques...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43231", "url": "https://patchblox.com/security/cve/CVE-2026-43231", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: radio-keene: fix memory leak in error pat...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43238", "url": "https://patchblox.com/security/cve/CVE-2026-43238", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbedit: fix divide-by-zero in tc...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43255", "url": "https://patchblox.com/security/cve/CVE-2026-43255", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix WARNING in usb_tx_block The...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43257", "url": "https://patchblox.com/security/cve/CVE-2026-43257", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: cx88: Add missing unmap in snd_cx88_hw_pa...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43261", "url": "https://patchblox.com/security/cve/CVE-2026-43261", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitiga...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45974", "url": "https://patchblox.com/security/cve/CVE-2026-45974", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid leaf access in btrfs_quota_en...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46005", "url": "https://patchblox.com/security/cve/CVE-2026-46005", "title": "xfs: fix a resource leak in xfs_alloc_buftarg()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43210", "url": "https://patchblox.com/security/cve/CVE-2026-43210", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing: ring-buffer: Fix to check event length...", "priority": "Routine", "severity": "medium", "cvss": 6.1, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23277", "url": "https://patchblox.com/security/cve/CVE-2026-23277", "title": "net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71294", "url": "https://patchblox.com/security/cve/CVE-2025-71294", "title": "drm/amdgpu: fix NULL pointer issue buffer funcs", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23285", "url": "https://patchblox.com/security/cve/CVE-2026-23285", "title": "drbd: fix null-pointer dereference on local read error", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23292", "url": "https://patchblox.com/security/cve/CVE-2026-23292", "title": "scsi: target: Fix recursive locking in __configfs_open_file()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23297", "url": "https://patchblox.com/security/cve/CVE-2026-23297", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: Fix cred ref leak in nfsd_nl_threads_set_d...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23307", "url": "https://patchblox.com/security/cve/CVE-2026-23307", "title": "can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23309", "url": "https://patchblox.com/security/cve/CVE-2026-23309", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Add NULL pointer check to trigger_data_...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23313", "url": "https://patchblox.com/security/cve/CVE-2026-23313", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: i40e: Fix preempt count leak in napi poll tracep...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23316", "url": "https://patchblox.com/security/cve/CVE-2026-23316", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix ARM64 alignment fault in multipat...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23360", "url": "https://patchblox.com/security/cve/CVE-2026-23360", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin queue leak on controller reset...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23369", "url": "https://patchblox.com/security/cve/CVE-2026-23369", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: i2c: i801: Revert \u0022i2c: i801: replace acpi_lock...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43137", "url": "https://patchblox.com/security/cve/CVE-2026-43137", "title": "ASoC: SOF: Intel: hda: Fix NULL pointer dereference", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43169", "url": "https://patchblox.com/security/cve/CVE-2026-43169", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/buddy: Prevent BUG_ON by validating rounded...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43177", "url": "https://patchblox.com/security/cve/CVE-2026-43177", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: ipu6: Fix RPM reference leak in probe err...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43189", "url": "https://patchblox.com/security/cve/CVE-2026-43189", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: v4l2-async: Fix error handling on steps a...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43201", "url": "https://patchblox.com/security/cve/CVE-2026-43201", "title": "APEI/GHES: ARM processor Error: don\u0027t go past allocated memory", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43220", "url": "https://patchblox.com/security/cve/CVE-2026-43220", "title": "iommu/amd: serialize sequence allocation under concurrent TLB invalidations", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23381", "url": "https://patchblox.com/security/cve/CVE-2026-23381", "title": "net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31441", "url": "https://patchblox.com/security/cve/CVE-2026-31441", "title": "dmaengine: idxd: Fix memory leak when a wq is reset", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31496", "url": "https://patchblox.com/security/cve/CVE-2026-31496", "title": "netfilter: nf_conntrack_expect: skip expectations in other netns via proc", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31590", "url": "https://patchblox.com/security/cve/CVE-2026-31590", "title": "KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43080", "url": "https://patchblox.com/security/cve/CVE-2026-43080", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: l2tp: Drop large packets with UDP encap syzbot...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43170", "url": "https://patchblox.com/security/cve/CVE-2026-43170", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: Move vbus draw to workqueue c...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46088", "url": "https://patchblox.com/security/cve/CVE-2026-46088", "title": "ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31681", "url": "https://patchblox.com/security/cve/CVE-2026-31681", "title": "netfilter: xt_multiport: validate range encoding in checkentry", "priority": "Routine", "severity": "Moderate", "cvss": 6.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "cvesTruncated": true, "dataAsOf": "2026-11-07T06:34:28Z" }