# kernel-uek-debug-modules 0:5.15.0-323.211.3.3.el9uek: kernel-uek-debug-modules 0:5.15.0-323.211.3.3.el9uek for ol 8

kernel-uek-debug-modules 0:5.15.0-323.211.3.3.el9uek, released August 11, 2026, fixes 469 CVEs in kernel-uek-debug-modules. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/ol-8-kernel-uek-debug-modules-0-5.15.0-323.211.3.3.el9uek
- Platform: Linux
- Released: Aug 11, 2026
- Priority: Patch now (Closes CVE-2026-53266, exploited (CISA KEV))
- CVEs: 469, exploited: 1, on CISA KEV: 1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-uek-debug-modules](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules.md) | ol 8 | 0:5.15.0-323.211.3.3.el9uek |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-53266](https://patchblox.com/security/data/cve/CVE-2026-53266.md) | Patch now | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | CISA KEV |
| [CVE-2026-63800](https://patchblox.com/security/data/cve/CVE-2026-63800.md) | Urgent | pNFS: Fix use-after-free in pnfs_update_layout() | 9.8 | 0.0064 |  |
| [CVE-2026-52914](https://patchblox.com/security/data/cve/CVE-2026-52914.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0063 |  |
| [CVE-2026-64089](https://patchblox.com/security/data/cve/CVE-2026-64089.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0055 |  |
| [CVE-2026-64125](https://patchblox.com/security/data/cve/CVE-2026-64125.md) | Urgent | kernel-64kb: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346). | 9.8 | 0.0055 |  |
| [CVE-2026-52982](https://patchblox.com/security/data/cve/CVE-2026-52982.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0054 |  |
| [CVE-2026-53043](https://patchblox.com/security/data/cve/CVE-2026-53043.md) | Urgent | ocfs2/dlm: validate qr_numregions in dlm_match_regions() | 9.8 | 0.0051 |  |
| [CVE-2026-64046](https://patchblox.com/security/data/cve/CVE-2026-64046.md) | Urgent | kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). | 9.8 | 0.0051 |  |
| [CVE-2026-64047](https://patchblox.com/security/data/cve/CVE-2026-64047.md) | Urgent | kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060). | 9.8 | 0.0051 |  |
| [CVE-2026-52931](https://patchblox.com/security/data/cve/CVE-2026-52931.md) | Urgent | batman-adv: tp_meter: avoid use of uninit sender vars | 9.8 | 0.0050 |  |
| [CVE-2026-52993](https://patchblox.com/security/data/cve/CVE-2026-52993.md) | Urgent | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 |  |
| [CVE-2026-53309](https://patchblox.com/security/data/cve/CVE-2026-53309.md) | Urgent | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison | 9.8 | 0.0040 |  |
| [CVE-2026-52955](https://patchblox.com/security/data/cve/CVE-2026-52955.md) | Urgent | kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159). | 9.8 | 0.0038 |  |
| [CVE-2026-53002](https://patchblox.com/security/data/cve/CVE-2026-53002.md) | Urgent | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 |  |
| [CVE-2026-53075](https://patchblox.com/security/data/cve/CVE-2026-53075.md) | Urgent | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 |  |
| [CVE-2026-52934](https://patchblox.com/security/data/cve/CVE-2026-52934.md) | Urgent | batman-adv: tvlv: reject oversized TVLV packets | 9.8 | 0.0024 |  |
| [CVE-2026-63824](https://patchblox.com/security/data/cve/CVE-2026-63824.md) | Urgent | KEYS: fix overflow in keyctl_pkey_params_get_2() | 9.8 | 0.0017 |  |
| [CVE-2026-53403](https://patchblox.com/security/data/cve/CVE-2026-53403.md) | Urgent | fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var | 9.8 | 0.0013 |  |
| [CVE-2026-52919](https://patchblox.com/security/data/cve/CVE-2026-52919.md) | Urgent | batman-adv: fix tp_meter counter underflow during shutdown | 9.8 | 0.0012 |  |
| [CVE-2026-52947](https://patchblox.com/security/data/cve/CVE-2026-52947.md) | Urgent | net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove | 9.8 | 0.0011 |  |
| [CVE-2026-53062](https://patchblox.com/security/data/cve/CVE-2026-53062.md) | Urgent | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 |  |
| [CVE-2026-63913](https://patchblox.com/security/data/cve/CVE-2026-63913.md) | High | kernel-64k-modules-core: kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check | 8.8 | 0.0097 |  |
| [CVE-2026-52929](https://patchblox.com/security/data/cve/CVE-2026-52929.md) | High | sctp: stream: fully roll back denied add-stream state | 9.8 | 0.0087 |  |
| [CVE-2026-53176](https://patchblox.com/security/data/cve/CVE-2026-53176.md) | High | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN | 9.8 | 0.0076 |  |
| [CVE-2026-52958](https://patchblox.com/security/data/cve/CVE-2026-52958.md) | High | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 |  |
| [CVE-2026-43501](https://patchblox.com/security/data/cve/CVE-2026-43501.md) | High | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 |  |
| [CVE-2026-53003](https://patchblox.com/security/data/cve/CVE-2026-53003.md) | High | pppoe: drop PFC frames | 7.5 | 0.0072 |  |
| [CVE-2026-63912](https://patchblox.com/security/data/cve/CVE-2026-63912.md) | High | kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836). | 9.8 | 0.0071 |  |
| [CVE-2026-63922](https://patchblox.com/security/data/cve/CVE-2026-63922.md) | High | kernel: kernel: ipv6: exthdrs: refresh nh after handling HAO option | 9.8 | 0.0071 |  |
| [CVE-2026-63924](https://patchblox.com/security/data/cve/CVE-2026-63924.md) | High | kernel: kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() | 9.8 | 0.0071 |  |
| [CVE-2026-43493](https://patchblox.com/security/data/cve/CVE-2026-43493.md) | High | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | 9.8 | 0.0068 |  |
| [CVE-2026-52924](https://patchblox.com/security/data/cve/CVE-2026-52924.md) | High | sctp: purge outqueue on stale COOKIE-ECHO handling | 9.8 | 0.0066 |  |
| [CVE-2026-63919](https://patchblox.com/security/data/cve/CVE-2026-63919.md) | High | kernel-default: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907). | 8.8 | 0.0065 |  |
| [CVE-2026-52986](https://patchblox.com/security/data/cve/CVE-2026-52986.md) | High | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 |  |
| [CVE-2026-52999](https://patchblox.com/security/data/cve/CVE-2026-52999.md) | High | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 |  |
| [CVE-2026-63796](https://patchblox.com/security/data/cve/CVE-2026-63796.md) | High | ocfs2: reject oversized group bitmap descriptors | 8.8 | 0.0059 |  |
| [CVE-2026-52998](https://patchblox.com/security/data/cve/CVE-2026-52998.md) | High | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 |  |
| [CVE-2026-53221](https://patchblox.com/security/data/cve/CVE-2026-53221.md) | High | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | 9.8 | 0.0058 |  |
| [CVE-2026-53228](https://patchblox.com/security/data/cve/CVE-2026-53228.md) | High | ipv6: sit: reload inner IPv6 header after GSO offloads | 9.8 | 0.0058 |  |
| [CVE-2026-53225](https://patchblox.com/security/data/cve/CVE-2026-53225.md) | High | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 9.1 | 0.0058 |  |
| [CVE-2026-46133](https://patchblox.com/security/data/cve/CVE-2026-46133.md) | High | RDMA/rxe: Reject unknown opcodes before ICRC processing | 8.8 | 0.0057 |  |
| [CVE-2026-63976](https://patchblox.com/security/data/cve/CVE-2026-63976.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0057 |  |
| [CVE-2026-46102](https://patchblox.com/security/data/cve/CVE-2026-46102.md) | High | net: strparser: fix skb_head leak in strp_abort_strp() | 7.5 | 0.0056 |  |
| [CVE-2026-46177](https://patchblox.com/security/data/cve/CVE-2026-46177.md) | High | kernel-uek64k: ipmi: Add limits to event and receive message requests (Corey Minyard) [Orabug: 39460490] | 7.5 | 0.0056 |  |
| [CVE-2026-53398](https://patchblox.com/security/data/cve/CVE-2026-53398.md) | High | NFSD: Fix SECINFO_NO_NAME decode error cleanup | 9.8 | 0.0054 |  |
| [CVE-2026-43383](https://patchblox.com/security/data/cve/CVE-2026-43383.md) | High | kernel-64kb: net/tcp-md5: Fix MAC comparison to be constant-time (bsc#1264744). | 9.4 | 0.0054 |  |
| [CVE-2026-53397](https://patchblox.com/security/data/cve/CVE-2026-53397.md) | High | nfsd: fix posix_acl leak on SETACL decode failure | 8.8 | 0.0053 |  |
| [CVE-2026-63808](https://patchblox.com/security/data/cve/CVE-2026-63808.md) | High | kernel-rt-64k: kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() | 9.8 | 0.0053 |  |
| [CVE-2026-64113](https://patchblox.com/security/data/cve/CVE-2026-64113.md) | High | perf: kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning | 9.8 | 0.0053 |  |
| [CVE-2026-46119](https://patchblox.com/security/data/cve/CVE-2026-46119.md) | High | libceph: Fix slab-out-of-bounds access in auth message processing | 9.1 | 0.0053 |  |
| [CVE-2026-53268](https://patchblox.com/security/data/cve/CVE-2026-53268.md) | High | netfilter: conntrack_irc: fix possible out-of-bounds read | 8.2 | 0.0052 |  |
| [CVE-2026-52954](https://patchblox.com/security/data/cve/CVE-2026-52954.md) | High | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 |  |
| [CVE-2026-52957](https://patchblox.com/security/data/cve/CVE-2026-52957.md) | High | libceph: Fix potential null-ptr-deref in decode_choose_args() | 7.5 | 0.0052 |  |
| [CVE-2026-53391](https://patchblox.com/security/data/cve/CVE-2026-53391.md) | High | NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr | 8.8 | 0.0052 |  |
| [CVE-2026-63984](https://patchblox.com/security/data/cve/CVE-2026-63984.md) | High | kernel-default: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865). | 9.8 | 0.0051 |  |
| [CVE-2026-63993](https://patchblox.com/security/data/cve/CVE-2026-63993.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after s... | 9.8 | 0.0051 |  |
| [CVE-2026-63994](https://patchblox.com/security/data/cve/CVE-2026-63994.md) | High | kernel-default: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035). | 9.8 | 0.0051 |  |
| [CVE-2026-64007](https://patchblox.com/security/data/cve/CVE-2026-64007.md) | High | kernel-default: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105). | 9.8 | 0.0051 |  |
| [CVE-2026-46043](https://patchblox.com/security/data/cve/CVE-2026-46043.md) | High | RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv | 9.1 | 0.0051 |  |
| [CVE-2026-53186](https://patchblox.com/security/data/cve/CVE-2026-53186.md) | High | RDMA/srp: bound SRP_RSP sense copy by the received length | 9.1 | 0.0051 |  |
| [CVE-2026-63992](https://patchblox.com/security/data/cve/CVE-2026-63992.md) | High | kernel-default: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868). | 9.1 | 0.0051 |  |
| [CVE-2026-63801](https://patchblox.com/security/data/cve/CVE-2026-63801.md) | High | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 8.8 | 0.0051 |  |
| [CVE-2026-43341](https://patchblox.com/security/data/cve/CVE-2026-43341.md) | High | kernel-64kb: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044). | 9.8 | 0.0051 |  |
| [CVE-2026-46037](https://patchblox.com/security/data/cve/CVE-2026-46037.md) | High | ipv4: icmp: validate reply type before using icmp_pointers | 8.2 | 0.0051 |  |
| [CVE-2026-64116](https://patchblox.com/security/data/cve/CVE-2026-64116.md) | High | kernel-64kb: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). | 7.5 | 0.0051 |  |
| [CVE-2026-53215](https://patchblox.com/security/data/cve/CVE-2026-53215.md) | High | kernel-64kb: net: mvpp2: refill RX buffers before XDP or skb use (bsc#1269680). | 9.8 | 0.0050 |  |
| [CVE-2026-53216](https://patchblox.com/security/data/cve/CVE-2026-53216.md) | High | kernel-64kb: net: mvpp2: limit XDP frame size to the RX buffer (bsc#1269587). | 9.8 | 0.0050 |  |
| [CVE-2026-43099](https://patchblox.com/security/data/cve/CVE-2026-43099.md) | High | kernel-uek: ELSA-2026-50372: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0050 |  |
| [CVE-2026-46052](https://patchblox.com/security/data/cve/CVE-2026-46052.md) | High | ceph: only d_add() negative dentries when they are unhashed | 7.5 | 0.0050 |  |
| [CVE-2026-53199](https://patchblox.com/security/data/cve/CVE-2026-53199.md) | High | hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf | 7.5 | 0.0050 |  |
| [CVE-2026-46024](https://patchblox.com/security/data/cve/CVE-2026-46024.md) | High | libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() | 7.5 | 0.0049 |  |
| [CVE-2026-31685](https://patchblox.com/security/data/cve/CVE-2026-31685.md) | High | netfilter: ip6t_eui64: reject invalid MAC header for all packets | 9.4 | 0.0049 |  |
| [CVE-2026-53264](https://patchblox.com/security/data/cve/CVE-2026-53264.md) | High | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 7.8 | 0.0049 |  |
| [CVE-2026-43074](https://patchblox.com/security/data/cve/CVE-2026-43074.md) | High | kernel-source: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263). | 7.8 | 0.0048 |  |
| [CVE-2026-46137](https://patchblox.com/security/data/cve/CVE-2026-46137.md) | High | mptcp: pm: ADD_ADDR rtx: fix potential data-race | 9.8 | 0.0048 |  |
| [CVE-2026-46124](https://patchblox.com/security/data/cve/CVE-2026-46124.md) | High | kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847). | 7.5 | 0.0048 |  |
| [CVE-2026-64600](https://patchblox.com/security/data/cve/CVE-2026-64600.md) | High | xfs: resample the data fork mapping after cycling ILOCK | 7.8 | 0.0047 |  |
| [CVE-2026-52946](https://patchblox.com/security/data/cve/CVE-2026-52946.md) | High | fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling | 7.5 | 0.0047 |  |
| [CVE-2026-43117](https://patchblox.com/security/data/cve/CVE-2026-43117.md) | High | kernel-64kb: Security update for the Linux Kernel | 9.1 | 0.0046 |  |
| [CVE-2026-46306](https://patchblox.com/security/data/cve/CVE-2026-46306.md) | High | flow_dissector: do not dissect PPPoE PFC frames | 8.1 | 0.0045 |  |
| [CVE-2026-53131](https://patchblox.com/security/data/cve/CVE-2026-53131.md) | High | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 |  |
| [CVE-2026-31598](https://patchblox.com/security/data/cve/CVE-2026-31598.md) | High | ocfs2: fix possible deadlock between unlink and dio_end_io_write | 7.5 | 0.0044 |  |
| [CVE-2026-53071](https://patchblox.com/security/data/cve/CVE-2026-53071.md) | High | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp | 8.8 | 0.0043 |  |
| [CVE-2026-64091](https://patchblox.com/security/data/cve/CVE-2026-64091.md) | High | kernel-uek64k-modules-extra: batman-adv: tt: fix TOCTOU race for reported vlans (Sven Eckelmann) [Orabug: 39754748] | 9.8 | 0.0043 |  |
| [CVE-2026-53088](https://patchblox.com/security/data/cve/CVE-2026-53088.md) | High | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb | 9.8 | 0.0040 |  |
| [CVE-2026-45843](https://patchblox.com/security/data/cve/CVE-2026-45843.md) | High | slip: bound decode() reads against the compressed packet length | 8.2 | 0.0040 |  |
| [CVE-2026-53006](https://patchblox.com/security/data/cve/CVE-2026-53006.md) | High | ipv6: fix possible UAF in icmpv6_rcv() | 9.8 | 0.0039 |  |
| [CVE-2026-53049](https://patchblox.com/security/data/cve/CVE-2026-53049.md) | High | kernel: kernel: gfs2: add some missing log locking | 9.8 | 0.0039 |  |
| [CVE-2026-63893](https://patchblox.com/security/data/cve/CVE-2026-63893.md) | High | kernel-default: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607). | 8.1 | 0.0039 |  |
| [CVE-2026-53217](https://patchblox.com/security/data/cve/CVE-2026-53217.md) | High | net: mvpp2: sync RX data at the hardware packet offset | 8.6 | 0.0038 |  |
| [CVE-2026-53069](https://patchblox.com/security/data/cve/CVE-2026-53069.md) | High | kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186). | 7.5 | 0.0038 |  |
| [CVE-2026-43114](https://patchblox.com/security/data/cve/CVE-2026-43114.md) | High | kernel-rt-64k-modules-core: kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry | 9.4 | 0.0037 |  |
| [CVE-2026-63916](https://patchblox.com/security/data/cve/CVE-2026-63916.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0036 |  |
| [CVE-2026-46304](https://patchblox.com/security/data/cve/CVE-2026-46304.md) | High | nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free | 7.5 | 0.0035 |  |
| [CVE-2026-63947](https://patchblox.com/security/data/cve/CVE-2026-63947.md) | High | kernel-64k-modules-core: kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() | 8.8 | 0.0035 |  |
| [CVE-2026-63925](https://patchblox.com/security/data/cve/CVE-2026-63925.md) | High | kernel-64kb: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008). | 8.1 | 0.0035 |  |
| [CVE-2024-36922](https://patchblox.com/security/data/cve/CVE-2024-36922.md) | High | wifi: iwlwifi: read txq->read_ptr under lock | 7.8 | 0.0035 |  |
| [CVE-2026-53357](https://patchblox.com/security/data/cve/CVE-2026-53357.md) | High | Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() | 8.0 | 0.0033 |  |
| [CVE-2026-46303](https://patchblox.com/security/data/cve/CVE-2026-46303.md) | High | isofs: validate Rock Ridge CE continuation extent against volume size | 8.2 | 0.0032 |  |
| [CVE-2026-31607](https://patchblox.com/security/data/cve/CVE-2026-31607.md) | High | usbip: validate number_of_packets in usbip_pack_ret_submit() | 9.8 | 0.0031 |  |
| [CVE-2026-63831](https://patchblox.com/security/data/cve/CVE-2026-63831.md) | High | mac802154: llsec: add skb_cow_data() before in-place crypto | 8.8 | 0.0031 |  |
| [CVE-2026-64178](https://patchblox.com/security/data/cve/CVE-2026-64178.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0030 |  |
| [CVE-2026-52920](https://patchblox.com/security/data/cve/CVE-2026-52920.md) | High | netfilter: xt_policy: fix strict mode inbound policy matching | 8.3 | 0.0030 |  |
| [CVE-2026-31626](https://patchblox.com/security/data/cve/CVE-2026-31626.md) | High | staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() | 7.1 | 0.0029 |  |
| [CVE-2026-31694](https://patchblox.com/security/data/cve/CVE-2026-31694.md) | High | fuse: reject oversized dirents in page cache | 7.8 | 0.0028 |  |
| [CVE-2026-46056](https://patchblox.com/security/data/cve/CVE-2026-46056.md) | High | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers | 8.8 | 0.0028 |  |
| [CVE-2026-46198](https://patchblox.com/security/data/cve/CVE-2026-46198.md) | High | bpftool: batman-adv: fix integer overflow on buff_pos (Lyes Bourennani) [Orabug: 39460580] | 8.8 | 0.0028 |  |
| [CVE-2026-53358](https://patchblox.com/security/data/cve/CVE-2026-53358.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0028 |  |
| [CVE-2026-64088](https://patchblox.com/security/data/cve/CVE-2026-64088.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0028 |  |
| [CVE-2026-53254](https://patchblox.com/security/data/cve/CVE-2026-53254.md) | High | Bluetooth: RFCOMM: validate skb length in MCC handlers | 8.1 | 0.0028 |  |
| [CVE-2026-63891](https://patchblox.com/security/data/cve/CVE-2026-63891.md) | High | kernel-64kb: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641). | 7.0 | 0.0028 |  |
| [CVE-2026-46212](https://patchblox.com/security/data/cve/CVE-2026-46212.md) | High | batman-adv: bla: prevent use-after-free when deleting claims | 8.8 | 0.0027 |  |
| [CVE-2026-63975](https://patchblox.com/security/data/cve/CVE-2026-63975.md) | High | kernel-default: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694). | 8.8 | 0.0027 |  |
| [CVE-2026-63867](https://patchblox.com/security/data/cve/CVE-2026-63867.md) | High | kernel-uek64k: mptcp: close TOCTOU race while computing rcv_wnd (Paolo Abeni) [Orabug: 39754146] | 8.2 | 0.0027 |  |
| [CVE-2026-53196](https://patchblox.com/security/data/cve/CVE-2026-53196.md) | High | USB: serial: io_ti: fix heap overflow in get_manuf_info() | 8.8 | 0.0027 |  |
| [CVE-2026-43110](https://patchblox.com/security/data/cve/CVE-2026-43110.md) | High | kernel-default: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482). | 8.8 | 0.0027 |  |
| [CVE-2025-21863](https://patchblox.com/security/data/cve/CVE-2025-21863.md) | High | kernel-64kb: io_uring: prevent opcode speculation (bsc#1239475). | 7.8 | 0.0027 |  |
| [CVE-2026-64095](https://patchblox.com/security/data/cve/CVE-2026-64095.md) | High | bpftool: batman-adv: bla: avoid double decrement of bla.num_requests (Sven Eckelmann) [Orabug: 39754761] | 7.1 | 0.0027 |  |
| [CVE-2026-53253](https://patchblox.com/security/data/cve/CVE-2026-53253.md) | High | Bluetooth: bnep: reject short frames before parsing | 7.1 | 0.0027 |  |
| [CVE-2026-53256](https://patchblox.com/security/data/cve/CVE-2026-53256.md) | High | kernel-rt-devel: kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() | 8.1 | 0.0026 |  |
| [CVE-2026-46238](https://patchblox.com/security/data/cve/CVE-2026-46238.md) | High | batman-adv: stop caching unowned originator pointers in BAT IV | 8.8 | 0.0026 |  |
| [CVE-2026-53275](https://patchblox.com/security/data/cve/CVE-2026-53275.md) | High | ipv6: mcast: Fix use-after-free when processing MLD queries | 8.8 | 0.0026 |  |
| [CVE-2026-53146](https://patchblox.com/security/data/cve/CVE-2026-53146.md) | High | thunderbolt: Limit XDomain response copy to actual frame size | 7.1 | 0.0026 |  |
| [CVE-2026-64096](https://patchblox.com/security/data/cve/CVE-2026-64096.md) | High | kernel-uek64k-core: batman-adv: mcast: fix use-after-free in orig_node RCU release (Sven Eckelmann) [Orabug: 39754765] | 8.8 | 0.0026 |  |
| [CVE-2026-53157](https://patchblox.com/security/data/cve/CVE-2026-53157.md) | High | net: phonet: free phonet_device after RCU grace period | 7.8 | 0.0025 |  |
| [CVE-2026-43113](https://patchblox.com/security/data/cve/CVE-2026-43113.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0024 |  |
| [CVE-2026-46307](https://patchblox.com/security/data/cve/CVE-2026-46307.md) | High | wifi: ath5k: do not access array OOB | 8.3 | 0.0024 |  |
| [CVE-2026-46275](https://patchblox.com/security/data/cve/CVE-2026-46275.md) | High | Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths | 7.8 | 0.0023 |  |
| [CVE-2026-46099](https://patchblox.com/security/data/cve/CVE-2026-46099.md) | High | net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels | 8.1 | 0.0022 |  |
| [CVE-2026-52918](https://patchblox.com/security/data/cve/CVE-2026-52918.md) | High | Bluetooth: serialize accept_q access | 8.8 | 0.0022 |  |
| [CVE-2026-52923](https://patchblox.com/security/data/cve/CVE-2026-52923.md) | High | ipc: limit next_id allocation to the valid ID range | 7.8 | 0.0022 |  |
| [CVE-2025-22026](https://patchblox.com/security/data/cve/CVE-2025-22026.md) | High | kernel-uek64k: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.5 | 0.0021 |  |
| [CVE-2025-38192](https://patchblox.com/security/data/cve/CVE-2025-38192.md) | High | net: clear the dst when changing skb protocol | 7.0 | 0.0021 |  |
| [CVE-2026-45852](https://patchblox.com/security/data/cve/CVE-2026-45852.md) | High | kernel-default: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711). | 8.8 | 0.0020 |  |
| [CVE-2026-31786](https://patchblox.com/security/data/cve/CVE-2026-31786.md) | High | kernel-uek64k: Buffer overflow in drivers/xen/sys-hypervisor.c (Juergen Gross) [Orabug: 39305898] | 7.8 | 0.0020 |  |
| [CVE-2023-45896](https://patchblox.com/security/data/cve/CVE-2023-45896.md) | High | kernel-uek64k: fs/ntfs3: Add more attributes checks in mi_enum_attr() (Konstantin Komarov) | 7.1 | 0.0020 |  |
| [CVE-2026-53072](https://patchblox.com/security/data/cve/CVE-2026-53072.md) | High | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER | 8.8 | 0.0020 |  |
| [CVE-2026-46113](https://patchblox.com/security/data/cve/CVE-2026-46113.md) | High | kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | 8.8 | 0.0020 |  |
| [CVE-2026-52969](https://patchblox.com/security/data/cve/CVE-2026-52969.md) | High | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 |  |
| [CVE-2026-31588](https://patchblox.com/security/data/cve/CVE-2026-31588.md) | High | KVM: x86: Use scratch field in MMIO fragment to hold small write values | 8.8 | 0.0019 |  |
| [CVE-2025-38584](https://patchblox.com/security/data/cve/CVE-2025-38584.md) | High | padata: Fix pd UAF once and for all | 7.8 | 0.0019 |  |
| [CVE-2026-53212](https://patchblox.com/security/data/cve/CVE-2026-53212.md) | High | netfilter: nft_tunnel: fix use-after-free on object destroy | 7.8 | 0.0019 |  |
| [CVE-2025-68307](https://patchblox.com/security/data/cve/CVE-2025-68307.md) | High | can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs | 7.0 | 0.0019 |  |
| [CVE-2026-53369](https://patchblox.com/security/data/cve/CVE-2026-53369.md) | High | kernel-64kb: udf: reject descriptors with oversized CRC length (bsc#1271818). | 8.4 | 0.0019 |  |
| [CVE-2025-38250](https://patchblox.com/security/data/cve/CVE-2025-38250.md) | High | Bluetooth: hci_core: Fix use-after-free in vhci_flush() | 7.8 | 0.0019 |  |
| [CVE-2026-63926](https://patchblox.com/security/data/cve/CVE-2026-63926.md) | High | kernel-64kb: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019). | 8.4 | 0.0019 |  |
| [CVE-2026-64039](https://patchblox.com/security/data/cve/CVE-2026-64039.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.7 | 0.0019 |  |
| [CVE-2026-64529](https://patchblox.com/security/data/cve/CVE-2026-64529.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: qat - remove unused character device and... | 7.8 | 0.0018 |  |
| [CVE-2026-31787](https://patchblox.com/security/data/cve/CVE-2026-31787.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting pr... | 7.8 | 0.0018 |  |
| [CVE-2026-63860](https://patchblox.com/security/data/cve/CVE-2026-63860.md) | High | kernel-64kb: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429). | 8.4 | 0.0018 |  |
| [CVE-2026-31407](https://patchblox.com/security/data/cve/CVE-2026-31407.md) | High | netfilter: conntrack: add missing netlink policy validations | 7.1 | 0.0018 |  |
| [CVE-2026-45991](https://patchblox.com/security/data/cve/CVE-2026-45991.md) | High | udf: fix partition descriptor append bookkeeping | 7.8 | 0.0018 |  |
| [CVE-2026-63875](https://patchblox.com/security/data/cve/CVE-2026-63875.md) | High | kernel-modules: kernel: arm64: tlb: Flush walk cache when unsharing PMD tables | 8.8 | 0.0018 |  |
| [CVE-2026-63899](https://patchblox.com/security/data/cve/CVE-2026-63899.md) | High | kernel: kernel: USB: serial: mxuport: fix memory corruption with small endpoint | 8.8 | 0.0018 |  |
| [CVE-2026-63898](https://patchblox.com/security/data/cve/CVE-2026-63898.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63901](https://patchblox.com/security/data/cve/CVE-2026-63901.md) | High | kernel-64kb: USB: serial: digi_acceleport: fix memory corruption with small endpoints (bsc#1272501). | 7.8 | 0.0018 |  |
| [CVE-2026-63836](https://patchblox.com/security/data/cve/CVE-2026-63836.md) | High | batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd | 7.5 | 0.0017 |  |
| [CVE-2026-63807](https://patchblox.com/security/data/cve/CVE-2026-63807.md) | High | KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level | 8.8 | 0.0017 |  |
| [CVE-2026-63920](https://patchblox.com/security/data/cve/CVE-2026-63920.md) | High | kernel-default: ipv6: validate extension header length before copying to cmsg (bsc#1272877). | 8.1 | 0.0017 |  |
| [CVE-2026-53112](https://patchblox.com/security/data/cve/CVE-2026-53112.md) | High | wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet | 7.8 | 0.0017 |  |
| [CVE-2026-63902](https://patchblox.com/security/data/cve/CVE-2026-63902.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2026-63903](https://patchblox.com/security/data/cve/CVE-2026-63903.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2026-63904](https://patchblox.com/security/data/cve/CVE-2026-63904.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2026-63917](https://patchblox.com/security/data/cve/CVE-2026-63917.md) | High | kernel-default: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904). | 8.8 | 0.0017 |  |
| [CVE-2026-63928](https://patchblox.com/security/data/cve/CVE-2026-63928.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-63956](https://patchblox.com/security/data/cve/CVE-2026-63956.md) | High | kernel-64kb: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). | 7.8 | 0.0017 |  |
| [CVE-2026-63957](https://patchblox.com/security/data/cve/CVE-2026-63957.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2025-39931](https://patchblox.com/security/data/cve/CVE-2025-39931.md) | High | crypto: af_alg - Set merge to zero early in af_alg_sendmsg | 7.0 | 0.0017 |  |
| [CVE-2026-64528](https://patchblox.com/security/data/cve/CVE-2026-64528.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  tty: serial: samsung: Remove redundant port lock... | n/a | 0.0017 |  |
| [CVE-2026-63905](https://patchblox.com/security/data/cve/CVE-2026-63905.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-64219](https://patchblox.com/security/data/cve/CVE-2026-64219.md) | High | drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async | 7.8 | 0.0017 |  |
| [CVE-2026-64191](https://patchblox.com/security/data/cve/CVE-2026-64191.md) | High | i2c: stub: Reject I2C block transfers with invalid length | 9.8 | 0.0017 |  |
| [CVE-2026-31532](https://patchblox.com/security/data/cve/CVE-2026-31532.md) | High | can: raw: fix ro->uniq use-after-free in raw_rcv() | 8.8 | 0.0017 |  |
| [CVE-2026-63870](https://patchblox.com/security/data/cve/CVE-2026-63870.md) | High | kernel-uek64k-modules-extra-netfilter: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-63927](https://patchblox.com/security/data/cve/CVE-2026-63927.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2026-45850](https://patchblox.com/security/data/cve/CVE-2026-45850.md) | High | ipvs: skip ipv6 extension headers for csum checks | 7.5 | 0.0016 |  |
| [CVE-2025-38710](https://patchblox.com/security/data/cve/CVE-2025-38710.md) | High | gfs2: Validate i_depth for exhash directories | 7.0 | 0.0016 |  |
| [CVE-2025-39863](https://patchblox.com/security/data/cve/CVE-2025-39863.md) | High | wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work | 7.8 | 0.0016 |  |
| [CVE-2026-53022](https://patchblox.com/security/data/cve/CVE-2026-53022.md) | High | platform/x86: dell-wmi-sysman: bound enumeration string aggregation | 7.0 | 0.0016 |  |
| [CVE-2026-63823](https://patchblox.com/security/data/cve/CVE-2026-63823.md) | High | keys: Pin request_key_auth payload in instantiate paths | 8.8 | 0.0016 |  |
| [CVE-2026-64527](https://patchblox.com/security/data/cve/CVE-2026-64527.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/hyperv: validate VMBus packet size in receiv... | 7.0 | 0.0016 |  |
| [CVE-2026-63961](https://patchblox.com/security/data/cve/CVE-2026-63961.md) | High | usb: typec: altmodes/displayport: validate count before reading Status Update VDO | 7.1 | 0.0016 |  |
| [CVE-2026-63921](https://patchblox.com/security/data/cve/CVE-2026-63921.md) | High | kernel-default: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918). | 8.8 | 0.0016 |  |
| [CVE-2026-53270](https://patchblox.com/security/data/cve/CVE-2026-53270.md) | High | ipvs: clear the svc scheduler ptr early on edit | 9.8 | 0.0016 |  |
| [CVE-2026-52912](https://patchblox.com/security/data/cve/CVE-2026-52912.md) | High | netfilter: nf_queue: hold bridge skb->dev while queued | 7.8 | 0.0016 |  |
| [CVE-2026-23204](https://patchblox.com/security/data/cve/CVE-2026-23204.md) | High | kernel-64kb: net/sched: cls_u32: use skb_header_pointer_careful() (bsc#1258340). | 8.1 | 0.0016 |  |
| [CVE-2026-63809](https://patchblox.com/security/data/cve/CVE-2026-63809.md) | High | bpf: use kvfree() for replaced sysctl write buffer | 7.8 | 0.0015 |  |
| [CVE-2026-46174](https://patchblox.com/security/data/cve/CVE-2026-46174.md) | High | x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache | 9.8 | 0.0015 |  |
| [CVE-2026-64118](https://patchblox.com/security/data/cve/CVE-2026-64118.md) | High | kernel-64kb: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749). | 8.4 | 0.0015 |  |
| [CVE-2026-53273](https://patchblox.com/security/data/cve/CVE-2026-53273.md) | High | kernel-64kb: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713). | 7.8 | 0.0015 |  |
| [CVE-2026-52933](https://patchblox.com/security/data/cve/CVE-2026-52933.md) | High | io_uring/poll: fix signed comparison in io_poll_get_ownership() | 7.8 | 0.0015 |  |
| [CVE-2026-53194](https://patchblox.com/security/data/cve/CVE-2026-53194.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2026-31449](https://patchblox.com/security/data/cve/CVE-2026-31449.md) | High | ext4: validate p_idx bounds in ext4_ext_correct_indexes | 7.8 | 0.0015 |  |
| [CVE-2026-53329](https://patchblox.com/security/data/cve/CVE-2026-53329.md) | High | drm/amd/display: Use krealloc_array() in dal_vector_reserve() | 7.8 | 0.0015 |  |
| [CVE-2026-63914](https://patchblox.com/security/data/cve/CVE-2026-63914.md) | High | bpftool: xfrm: route MIGRATE notifications to caller's netns (Maoyi Xie) [Orabug: 39754286] | 7.3 | 0.0015 |  |
| [CVE-2026-46294](https://patchblox.com/security/data/cve/CVE-2026-46294.md) | High | kernel-uek: dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585] | 7.8 | 0.0015 |  |
| [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 |  |
| [CVE-2026-64009](https://patchblox.com/security/data/cve/CVE-2026-64009.md) | High | kernel-64kb: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). | 7.8 | 0.0014 |  |
| [CVE-2026-46006](https://patchblox.com/security/data/cve/CVE-2026-46006.md) | High | drm/nouveau: fix u32 overflow in pushbuf reloc bounds check | 7.8 | 0.0014 |  |
| [CVE-2026-46189](https://patchblox.com/security/data/cve/CVE-2026-46189.md) | High | kernel-uek-modules-extra: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [Orabug: 39460540] | 7.8 | 0.0014 |  |
| [CVE-2026-52910](https://patchblox.com/security/data/cve/CVE-2026-52910.md) | High | bpf: Free reuseport cBPF prog after RCU grace period. | 7.8 | 0.0014 |  |
| [CVE-2026-53195](https://patchblox.com/security/data/cve/CVE-2026-53195.md) | High | USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() | 7.8 | 0.0014 |  |
| [CVE-2026-64018](https://patchblox.com/security/data/cve/CVE-2026-64018.md) | High | kernel-default: Security update for the Linux Kernel | 9.3 | 0.0014 |  |
| [CVE-2026-46149](https://patchblox.com/security/data/cve/CVE-2026-46149.md) | High | scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() | 8.8 | 0.0014 |  |
| [CVE-2026-63794](https://patchblox.com/security/data/cve/CVE-2026-63794.md) | High | KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path | 8.8 | 0.0014 |  |
| [CVE-2026-46209](https://patchblox.com/security/data/cve/CVE-2026-46209.md) | High | kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460... | 8.4 | 0.0014 |  |
| [CVE-2026-46069](https://patchblox.com/security/data/cve/CVE-2026-46069.md) | High | kernel-uek64k-modules-extra: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Daniel Hodges) [Orabug: 39452344] | 7.8 | 0.0014 |  |
| [CVE-2026-64524](https://patchblox.com/security/data/cve/CVE-2026-64524.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/hyperv: validate resolution_count and fix WI... | 7.7 | 0.0014 |  |
| [CVE-2026-46021](https://patchblox.com/security/data/cve/CVE-2026-46021.md) | High | thermal: core: Fix thermal zone governor cleanup issues | 7.0 | 0.0014 |  |
| [CVE-2026-46180](https://patchblox.com/security/data/cve/CVE-2026-46180.md) | High | wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task | 7.8 | 0.0014 |  |
| [CVE-2026-53016](https://patchblox.com/security/data/cve/CVE-2026-53016.md) | High | crypto: ccp - copy IV using skcipher ivsize | 7.8 | 0.0014 |  |
| [CVE-2026-53059](https://patchblox.com/security/data/cve/CVE-2026-53059.md) | High | dm log: fix out-of-bounds write due to region_count overflow | 7.8 | 0.0014 |  |
| [CVE-2026-23444](https://patchblox.com/security/data/cve/CVE-2026-23444.md) | High | wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure | 7.1 | 0.0014 |  |
| [CVE-2026-64153](https://patchblox.com/security/data/cve/CVE-2026-64153.md) | High | bpftool: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (Mikko Perttunen) [Orabug: 39754904] | 8.8 | 0.0014 |  |
| [CVE-2026-53381](https://patchblox.com/security/data/cve/CVE-2026-53381.md) | High | virtiofs: fix UAF on submount umount | 8.1 | 0.0014 |  |
| [CVE-2026-46197](https://patchblox.com/security/data/cve/CVE-2026-46197.md) | High | drm/amdkfd: validate SVM ioctl nattr against buffer size | 7.8 | 0.0014 |  |
| [CVE-2026-46206](https://patchblox.com/security/data/cve/CVE-2026-46206.md) | High | batman-adv: reject new tp_meter sessions during teardown | 7.8 | 0.0014 |  |
| [CVE-2026-46208](https://patchblox.com/security/data/cve/CVE-2026-46208.md) | High | batman-adv: stop tp_meter sessions during mesh teardown | 7.8 | 0.0014 |  |
| [CVE-2026-52962](https://patchblox.com/security/data/cve/CVE-2026-52962.md) | High | ceph: fix a buffer leak in __ceph_setxattr() | 7.8 | 0.0014 |  |
| [CVE-2026-46274](https://patchblox.com/security/data/cve/CVE-2026-46274.md) | High | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | 7.8 | 0.0014 |  |
| [CVE-2026-46193](https://patchblox.com/security/data/cve/CVE-2026-46193.md) | High | kernel-uek-debug-devel: xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460554] | 7.0 | 0.0014 |  |
| [CVE-2026-46191](https://patchblox.com/security/data/cve/CVE-2026-46191.md) | High | fbcon: Avoid OOB font access if console rotation fails | 7.7 | 0.0014 |  |
| [CVE-2026-64114](https://patchblox.com/security/data/cve/CVE-2026-64114.md) | High | kernel-default: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742). | 8.8 | 0.0014 |  |
| [CVE-2026-53223](https://patchblox.com/security/data/cve/CVE-2026-53223.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue sk... | 8.1 | 0.0014 |  |
| [CVE-2026-46033](https://patchblox.com/security/data/cve/CVE-2026-46033.md) | High | crypto: authencesn - reject short ahash digests during instance creation | 7.3 | 0.0014 |  |
| [CVE-2026-46080](https://patchblox.com/security/data/cve/CVE-2026-46080.md) | High | ocfs2: split transactions in dio completion to avoid credit exhaustion | 7.1 | 0.0014 |  |
| [CVE-2026-64115](https://patchblox.com/security/data/cve/CVE-2026-64115.md) | High | kernel-default: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). | 8.8 | 0.0014 |  |
| [CVE-2026-46015](https://patchblox.com/security/data/cve/CVE-2026-46015.md) | High | tcp: call sk_data_ready() after listener migration | 8.1 | 0.0014 |  |
| [CVE-2026-43093](https://patchblox.com/security/data/cve/CVE-2026-43093.md) | High | kernel-64kb: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254). | 7.8 | 0.0014 |  |
| [CVE-2026-53148](https://patchblox.com/security/data/cve/CVE-2026-53148.md) | High | thunderbolt: Clamp XDomain response data copy to allocation size | 7.8 | 0.0014 |  |
| [CVE-2026-64126](https://patchblox.com/security/data/cve/CVE-2026-64126.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.3 | 0.0014 |  |
| [CVE-2026-46132](https://patchblox.com/security/data/cve/CVE-2026-46132.md) | High | bpftool: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297] | 7.0 | 0.0014 |  |
| [CVE-2026-23442](https://patchblox.com/security/data/cve/CVE-2026-23442.md) | High | ipv6: add NULL checks for idev in SRv6 paths | 7.8 | 0.0013 |  |
| [CVE-2026-31617](https://patchblox.com/security/data/cve/CVE-2026-31617.md) | High | usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() | 7.8 | 0.0013 |  |
| [CVE-2026-53356](https://patchblox.com/security/data/cve/CVE-2026-53356.md) | High | drm/i915/gem: Fix phys BO pread/pwrite with offset | 7.8 | 0.0013 |  |
| [CVE-2026-46172](https://patchblox.com/security/data/cve/CVE-2026-46172.md) | High | kernel-64kb: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (bsc#1266903). | 7.0 | 0.0013 |  |
| [CVE-2026-52970](https://patchblox.com/security/data/cve/CVE-2026-52970.md) | High | netfilter: nft_ct: fix missing expect put in obj eval | 7.0 | 0.0013 |  |
| [CVE-2026-53388](https://patchblox.com/security/data/cve/CVE-2026-53388.md) | High | fuse: re-lock request before replacing page cache folio | 8.8 | 0.0013 |  |
| [CVE-2026-64032](https://patchblox.com/security/data/cve/CVE-2026-64032.md) | High | kernel-rt-64k-debug-devel: kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port | 8.8 | 0.0013 |  |
| [CVE-2026-63803](https://patchblox.com/security/data/cve/CVE-2026-63803.md) | High | hdlc_ppp: sync per-proto timers before freeing hdlc state | 8.4 | 0.0013 |  |
| [CVE-2026-46023](https://patchblox.com/security/data/cve/CVE-2026-46023.md) | High | dm mirror: fix integer overflow in create_dirty_log() | 7.0 | 0.0013 |  |
| [CVE-2026-31586](https://patchblox.com/security/data/cve/CVE-2026-31586.md) | High | mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() | 7.8 | 0.0013 |  |
| [CVE-2026-31697](https://patchblox.com/security/data/cve/CVE-2026-31697.md) | High | crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | 7.1 | 0.0013 |  |
| [CVE-2026-31698](https://patchblox.com/security/data/cve/CVE-2026-31698.md) | High | crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | 7.1 | 0.0013 |  |
| [CVE-2026-31699](https://patchblox.com/security/data/cve/CVE-2026-31699.md) | High | crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | 7.1 | 0.0013 |  |
| [CVE-2026-52942](https://patchblox.com/security/data/cve/CVE-2026-52942.md) | High | netfilter: nf_log: validate MAC header was set before dumping it | 7.1 | 0.0013 |  |
| [CVE-2026-45840](https://patchblox.com/security/data/cve/CVE-2026-45840.md) | High | kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479] | 7.0 | 0.0013 |  |
| [CVE-2026-63971](https://patchblox.com/security/data/cve/CVE-2026-63971.md) | High | kernel-default: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678). | 8.8 | 0.0013 |  |
| [CVE-2026-31580](https://patchblox.com/security/data/cve/CVE-2026-31580.md) | High | bcache: fix cached_dev.sb_bio use-after-free and crash | 7.8 | 0.0013 |  |
| [CVE-2026-31583](https://patchblox.com/security/data/cve/CVE-2026-31583.md) | High | media: em28xx: fix use-after-free in em28xx_v4l2_open() | 7.8 | 0.0013 |  |
| [CVE-2026-31602](https://patchblox.com/security/data/cve/CVE-2026-31602.md) | High | ALSA: ctxfi: Limit PTP to a single page | 7.8 | 0.0013 |  |
| [CVE-2026-43076](https://patchblox.com/security/data/cve/CVE-2026-43076.md) | High | bpftool: ocfs2: validate inline data i_size during inode read (Deepanshu Kartikey) [Orabug: 39331098] | 7.8 | 0.0013 |  |
| [CVE-2026-46122](https://patchblox.com/security/data/cve/CVE-2026-46122.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-46163](https://patchblox.com/security/data/cve/CVE-2026-46163.md) | High | wifi: b43legacy: enforce bounds check on firmware key index in RX path | 7.8 | 0.0013 |  |
| [CVE-2026-46234](https://patchblox.com/security/data/cve/CVE-2026-46234.md) | High | vsock: fix buffer size clamping order | 7.8 | 0.0013 |  |
| [CVE-2026-63942](https://patchblox.com/security/data/cve/CVE-2026-63942.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-53011](https://patchblox.com/security/data/cve/CVE-2026-53011.md) | High | net/sched: taprio: fix use-after-free in advance_sched() on schedule switch | 8.8 | 0.0013 |  |
| [CVE-2026-53189](https://patchblox.com/security/data/cve/CVE-2026-53189.md) | High | bpftool: kernel: mm/huge_memory: update file PMD counter before folio_put() | 8.8 | 0.0013 |  |
| [CVE-2026-64002](https://patchblox.com/security/data/cve/CVE-2026-64002.md) | High | kernel-default: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774). | 8.8 | 0.0013 |  |
| [CVE-2026-46116](https://patchblox.com/security/data/cve/CVE-2026-46116.md) | High | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete | 8.4 | 0.0013 |  |
| [CVE-2026-31673](https://patchblox.com/security/data/cve/CVE-2026-31673.md) | High | af_unix: read UNIX_DIAG_VFS data under unix_state_lock | 7.8 | 0.0013 |  |
| [CVE-2026-46065](https://patchblox.com/security/data/cve/CVE-2026-46065.md) | High | fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info | 7.8 | 0.0013 |  |
| [CVE-2026-46150](https://patchblox.com/security/data/cve/CVE-2026-46150.md) | High | fanotify: fix false positive on permission events | 7.8 | 0.0013 |  |
| [CVE-2026-46178](https://patchblox.com/security/data/cve/CVE-2026-46178.md) | High | kernel-uek64k: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (Jason Gunthorpe) [Orabug: 39460496] | 7.8 | 0.0013 |  |
| [CVE-2026-53136](https://patchblox.com/security/data/cve/CVE-2026-53136.md) | High | bpftool: kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size | 7.8 | 0.0013 |  |
| [CVE-2026-63985](https://patchblox.com/security/data/cve/CVE-2026-63985.md) | High | kernel-64kb: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963). | 7.8 | 0.0013 |  |
| [CVE-2026-64133](https://patchblox.com/security/data/cve/CVE-2026-64133.md) | High | ALSA: asihpi: Fix potential OOB array access at reading cache | 7.8 | 0.0013 |  |
| [CVE-2026-64218](https://patchblox.com/security/data/cve/CVE-2026-64218.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  batman-adv: bla: fix report_work leak on backbon... | 7.8 | 0.0013 |  |
| [CVE-2026-31489](https://patchblox.com/security/data/cve/CVE-2026-31489.md) | High | spi: meson-spicc: Fix double-put in remove path | 7.8 | 0.0013 |  |
| [CVE-2026-43328](https://patchblox.com/security/data/cve/CVE-2026-43328.md) | High | kernel-64kb: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832). | 7.8 | 0.0013 |  |
| [CVE-2026-46004](https://patchblox.com/security/data/cve/CVE-2026-46004.md) | High | ALSA: caiaq: Handle probe errors properly | 7.8 | 0.0013 |  |
| [CVE-2026-46086](https://patchblox.com/security/data/cve/CVE-2026-46086.md) | High | net: bridge: use a stable FDB dst snapshot in RCU readers | 7.8 | 0.0013 |  |
| [CVE-2026-53004](https://patchblox.com/security/data/cve/CVE-2026-53004.md) | High | kernel-uek-modules-extra: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757] | 7.8 | 0.0013 |  |
| [CVE-2026-31624](https://patchblox.com/security/data/cve/CVE-2026-31624.md) | High | HID: core: clamp report_size in s32ton() to avoid undefined shift | 7.1 | 0.0013 |  |
| [CVE-2026-53167](https://patchblox.com/security/data/cve/CVE-2026-53167.md) | High | fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios | 7.0 | 0.0013 |  |
| [CVE-2026-53218](https://patchblox.com/security/data/cve/CVE-2026-53218.md) | High | netfilter: nft_exthdr: fix register tracking for F_PRESENT flag | 7.0 | 0.0013 |  |
| [CVE-2026-53249](https://patchblox.com/security/data/cve/CVE-2026-53249.md) | High | ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | 7.0 | 0.0013 |  |
| [CVE-2026-31581](https://patchblox.com/security/data/cve/CVE-2026-31581.md) | High | ALSA: 6fire: fix use-after-free on disconnect | 8.8 | 0.0013 |  |
| [CVE-2026-46120](https://patchblox.com/security/data/cve/CVE-2026-46120.md) | High | kernel: kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() | 8.8 | 0.0013 |  |
| [CVE-2026-52917](https://patchblox.com/security/data/cve/CVE-2026-52917.md) | High | sctp: diag: reject stale associations in dump_one path | 8.8 | 0.0013 |  |
| [CVE-2026-31578](https://patchblox.com/security/data/cve/CVE-2026-31578.md) | High | media: as102: fix to not free memory after the device is registered in as102_usb_probe() | 7.8 | 0.0013 |  |
| [CVE-2026-31597](https://patchblox.com/security/data/cve/CVE-2026-31597.md) | High | ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY | 7.8 | 0.0013 |  |
| [CVE-2026-46047](https://patchblox.com/security/data/cve/CVE-2026-46047.md) | High | net: qrtr: ns: Fix use-after-free in driver remove() | 7.8 | 0.0013 |  |
| [CVE-2026-46070](https://patchblox.com/security/data/cve/CVE-2026-46070.md) | High | md/raid5: validate payload size before accessing journal metadata | 7.1 | 0.0013 |  |
| [CVE-2026-53149](https://patchblox.com/security/data/cve/CVE-2026-53149.md) | High | thunderbolt: Bound root directory content to block size | 7.1 | 0.0013 |  |
| [CVE-2026-46160](https://patchblox.com/security/data/cve/CVE-2026-46160.md) | High | btrfs: fix missing last_unlink_trans update when removing a directory | 7.0 | 0.0013 |  |
| [CVE-2026-63865](https://patchblox.com/security/data/cve/CVE-2026-63865.md) | High | kernel-64kb: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486). | 8.8 | 0.0013 |  |
| [CVE-2026-43075](https://patchblox.com/security/data/cve/CVE-2026-43075.md) | High | bpftool: ocfs2: fix out-of-bounds write in ocfs2_write_end_inline (Joseph Qi) [Orabug: 39331093] | 7.8 | 0.0013 |  |
| [CVE-2026-64103](https://patchblox.com/security/data/cve/CVE-2026-64103.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: isci: Fix use-after-free in device removal... | 7.8 | 0.0013 |  |
| [CVE-2026-64123](https://patchblox.com/security/data/cve/CVE-2026-64123.md) | High | bpftool: net: hsr: defer node table free until after RCU readers (Michael Bommarito) [Orabug: 39754840] | 7.8 | 0.0013 |  |
| [CVE-2026-52915](https://patchblox.com/security/data/cve/CVE-2026-52915.md) | High | netfilter: ip6t_hbh: reject oversized option lists | 7.1 | 0.0013 |  |
| [CVE-2026-53041](https://patchblox.com/security/data/cve/CVE-2026-53041.md) | High | ocfs2: fix listxattr handling when the buffer is full | 7.1 | 0.0013 |  |
| [CVE-2026-53138](https://patchblox.com/security/data/cve/CVE-2026-53138.md) | High | drm/amd/display: Bound VBIOS record-chain walk loops | 7.1 | 0.0013 |  |
| [CVE-2026-64014](https://patchblox.com/security/data/cve/CVE-2026-64014.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 |  |
| [CVE-2026-31619](https://patchblox.com/security/data/cve/CVE-2026-31619.md) | High | ALSA: fireworks: bound device-supplied status before string array lookup | 7.3 | 0.0013 |  |
| [CVE-2026-31623](https://patchblox.com/security/data/cve/CVE-2026-31623.md) | High | net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() | 7.1 | 0.0013 |  |
| [CVE-2026-53150](https://patchblox.com/security/data/cve/CVE-2026-53150.md) | High | thunderbolt: Reject zero-length property entries in validator | 7.0 | 0.0013 |  |
| [CVE-2026-53168](https://patchblox.com/security/data/cve/CVE-2026-53168.md) | High | fuse: reject fuse_notify() pagecache ops on directories | 7.0 | 0.0013 |  |
| [CVE-2026-53181](https://patchblox.com/security/data/cve/CVE-2026-53181.md) | High | vsock/vmci: fix sk_ack_backlog leak on failed handshake | 7.0 | 0.0013 |  |
| [CVE-2026-53208](https://patchblox.com/security/data/cve/CVE-2026-53208.md) | High | Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig | 7.0 | 0.0013 |  |
| [CVE-2026-46230](https://patchblox.com/security/data/cve/CVE-2026-46230.md) | High | drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg | 8.8 | 0.0012 |  |
| [CVE-2026-43052](https://patchblox.com/security/data/cve/CVE-2026-43052.md) | High | wifi: mac80211: check tdls flag in ieee80211_tdls_oper | 7.1 | 0.0012 |  |
| [CVE-2026-46091](https://patchblox.com/security/data/cve/CVE-2026-46091.md) | High | media: rc: igorplugusb: heed coherency rules | 7.1 | 0.0012 |  |
| [CVE-2026-53064](https://patchblox.com/security/data/cve/CVE-2026-53064.md) | High | dm cache: fix null-deref with concurrent writes in passthrough mode | 7.1 | 0.0012 |  |
| [CVE-2026-53021](https://patchblox.com/security/data/cve/CVE-2026-53021.md) | High | scsi: target: core: Fix integer overflow in UNMAP bounds check | 7.0 | 0.0012 |  |
| [CVE-2026-53040](https://patchblox.com/security/data/cve/CVE-2026-53040.md) | High | bpftool: ocfs2: validate bg_bits during freefrag scan (Zhengyuan Huang) [Orabug: 39621868] | 7.1 | 0.0012 |  |
| [CVE-2026-52927](https://patchblox.com/security/data/cve/CVE-2026-52927.md) | High | netfilter: ebtables: fix OOB read in compat_mtw_from_user | 7.8 | 0.0012 |  |
| [CVE-2026-64174](https://patchblox.com/security/data/cve/CVE-2026-64174.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: cfg80211: advance loop vars in cfg80211_me... | 8.8 | 0.0012 |  |
| [CVE-2026-46231](https://patchblox.com/security/data/cve/CVE-2026-46231.md) | High | batman-adv: bla: put backbone reference on failed claim hash insert | 7.1 | 0.0012 |  |
| [CVE-2026-46233](https://patchblox.com/security/data/cve/CVE-2026-46233.md) | High | batman-adv: bla: only purge non-released claims | 7.1 | 0.0012 |  |
| [CVE-2026-53255](https://patchblox.com/security/data/cve/CVE-2026-53255.md) | High | Bluetooth: MGMT: validate advertising TLV before type checks | 7.1 | 0.0012 |  |
| [CVE-2026-31684](https://patchblox.com/security/data/cve/CVE-2026-31684.md) | High | net: sched: act_csum: validate nested VLAN headers | 7.8 | 0.0012 |  |
| [CVE-2026-64237](https://patchblox.com/security/data/cve/CVE-2026-64237.md) | High | Input: elan_i2c - validate firmware size before use | 7.1 | 0.0012 |  |
| [CVE-2026-64034](https://patchblox.com/security/data/cve/CVE-2026-64034.md) | High | kernel-default: Security update for the Linux Kernel | 9.3 | 0.0012 |  |
| [CVE-2026-53073](https://patchblox.com/security/data/cve/CVE-2026-53073.md) | High | Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error | 8.8 | 0.0011 |  |
| [CVE-2026-52926](https://patchblox.com/security/data/cve/CVE-2026-52926.md) | High | batman-adv: clear current gateway during teardown | 7.8 | 0.0011 |  |
| [CVE-2026-52909](https://patchblox.com/security/data/cve/CVE-2026-52909.md) | High | ip6_vti: set netns_immutable on the fallback device. | 7.8 | 0.0011 |  |
| [CVE-2026-31700](https://patchblox.com/security/data/cve/CVE-2026-31700.md) | High | net/packet: fix TOCTOU race on mmap'd vnet_hdr in tpacket_snd() | 7.8 | 0.0011 |  |
| [CVE-2026-46319](https://patchblox.com/security/data/cve/CVE-2026-46319.md) | High | net/sched: act_ct: Only release RCU read lock after ct_ft | 8.8 | 0.0011 |  |
| [CVE-2026-53354](https://patchblox.com/security/data/cve/CVE-2026-53354.md) | High | arm64: errata: Mitigate TLBI errata on various Arm CPUs | 8.8 | 0.0010 |  |
| [CVE-2026-46227](https://patchblox.com/security/data/cve/CVE-2026-46227.md) | High | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 |  |
| [CVE-2026-46090](https://patchblox.com/security/data/cve/CVE-2026-46090.md) | High | ALSA: aloop: Fix peer runtime UAF during format-change stop | 7.8 | 0.0010 |  |
| [CVE-2026-53050](https://patchblox.com/security/data/cve/CVE-2026-53050.md) | High | quota: Fix race of dquot_scan_active() with quota deactivation | 7.8 | 0.0010 |  |
| [CVE-2026-53239](https://patchblox.com/security/data/cve/CVE-2026-53239.md) | High | xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() | 8.8 | 0.0010 |  |
| [CVE-2026-46107](https://patchblox.com/security/data/cve/CVE-2026-46107.md) | High | dm-thin: fix metadata refcount underflow | 7.8 | 0.0010 |  |
| [CVE-2026-53096](https://patchblox.com/security/data/cve/CVE-2026-53096.md) | High | bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path | 7.8 | 0.0010 |  |
| [CVE-2026-43111](https://patchblox.com/security/data/cve/CVE-2026-43111.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0010 |  |
| [CVE-2026-53265](https://patchblox.com/security/data/cve/CVE-2026-53265.md) | High | dm cache policy smq: check allocation under invalidate lock | 7.8 | 0.0010 |  |
| [CVE-2026-53192](https://patchblox.com/security/data/cve/CVE-2026-53192.md) | High | ALSA: timer: Fix UAF at snd_timer_user_params() | 8.8 | 0.0010 |  |
| [CVE-2024-56719](https://patchblox.com/security/data/cve/CVE-2024-56719.md) | Routine | net: stmmac: fix TSO DMA API usage causing oops | 5.5 | 0.0054 |  |
| [CVE-2024-26886](https://patchblox.com/security/data/cve/CVE-2024-26886.md) | Routine | kernel-uek64k: Bluetooth: af_bluetooth: Fix deadlock (Luiz Augusto von Dentz) [Orabug: 36544919] | 6.5 | 0.0049 |  |
| [CVE-2025-71161](https://patchblox.com/security/data/cve/CVE-2025-71161.md) | Routine | dm-verity: disable recursive forward error correction | 5.5 | 0.0047 |  |
| [CVE-2026-23440](https://patchblox.com/security/data/cve/CVE-2026-23440.md) | Routine | kernel-64kb: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641). | 4.7 | 0.0028 |  |
| [CVE-2024-49925](https://patchblox.com/security/data/cve/CVE-2024-49925.md) | Routine | fbdev: efifb: Register sysfs groups through driver core | 5.5 | 0.0027 |  |
| [CVE-2024-47809](https://patchblox.com/security/data/cve/CVE-2024-47809.md) | Routine | dlm: fix possible lkb_resource null dereference | 5.5 | 0.0024 |  |
| [CVE-2024-27389](https://patchblox.com/security/data/cve/CVE-2024-27389.md) | Routine | kernel-uek64k: pstore: inode: Only d_invalidate() is needed (Kees Cook) [Orabug: 36598300] | 5.5 | 0.0024 |  |
| [CVE-2024-50012](https://patchblox.com/security/data/cve/CVE-2024-50012.md) | Routine | kernel-64kb: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386). | 5.5 | 0.0023 |  |
| [CVE-2026-63892](https://patchblox.com/security/data/cve/CVE-2026-63892.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-21712](https://patchblox.com/security/data/cve/CVE-2025-21712.md) | Routine | md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime | 5.5 | 0.0022 |  |
| [CVE-2024-56657](https://patchblox.com/security/data/cve/CVE-2024-56657.md) | Routine | kernel-uek64k: ELSA-2025-20480: Unbreakable Enterprise kernel security update (IMPORTANT) | 5.5 | 0.0022 |  |
| [CVE-2025-23141](https://patchblox.com/security/data/cve/CVE-2025-23141.md) | Routine | KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses | 6.1 | 0.0021 |  |
| [CVE-2025-68239](https://patchblox.com/security/data/cve/CVE-2025-68239.md) | Routine | binfmt_misc: restore write access before closing files opened by open_exec() | 6.2 | 0.0020 |  |
| [CVE-2025-23131](https://patchblox.com/security/data/cve/CVE-2025-23131.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2025-38659](https://patchblox.com/security/data/cve/CVE-2025-38659.md) | Routine | gfs2: No more self recovery | 5.5 | 0.0018 |  |
| [CVE-2026-46018](https://patchblox.com/security/data/cve/CVE-2026-46018.md) | Routine | ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES | 5.5 | 0.0018 |  |
| [CVE-2026-53047](https://patchblox.com/security/data/cve/CVE-2026-53047.md) | Routine | efi/capsule-loader: fix incorrect sizeof in phys array reallocation | 5.5 | 0.0018 |  |
| [CVE-2026-63822](https://patchblox.com/security/data/cve/CVE-2026-63822.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-63834](https://patchblox.com/security/data/cve/CVE-2026-63834.md) | Routine | batman-adv: tp_meter: restrict number of unacked list entries | 5.5 | 0.0017 |  |
| [CVE-2026-63835](https://patchblox.com/security/data/cve/CVE-2026-63835.md) | Routine | batman-adv: v: prevent OGM aggregation on disabled hardif | 4.4 | 0.0017 |  |
| [CVE-2026-63897](https://patchblox.com/security/data/cve/CVE-2026-63897.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-63900](https://patchblox.com/security/data/cve/CVE-2026-63900.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-52963](https://patchblox.com/security/data/cve/CVE-2026-52963.md) | Routine | ALSA: usb-audio: Bound MIDI endpoint descriptor scans | 5.5 | 0.0016 |  |
| [CVE-2026-53039](https://patchblox.com/security/data/cve/CVE-2026-53039.md) | Routine | kernel-uek: ocfs2: validate group add input before caching (Zhengyuan Huang) [Orabug: 39621864] | 5.5 | 0.0016 |  |
| [CVE-2026-53093](https://patchblox.com/security/data/cve/CVE-2026-53093.md) | Routine | wifi: brcmfmac: Fix error pointer dereference | 5.5 | 0.0016 |  |
| [CVE-2026-53128](https://patchblox.com/security/data/cve/CVE-2026-53128.md) | Routine | drbd: Balance RCU calls in drbd_adm_dump_devices() | 5.5 | 0.0016 |  |
| [CVE-2026-63948](https://patchblox.com/security/data/cve/CVE-2026-63948.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-63908](https://patchblox.com/security/data/cve/CVE-2026-63908.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-64094](https://patchblox.com/security/data/cve/CVE-2026-64094.md) | Routine | bpftool: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface (Sven Eckelmann) [Orabug: 39754757] | 5.5 | 0.0016 |  |
| [CVE-2026-23141](https://patchblox.com/security/data/cve/CVE-2026-23141.md) | Routine | kernel-64kb: btrfs: send: check for inline extents in range_is_hole_in_parent() (bsc#1258377). | 5.5 | 0.0015 |  |
| [CVE-2026-23157](https://patchblox.com/security/data/cve/CVE-2026-23157.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0014 |  |
| [CVE-2026-53012](https://patchblox.com/security/data/cve/CVE-2026-53012.md) | Routine | nexthop: fix IPv6 route referencing IPv4 nexthop | 5.5 | 0.0014 |  |
| [CVE-2026-46092](https://patchblox.com/security/data/cve/CVE-2026-46092.md) | Routine | wifi: rtw88: check for PCI upstream bridge existence | 5.5 | 0.0014 |  |
| [CVE-2026-46026](https://patchblox.com/security/data/cve/CVE-2026-46026.md) | Routine | kernel-uek64k-devel: net: qrtr: ns: Limit the maximum number of lookups (Manivannan Sadhasivam) [Orabug: 39452208] | 5.5 | 0.0013 |  |
| [CVE-2026-46196](https://patchblox.com/security/data/cve/CVE-2026-46196.md) | Routine | tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() | 5.5 | 0.0013 |  |
| [CVE-2026-53295](https://patchblox.com/security/data/cve/CVE-2026-53295.md) | Routine | mailbox: add sanity check for channel array | 5.5 | 0.0013 |  |
| [CVE-2026-31596](https://patchblox.com/security/data/cve/CVE-2026-31596.md) | Routine | ocfs2: handle invalid dinode in ocfs2_group_extend | 6.6 | 0.0013 |  |
| [CVE-2026-23399](https://patchblox.com/security/data/cve/CVE-2026-23399.md) | Routine | nf_tables: nft_dynset: fix possible stateful expression memleak in error path | 6.5 | 0.0013 |  |
| [CVE-2026-45841](https://patchblox.com/security/data/cve/CVE-2026-45841.md) | Routine | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 5.5 | 0.0013 |  |
| [CVE-2026-53227](https://patchblox.com/security/data/cve/CVE-2026-53227.md) | Routine | net: openvswitch: fix possible kfree_skb of ERR_PTR | 5.5 | 0.0013 |  |
| [CVE-2026-43089](https://patchblox.com/security/data/cve/CVE-2026-43089.md) | Routine | kernel-64kb: xfrm_user: fix info leak in build_mapping() (bsc#1264261). | 5.5 | 0.0013 |  |
| [CVE-2026-45844](https://patchblox.com/security/data/cve/CVE-2026-45844.md) | Routine | bpftool: netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Pablo Neira Ayuso) [Orabug: 39451507] | 5.5 | 0.0013 |  |
| [CVE-2026-52948](https://patchblox.com/security/data/cve/CVE-2026-52948.md) | Routine | i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl | 5.5 | 0.0013 |  |
| [CVE-2026-53385](https://patchblox.com/security/data/cve/CVE-2026-53385.md) | Routine | vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write | 5.5 | 0.0013 |  |
| [CVE-2026-46128](https://patchblox.com/security/data/cve/CVE-2026-46128.md) | Routine | bpftool: ipmi: Check event message buffer response for bad data (Corey Minyard) [Orabug: 39460284] | 5.5 | 0.0013 |  |
| [CVE-2026-46146](https://patchblox.com/security/data/cve/CVE-2026-46146.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-46161](https://patchblox.com/security/data/cve/CVE-2026-46161.md) | Routine | bpftool: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415] | 5.5 | 0.0013 |  |
| [CVE-2026-46167](https://patchblox.com/security/data/cve/CVE-2026-46167.md) | Routine | kernel-uek: usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl (Greg Kroah-Hartman) [Orabug: 39460438] | 5.5 | 0.0013 |  |
| [CVE-2026-46214](https://patchblox.com/security/data/cve/CVE-2026-46214.md) | Routine | kernel-uek-debug-modules-extra: vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646] | 5.5 | 0.0013 |  |
| [CVE-2026-53252](https://patchblox.com/security/data/cve/CVE-2026-53252.md) | Routine | Bluetooth: fix memory leak in error path of hci_alloc_dev() | 5.5 | 0.0013 |  |
| [CVE-2026-53325](https://patchblox.com/security/data/cve/CVE-2026-53325.md) | Routine | agp/amd64: Fix broken error propagation in agp_amd64_probe() | 5.5 | 0.0013 |  |
| [CVE-2026-63990](https://patchblox.com/security/data/cve/CVE-2026-63990.md) | Routine | kernel-64kb: bonding: refuse to enslave CAN devices (bsc#1273027). | 5.5 | 0.0013 |  |
| [CVE-2026-64028](https://patchblox.com/security/data/cve/CVE-2026-64028.md) | Routine | kernel-uek64k: tracing: Avoid NULL return from hist_field_name() on truncation (David Carlier) [Orabug: 39784962] | 5.5 | 0.0013 |  |
| [CVE-2026-31625](https://patchblox.com/security/data/cve/CVE-2026-31625.md) | Routine | HID: alps: fix NULL pointer dereference in alps_raw_event() | 5.5 | 0.0013 |  |
| [CVE-2026-43085](https://patchblox.com/security/data/cve/CVE-2026-43085.md) | Routine | kernel-64kb: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230). | 5.5 | 0.0013 |  |
| [CVE-2026-45838](https://patchblox.com/security/data/cve/CVE-2026-45838.md) | Routine | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 5.5 | 0.0013 |  |
| [CVE-2026-45842](https://patchblox.com/security/data/cve/CVE-2026-45842.md) | Routine | slip: reject VJ receive packets on instances with no rstate array | 5.5 | 0.0013 |  |
| [CVE-2026-46003](https://patchblox.com/security/data/cve/CVE-2026-46003.md) | Routine | net: qrtr: ns: Limit the total number of nodes | 5.5 | 0.0013 |  |
| [CVE-2026-46038](https://patchblox.com/security/data/cve/CVE-2026-46038.md) | Routine | net: qrtr: ns: Free the node during ctrl_cmd_bye() | 5.5 | 0.0013 |  |
| [CVE-2026-46040](https://patchblox.com/security/data/cve/CVE-2026-46040.md) | Routine | bpftool: inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails (Chia-Ming Chang) [Orabug: 39452251] | 5.5 | 0.0013 |  |
| [CVE-2026-46046](https://patchblox.com/security/data/cve/CVE-2026-46046.md) | Routine | ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() | 5.5 | 0.0013 |  |
| [CVE-2026-46101](https://patchblox.com/security/data/cve/CVE-2026-46101.md) | Routine | bpftool: netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452465] | 5.5 | 0.0013 |  |
| [CVE-2026-53001](https://patchblox.com/security/data/cve/CVE-2026-53001.md) | Routine | kernel-uek: netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621740] | 5.5 | 0.0013 |  |
| [CVE-2026-53134](https://patchblox.com/security/data/cve/CVE-2026-53134.md) | Routine | kernel-64kb: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819). | 5.5 | 0.0013 |  |
| [CVE-2026-53219](https://patchblox.com/security/data/cve/CVE-2026-53219.md) | Routine | netfilter: x_tables: avoid leaking percpu counter pointers | 5.5 | 0.0013 |  |
| [CVE-2026-46127](https://patchblox.com/security/data/cve/CVE-2026-46127.md) | Routine | kernel-uek-modules: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (Jason Gunthorpe) [Orabug: 39460277] | 5.5 | 0.0013 |  |
| [CVE-2026-46168](https://patchblox.com/security/data/cve/CVE-2026-46168.md) | Routine | mptcp: fix scheduling with atomic in timestamp sockopt | 5.5 | 0.0013 |  |
| [CVE-2026-46184](https://patchblox.com/security/data/cve/CVE-2026-46184.md) | Routine | kernel-uek64k-modules: sound: ua101: fix division by zero at probe (Seungju Cheon) [Orabug: 39460519] | 5.5 | 0.0013 |  |
| [CVE-2026-52984](https://patchblox.com/security/data/cve/CVE-2026-52984.md) | Routine | kernel-uek-container: net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677] | 5.5 | 0.0013 |  |
| [CVE-2026-53060](https://patchblox.com/security/data/cve/CVE-2026-53060.md) | Routine | dm cache metadata: fix memory leak on metadata abort retry | 5.5 | 0.0013 |  |
| [CVE-2026-64090](https://patchblox.com/security/data/cve/CVE-2026-64090.md) | Routine | bpftool: batman-adv: tt: avoid empty VLAN responses (Sven Eckelmann) [Orabug: 39754744] | 5.5 | 0.0013 |  |
| [CVE-2026-64092](https://patchblox.com/security/data/cve/CVE-2026-64092.md) | Routine | kernel-uek64k: batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown (Sven Eckelmann) [Orabug: 39784982] | 5.5 | 0.0013 |  |
| [CVE-2026-45846](https://patchblox.com/security/data/cve/CVE-2026-45846.md) | Routine | bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() | 5.5 | 0.0013 |  |
| [CVE-2026-45834](https://patchblox.com/security/data/cve/CVE-2026-45834.md) | Routine | Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() | 5.5 | 0.0013 |  |
| [CVE-2026-45835](https://patchblox.com/security/data/cve/CVE-2026-45835.md) | Routine | Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() | 5.5 | 0.0013 |  |
| [CVE-2026-45836](https://patchblox.com/security/data/cve/CVE-2026-45836.md) | Routine | Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() | 5.5 | 0.0013 |  |
| [CVE-2026-31590](https://patchblox.com/security/data/cve/CVE-2026-31590.md) | Routine | KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION | 5.5 | 0.0013 |  |
| [CVE-2026-43080](https://patchblox.com/security/data/cve/CVE-2026-43080.md) | Routine | kernel-64kb: l2tp: Drop large packets with UDP encap (bsc#1264236). | 5.5 | 0.0013 |  |
| [CVE-2026-46088](https://patchblox.com/security/data/cve/CVE-2026-46088.md) | Routine | ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() | 5.5 | 0.0013 |  |
| [CVE-2026-46151](https://patchblox.com/security/data/cve/CVE-2026-46151.md) | Routine | usb: usblp: fix heap leak in IEEE 1284 device ID via short response | 5.5 | 0.0013 |  |
| [CVE-2026-53177](https://patchblox.com/security/data/cve/CVE-2026-53177.md) | Routine | bnxt_en: Fix NULL pointer dereference | 5.5 | 0.0013 |  |
| [CVE-2026-53245](https://patchblox.com/security/data/cve/CVE-2026-53245.md) | Routine | net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr | 5.5 | 0.0013 |  |
| [CVE-2026-31681](https://patchblox.com/security/data/cve/CVE-2026-31681.md) | Routine | netfilter: xt_multiport: validate range encoding in checkentry | 6.1 | 0.0012 |  |
| [CVE-2026-43079](https://patchblox.com/security/data/cve/CVE-2026-43079.md) | Routine | kernel-64kb: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228). | 5.5 | 0.0012 |  |
| [CVE-2026-43104](https://patchblox.com/security/data/cve/CVE-2026-43104.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-45987](https://patchblox.com/security/data/cve/CVE-2026-45987.md) | Routine | KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 | 5.5 | 0.0012 |  |
| [CVE-2026-46002](https://patchblox.com/security/data/cve/CVE-2026-46002.md) | Routine | ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() | 5.5 | 0.0012 |  |
| [CVE-2026-46044](https://patchblox.com/security/data/cve/CVE-2026-46044.md) | Routine | kernel-uek-modules-extra: ipmi:ssif: Clean up kthread on errors (Corey Minyard) [Orabug: 39452264] | 5.5 | 0.0012 |  |
| [CVE-2026-46048](https://patchblox.com/security/data/cve/CVE-2026-46048.md) | Routine | kernel-uek64k: ALSA: caiaq: fix usb_dev refcount leak on probe failure (Deepanshu Kartikey) [Orabug: 39784983] | 5.5 | 0.0012 |  |
| [CVE-2026-46049](https://patchblox.com/security/data/cve/CVE-2026-46049.md) | Routine | ALSA: ctxfi: Add fallback to default RSR for S/PDIF | 5.5 | 0.0012 |  |
| [CVE-2026-46082](https://patchblox.com/security/data/cve/CVE-2026-46082.md) | Routine | KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 | 5.5 | 0.0012 |  |
| [CVE-2026-46108](https://patchblox.com/security/data/cve/CVE-2026-46108.md) | Routine | kernel-uek: ipmi:si: Return state to normal if message allocation fails (Corey Minyard) [Orabug: 39460202] | 5.5 | 0.0012 |  |
| [CVE-2026-46109](https://patchblox.com/security/data/cve/CVE-2026-46109.md) | Routine | usb: ulpi: fix memory leak on ulpi_register() error paths | 5.5 | 0.0012 |  |
| [CVE-2026-46276](https://patchblox.com/security/data/cve/CVE-2026-46276.md) | Routine | bpftool: drm/amdgpu: fix zero-size GDS range init on RDNA4 (Arjan van de Ven) [Orabug: 39524543] | 5.5 | 0.0012 |  |
| [CVE-2026-46292](https://patchblox.com/security/data/cve/CVE-2026-46292.md) | Routine | pmdomain: core: Fix detach procedure for virtual devices in genpd | 5.5 | 0.0012 |  |
| [CVE-2026-52916](https://patchblox.com/security/data/cve/CVE-2026-52916.md) | Routine | batman-adv: frag: disallow unicast fragment in fragment | 5.5 | 0.0012 |  |
| [CVE-2026-52985](https://patchblox.com/security/data/cve/CVE-2026-52985.md) | Routine | kernel-uek-debug-devel: netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z | 5.5 | 0.0012 |  |
| [CVE-2026-53048](https://patchblox.com/security/data/cve/CVE-2026-53048.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  gfs2: prevent NULL pointer dereference during un... | 5.5 | 0.0012 |  |
| [CVE-2026-53061](https://patchblox.com/security/data/cve/CVE-2026-53061.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dm cache: fix dirty mapping checking in passthro... | 5.5 | 0.0012 |  |
| [CVE-2026-53135](https://patchblox.com/security/data/cve/CVE-2026-53135.md) | Routine | drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs | 5.5 | 0.0012 |  |
| [CVE-2026-53163](https://patchblox.com/security/data/cve/CVE-2026-53163.md) | Routine | locking/rtmutex: Skip remove_waiter() when waiter is not enqueued | 5.5 | 0.0012 |  |
| [CVE-2026-53213](https://patchblox.com/security/data/cve/CVE-2026-53213.md) | Routine | drm/vc4: fix krealloc() memory leak | 5.5 | 0.0012 |  |
| [CVE-2026-53238](https://patchblox.com/security/data/cve/CVE-2026-53238.md) | Routine | netlabel: validate unlabeled address and mask attribute lengths | 5.5 | 0.0012 |  |
| [CVE-2026-53287](https://patchblox.com/security/data/cve/CVE-2026-53287.md) | Routine | audit: fix incorrect inheritable capability in CAPSET records | 5.5 | 0.0012 |  |
| [CVE-2026-53291](https://patchblox.com/security/data/cve/CVE-2026-53291.md) | Routine | ALSA: hda/conexant: Fix missing error check for jack detection | 5.5 | 0.0012 |  |
| [CVE-2026-53337](https://patchblox.com/security/data/cve/CVE-2026-53337.md) | Routine | net: bonding: fix NULL pointer dereference in bond_do_ioctl() | 5.5 | 0.0012 |  |
| [CVE-2026-64012](https://patchblox.com/security/data/cve/CVE-2026-64012.md) | Routine | kernel-64kb: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). | 5.5 | 0.0012 |  |
| [CVE-2026-64155](https://patchblox.com/security/data/cve/CVE-2026-64155.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: ath11k: fix error path leaks in some WMI W... | 5.5 | 0.0012 |  |
| [CVE-2026-64220](https://patchblox.com/security/data/cve/CVE-2026-64220.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  device property: set fwnode->secondary to NULL i... | 5.5 | 0.0012 |  |
| [CVE-2026-43496](https://patchblox.com/security/data/cve/CVE-2026-43496.md) | Routine | net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked | 5.5 | 0.0012 |  |
| [CVE-2026-63868](https://patchblox.com/security/data/cve/CVE-2026-63868.md) | Routine | kernel-64kb: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497). | 5.5 | 0.0012 |  |
| [CVE-2026-31664](https://patchblox.com/security/data/cve/CVE-2026-31664.md) | Routine | xfrm: clear trailing padding in build_polexpire() | 5.5 | 0.0012 |  |
| [CVE-2026-52930](https://patchblox.com/security/data/cve/CVE-2026-52930.md) | Routine | ipc/shm: serialize orphan cleanup with shm_nattch updates | 5.5 | 0.0012 |  |
| [CVE-2026-53269](https://patchblox.com/security/data/cve/CVE-2026-53269.md) | Routine | kernel-64kb: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579). | 5.5 | 0.0012 |  |
| [CVE-2026-64166](https://patchblox.com/security/data/cve/CVE-2026-64166.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  firmware: arm_ffa: Check for NULL FF-A ID table... | 5.5 | 0.0012 |  |
| [CVE-2026-46220](https://patchblox.com/security/data/cve/CVE-2026-46220.md) | Routine | bpftool: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (John B | 5.5 | 0.0012 |  |
| [CVE-2026-31701](https://patchblox.com/security/data/cve/CVE-2026-31701.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-53080](https://patchblox.com/security/data/cve/CVE-2026-53080.md) | Routine | net/sched: cls_fw: fix NULL dereference of "old" filters before change() | 5.5 | 0.0012 |  |
| [CVE-2026-53263](https://patchblox.com/security/data/cve/CVE-2026-53263.md) | Routine | 6lowpan: fix off-by-one in multicast context address compression | 5.5 | 0.0012 |  |
| [CVE-2026-64185](https://patchblox.com/security/data/cve/CVE-2026-64185.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  sysfs: don't remove existing directory on update... | 5.5 | 0.0012 |  |
| [CVE-2026-64240](https://patchblox.com/security/data/cve/CVE-2026-64240.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  media: rc: igorplugusb: fix control request setu... | 5.5 | 0.0012 |  |
| [CVE-2026-53074](https://patchblox.com/security/data/cve/CVE-2026-53074.md) | Routine | bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb | 6.4 | 0.0011 |  |
| [CVE-2026-43064](https://patchblox.com/security/data/cve/CVE-2026-43064.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43105](https://patchblox.com/security/data/cve/CVE-2026-43105.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-52921](https://patchblox.com/security/data/cve/CVE-2026-52921.md) | Routine | netfilter: ipset: stop hash:* range iteration at end | 5.5 | 0.0011 |  |
| [CVE-2026-52925](https://patchblox.com/security/data/cve/CVE-2026-52925.md) | Routine | vrf: Fix a potential NPD when removing a port from a VRF | 5.5 | 0.0011 |  |
| [CVE-2026-52928](https://patchblox.com/security/data/cve/CVE-2026-52928.md) | Routine | af_unix: Reject SIOCATMARK on non-stream sockets | 5.5 | 0.0011 |  |
| [CVE-2026-64164](https://patchblox.com/security/data/cve/CVE-2026-64164.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: tracepoints: fix sleep while in atomic co... | 5.5 | 0.0011 |  |
| [CVE-2026-64170](https://patchblox.com/security/data/cve/CVE-2026-64170.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  spi: qup: fix error pointer deref after DMA setu... | 5.5 | 0.0011 |  |
| [CVE-2026-64173](https://patchblox.com/security/data/cve/CVE-2026-64173.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tracing: Do not call map->ops->elt_free() if elt... | 5.5 | 0.0011 |  |
| [CVE-2026-64177](https://patchblox.com/security/data/cve/CVE-2026-64177.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  phonet/pep: disable BH around forwarded sk_recei... | 5.5 | 0.0011 |  |
| [CVE-2026-53304](https://patchblox.com/security/data/cve/CVE-2026-53304.md) | Routine | scsi: sg: Resolve soft lockup issue when opening /dev/sgX | 5.5 | 0.0010 |  |
| [CVE-2026-46159](https://patchblox.com/security/data/cve/CVE-2026-46159.md) | Routine | btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak | 5.5 | 0.0010 |  |
| [CVE-2026-46051](https://patchblox.com/security/data/cve/CVE-2026-46051.md) | Routine | md/raid5: fix soft lockup in retry_aligned_read() | 5.5 | 0.0010 |  |
| [CVE-2026-46050](https://patchblox.com/security/data/cve/CVE-2026-46050.md) | Routine | md/raid10: fix deadlock with check operation and nowait requests | 5.5 | 0.0010 |  |
| [CVE-2026-53037](https://patchblox.com/security/data/cve/CVE-2026-53037.md) | Routine | HID: usbhid: fix deadlock in hid_post_reset() | 5.5 | 0.0010 |  |
| [CVE-2026-53352](https://patchblox.com/security/data/cve/CVE-2026-53352.md) | Routine | signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() | 5.5 | 0.0010 |  |
| [CVE-2026-46187](https://patchblox.com/security/data/cve/CVE-2026-46187.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0010 |  |
| [CVE-2026-23441](https://patchblox.com/security/data/cve/CVE-2026-23441.md) | Routine | kernel-64kb: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768). | 5.5 | 0.0009 |  |
| [CVE-2026-46252](https://patchblox.com/security/data/cve/CVE-2026-46252.md) | Routine | regulator: core: fix locking in regulator_resolve_supply() error path | 5.5 | 0.0009 |  |

---

Data as of 2026-11-12T13:55:20Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.