# ELSA-2026-50372: Security update for 35 packages

ELSA-2026-50372, released July 2, 2026, fixes 679 CVEs across 35 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/elsa-2026-50372
- Platform: Linux
- Released: Jul 2, 2026
- Priority: Urgent (Closes CVE-2026-43407, rated Critical)
- CVEs: 679, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://linux.oracle.com/errata/ELSA-2026-50372.html

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek](https://patchblox.com/security/data/product/linux/kernel-uek.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-core](https://patchblox.com/security/data/product/linux/kernel-uek-core.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug](https://patchblox.com/security/data/product/linux/kernel-uek-debug.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-core.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-devel](https://patchblox.com/security/data/product/linux/kernel-uek-debug-devel.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-core.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-deprecated.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-desktop.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-usb.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-debug-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-wireless.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-devel](https://patchblox.com/security/data/product/linux/kernel-uek-devel.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-doc](https://patchblox.com/security/data/product/linux/kernel-uek-doc.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules](https://patchblox.com/security/data/product/linux/kernel-uek-modules.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek-modules-core.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek-modules-deprecated.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek-modules-desktop.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek-modules-usb.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek-modules-wireless.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek-tools](https://patchblox.com/security/data/product/linux/kernel-uek-tools.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k](https://patchblox.com/security/data/product/linux/kernel-uek64k.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-core.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-devel](https://patchblox.com/security/data/product/linux/kernel-uek64k-devel.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-core](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-core.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-deprecated](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-deprecated.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-desktop](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-desktop.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-extra-netfilter](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-extra-netfilter.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-usb](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-usb.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 10 | 0:6.12.0-204.92.4.2.el9uek |
| [kernel-uek64k-modules-wireless](https://patchblox.com/security/data/product/linux/kernel-uek64k-modules-wireless.md) | ol 9 | 0:6.12.0-204.92.4.2.el9uek |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-43407](https://patchblox.com/security/data/cve/CVE-2026-43407.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: Fix potential out-of-bounds access in c... | 9.1 | 0.0066 |  |
| [CVE-2026-43186](https://patchblox.com/security/data/cve/CVE-2026-43186.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: ioam: fix heap buffer overflow in __ioam6_... | 9.8 | 0.0064 |  |
| [CVE-2026-43304](https://patchblox.com/security/data/cve/CVE-2026-43304.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: define and enforce CEPH_MAX_KEY_LEN  Wh... | 9.8 | 0.0061 |  |
| [CVE-2026-43406](https://patchblox.com/security/data/cve/CVE-2026-43406.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: prevent potential out-of-bounds reads i... | 9.1 | 0.0061 |  |
| [CVE-2026-31405](https://patchblox.com/security/data/cve/CVE-2026-31405.md) | Urgent | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 9.8 | 0.0056 |  |
| [CVE-2026-43383](https://patchblox.com/security/data/cve/CVE-2026-43383.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  net/tcp-md5: Fix MAC comparison to be constant-t... | 9.4 | 0.0054 |  |
| [CVE-2026-45898](https://patchblox.com/security/data/cve/CVE-2026-45898.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/iwcm: Fix workqueue list corruption by remo... | 9.8 | 0.0053 |  |
| [CVE-2026-43341](https://patchblox.com/security/data/cve/CVE-2026-43341.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  net/ipv6: ioam6: prevent schema length wraparoun... | 9.8 | 0.0051 |  |
| [CVE-2026-43071](https://patchblox.com/security/data/cve/CVE-2026-43071.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  dcache: Limit the minimal number of bucket to tw... | 9.1 | 0.0046 |  |
| [CVE-2026-43117](https://patchblox.com/security/data/cve/CVE-2026-43117.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: tracepoints: get correct superblock from... | 9.1 | 0.0046 |  |
| [CVE-2026-31436](https://patchblox.com/security/data/cve/CVE-2026-31436.md) | Urgent | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 9.8 | 0.0046 |  |
| [CVE-2026-45988](https://patchblox.com/security/data/cve/CVE-2026-45988.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  rxrpc: Fix re-decryption of RESPONSE packets  If... | 9.8 | 0.0046 |  |
| [CVE-2026-45972](https://patchblox.com/security/data/cve/CVE-2026-45972.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix potential UAF and double free i... | 9.8 | 0.0033 |  |
| [CVE-2026-23395](https://patchblox.com/security/data/cve/CVE-2026-23395.md) | Urgent | Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ | 9.1 | 0.0027 |  |
| [CVE-2025-71305](https://patchblox.com/security/data/cve/CVE-2025-71305.md) | Urgent | drm/display/dp_mst: Add protection against 0 vcpi | 9.8 | 0.0016 |  |
| [CVE-2026-45899](https://patchblox.com/security/data/cve/CVE-2026-45899.md) | Urgent | ext4: drop extent cache when splitting extent fails | 9.8 | 0.0016 |  |
| [CVE-2026-46242](https://patchblox.com/security/data/cve/CVE-2026-46242.md) | High | kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 7.8 | 0.0458 |  |
| [CVE-2026-43503](https://patchblox.com/security/data/cve/CVE-2026-43503.md) | High | net: skbuff: propagate shared-frag marker through frag-transfer helpers | 8.8 | 0.0199 |  |
| [CVE-2026-23455](https://patchblox.com/security/data/cve/CVE-2026-23455.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_h323: check for zero leng... | 9.1 | 0.0159 |  |
| [CVE-2026-53359](https://patchblox.com/security/data/cve/CVE-2026-53359.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 8.8 | 0.0137 |  |
| [CVE-2026-45860](https://patchblox.com/security/data/cve/CVE-2026-45860.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_conncount: increase the connection... | 7.5 | 0.0075 |  |
| [CVE-2026-43501](https://patchblox.com/security/data/cve/CVE-2026-43501.md) | High | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 |  |
| [CVE-2026-45859](https://patchblox.com/security/data/cve/CVE-2026-45859.md) | High | netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation | 8.1 | 0.0071 |  |
| [CVE-2026-43493](https://patchblox.com/security/data/cve/CVE-2026-43493.md) | High | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | 9.8 | 0.0068 |  |
| [CVE-2026-46331](https://patchblox.com/security/data/cve/CVE-2026-46331.md) | High | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 |  |
| [CVE-2026-31682](https://patchblox.com/security/data/cve/CVE-2026-31682.md) | High | bridge: br_nd_send: linearize skb before parsing ND options | 9.1 | 0.0064 |  |
| [CVE-2026-43405](https://patchblox.com/security/data/cve/CVE-2026-43405.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: Use u32 for non-negative values in ceph... | 7.5 | 0.0060 |  |
| [CVE-2026-43441](https://patchblox.com/security/data/cve/CVE-2026-43441.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: bonding: Fix nd_tbl NULL dereference when I... | 7.5 | 0.0059 |  |
| [CVE-2026-31563](https://patchblox.com/security/data/cve/CVE-2026-31563.md) | High | net: macb: Use dev_consume_skb_any() to free TX SKBs | 7.5 | 0.0056 |  |
| [CVE-2026-46102](https://patchblox.com/security/data/cve/CVE-2026-46102.md) | High | net: strparser: fix skb_head leak in strp_abort_strp() | 7.5 | 0.0056 |  |
| [CVE-2026-31414](https://patchblox.com/security/data/cve/CVE-2026-31414.md) | High | netfilter: nf_conntrack_expect: use expect->helper | 9.8 | 0.0056 |  |
| [CVE-2026-23456](https://patchblox.com/security/data/cve/CVE-2026-23456.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_conntrack_h323: fix OOB read in de... | 8.2 | 0.0054 |  |
| [CVE-2026-43452](https://patchblox.com/security/data/cve/CVE-2026-43452.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: x_tables: guard option walkers agains... | 8.2 | 0.0054 |  |
| [CVE-2026-43125](https://patchblox.com/security/data/cve/CVE-2026-43125.md) | High | dlm: validate length in dlm_search_rsb_tree | 9.8 | 0.0054 |  |
| [CVE-2026-43194](https://patchblox.com/security/data/cve/CVE-2026-43194.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: consume xmit errors of GSO frames  udpgro_f... | 7.5 | 0.0053 |  |
| [CVE-2026-46043](https://patchblox.com/security/data/cve/CVE-2026-46043.md) | High | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv | 9.1 | 0.0051 |  |
| [CVE-2026-46037](https://patchblox.com/security/data/cve/CVE-2026-46037.md) | High | ipv4: icmp: validate reply type before using icmp_pointers | 8.2 | 0.0051 |  |
| [CVE-2026-43365](https://patchblox.com/security/data/cve/CVE-2026-43365.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 8.2 | 0.0051 |  |
| [CVE-2026-31552](https://patchblox.com/security/data/cve/CVE-2026-31552.md) | High | wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom | 7.5 | 0.0050 |  |
| [CVE-2026-43099](https://patchblox.com/security/data/cve/CVE-2026-43099.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ipv4: icmp: fix null-ptr-deref in icmp_build_pro... | 7.5 | 0.0050 |  |
| [CVE-2026-46052](https://patchblox.com/security/data/cve/CVE-2026-46052.md) | High | ceph: only d_add() negative dentries when they are unhashed | 7.5 | 0.0050 |  |
| [CVE-2026-31448](https://patchblox.com/security/data/cve/CVE-2026-31448.md) | High | ext4: avoid infinite loops caused by residual data | 9.4 | 0.0050 |  |
| [CVE-2026-46024](https://patchblox.com/security/data/cve/CVE-2026-46024.md) | High | libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() | 7.5 | 0.0049 |  |
| [CVE-2026-31685](https://patchblox.com/security/data/cve/CVE-2026-31685.md) | High | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 |  |
| [CVE-2026-31676](https://patchblox.com/security/data/cve/CVE-2026-31676.md) | High | rxrpc: only handle RESPONSE during service challenge | 7.5 | 0.0047 |  |
| [CVE-2026-43158](https://patchblox.com/security/data/cve/CVE-2026-43158.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: fix freemap adjustments when adding xattrs... | 8.8 | 0.0047 |  |
| [CVE-2026-43187](https://patchblox.com/security/data/cve/CVE-2026-43187.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: delete attr leaf freemap entries when empty... | 8.8 | 0.0047 |  |
| [CVE-2026-43190](https://patchblox.com/security/data/cve/CVE-2026-43190.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_tcpmss: check remaining length befo... | 8.2 | 0.0046 |  |
| [CVE-2026-43233](https://patchblox.com/security/data/cve/CVE-2026-43233.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: n... | 8.2 | 0.0046 |  |
| [CVE-2026-31649](https://patchblox.com/security/data/cve/CVE-2026-31649.md) | High | net: stmmac: fix integer underflow in chain mode | 9.8 | 0.0046 |  |
| [CVE-2026-31557](https://patchblox.com/security/data/cve/CVE-2026-31557.md) | High | nvmet: move async event work off nvmet-wq | 7.5 | 0.0045 |  |
| [CVE-2026-23457](https://patchblox.com/security/data/cve/CVE-2026-23457.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_conntrack_sip: fix Content-Length... | 8.6 | 0.0045 |  |
| [CVE-2026-31668](https://patchblox.com/security/data/cve/CVE-2026-31668.md) | High | seg6: separate dst_cache for input and output paths in seg6 lwtunnel | 9.8 | 0.0044 |  |
| [CVE-2026-31638](https://patchblox.com/security/data/cve/CVE-2026-31638.md) | High | rxrpc: Only put the call ref if one was acquired | 7.5 | 0.0044 |  |
| [CVE-2026-46085](https://patchblox.com/security/data/cve/CVE-2026-46085.md) | High | rxrpc: Fix rxkad crypto unalignment handling | 7.5 | 0.0044 |  |
| [CVE-2026-43057](https://patchblox.com/security/data/cve/CVE-2026-43057.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: correctly handle tunneled traffic on IPV6_C... | 7.5 | 0.0044 |  |
| [CVE-2026-31598](https://patchblox.com/security/data/cve/CVE-2026-31598.md) | High | ocfs2: fix possible deadlock between unlink and dio_end_io_write | 7.5 | 0.0044 |  |
| [CVE-2026-43336](https://patchblox.com/security/data/cve/CVE-2026-43336.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  lib/crypto: chacha: Zeroize permuted_state befor... | 7.5 | 0.0043 |  |
| [CVE-2026-31659](https://patchblox.com/security/data/cve/CVE-2026-31659.md) | High | batman-adv: reject oversized global TT response buffers | 9.8 | 0.0042 |  |
| [CVE-2026-43199](https://patchblox.com/security/data/cve/CVE-2026-43199.md) | High | net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query | 7.5 | 0.0042 |  |
| [CVE-2026-46243](https://patchblox.com/security/data/cve/CVE-2026-46243.md) | High | smb: client: reject userspace cifs.spnego descriptions | 7.8 | 0.0041 |  |
| [CVE-2026-31450](https://patchblox.com/security/data/cve/CVE-2026-31450.md) | High | ext4: publish jinode after initialization | 8.8 | 0.0041 |  |
| [CVE-2026-43466](https://patchblox.com/security/data/cve/CVE-2026-43466.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Fix DMA FIFO desync on error CQE SQ r... | 8.2 | 0.0041 |  |
| [CVE-2026-43469](https://patchblox.com/security/data/cve/CVE-2026-43469.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xprtrdma: Decrement re_receiving on the early ex... | 7.5 | 0.0040 |  |
| [CVE-2026-31662](https://patchblox.com/security/data/cve/CVE-2026-31662.md) | High | tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG | 7.5 | 0.0039 |  |
| [CVE-2026-31467](https://patchblox.com/security/data/cve/CVE-2026-31467.md) | High | erofs: add GFP_NOIO in the bio completion if needed | 8.8 | 0.0038 |  |
| [CVE-2026-43139](https://patchblox.com/security/data/cve/CVE-2026-43139.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm6: fix uninitialized saddr in xfrm6_get_sadd... | 8.6 | 0.0038 |  |
| [CVE-2026-43114](https://patchblox.com/security/data/cve/CVE-2026-43114.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: k... | 9.4 | 0.0037 |  |
| [CVE-2026-43253](https://patchblox.com/security/data/cve/CVE-2026-43253.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/amd: move wait_on_sem() out of spinlock  W... | 7.5 | 0.0037 |  |
| [CVE-2026-43112](https://patchblox.com/security/data/cve/CVE-2026-43112.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 8.8 | 0.0035 |  |
| [CVE-2026-31708](https://patchblox.com/security/data/cve/CVE-2026-31708.md) | High | smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path | 8.1 | 0.0035 |  |
| [CVE-2026-31709](https://patchblox.com/security/data/cve/CVE-2026-31709.md) | High | smb: client: validate the whole DACL before rewriting it in cifsacl | 8.8 | 0.0035 |  |
| [CVE-2026-43350](https://patchblox.com/security/data/cve/CVE-2026-43350.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: require a full NFS mode SID before... | 7.6 | 0.0032 |  |
| [CVE-2026-31408](https://patchblox.com/security/data/cve/CVE-2026-31408.md) | High | Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold | 8.8 | 0.0032 |  |
| [CVE-2026-43215](https://patchblox.com/security/data/cve/CVE-2026-43215.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: Fix locking usage for tcon fields  We used... | 8.8 | 0.0032 |  |
| [CVE-2026-31607](https://patchblox.com/security/data/cve/CVE-2026-31607.md) | High | usbip: validate number_of_packets in usbip_pack_ret_submit() | 9.8 | 0.0031 |  |
| [CVE-2026-43239](https://patchblox.com/security/data/cve/CVE-2026-43239.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: prevent races in ->query_interfaces... | 8.8 | 0.0029 |  |
| [CVE-2026-23246](https://patchblox.com/security/data/cve/CVE-2026-23246.md) | High | wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration | 8.8 | 0.0029 |  |
| [CVE-2026-46099](https://patchblox.com/security/data/cve/CVE-2026-46099.md) | High | net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels | 8.1 | 0.0029 |  |
| [CVE-2026-31694](https://patchblox.com/security/data/cve/CVE-2026-31694.md) | High | fuse: reject oversized dirents in page cache | 7.8 | 0.0028 |  |
| [CVE-2026-46056](https://patchblox.com/security/data/cve/CVE-2026-46056.md) | High | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers | 8.8 | 0.0028 |  |
| [CVE-2026-31773](https://patchblox.com/security/data/cve/CVE-2026-31773.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: SMP: derive legacy responder STK auth... | 8.8 | 0.0028 |  |
| [CVE-2026-43334](https://patchblox.com/security/data/cve/CVE-2026-43334.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements... | 8.8 | 0.0028 |  |
| [CVE-2026-23462](https://patchblox.com/security/data/cve/CVE-2026-23462.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 8.8 | 0.0028 |  |
| [CVE-2026-31779](https://patchblox.com/security/data/cve/CVE-2026-31779.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: iwlwifi: mvm: fix potential out-of-bounds... | 8.1 | 0.0027 |  |
| [CVE-2026-43110](https://patchblox.com/security/data/cve/CVE-2026-43110.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: brcmfmac: validate bsscfg indices in IF ev... | 8.8 | 0.0027 |  |
| [CVE-2026-31393](https://patchblox.com/security/data/cve/CVE-2026-31393.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payloa... | 8.1 | 0.0027 |  |
| [CVE-2026-31570](https://patchblox.com/security/data/cve/CVE-2026-31570.md) | High | can: gw: fix OOB heap access in cgw_csum_crc8_rel() | 8.8 | 0.0026 |  |
| [CVE-2026-43362](https://patchblox.com/security/data/cve/CVE-2026-43362.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 8.1 | 0.0026 |  |
| [CVE-2026-43018](https://patchblox.com/security/data/cve/CVE-2026-43018.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: hci_event: fix potential UAF in hci_l... | 8.8 | 0.0026 |  |
| [CVE-2026-43051](https://patchblox.com/security/data/cve/CVE-2026-43051.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  HID: wacom: fix out-of-bounds read in wacom_intu... | 8.1 | 0.0026 |  |
| [CVE-2026-43038](https://patchblox.com/security/data/cve/CVE-2026-43038.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 9.8 | 0.0026 |  |
| [CVE-2026-31513](https://patchblox.com/security/data/cve/CVE-2026-31513.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: L2CAP: Fix stack-out-of-bounds read i... | 8.1 | 0.0025 |  |
| [CVE-2026-43113](https://patchblox.com/security/data/cve/CVE-2026-43113.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: wl1251: validate packet IDs before indexin... | 8.8 | 0.0024 |  |
| [CVE-2026-23461](https://patchblox.com/security/data/cve/CVE-2026-23461.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 8.8 | 0.0024 |  |
| [CVE-2026-43062](https://patchblox.com/security/data/cve/CVE-2026-43062.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: L2CAP: Fix type confusion in l2cap_ec... | 7.1 | 0.0022 |  |
| [CVE-2026-31554](https://patchblox.com/security/data/cve/CVE-2026-31554.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 7.8 | 0.0021 |  |
| [CVE-2026-45878](https://patchblox.com/security/data/cve/CVE-2026-45878.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: n... | 7.8 | 0.0021 |  |
| [CVE-2025-21709](https://patchblox.com/security/data/cve/CVE-2025-21709.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  kernel: be more careful about dup_mmap() failure... | 7.1 | 0.0020 |  |
| [CVE-2026-45852](https://patchblox.com/security/data/cve/CVE-2026-45852.md) | High | kernel-uek-modules: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 8.8 | 0.0020 |  |
| [CVE-2026-31786](https://patchblox.com/security/data/cve/CVE-2026-31786.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: Buffer overflow in drivers/xen/sys-hypervisor.c T... | 7.8 | 0.0020 |  |
| [CVE-2026-45933](https://patchblox.com/security/data/cve/CVE-2026-45933.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Preserve id of register in sync_linked_regs... | 7.8 | 0.0020 |  |
| [CVE-2026-31588](https://patchblox.com/security/data/cve/CVE-2026-31588.md) | High | KVM: x86: Use scratch field in MMIO fragment to hold small write values | 8.8 | 0.0019 |  |
| [CVE-2026-31788](https://patchblox.com/security/data/cve/CVE-2026-31788.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xen/privcmd: restrict usage in unprivileged domU... | 8.2 | 0.0019 |  |
| [CVE-2026-43456](https://patchblox.com/security/data/cve/CVE-2026-43456.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:  The following security issues we... | 7.8 | 0.0019 |  |
| [CVE-2026-45856](https://patchblox.com/security/data/cve/CVE-2026-45856.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/uverbs: Validate wqe_size before using it i... | 8.8 | 0.0019 |  |
| [CVE-2026-45861](https://patchblox.com/security/data/cve/CVE-2026-45861.md) | High | gfs2: Fix slab-use-after-free in qd_put | 8.8 | 0.0019 |  |
| [CVE-2026-45984](https://patchblox.com/security/data/cve/CVE-2026-45984.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 7.8 | 0.0018 |  |
| [CVE-2026-23274](https://patchblox.com/security/data/cve/CVE-2026-23274.md) | High | netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels | 7.8 | 0.0018 |  |
| [CVE-2026-31787](https://patchblox.com/security/data/cve/CVE-2026-31787.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting pr... | 7.8 | 0.0018 |  |
| [CVE-2025-38584](https://patchblox.com/security/data/cve/CVE-2025-38584.md) | High | padata: Fix pd UAF once and for all | 7.8 | 0.0018 |  |
| [CVE-2026-31407](https://patchblox.com/security/data/cve/CVE-2026-31407.md) | High | netfilter: conntrack: add missing netlink policy validations | 7.1 | 0.0018 |  |
| [CVE-2026-43329](https://patchblox.com/security/data/cve/CVE-2026-43329.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 7.8 | 0.0018 |  |
| [CVE-2026-43153](https://patchblox.com/security/data/cve/CVE-2026-43153.md) | High | xfs: remove xfs_attr_leaf_hasname | 7.8 | 0.0018 |  |
| [CVE-2026-23383](https://patchblox.com/security/data/cve/CVE-2026-23383.md) | High | bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing | 7.8 | 0.0018 |  |
| [CVE-2026-31693](https://patchblox.com/security/data/cve/CVE-2026-31693.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: some missing initializations on replay  In... | 7.8 | 0.0017 |  |
| [CVE-2026-31674](https://patchblox.com/security/data/cve/CVE-2026-31674.md) | High | netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() | 7.1 | 0.0017 |  |
| [CVE-2026-23392](https://patchblox.com/security/data/cve/CVE-2026-23392.md) | High | netfilter: nf_tables: release flowtable after rcu grace period on error | 8.8 | 0.0017 |  |
| [CVE-2026-31532](https://patchblox.com/security/data/cve/CVE-2026-31532.md) | High | can: raw: fix ro->uniq use-after-free in raw_rcv() | 8.8 | 0.0017 |  |
| [CVE-2026-43059](https://patchblox.com/security/data/cve/CVE-2026-43059.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: MGMT: Fix list corruption and UAF in... | 7.8 | 0.0017 |  |
| [CVE-2026-43248](https://patchblox.com/security/data/cve/CVE-2026-43248.md) | High | vhost: move vdpa group bound check to vhost_vdpa | 8.8 | 0.0016 |  |
| [CVE-2026-31505](https://patchblox.com/security/data/cve/CVE-2026-31505.md) | High | iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() | 7.8 | 0.0016 |  |
| [CVE-2026-31675](https://patchblox.com/security/data/cve/CVE-2026-31675.md) | High | net/sched: sch_netem: fix out-of-bounds access in packet corruption | 7.8 | 0.0016 |  |
| [CVE-2026-31680](https://patchblox.com/security/data/cve/CVE-2026-31680.md) | High | net: ipv6: flowlabel: defer exclusive option free until RCU teardown | 7.8 | 0.0016 |  |
| [CVE-2026-43126](https://patchblox.com/security/data/cve/CVE-2026-43126.md) | High | ALSA: mixer: oss: Add card disconnect checkpoints | 7.8 | 0.0016 |  |
| [CVE-2026-45853](https://patchblox.com/security/data/cve/CVE-2026-45853.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amdgpu: Use kvfree instead of kfree in amdgp... | 7.8 | 0.0016 |  |
| [CVE-2026-45916](https://patchblox.com/security/data/cve/CVE-2026-45916.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  power: supply: sbs-battery: Fix use-after-free i... | 7.8 | 0.0016 |  |
| [CVE-2026-45851](https://patchblox.com/security/data/cve/CVE-2026-45851.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  efi: Fix reservation of unaccepted memory table... | 7.1 | 0.0016 |  |
| [CVE-2026-43368](https://patchblox.com/security/data/cve/CVE-2026-43368.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential overflow of shmem scatter... | 8.8 | 0.0016 |  |
| [CVE-2026-31506](https://patchblox.com/security/data/cve/CVE-2026-31506.md) | High | net: bcmasp: fix double free of WoL irq | 7.8 | 0.0016 |  |
| [CVE-2026-31525](https://patchblox.com/security/data/cve/CVE-2026-31525.md) | High | bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN | 7.8 | 0.0016 |  |
| [CVE-2026-43332](https://patchblox.com/security/data/cve/CVE-2026-43332.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: t... | 7.8 | 0.0016 |  |
| [CVE-2026-43408](https://patchblox.com/security/data/cve/CVE-2026-43408.md) | High | kernel-rt-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0016 |  |
| [CVE-2026-31406](https://patchblox.com/security/data/cve/CVE-2026-31406.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm: Fix work re-schedule after cancel in xfrm_... | 7.8 | 0.0016 |  |
| [CVE-2026-23413](https://patchblox.com/security/data/cve/CVE-2026-23413.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  clsact: Fix use-after-free in init/destroy rollb... | 7.8 | 0.0016 |  |
| [CVE-2026-31679](https://patchblox.com/security/data/cve/CVE-2026-31679.md) | High | openvswitch: validate MPLS set/set_masked payload length | 7.1 | 0.0016 |  |
| [CVE-2026-45886](https://patchblox.com/security/data/cve/CVE-2026-45886.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix bpf_xdp_store_bytes proto for read-only... | 7.0 | 0.0016 |  |
| [CVE-2026-45892](https://patchblox.com/security/data/cve/CVE-2026-45892.md) | High | ext4: drop extent cache after doing PARTIAL_VALID1 zeroout | 7.0 | 0.0016 |  |
| [CVE-2026-45962](https://patchblox.com/security/data/cve/CVE-2026-45962.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ublk: Validate SQE128 flag before accessing the... | 7.0 | 0.0016 |  |
| [CVE-2026-31530](https://patchblox.com/security/data/cve/CVE-2026-31530.md) | High | cxl/port: Fix use after free of parent_port in cxl_detach_ep() | 7.8 | 0.0016 |  |
| [CVE-2026-43374](https://patchblox.com/security/data/cve/CVE-2026-43374.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: nexthop: fix percpu use-after-free in remov... | 7.8 | 0.0016 |  |
| [CVE-2026-43437](https://patchblox.com/security/data/cve/CVE-2026-43437.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: pcm: fix use-after-free on linked stream r... | 7.8 | 0.0016 |  |
| [CVE-2026-45943](https://patchblox.com/security/data/cve/CVE-2026-45943.md) | High | erofs: fix inline data read failure for ztailpacking pclusters | 7.1 | 0.0016 |  |
| [CVE-2026-43339](https://patchblox.com/security/data/cve/CVE-2026-43339.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... | 8.1 | 0.0016 |  |
| [CVE-2026-23412](https://patchblox.com/security/data/cve/CVE-2026-23412.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: bpf: defer hook memory release until... | 7.8 | 0.0016 |  |
| [CVE-2026-43049](https://patchblox.com/security/data/cve/CVE-2026-43049.md) | High | HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure | 7.8 | 0.0015 |  |
| [CVE-2026-43491](https://patchblox.com/security/data/cve/CVE-2026-43491.md) | High | net: qrtr: ns: Limit the maximum server registration per node | 7.0 | 0.0015 |  |
| [CVE-2025-39979](https://patchblox.com/security/data/cve/CVE-2025-39979.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5: fs, fix UAF in flow counter release  F... | 7.8 | 0.0015 |  |
| [CVE-2026-31449](https://patchblox.com/security/data/cve/CVE-2026-31449.md) | High | ext4: validate p_idx bounds in ext4_ext_correct_indexes | 7.8 | 0.0015 |  |
| [CVE-2026-43459](https://patchblox.com/security/data/cve/CVE-2026-43459.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: soc-core: flush delayed work before removi... | 7.3 | 0.0015 |  |
| [CVE-2026-45920](https://patchblox.com/security/data/cve/CVE-2026-45920.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: fix dirtyclusters double decrement on fs s... | 7.8 | 0.0015 |  |
| [CVE-2026-23253](https://patchblox.com/security/data/cve/CVE-2026-23253.md) | High | media: dvb-core: fix wrong reinitialization of ringbuffer on reopen | 7.8 | 0.0015 |  |
| [CVE-2025-68736](https://patchblox.com/security/data/cve/CVE-2025-68736.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  landlock: Fix handling of disconnected directori... | 8.8 | 0.0014 |  |
| [CVE-2025-71152](https://patchblox.com/security/data/cve/CVE-2025-71152.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: dsa: properly keep track of conduit referen... | 7.8 | 0.0014 |  |
| [CVE-2026-31426](https://patchblox.com/security/data/cve/CVE-2026-31426.md) | High | ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() | 7.0 | 0.0014 |  |
| [CVE-2026-31447](https://patchblox.com/security/data/cve/CVE-2026-31447.md) | High | ext4: reject mount if bigalloc with s_first_data_block != 0 | 7.8 | 0.0014 |  |
| [CVE-2026-46006](https://patchblox.com/security/data/cve/CVE-2026-46006.md) | High | drm/nouveau: fix u32 overflow in pushbuf reloc bounds check | 7.8 | 0.0014 |  |
| [CVE-2026-31772](https://patchblox.com/security/data/cve/CVE-2026-31772.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: hci_sync: fix stack buffer overflow i... | 7.8 | 0.0014 |  |
| [CVE-2026-46069](https://patchblox.com/security/data/cve/CVE-2026-46069.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 7.8 | 0.0014 |  |
| [CVE-2026-46021](https://patchblox.com/security/data/cve/CVE-2026-46021.md) | High | thermal: core: Fix thermal zone governor cleanup issues | 7.0 | 0.0014 |  |
| [CVE-2026-46076](https://patchblox.com/security/data/cve/CVE-2026-46076.md) | High | KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 | 8.8 | 0.0014 |  |
| [CVE-2026-23444](https://patchblox.com/security/data/cve/CVE-2026-23444.md) | High | wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure | 7.1 | 0.0014 |  |
| [CVE-2026-23343](https://patchblox.com/security/data/cve/CVE-2026-23343.md) | High | xdp: produce a warning when calculated tailroom is negative | 7.8 | 0.0014 |  |
| [CVE-2026-23359](https://patchblox.com/security/data/cve/CVE-2026-23359.md) | High | bpf: Fix stack-out-of-bounds write in devmap | 7.8 | 0.0014 |  |
| [CVE-2026-31488](https://patchblox.com/security/data/cve/CVE-2026-31488.md) | High | drm/amd/display: Do not skip unrelated mode changes in DSC validation | 7.8 | 0.0014 |  |
| [CVE-2026-43128](https://patchblox.com/security/data/cve/CVE-2026-43128.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/umem: Fix double dma_buf_unpin in failure p... | 8.1 | 0.0014 |  |
| [CVE-2026-23245](https://patchblox.com/security/data/cve/CVE-2026-23245.md) | High | net/sched: act_gate: snapshot parameters with RCU on replace | 7.8 | 0.0014 |  |
| [CVE-2026-23317](https://patchblox.com/security/data/cve/CVE-2026-23317.md) | High | drm/vmwgfx: Return the correct value in vmw_translate_ptr functions | 7.8 | 0.0014 |  |
| [CVE-2026-31446](https://patchblox.com/security/data/cve/CVE-2026-31446.md) | High | ext4: fix use-after-free in update_super_work when racing with umount | 7.8 | 0.0014 |  |
| [CVE-2026-43150](https://patchblox.com/security/data/cve/CVE-2026-43150.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  perf/arm-cmn: Reject unsupported hardware config... | 7.8 | 0.0014 |  |
| [CVE-2026-43206](https://patchblox.com/security/data/cve/CVE-2026-43206.md) | High | kernel-zfcpdump-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: m... | 7.8 | 0.0014 |  |
| [CVE-2026-23318](https://patchblox.com/security/data/cve/CVE-2026-23318.md) | High | ALSA: usb-audio: Use correct version for UAC3 header validation | 7.7 | 0.0014 |  |
| [CVE-2026-23336](https://patchblox.com/security/data/cve/CVE-2026-23336.md) | High | wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() | 7.8 | 0.0014 |  |
| [CVE-2026-43260](https://patchblox.com/security/data/cve/CVE-2026-43260.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bnxt_en: Fix RSS context delete logic  We need t... | 7.8 | 0.0014 |  |
| [CVE-2026-23449](https://patchblox.com/security/data/cve/CVE-2026-23449.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 7.8 | 0.0014 |  |
| [CVE-2026-23458](https://patchblox.com/security/data/cve/CVE-2026-23458.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 7.8 | 0.0014 |  |
| [CVE-2026-45998](https://patchblox.com/security/data/cve/CVE-2026-45998.md) | High | rxrpc: Fix potential UAF after skb_unshare() failure | 7.8 | 0.0014 |  |
| [CVE-2026-23319](https://patchblox.com/security/data/cve/CVE-2026-23319.md) | High | bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim | 7.8 | 0.0014 |  |
| [CVE-2026-23390](https://patchblox.com/security/data/cve/CVE-2026-23390.md) | High | tracing/dma: Cap dma_map_sg tracepoint arrays to prevent buffer overflow | 7.8 | 0.0014 |  |
| [CVE-2026-46033](https://patchblox.com/security/data/cve/CVE-2026-46033.md) | High | crypto: authencesn - reject short ahash digests during instance creation | 7.3 | 0.0014 |  |
| [CVE-2026-46080](https://patchblox.com/security/data/cve/CVE-2026-46080.md) | High | ocfs2: split transactions in dio completion to avoid credit exhaustion | 7.1 | 0.0014 |  |
| [CVE-2026-46015](https://patchblox.com/security/data/cve/CVE-2026-46015.md) | High | tcp: call sk_data_ready() after listener migration | 8.1 | 0.0014 |  |
| [CVE-2026-31452](https://patchblox.com/security/data/cve/CVE-2026-31452.md) | High | ext4: convert inline data to extents when truncate exceeds inline size | 7.8 | 0.0014 |  |
| [CVE-2026-31469](https://patchblox.com/security/data/cve/CVE-2026-31469.md) | High | virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false | 7.8 | 0.0014 |  |
| [CVE-2026-31494](https://patchblox.com/security/data/cve/CVE-2026-31494.md) | High | net: macb: use the current queue number for stats | 7.8 | 0.0014 |  |
| [CVE-2026-31696](https://patchblox.com/security/data/cve/CVE-2026-31696.md) | High | rxrpc: Fix missing validation of ticket length in non-XDR key preparsing | 7.8 | 0.0014 |  |
| [CVE-2026-43030](https://patchblox.com/security/data/cve/CVE-2026-43030.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix regsafe() for pointers to packet  In ca... | 7.8 | 0.0014 |  |
| [CVE-2026-43093](https://patchblox.com/security/data/cve/CVE-2026-43093.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: tighten UMEM headroom validation to account... | 7.8 | 0.0014 |  |
| [CVE-2026-23351](https://patchblox.com/security/data/cve/CVE-2026-23351.md) | High | netfilter: nft_set_pipapo: split gc into unlink and reclaim phase | 7.8 | 0.0013 |  |
| [CVE-2026-23354](https://patchblox.com/security/data/cve/CVE-2026-23354.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  x86/fred: Correct speculative safety in fred_ext... | 7.8 | 0.0013 |  |
| [CVE-2026-23442](https://patchblox.com/security/data/cve/CVE-2026-23442.md) | High | ipv6: add NULL checks for idev in SRv6 paths | 7.8 | 0.0013 |  |
| [CVE-2026-23447](https://patchblox.com/security/data/cve/CVE-2026-23447.md) | High | net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check | 7.8 | 0.0013 |  |
| [CVE-2026-23448](https://patchblox.com/security/data/cve/CVE-2026-23448.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: cdc_ncm: add ndpoffset to NDP16 nframe... | 7.8 | 0.0013 |  |
| [CVE-2026-23293](https://patchblox.com/security/data/cve/CVE-2026-23293.md) | High | net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled | 7.5 | 0.0013 |  |
| [CVE-2026-23300](https://patchblox.com/security/data/cve/CVE-2026-23300.md) | High | net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop | 7.5 | 0.0013 |  |
| [CVE-2026-23335](https://patchblox.com/security/data/cve/CVE-2026-23335.md) | High | RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() | 7.1 | 0.0013 |  |
| [CVE-2026-23352](https://patchblox.com/security/data/cve/CVE-2026-23352.md) | High | x86/efi: defer freeing of boot services memory | 7.1 | 0.0013 |  |
| [CVE-2026-43133](https://patchblox.com/security/data/cve/CVE-2026-43133.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emu... | 8.1 | 0.0013 |  |
| [CVE-2026-23281](https://patchblox.com/security/data/cve/CVE-2026-23281.md) | High | wifi: libertas: fix use-after-free in lbs_free_adapter() | 7.8 | 0.0013 |  |
| [CVE-2026-46023](https://patchblox.com/security/data/cve/CVE-2026-46023.md) | High | dm mirror: fix integer overflow in create_dirty_log() | 7.0 | 0.0013 |  |
| [CVE-2026-31678](https://patchblox.com/security/data/cve/CVE-2026-31678.md) | High | openvswitch: defer tunnel netdev_put to RCU release | 8.8 | 0.0013 |  |
| [CVE-2026-43450](https://patchblox.com/security/data/cve/CVE-2026-43450.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: f... | 8.8 | 0.0013 |  |
| [CVE-2026-31586](https://patchblox.com/security/data/cve/CVE-2026-31586.md) | High | mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() | 7.8 | 0.0013 |  |
| [CVE-2026-43178](https://patchblox.com/security/data/cve/CVE-2026-43178.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  procfs: fix possible double mmput() in do_procma... | 7.8 | 0.0013 |  |
| [CVE-2026-31697](https://patchblox.com/security/data/cve/CVE-2026-31697.md) | High | crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | 7.1 | 0.0013 |  |
| [CVE-2026-31698](https://patchblox.com/security/data/cve/CVE-2026-31698.md) | High | crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | 7.1 | 0.0013 |  |
| [CVE-2026-31699](https://patchblox.com/security/data/cve/CVE-2026-31699.md) | High | crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | 7.1 | 0.0013 |  |
| [CVE-2026-43028](https://patchblox.com/security/data/cve/CVE-2026-43028.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: x_tables: ensure names are nul-termin... | 7.1 | 0.0013 |  |
| [CVE-2026-43427](https://patchblox.com/security/data/cve/CVE-2026-43427.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: class: cdc-wdm: fix reordering issue in rea... | 7.1 | 0.0013 |  |
| [CVE-2026-46078](https://patchblox.com/security/data/cve/CVE-2026-46078.md) | High | erofs: fix the out-of-bounds nameoff handling for trailing dirents | 7.1 | 0.0013 |  |
| [CVE-2026-45894](https://patchblox.com/security/data/cve/CVE-2026-45894.md) | High | iommu/vt-d: Clear Present bit before tearing down PASID entry | 8.8 | 0.0013 |  |
| [CVE-2026-23391](https://patchblox.com/security/data/cve/CVE-2026-23391.md) | High | netfilter: xt_CT: drop pending enqueued packets on template removal | 7.8 | 0.0013 |  |
| [CVE-2026-31403](https://patchblox.com/security/data/cve/CVE-2026-31403.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 7.8 | 0.0013 |  |
| [CVE-2026-31580](https://patchblox.com/security/data/cve/CVE-2026-31580.md) | High | bcache: fix cached_dev.sb_bio use-after-free and crash | 7.8 | 0.0013 |  |
| [CVE-2026-31583](https://patchblox.com/security/data/cve/CVE-2026-31583.md) | High | media: em28xx: fix use-after-free in em28xx_v4l2_open() | 7.8 | 0.0013 |  |
| [CVE-2026-31602](https://patchblox.com/security/data/cve/CVE-2026-31602.md) | High | ALSA: ctxfi: Limit PTP to a single page | 7.8 | 0.0013 |  |
| [CVE-2026-43027](https://patchblox.com/security/data/cve/CVE-2026-43027.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_conntrack_helper: pass helper to e... | 7.8 | 0.0013 |  |
| [CVE-2026-43076](https://patchblox.com/security/data/cve/CVE-2026-43076.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ocfs2: validate inline data i_size during inode... | 7.8 | 0.0013 |  |
| [CVE-2026-45862](https://patchblox.com/security/data/cve/CVE-2026-45862.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Flush cache for PASID table before u... | 7.8 | 0.0013 |  |
| [CVE-2026-23315](https://patchblox.com/security/data/cve/CVE-2026-23315.md) | High | wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() | 7.1 | 0.0013 |  |
| [CVE-2026-23306](https://patchblox.com/security/data/cve/CVE-2026-23306.md) | High | scsi: pm8001: Fix use-after-free in pm8001_queue_command() | 7.8 | 0.0013 |  |
| [CVE-2026-31453](https://patchblox.com/security/data/cve/CVE-2026-31453.md) | High | xfs: avoid dereferencing log items after push callbacks | 7.8 | 0.0013 |  |
| [CVE-2026-31673](https://patchblox.com/security/data/cve/CVE-2026-31673.md) | High | af_unix: read UNIX_DIAG_VFS data under unix_state_lock | 7.8 | 0.0013 |  |
| [CVE-2026-43091](https://patchblox.com/security/data/cve/CVE-2026-43091.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm: Wait for RCU readers during policy netns e... | 7.8 | 0.0013 |  |
| [CVE-2026-23367](https://patchblox.com/security/data/cve/CVE-2026-23367.md) | High | wifi: radiotap: reject radiotap with unknown bits | 7.1 | 0.0013 |  |
| [CVE-2026-31479](https://patchblox.com/security/data/cve/CVE-2026-31479.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe: always keep track of remap prev/next Duri... | 8.8 | 0.0013 |  |
| [CVE-2026-43403](https://patchblox.com/security/data/cve/CVE-2026-43403.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nsfs: tighten permission checks for ns iteration... | 8.8 | 0.0013 |  |
| [CVE-2026-31489](https://patchblox.com/security/data/cve/CVE-2026-31489.md) | High | spi: meson-spicc: Fix double-put in remove path | 7.8 | 0.0013 |  |
| [CVE-2026-31511](https://patchblox.com/security/data/cve/CVE-2026-31511.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: MGMT: Fix dangling pointer on mgmt_ad... | 7.8 | 0.0013 |  |
| [CVE-2026-31527](https://patchblox.com/security/data/cve/CVE-2026-31527.md) | High | driver core: platform: use generic driver_override infrastructure | 7.8 | 0.0013 |  |
| [CVE-2026-31528](https://patchblox.com/security/data/cve/CVE-2026-31528.md) | High | perf: Make sure to use pmu_ctx->pmu for groups | 7.8 | 0.0013 |  |
| [CVE-2026-31729](https://patchblox.com/security/data/cve/CVE-2026-31729.md) | High | usb: typec: ucsi: validate connector number in ucsi_notify_common() | 7.8 | 0.0013 |  |
| [CVE-2026-31759](https://patchblox.com/security/data/cve/CVE-2026-31759.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: ulpi: fix double free in ulpi_register_inte... | 7.8 | 0.0013 |  |
| [CVE-2026-43020](https://patchblox.com/security/data/cve/CVE-2026-43020.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: MGMT: validate LTK enc_size on load... | 7.8 | 0.0013 |  |
| [CVE-2026-43328](https://patchblox.com/security/data/cve/CVE-2026-43328.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  cpufreq: governor: fix double free in cpufreq_db... | 7.8 | 0.0013 |  |
| [CVE-2026-46004](https://patchblox.com/security/data/cve/CVE-2026-46004.md) | High | ALSA: caiaq: Handle probe errors properly | 7.8 | 0.0013 |  |
| [CVE-2026-46084](https://patchblox.com/security/data/cve/CVE-2026-46084.md) | High | RDMA/mana_ib: Disable RX steering on RSS QP destroy | 7.8 | 0.0013 |  |
| [CVE-2026-46086](https://patchblox.com/security/data/cve/CVE-2026-46086.md) | High | net: bridge: use a stable FDB dst snapshot in RCU readers | 7.8 | 0.0013 |  |
| [CVE-2026-31518](https://patchblox.com/security/data/cve/CVE-2026-31518.md) | High | esp: fix skb leak with espintcp and async crypto | 7.1 | 0.0013 |  |
| [CVE-2026-31624](https://patchblox.com/security/data/cve/CVE-2026-31624.md) | High | HID: core: clamp report_size in s32ton() to avoid undefined shift | 7.1 | 0.0013 |  |
| [CVE-2026-43040](https://patchblox.com/security/data/cve/CVE-2026-43040.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: ipv6: ndisc: fix ndisc_ra_useropt to initia... | 7.1 | 0.0013 |  |
| [CVE-2026-23454](https://patchblox.com/security/data/cve/CVE-2026-23454.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:  The following security issues we... | 7.0 | 0.0013 |  |
| [CVE-2026-31515](https://patchblox.com/security/data/cve/CVE-2026-31515.md) | High | af_key: validate families in pfkey_send_migrate() | 7.0 | 0.0013 |  |
| [CVE-2026-31521](https://patchblox.com/security/data/cve/CVE-2026-31521.md) | High | module: Fix kernel panic when a symbol st_shndx is out of bounds | 7.0 | 0.0013 |  |
| [CVE-2026-31555](https://patchblox.com/security/data/cve/CVE-2026-31555.md) | High | futex: Clear stale exiting pointer in futex_lock_pi() retry path | 7.0 | 0.0013 |  |
| [CVE-2026-31581](https://patchblox.com/security/data/cve/CVE-2026-31581.md) | High | ALSA: 6fire: fix use-after-free on disconnect | 8.8 | 0.0013 |  |
| [CVE-2026-23262](https://patchblox.com/security/data/cve/CVE-2026-23262.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  gve: Fix stats report corruption on queue count... | 7.8 | 0.0013 |  |
| [CVE-2026-31578](https://patchblox.com/security/data/cve/CVE-2026-31578.md) | High | media: as102: fix to not free memory after the device is registered in as102_usb_probe() | 7.8 | 0.0013 |  |
| [CVE-2026-31597](https://patchblox.com/security/data/cve/CVE-2026-31597.md) | High | ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY | 7.8 | 0.0013 |  |
| [CVE-2026-46047](https://patchblox.com/security/data/cve/CVE-2026-46047.md) | High | net: qrtr: ns: Fix use-after-free in driver remove() | 7.8 | 0.0013 |  |
| [CVE-2026-43025](https://patchblox.com/security/data/cve/CVE-2026-43025.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: ctnetlink: ignore explicit helper on... | 7.3 | 0.0013 |  |
| [CVE-2026-23244](https://patchblox.com/security/data/cve/CVE-2026-23244.md) | High | nvme: fix memory allocation in nvme_pr_read_keys() | 7.1 | 0.0013 |  |
| [CVE-2026-46070](https://patchblox.com/security/data/cve/CVE-2026-46070.md) | High | md/raid5: validate payload size before accessing journal metadata | 7.1 | 0.0013 |  |
| [CVE-2026-45942](https://patchblox.com/security/data/cve/CVE-2026-45942.md) | High | ext4: fix e4b bitmap inconsistency reports | 8.8 | 0.0013 |  |
| [CVE-2026-31396](https://patchblox.com/security/data/cve/CVE-2026-31396.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: macb: fix use-after-free access to PTP cloc... | 7.8 | 0.0013 |  |
| [CVE-2026-43366](https://patchblox.com/security/data/cve/CVE-2026-43366.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 7.8 | 0.0013 |  |
| [CVE-2026-23289](https://patchblox.com/security/data/cve/CVE-2026-23289.md) | High | IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() | 7.1 | 0.0013 |  |
| [CVE-2026-23296](https://patchblox.com/security/data/cve/CVE-2026-23296.md) | High | scsi: core: Fix refcount leak for tagset_refcnt | 7.1 | 0.0013 |  |
| [CVE-2026-23310](https://patchblox.com/security/data/cve/CVE-2026-23310.md) | High | bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded | 7.1 | 0.0013 |  |
| [CVE-2026-23397](https://patchblox.com/security/data/cve/CVE-2026-23397.md) | High | nfnetlink_osf: validate individual option lengths in fingerprints | 7.1 | 0.0013 |  |
| [CVE-2026-31566](https://patchblox.com/security/data/cve/CVE-2026-31566.md) | High | drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib | 8.8 | 0.0013 |  |
| [CVE-2026-45970](https://patchblox.com/security/data/cve/CVE-2026-45970.md) | High | kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0013 |  |
| [CVE-2026-31454](https://patchblox.com/security/data/cve/CVE-2026-31454.md) | High | xfs: save ailp before dropping the AIL lock in push callbacks | 7.8 | 0.0013 |  |
| [CVE-2026-31455](https://patchblox.com/security/data/cve/CVE-2026-31455.md) | High | xfs: stop reclaim before pushing AIL during unmount | 7.8 | 0.0013 |  |
| [CVE-2026-31500](https://patchblox.com/security/data/cve/CVE-2026-31500.md) | High | Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock | 7.8 | 0.0013 |  |
| [CVE-2026-31758](https://patchblox.com/security/data/cve/CVE-2026-31758.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 7.8 | 0.0013 |  |
| [CVE-2026-43015](https://patchblox.com/security/data/cve/CVE-2026-43015.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: macb: fix clk handling on PCI glue driver r... | 7.8 | 0.0013 |  |
| [CVE-2026-43016](https://patchblox.com/security/data/cve/CVE-2026-43016.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: sockmap: Fix use-after-free of sk->sk_socke... | 7.8 | 0.0013 |  |
| [CVE-2026-43063](https://patchblox.com/security/data/cve/CVE-2026-43063.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: don't irele after failing to iget in xfs_at... | 7.8 | 0.0013 |  |
| [CVE-2026-43075](https://patchblox.com/security/data/cve/CVE-2026-43075.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ocfs2: fix out-of-bounds write in ocfs2_write_en... | 7.8 | 0.0013 |  |
| [CVE-2026-45914](https://patchblox.com/security/data/cve/CVE-2026-45914.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Revert "hwmon: (ibmpex) fix use-after-free in hi... | 7.8 | 0.0013 |  |
| [CVE-2026-31470](https://patchblox.com/security/data/cve/CVE-2026-31470.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 7.1 | 0.0013 |  |
| [CVE-2026-31614](https://patchblox.com/security/data/cve/CVE-2026-31614.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 7.1 | 0.0013 |  |
| [CVE-2026-31774](https://patchblox.com/security/data/cve/CVE-2026-31774.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/net: fix slab-out-of-bounds read in io_... | 7.1 | 0.0013 |  |
| [CVE-2026-31778](https://patchblox.com/security/data/cve/CVE-2026-31778.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: caiaq: fix stack out-of-bounds read in ini... | 7.1 | 0.0013 |  |
| [CVE-2026-43449](https://patchblox.com/security/data/cve/CVE-2026-43449.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_s... | 7.1 | 0.0013 |  |
| [CVE-2026-43453](https://patchblox.com/security/data/cve/CVE-2026-43453.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nft_set_pipapo: fix stack out-of-boun... | 7.1 | 0.0013 |  |
| [CVE-2026-45957](https://patchblox.com/security/data/cve/CVE-2026-45957.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  rcu: Fix rcu_read_unlock() deadloop due to softi... | 7.1 | 0.0013 |  |
| [CVE-2026-45910](https://patchblox.com/security/data/cve/CVE-2026-45910.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: L... | 8.8 | 0.0013 |  |
| [CVE-2026-31503](https://patchblox.com/security/data/cve/CVE-2026-31503.md) | High | udp: Fix wildcard bind conflict check when using hash2 | 7.8 | 0.0013 |  |
| [CVE-2026-43438](https://patchblox.com/security/data/cve/CVE-2026-43438.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Remove redundant css_put() in scx_cgr... | 7.8 | 0.0013 |  |
| [CVE-2026-46094](https://patchblox.com/security/data/cve/CVE-2026-46094.md) | High | ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access | 7.1 | 0.0013 |  |
| [CVE-2026-23374](https://patchblox.com/security/data/cve/CVE-2026-23374.md) | High | blktrace: fix __this_cpu_read/write in preemptible context | 8.4 | 0.0012 |  |
| [CVE-2026-31389](https://patchblox.com/security/data/cve/CVE-2026-31389.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  spi: fix use-after-free on controller registrati... | 7.8 | 0.0012 |  |
| [CVE-2026-23388](https://patchblox.com/security/data/cve/CVE-2026-23388.md) | High | Squashfs: check metadata block offset is within range | 7.1 | 0.0012 |  |
| [CVE-2026-43370](https://patchblox.com/security/data/cve/CVE-2026-43370.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire... | 8.8 | 0.0012 |  |
| [CVE-2026-43077](https://patchblox.com/security/data/cve/CVE-2026-43077.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues  The following security issues wer... | 8.1 | 0.0012 |  |
| [CVE-2026-31665](https://patchblox.com/security/data/cve/CVE-2026-31665.md) | High | netfilter: nft_ct: fix use-after-free in timeout object destroy | 7.8 | 0.0012 |  |
| [CVE-2026-43120](https://patchblox.com/security/data/cve/CVE-2026-43120.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/irdma: Fix double free related to rereg_use... | 7.8 | 0.0012 |  |
| [CVE-2026-43279](https://patchblox.com/security/data/cve/CVE-2026-43279.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes... | 7.8 | 0.0012 |  |
| [CVE-2026-23375](https://patchblox.com/security/data/cve/CVE-2026-23375.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: mm: thp: deny THP for files on anonymous inodes f... | 7.5 | 0.0012 |  |
| [CVE-2026-23386](https://patchblox.com/security/data/cve/CVE-2026-23386.md) | High | gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL | 7.1 | 0.0012 |  |
| [CVE-2026-31492](https://patchblox.com/security/data/cve/CVE-2026-31492.md) | High | RDMA/irdma: Initialize free_qp completion before using it | 7.1 | 0.0012 |  |
| [CVE-2026-31512](https://patchblox.com/security/data/cve/CVE-2026-31512.md) | High | Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() | 7.1 | 0.0012 |  |
| [CVE-2026-31519](https://patchblox.com/security/data/cve/CVE-2026-31519.md) | High | btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create | 7.1 | 0.0012 |  |
| [CVE-2026-43052](https://patchblox.com/security/data/cve/CVE-2026-43052.md) | High | wifi: mac80211: check tdls flag in ieee80211_tdls_oper | 7.1 | 0.0012 |  |
| [CVE-2026-45912](https://patchblox.com/security/data/cve/CVE-2026-45912.md) | High | ext4: don't cache extent during splitting extent | 7.1 | 0.0012 |  |
| [CVE-2026-46091](https://patchblox.com/security/data/cve/CVE-2026-46091.md) | High | media: rc: igorplugusb: heed coherency rules | 7.1 | 0.0012 |  |
| [CVE-2026-31498](https://patchblox.com/security/data/cve/CVE-2026-31498.md) | High | Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop | 7.0 | 0.0012 |  |
| [CVE-2026-45983](https://patchblox.com/security/data/cve/CVE-2026-45983.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: never defer requests during idmap lookup... | 7.0 | 0.0012 |  |
| [CVE-2026-45985](https://patchblox.com/security/data/cve/CVE-2026-45985.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: don't set EXT4_GET_BLOCKS_CONVERT when spl... | 7.0 | 0.0012 |  |
| [CVE-2026-46028](https://patchblox.com/security/data/cve/CVE-2026-46028.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: algif_aead - snapshot IV for async AEAD... | 7.0 | 0.0012 |  |
| [CVE-2026-31593](https://patchblox.com/security/data/cve/CVE-2026-31593.md) | High | KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU | 8.8 | 0.0012 |  |
| [CVE-2026-31399](https://patchblox.com/security/data/cve/CVE-2026-31399.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  nvdimm/bus: Fix potential use after free in asyn... | 7.8 | 0.0012 |  |
| [CVE-2026-43306](https://patchblox.com/security/data/cve/CVE-2026-43306.md) | High | bpf: crypto: Use the correct destructor kfunc type | 7.0 | 0.0012 |  |
| [CVE-2026-31392](https://patchblox.com/security/data/cve/CVE-2026-31392.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix krb5 mount with username option... | 8.1 | 0.0012 |  |
| [CVE-2026-31683](https://patchblox.com/security/data/cve/CVE-2026-31683.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  batman-adv: avoid OGM aggregation when skb tailr... | 7.8 | 0.0012 |  |
| [CVE-2026-43047](https://patchblox.com/security/data/cve/CVE-2026-43047.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  HID: multitouch: Check to ensure report response... | 7.8 | 0.0012 |  |
| [CVE-2026-43060](https://patchblox.com/security/data/cve/CVE-2026-43060.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nft_ct: drop pending enqueued packets... | 7.8 | 0.0012 |  |
| [CVE-2026-31416](https://patchblox.com/security/data/cve/CVE-2026-31416.md) | High | netfilter: nfnetlink_log: account for netlink header size | 8.1 | 0.0012 |  |
| [CVE-2026-31418](https://patchblox.com/security/data/cve/CVE-2026-31418.md) | High | netfilter: ipset: drop logically empty buckets in mtype_del | 8.1 | 0.0012 |  |
| [CVE-2026-31427](https://patchblox.com/security/data/cve/CVE-2026-31427.md) | High | netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp | 7.8 | 0.0012 |  |
| [CVE-2026-31648](https://patchblox.com/security/data/cve/CVE-2026-31648.md) | High | mm: filemap: fix nr_pages calculation overflow in filemap_map_pages() | 7.8 | 0.0012 |  |
| [CVE-2026-31666](https://patchblox.com/security/data/cve/CVE-2026-31666.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix incorrect return value after changing... | 7.8 | 0.0012 |  |
| [CVE-2026-31776](https://patchblox.com/security/data/cve/CVE-2026-31776.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: ctxfi: Fix missing SPDIFI1 index handling... | 7.8 | 0.0012 |  |
| [CVE-2026-31658](https://patchblox.com/security/data/cve/CVE-2026-31658.md) | High | net: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit() | 7.1 | 0.0012 |  |
| [CVE-2026-31487](https://patchblox.com/security/data/cve/CVE-2026-31487.md) | High | spi: use generic driver_override infrastructure | 7.0 | 0.0012 |  |
| [CVE-2026-43281](https://patchblox.com/security/data/cve/CVE-2026-43281.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mailbox: Prevent out-of-bounds access in fw_mbox... | 7.1 | 0.0012 |  |
| [CVE-2026-43050](https://patchblox.com/security/data/cve/CVE-2026-43050.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  atm: lec: fix use-after-free in sock_def_readabl... | 7.0 | 0.0012 |  |
| [CVE-2026-43056](https://patchblox.com/security/data/cve/CVE-2026-43056.md) | High | kernel-default-base: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:  The following security issues we... | 8.8 | 0.0012 |  |
| [CVE-2026-43134](https://patchblox.com/security/data/cve/CVE-2026-43134.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: L2CAP: Fix missing key size check for... | 8.1 | 0.0012 |  |
| [CVE-2026-23340](https://patchblox.com/security/data/cve/CVE-2026-23340.md) | High | net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs | 7.8 | 0.0012 |  |
| [CVE-2026-31684](https://patchblox.com/security/data/cve/CVE-2026-31684.md) | High | net: sched: act_csum: validate nested VLAN headers | 7.8 | 0.0012 |  |
| [CVE-2026-43278](https://patchblox.com/security/data/cve/CVE-2026-43278.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  dm: clear cloned request bio pointer when last c... | 7.8 | 0.0012 |  |
| [CVE-2026-23271](https://patchblox.com/security/data/cve/CVE-2026-23271.md) | High | perf: Fix __perf_event_overflow() vs perf_remove_from_context() race | 7.8 | 0.0011 |  |
| [CVE-2026-31700](https://patchblox.com/security/data/cve/CVE-2026-31700.md) | High | net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() | 7.8 | 0.0011 |  |
| [CVE-2026-43211](https://patchblox.com/security/data/cve/CVE-2026-43211.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  PCI: Fix pci_slot_trylock() error handling  Comm... | 7.8 | 0.0011 |  |
| [CVE-2026-43214](https://patchblox.com/security/data/cve/CVE-2026-43214.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: x86: Add SRCU protection for reading PDPTRs... | 7.8 | 0.0011 |  |
| [CVE-2026-31508](https://patchblox.com/security/data/cve/CVE-2026-31508.md) | High | net: openvswitch: Avoid releasing netdev before teardown completes | 8.8 | 0.0011 |  |
| [CVE-2026-31474](https://patchblox.com/security/data/cve/CVE-2026-31474.md) | High | can: isotp: fix tx.buf use-after-free in isotp_sendmsg() | 7.8 | 0.0010 |  |
| [CVE-2026-31761](https://patchblox.com/security/data/cve/CVE-2026-31761.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  iio: gyro: mpu3050: Move iio_device_register() t... | 7.8 | 0.0010 |  |
| [CVE-2026-31516](https://patchblox.com/security/data/cve/CVE-2026-31516.md) | High | xfrm: prevent policy_hthresh.work from racing with netns teardown | 7.8 | 0.0010 |  |
| [CVE-2026-31548](https://patchblox.com/security/data/cve/CVE-2026-31548.md) | High | wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down | 7.8 | 0.0010 |  |
| [CVE-2026-43019](https://patchblox.com/security/data/cve/CVE-2026-43019.md) | High | Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync | 7.8 | 0.0010 |  |
| [CVE-2026-43180](https://patchblox.com/security/data/cve/CVE-2026-43180.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: kaweth: remove TX queue manipulation i... | 7.8 | 0.0010 |  |
| [CVE-2026-43111](https://patchblox.com/security/data/cve/CVE-2026-43111.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  HID: roccat: fix use-after-free in roccat_report... | 7.8 | 0.0010 |  |
| [CVE-2026-31473](https://patchblox.com/security/data/cve/CVE-2026-31473.md) | High | media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex | 7.8 | 0.0010 |  |
| [CVE-2026-31731](https://patchblox.com/security/data/cve/CVE-2026-31731.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  thermal: core: Address thermal zone removal race... | 7.8 | 0.0010 |  |
| [CVE-2026-43023](https://patchblox.com/security/data/cve/CVE-2026-43023.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in sco_sock_c... | 7.8 | 0.0010 |  |
| [CVE-2026-23210](https://patchblox.com/security/data/cve/CVE-2026-23210.md) | High | kernel-rt-core: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: L... | 7.5 | 0.0010 |  |
| [CVE-2026-31667](https://patchblox.com/security/data/cve/CVE-2026-31667.md) | High | Input: uinput - fix circular locking dependency with ff-core | 7.8 | 0.0010 |  |
| [CVE-2026-31656](https://patchblox.com/security/data/cve/CVE-2026-31656.md) | High | drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat | 8.8 | 0.0009 |  |
| [CVE-2026-23302](https://patchblox.com/security/data/cve/CVE-2026-23302.md) | High | net: annotate data-races around sk->sk_{data_ready,write_space} | 7.1 | 0.0009 |  |
| [CVE-2026-43163](https://patchblox.com/security/data/cve/CVE-2026-43163.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  md/bitmap: fix GPF in write_page caused by resiz... | 8.1 | 0.0009 |  |
| [CVE-2026-31523](https://patchblox.com/security/data/cve/CVE-2026-31523.md) | High | nvme-pci: ensure we're polling a polled queue | 7.1 | 0.0009 |  |
| [CVE-2026-31430](https://patchblox.com/security/data/cve/CVE-2026-31430.md) | High | X.509: Fix out-of-bounds access when parsing extensions | 7.8 | 0.0008 |  |
| [CVE-2026-31688](https://patchblox.com/security/data/cve/CVE-2026-31688.md) | High | driver core: enforce device_lock for driver_match_device() | 7.8 | n/a |  |
| [CVE-2026-45992](https://patchblox.com/security/data/cve/CVE-2026-45992.md) | High | kernel-uek: [6.12.0-204.92.4.2] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini)  [Orabug: 396... | n/a | n/a |  |
| [CVE-2025-71161](https://patchblox.com/security/data/cve/CVE-2025-71161.md) | Routine | dm-verity: disable recursive forward error correction | 5.5 | 0.0047 |  |
| [CVE-2026-23414](https://patchblox.com/security/data/cve/CVE-2026-23414.md) | Routine | tls: Purge async_hold in tls_decrypt_async_wait() | 5.5 | 0.0037 |  |
| [CVE-2025-71268](https://patchblox.com/security/data/cve/CVE-2025-71268.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix reservation leak in some error paths... | 5.5 | 0.0033 |  |
| [CVE-2026-23440](https://patchblox.com/security/data/cve/CVE-2026-23440.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Fix race condition during IPSec ESN u... | 4.7 | 0.0028 |  |
| [CVE-2025-40147](https://patchblox.com/security/data/cve/CVE-2025-40147.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  blk-throttle: fix access race during throttle po... | 6.2 | 0.0026 |  |
| [CVE-2026-31429](https://patchblox.com/security/data/cve/CVE-2026-31429.md) | Routine | net: skb: fix cross-cache free of KFENCE-allocated skb head | 6.6 | 0.0026 |  |
| [CVE-2025-40219](https://patchblox.com/security/data/cve/CVE-2025-40219.md) | Routine | PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV | 6.7 | 0.0024 |  |
| [CVE-2024-14027](https://patchblox.com/security/data/cve/CVE-2024-14027.md) | Routine | xattr: switch to CLASS(fd) | 5.5 | 0.0024 |  |
| [CVE-2025-71269](https://patchblox.com/security/data/cve/CVE-2025-71269.md) | Routine | btrfs: do not free data reservation in fallback from inline due to -ENOSPC | 5.5 | 0.0023 |  |
| [CVE-2025-22116](https://patchblox.com/security/data/cve/CVE-2025-22116.md) | Routine | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.  Security Fix(es):  * kernel: c... | 5.5 | 0.0020 |  |
| [CVE-2025-68239](https://patchblox.com/security/data/cve/CVE-2025-68239.md) | Routine | binfmt_misc: restore write access before closing files opened by open_exec() | 6.2 | 0.0020 |  |
| [CVE-2025-38426](https://patchblox.com/security/data/cve/CVE-2025-38426.md) | Routine | drm/amdgpu: Add basic validation for RAS header | 5.5 | 0.0019 |  |
| [CVE-2025-68334](https://patchblox.com/security/data/cve/CVE-2025-68334.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  platform/x86/amd/pmc: Add support for Van Gogh S... | 5.5 | 0.0019 |  |
| [CVE-2026-45871](https://patchblox.com/security/data/cve/CVE-2026-45871.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tpm: st33zp24: Fix missing cleanup on get_burstc... | 5.5 | 0.0019 |  |
| [CVE-2026-23276](https://patchblox.com/security/data/cve/CVE-2026-23276.md) | Routine | net: add xmit recursion limit to tunnel xmit functions | 5.5 | 0.0018 |  |
| [CVE-2026-45877](https://patchblox.com/security/data/cve/CVE-2026-45877.md) | Routine | HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients | 5.5 | 0.0018 |  |
| [CVE-2026-46018](https://patchblox.com/security/data/cve/CVE-2026-46018.md) | Routine | ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES | 5.5 | 0.0018 |  |
| [CVE-2025-39764](https://patchblox.com/security/data/cve/CVE-2025-39764.md) | Routine | netfilter: ctnetlink: remove refcounting in expectation dumpers | 5.5 | 0.0017 |  |
| [CVE-2026-45872](https://patchblox.com/security/data/cve/CVE-2026-45872.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: smartpqi: Fix memory leak in pqi_report_ph... | 5.5 | 0.0017 |  |
| [CVE-2026-31531](https://patchblox.com/security/data/cve/CVE-2026-31531.md) | Routine | ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop() | 5.5 | 0.0017 |  |
| [CVE-2026-45855](https://patchblox.com/security/data/cve/CVE-2026-45855.md) | Routine | ata: libata-scsi: avoid Non-NCQ command starvation | 5.5 | 0.0017 |  |
| [CVE-2026-43360](https://patchblox.com/security/data/cve/CVE-2026-43360.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix transaction abort on file creation du... | 5.5 | 0.0016 |  |
| [CVE-2026-45947](https://patchblox.com/security/data/cve/CVE-2026-45947.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amdgpu: Fix memory leak in amdgpu_acpi_enume... | 5.5 | 0.0016 |  |
| [CVE-2026-31767](https://patchblox.com/security/data/cve/CVE-2026-31767.md) | Routine | drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode | 5.5 | 0.0016 |  |
| [CVE-2026-45847](https://patchblox.com/security/data/cve/CVE-2026-45847.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: remove WARN_ON_ONCE when accessing forward... | 5.5 | 0.0016 |  |
| [CVE-2026-45857](https://patchblox.com/security/data/cve/CVE-2026-45857.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: csiostor: Fix dereference of null pointer... | 5.5 | 0.0016 |  |
| [CVE-2026-45858](https://patchblox.com/security/data/cve/CVE-2026-45858.md) | Routine | ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 | 5.5 | 0.0016 |  |
| [CVE-2026-45868](https://patchblox.com/security/data/cve/CVE-2026-45868.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  pinctrl: single: fix refcount leak in pcs_add_gp... | 5.5 | 0.0016 |  |
| [CVE-2026-45870](https://patchblox.com/security/data/cve/CVE-2026-45870.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  SUNRPC: auth_gss: fix memory leaks in XDR decodi... | 5.5 | 0.0016 |  |
| [CVE-2026-45873](https://patchblox.com/security/data/cve/CVE-2026-45873.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nft_set_rbtree: check for partial ove... | 5.5 | 0.0016 |  |
| [CVE-2026-45888](https://patchblox.com/security/data/cve/CVE-2026-45888.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  md/raid1: fix memory leak in raid1_run()  raid1_... | 5.5 | 0.0016 |  |
| [CVE-2026-45895](https://patchblox.com/security/data/cve/CVE-2026-45895.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  quota: fix livelock between quotactl and freeze_... | 5.5 | 0.0016 |  |
| [CVE-2026-45913](https://patchblox.com/security/data/cve/CVE-2026-45913.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: bridge: mcast: always update mdb_n_entries... | 5.5 | 0.0016 |  |
| [CVE-2026-45915](https://patchblox.com/security/data/cve/CVE-2026-45915.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  fat: avoid parent link count underflow in rmdir... | 5.5 | 0.0016 |  |
| [CVE-2026-45922](https://patchblox.com/security/data/cve/CVE-2026-45922.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SY... | 5.5 | 0.0016 |  |
| [CVE-2026-45923](https://patchblox.com/security/data/cve/CVE-2026-45923.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: catc: enable basic endpoint checking... | 5.5 | 0.0016 |  |
| [CVE-2026-45925](https://patchblox.com/security/data/cve/CVE-2026-45925.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  thermal/of: Fix reference leak in thermal_of_cm_... | 5.5 | 0.0016 |  |
| [CVE-2026-45948](https://patchblox.com/security/data/cve/CVE-2026-45948.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: fix memory leak in ext4_ext_shift_extents(... | 5.5 | 0.0016 |  |
| [CVE-2026-45964](https://patchblox.com/security/data/cve/CVE-2026-45964.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  SUNRPC: fix gss_auth kref leak in gss_alloc_msg... | 5.5 | 0.0016 |  |
| [CVE-2026-45973](https://patchblox.com/security/data/cve/CVE-2026-45973.md) | Routine | RDMA/mlx5: Fix UMR hang in LAG error state unload | 5.5 | 0.0016 |  |
| [CVE-2026-46000](https://patchblox.com/security/data/cve/CVE-2026-46000.md) | Routine | rxrpc: Fix conn-level packet handling to unshare RESPONSE packets | 5.5 | 0.0016 |  |
| [CVE-2026-43073](https://patchblox.com/security/data/cve/CVE-2026-43073.md) | Routine | x86-64: rename misleadingly named '__copy_user_nocache()' function | 5.5 | 0.0016 |  |
| [CVE-2025-71273](https://patchblox.com/security/data/cve/CVE-2025-71273.md) | Routine | wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() | 5.5 | 0.0016 |  |
| [CVE-2026-31462](https://patchblox.com/security/data/cve/CVE-2026-31462.md) | Routine | drm/amdgpu: prevent immediate PASID reuse case | 5.5 | 0.0016 |  |
| [CVE-2026-31677](https://patchblox.com/security/data/cve/CVE-2026-31677.md) | Routine | crypto: af_alg - limit RX SG extraction by receive buffer budget | 5.5 | 0.0016 |  |
| [CVE-2026-43036](https://patchblox.com/security/data/cve/CVE-2026-43036.md) | Routine | net: use skb_header_pointer() for TCPv4 GSO frag_off check | 5.5 | 0.0016 |  |
| [CVE-2026-43107](https://patchblox.com/security/data/cve/CVE-2026-43107.md) | Routine | xfrm: account XFRMA_IF_ID in aevent size calculation | 5.5 | 0.0016 |  |
| [CVE-2026-45917](https://patchblox.com/security/data/cve/CVE-2026-45917.md) | Routine | ipvs: do not keep dest_dst if dev is going down | 5.5 | 0.0016 |  |
| [CVE-2025-39816](https://patchblox.com/security/data/cve/CVE-2025-39816.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/kbuf: always use READ_ONCE() to read ri... | 6.1 | 0.0015 |  |
| [CVE-2026-23474](https://patchblox.com/security/data/cve/CVE-2026-23474.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mtd: Avoid boot crash in RedBoot partition table... | 5.5 | 0.0015 |  |
| [CVE-2026-23279](https://patchblox.com/security/data/cve/CVE-2026-23279.md) | Routine | wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() | 6.5 | 0.0015 |  |
| [CVE-2026-23138](https://patchblox.com/security/data/cve/CVE-2026-23138.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tracing: Add recursion protection in kernel stac... | 5.5 | 0.0014 |  |
| [CVE-2026-23157](https://patchblox.com/security/data/cve/CVE-2026-23157.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.   The following security bu... | 5.5 | 0.0014 |  |
| [CVE-2025-71286](https://patchblox.com/security/data/cve/CVE-2025-71286.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: SOF: ipc4-topology: Correct the allocation... | 5.5 | 0.0014 |  |
| [CVE-2026-43314](https://patchblox.com/security/data/cve/CVE-2026-43314.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dm: remove fake timeout to avoid leak request  S... | 5.5 | 0.0014 |  |
| [CVE-2026-46079](https://patchblox.com/security/data/cve/CVE-2026-46079.md) | Routine | rbd: fix null-ptr-deref when device_add_disk() fails | 5.5 | 0.0014 |  |
| [CVE-2026-23356](https://patchblox.com/security/data/cve/CVE-2026-23356.md) | Routine | drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() | 6.3 | 0.0014 |  |
| [CVE-2026-46092](https://patchblox.com/security/data/cve/CVE-2026-46092.md) | Routine | wifi: rtw88: check for PCI upstream bridge existence | 5.5 | 0.0014 |  |
| [CVE-2026-22985](https://patchblox.com/security/data/cve/CVE-2026-22985.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: Fix RSS LUT NULL pointer crash on early et... | 6.2 | 0.0014 |  |
| [CVE-2026-22981](https://patchblox.com/security/data/cve/CVE-2026-22981.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: detach and close netdevs while handling a... | 5.5 | 0.0014 |  |
| [CVE-2026-22993](https://patchblox.com/security/data/cve/CVE-2026-22993.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: Fix RSS LUT NULL ptr issue after soft rese... | 5.5 | 0.0014 |  |
| [CVE-2026-23104](https://patchblox.com/security/data/cve/CVE-2026-23104.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ice: fix devlink reload call trace  Commit 4da71... | 5.5 | 0.0014 |  |
| [CVE-2026-23207](https://patchblox.com/security/data/cve/CVE-2026-23207.md) | Routine | spi: tegra210-quad: Protect curr_xfer check in IRQ handler | 5.5 | 0.0014 |  |
| [CVE-2026-46089](https://patchblox.com/security/data/cve/CVE-2026-46089.md) | Routine | zram: do not forget to endio for partial discard requests | 5.5 | 0.0014 |  |
| [CVE-2026-23290](https://patchblox.com/security/data/cve/CVE-2026-23290.md) | Routine | net: usb: pegasus: validate USB endpoints | 5.5 | 0.0013 |  |
| [CVE-2026-23304](https://patchblox.com/security/data/cve/CVE-2026-23304.md) | Routine | ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() | 5.5 | 0.0013 |  |
| [CVE-2026-23321](https://patchblox.com/security/data/cve/CVE-2026-23321.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mptcp: pm: in-kernel: always mark signal+subflow... | 5.5 | 0.0013 |  |
| [CVE-2026-23365](https://patchblox.com/security/data/cve/CVE-2026-23365.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: usb: kalmia: validate USB endpoints  The ka... | 5.5 | 0.0013 |  |
| [CVE-2026-23370](https://patchblox.com/security/data/cve/CVE-2026-23370.md) | Routine | platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data | 5.5 | 0.0013 |  |
| [CVE-2026-23438](https://patchblox.com/security/data/cve/CVE-2026-23438.md) | Routine | net: mvpp2: guard flow control update with global_tx_fc in buffer switching | 5.5 | 0.0013 |  |
| [CVE-2026-23439](https://patchblox.com/security/data/cve/CVE-2026-23439.md) | Routine | udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n | 5.5 | 0.0013 |  |
| [CVE-2026-23445](https://patchblox.com/security/data/cve/CVE-2026-23445.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  igc: fix page fault in XDP TX timestamps handlin... | 5.5 | 0.0013 |  |
| [CVE-2026-46026](https://patchblox.com/security/data/cve/CVE-2026-46026.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 5.5 | 0.0013 |  |
| [CVE-2026-31596](https://patchblox.com/security/data/cve/CVE-2026-31596.md) | Routine | ocfs2: handle invalid dinode in ocfs2_group_extend | 6.6 | 0.0013 |  |
| [CVE-2026-23399](https://patchblox.com/security/data/cve/CVE-2026-23399.md) | Routine | nf_tables: nft_dynset: fix possible stateful expression memleak in error path | 6.5 | 0.0013 |  |
| [CVE-2026-43089](https://patchblox.com/security/data/cve/CVE-2026-43089.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm_user: fix info leak in build_mapping()  str... | 5.5 | 0.0013 |  |
| [CVE-2026-31428](https://patchblox.com/security/data/cve/CVE-2026-31428.md) | Routine | netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD | 5.5 | 0.0013 |  |
| [CVE-2025-39858](https://patchblox.com/security/data/cve/CVE-2025-39858.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  eth: mlx4: Fix IS_ERR() vs NULL check bug in mlx... | 5.5 | 0.0013 |  |
| [CVE-2026-23252](https://patchblox.com/security/data/cve/CVE-2026-23252.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: get rid of the xchk_xfile_*_descr calls  Th... | 5.5 | 0.0013 |  |
| [CVE-2026-23286](https://patchblox.com/security/data/cve/CVE-2026-23286.md) | Routine | atm: lec: fix null-ptr-deref in lec_arp_clear_vccs | 5.5 | 0.0013 |  |
| [CVE-2026-23303](https://patchblox.com/security/data/cve/CVE-2026-23303.md) | Routine | smb: client: Don't log plaintext credentials in cifs_set_cifscreds | 5.5 | 0.0013 |  |
| [CVE-2026-23312](https://patchblox.com/security/data/cve/CVE-2026-23312.md) | Routine | net: usb: kaweth: validate USB endpoints | 5.5 | 0.0013 |  |
| [CVE-2026-23379](https://patchblox.com/security/data/cve/CVE-2026-23379.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: ets: fix divide by zero in the offloa... | 5.5 | 0.0013 |  |
| [CVE-2026-23475](https://patchblox.com/security/data/cve/CVE-2026-23475.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  spi: fix statistics allocation  The controller p... | 5.5 | 0.0013 |  |
| [CVE-2026-31733](https://patchblox.com/security/data/cve/CVE-2026-31733.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Fix stale direct dispatch state in dd... | 5.5 | 0.0013 |  |
| [CVE-2026-43288](https://patchblox.com/security/data/cve/CVE-2026-43288.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: move ext4_percpu_param_init() before ext4_... | 5.5 | 0.0013 |  |
| [CVE-2026-43315](https://patchblox.com/security/data/cve/CVE-2026-43315.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: nSVM: Remove a user-triggerable WARN on nes... | 5.5 | 0.0013 |  |
| [CVE-2026-43392](https://patchblox.com/security/data/cve/CVE-2026-43392.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Fix starvation of scx_enable() under... | 5.5 | 0.0013 |  |
| [CVE-2026-45919](https://patchblox.com/security/data/cve/CVE-2026-45919.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  sched/rt: Skip currently executing CPU in rto_ne... | 5.5 | 0.0013 |  |
| [CVE-2026-45968](https://patchblox.com/security/data/cve/CVE-2026-45968.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  cpuidle: Skip governor when only one idle state... | 5.5 | 0.0013 |  |
| [CVE-2026-45982](https://patchblox.com/security/data/cve/CVE-2026-45982.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ACPICA: Fix NULL pointer dereference in acpi_ev_... | 5.5 | 0.0013 |  |
| [CVE-2026-23398](https://patchblox.com/security/data/cve/CVE-2026-23398.md) | Routine | icmp: fix NULL pointer dereference in icmp_tag_validation() | 6.5 | 0.0013 |  |
| [CVE-2026-43026](https://patchblox.com/security/data/cve/CVE-2026-43026.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: ctnetlink: zero expect NAT fields whe... | 6.1 | 0.0013 |  |
| [CVE-2026-31451](https://patchblox.com/security/data/cve/CVE-2026-31451.md) | Routine | ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio | 5.5 | 0.0013 |  |
| [CVE-2026-31495](https://patchblox.com/security/data/cve/CVE-2026-31495.md) | Routine | netfilter: ctnetlink: use netlink policy range checks | 5.5 | 0.0013 |  |
| [CVE-2026-31546](https://patchblox.com/security/data/cve/CVE-2026-31546.md) | Routine | net: bonding: fix NULL deref in bond_debug_rlb_hash_show | 5.5 | 0.0013 |  |
| [CVE-2026-31625](https://patchblox.com/security/data/cve/CVE-2026-31625.md) | Routine | HID: alps: fix NULL pointer dereference in alps_raw_event() | 5.5 | 0.0013 |  |
| [CVE-2026-31634](https://patchblox.com/security/data/cve/CVE-2026-31634.md) | Routine | rxrpc: fix reference count leak in rxrpc_server_keyring() | 5.5 | 0.0013 |  |
| [CVE-2026-31642](https://patchblox.com/security/data/cve/CVE-2026-31642.md) | Routine | rxrpc: Fix call removal to use RCU safe deletion | 5.5 | 0.0013 |  |
| [CVE-2026-31752](https://patchblox.com/security/data/cve/CVE-2026-31752.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bridge: br_nd_send: validate ND option lengths... | 5.5 | 0.0013 |  |
| [CVE-2026-43024](https://patchblox.com/security/data/cve/CVE-2026-43024.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_tables: reject immediate NF_QUEUE... | 5.5 | 0.0013 |  |
| [CVE-2026-43035](https://patchblox.com/security/data/cve/CVE-2026-43035.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: sched: cls_api: fix tc_chain_fill_node to i... | 5.5 | 0.0013 |  |
| [CVE-2026-43085](https://patchblox.com/security/data/cve/CVE-2026-43085.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nfnetlink_log: initialize nfgenmsg in... | 5.5 | 0.0013 |  |
| [CVE-2026-46003](https://patchblox.com/security/data/cve/CVE-2026-46003.md) | Routine | net: qrtr: ns: Limit the total number of nodes | 5.5 | 0.0013 |  |
| [CVE-2026-46038](https://patchblox.com/security/data/cve/CVE-2026-46038.md) | Routine | net: qrtr: ns: Free the node during ctrl_cmd_bye() | 5.5 | 0.0013 |  |
| [CVE-2026-46040](https://patchblox.com/security/data/cve/CVE-2026-46040.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 5.5 | 0.0013 |  |
| [CVE-2026-46046](https://patchblox.com/security/data/cve/CVE-2026-46046.md) | Routine | ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() | 5.5 | 0.0013 |  |
| [CVE-2026-46101](https://patchblox.com/security/data/cve/CVE-2026-46101.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 5.5 | 0.0013 |  |
| [CVE-2026-23465](https://patchblox.com/security/data/cve/CVE-2026-23465.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: log new dentries when logging parent dir... | 5.5 | 0.0013 |  |
| [CVE-2026-23468](https://patchblox.com/security/data/cve/CVE-2026-23468.md) | Routine | drm/amdgpu: Limit BO list entry count to prevent resource exhaustion | 5.5 | 0.0013 |  |
| [CVE-2026-43123](https://patchblox.com/security/data/cve/CVE-2026-43123.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  fbcon: check return value of con2fb_acquire_newi... | 5.5 | 0.0013 |  |
| [CVE-2026-43124](https://patchblox.com/security/data/cve/CVE-2026-43124.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  pstore: ram_core: fix incorrect success return w... | 5.5 | 0.0013 |  |
| [CVE-2026-43132](https://patchblox.com/security/data/cve/CVE-2026-43132.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dm-verity: correctly handle dm_bufio_client_crea... | 5.5 | 0.0013 |  |
| [CVE-2026-43136](https://patchblox.com/security/data/cve/CVE-2026-43136.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  HID: logitech-hidpp: Check maxfield in hidpp_get... | 5.5 | 0.0013 |  |
| [CVE-2026-43140](https://patchblox.com/security/data/cve/CVE-2026-43140.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  HID: magicmouse: Do not crash on missing msc->in... | 5.5 | 0.0013 |  |
| [CVE-2026-43143](https://patchblox.com/security/data/cve/CVE-2026-43143.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mfd: core: Add locking around 'mfd_of_node_list'... | 5.5 | 0.0013 |  |
| [CVE-2026-43152](https://patchblox.com/security/data/cve/CVE-2026-43152.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  HID: hid-pl: handle probe errors  Errors in init... | 5.5 | 0.0013 |  |
| [CVE-2026-43218](https://patchblox.com/security/data/cve/CVE-2026-43218.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  media: i2c/tw9903: Fix potential memory leak in... | 5.5 | 0.0013 |  |
| [CVE-2026-43223](https://patchblox.com/security/data/cve/CVE-2026-43223.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  media: pvrusb2: fix URB leak in pvr2_send_reques... | 5.5 | 0.0013 |  |
| [CVE-2026-43231](https://patchblox.com/security/data/cve/CVE-2026-43231.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  media: radio-keene: fix memory leak in error pat... | 5.5 | 0.0013 |  |
| [CVE-2026-43238](https://patchblox.com/security/data/cve/CVE-2026-43238.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: act_skbedit: fix divide-by-zero in tc... | 5.5 | 0.0013 |  |
| [CVE-2026-43255](https://patchblox.com/security/data/cve/CVE-2026-43255.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: libertas: fix WARNING in usb_tx_block  The... | 5.5 | 0.0013 |  |
| [CVE-2026-43257](https://patchblox.com/security/data/cve/CVE-2026-43257.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  media: cx88: Add missing unmap in snd_cx88_hw_pa... | 5.5 | 0.0013 |  |
| [CVE-2026-43261](https://patchblox.com/security/data/cve/CVE-2026-43261.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  arm64: Add support for TSV110 Spectre-BHB mitiga... | 5.5 | 0.0013 |  |
| [CVE-2026-45974](https://patchblox.com/security/data/cve/CVE-2026-45974.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix invalid leaf access in btrfs_quota_en... | 5.5 | 0.0013 |  |
| [CVE-2026-46005](https://patchblox.com/security/data/cve/CVE-2026-46005.md) | Routine | xfs: fix a resource leak in xfs_alloc_buftarg() | 5.5 | 0.0013 |  |
| [CVE-2026-43210](https://patchblox.com/security/data/cve/CVE-2026-43210.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tracing: ring-buffer: Fix to check event length... | 6.1 | 0.0013 |  |
| [CVE-2026-23277](https://patchblox.com/security/data/cve/CVE-2026-23277.md) | Routine | net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit | 5.9 | 0.0013 |  |
| [CVE-2025-71294](https://patchblox.com/security/data/cve/CVE-2025-71294.md) | Routine | drm/amdgpu: fix NULL pointer issue buffer funcs | 5.5 | 0.0013 |  |
| [CVE-2026-23285](https://patchblox.com/security/data/cve/CVE-2026-23285.md) | Routine | drbd: fix null-pointer dereference on local read error | 5.5 | 0.0013 |  |
| [CVE-2026-23292](https://patchblox.com/security/data/cve/CVE-2026-23292.md) | Routine | scsi: target: Fix recursive locking in __configfs_open_file() | 5.5 | 0.0013 |  |
| [CVE-2026-23297](https://patchblox.com/security/data/cve/CVE-2026-23297.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: Fix cred ref leak in nfsd_nl_threads_set_d... | 5.5 | 0.0013 |  |
| [CVE-2026-23307](https://patchblox.com/security/data/cve/CVE-2026-23307.md) | Routine | can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message | 5.5 | 0.0013 |  |
| [CVE-2026-23309](https://patchblox.com/security/data/cve/CVE-2026-23309.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tracing: Add NULL pointer check to trigger_data_... | 5.5 | 0.0013 |  |
| [CVE-2026-23313](https://patchblox.com/security/data/cve/CVE-2026-23313.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  i40e: Fix preempt count leak in napi poll tracep... | 5.5 | 0.0013 |  |
| [CVE-2026-23316](https://patchblox.com/security/data/cve/CVE-2026-23316.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  net: ipv4: fix ARM64 alignment fault in multipat... | 5.5 | 0.0013 |  |
| [CVE-2026-23360](https://patchblox.com/security/data/cve/CVE-2026-23360.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  nvme: fix admin queue leak on controller reset... | 5.5 | 0.0013 |  |
| [CVE-2026-23369](https://patchblox.com/security/data/cve/CVE-2026-23369.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  i2c: i801: Revert "i2c: i801: replace acpi_lock... | 5.5 | 0.0013 |  |
| [CVE-2026-43137](https://patchblox.com/security/data/cve/CVE-2026-43137.md) | Routine | ASoC: SOF: Intel: hda: Fix NULL pointer dereference | 5.5 | 0.0013 |  |
| [CVE-2026-43169](https://patchblox.com/security/data/cve/CVE-2026-43169.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/buddy: Prevent BUG_ON by validating rounded... | 5.5 | 0.0013 |  |
| [CVE-2026-43177](https://patchblox.com/security/data/cve/CVE-2026-43177.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  media: ipu6: Fix RPM reference leak in probe err... | 5.5 | 0.0013 |  |
| [CVE-2026-43189](https://patchblox.com/security/data/cve/CVE-2026-43189.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  media: v4l2-async: Fix error handling on steps a... | 5.5 | 0.0013 |  |
| [CVE-2026-43201](https://patchblox.com/security/data/cve/CVE-2026-43201.md) | Routine | APEI/GHES: ARM processor Error: don't go past allocated memory | 5.5 | 0.0013 |  |
| [CVE-2026-43220](https://patchblox.com/security/data/cve/CVE-2026-43220.md) | Routine | iommu/amd: serialize sequence allocation under concurrent TLB invalidations | 5.5 | 0.0013 |  |
| [CVE-2026-23381](https://patchblox.com/security/data/cve/CVE-2026-23381.md) | Routine | net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled | 5.5 | 0.0013 |  |
| [CVE-2026-31441](https://patchblox.com/security/data/cve/CVE-2026-31441.md) | Routine | dmaengine: idxd: Fix memory leak when a wq is reset | 5.5 | 0.0013 |  |
| [CVE-2026-31496](https://patchblox.com/security/data/cve/CVE-2026-31496.md) | Routine | netfilter: nf_conntrack_expect: skip expectations in other netns via proc | 5.5 | 0.0013 |  |
| [CVE-2026-31590](https://patchblox.com/security/data/cve/CVE-2026-31590.md) | Routine | KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION | 5.5 | 0.0013 |  |
| [CVE-2026-43080](https://patchblox.com/security/data/cve/CVE-2026-43080.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  l2tp: Drop large packets with UDP encap  syzbot... | 5.5 | 0.0013 |  |
| [CVE-2026-43170](https://patchblox.com/security/data/cve/CVE-2026-43170.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: dwc3: gadget: Move vbus draw to workqueue c... | 5.5 | 0.0013 |  |
| [CVE-2026-46088](https://patchblox.com/security/data/cve/CVE-2026-46088.md) | Routine | ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() | 5.5 | 0.0013 |  |
| [CVE-2026-31681](https://patchblox.com/security/data/cve/CVE-2026-31681.md) | Routine | netfilter: xt_multiport: validate range encoding in checkentry | 6.1 | 0.0012 |  |

Showing 500 of 679 CVEs; the web page lists them all.

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.