{ "fix": "kernel-uek-debug-modules 0:5.15.0-323.211.3.3.el9uek", "url": "https://patchblox.com/security/fix/linux/ol-9-kernel-uek-debug-modules-0-5.15.0-323.211.3.3.el9uek", "summary": "kernel-uek-debug-modules 0:5.15.0-323.211.3.3.el9uek, released August 11, 2026, fixes 352 CVEs in kernel-uek-debug-modules. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.", "platform": "linux", "type": "package", "title": "kernel-uek-debug-modules 0:5.15.0-323.211.3.3.el9uek for ol 9", "released": "2026-08-11T00:00:00Z", "priority": "Patch now", "priorityTier": 1, "priorityReason": "Closes CVE-2026-53266, exploited (CISA KEV)", "supported": true, "cveCount": 352, "exploitedCveCount": 1, "kevCveCount": 1, "ransomwareCveCount": 0, "maxEpss": 0.00971, "maxCvss": 9.8, "appliesTo": [ { "product": "kernel-uek-debug-modules", "productUrl": "https://patchblox.com/security/product/linux/kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:5.15.0-323.211.3.3.el9uek", "supported": true } ], "cves": [ { "cveId": "CVE-2026-53266", "url": "https://patchblox.com/security/cve/CVE-2026-53266", "title": "netfilter: bridge: make ebt_snat ARP rewrite writable", "priority": "Patch now", "severity": "Moderate", "cvss": 8.8, "epss": 0.00934, "kev": true, "ransomware": false, "exploited": true, "disclosed": false }, { "cveId": "CVE-2026-63800", "url": "https://patchblox.com/security/cve/CVE-2026-63800", "title": "pNFS: Fix use-after-free in pnfs_update_layout()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00644, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52914", "url": "https://patchblox.com/security/cve/CVE-2026-52914", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00626, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64089", "url": "https://patchblox.com/security/cve/CVE-2026-64089", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64125", "url": "https://patchblox.com/security/cve/CVE-2026-64125", "title": "kernel-64kb: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346).", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52982", "url": "https://patchblox.com/security/cve/CVE-2026-52982", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53043", "url": "https://patchblox.com/security/cve/CVE-2026-53043", "title": "ocfs2/dlm: validate qr_numregions in dlm_match_regions()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64046", "url": "https://patchblox.com/security/cve/CVE-2026-64046", "title": "kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059).", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64047", "url": "https://patchblox.com/security/cve/CVE-2026-64047", "title": "kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060).", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52931", "url": "https://patchblox.com/security/cve/CVE-2026-52931", "title": "batman-adv: tp_meter: avoid use of uninit sender vars", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00499, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52993", "url": "https://patchblox.com/security/cve/CVE-2026-52993", "title": "tipc: fix double-free in tipc_buf_append()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00404, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53309", "url": "https://patchblox.com/security/cve/CVE-2026-53309", "title": "ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52955", "url": "https://patchblox.com/security/cve/CVE-2026-52955", "title": "kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159).", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.0038, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53002", "url": "https://patchblox.com/security/cve/CVE-2026-53002", "title": "netfilter: conntrack: remove sprintf usage", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00368, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53075", "url": "https://patchblox.com/security/cve/CVE-2026-53075", "title": "ppp: require CAP_NET_ADMIN in target netns for unattached ioctls", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00273, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52934", "url": "https://patchblox.com/security/cve/CVE-2026-52934", "title": "batman-adv: tvlv: reject oversized TVLV packets", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00244, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63824", "url": "https://patchblox.com/security/cve/CVE-2026-63824", "title": "KEYS: fix overflow in keyctl_pkey_params_get_2()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53403", "url": "https://patchblox.com/security/cve/CVE-2026-53403", "title": "fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52919", "url": "https://patchblox.com/security/cve/CVE-2026-52919", "title": "batman-adv: fix tp_meter counter underflow during shutdown", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52947", "url": "https://patchblox.com/security/cve/CVE-2026-52947", "title": "net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00106, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53062", "url": "https://patchblox.com/security/cve/CVE-2026-53062", "title": "dm cache policy smq: fix missing locks in invalidating cache blocks", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63913", "url": "https://patchblox.com/security/cve/CVE-2026-63913", "title": "kernel-64k-modules-core: kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00971, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52929", "url": "https://patchblox.com/security/cve/CVE-2026-52929", "title": "sctp: stream: fully roll back denied add-stream state", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00873, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53176", "url": "https://patchblox.com/security/cve/CVE-2026-53176", "title": "IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00761, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52958", "url": "https://patchblox.com/security/cve/CVE-2026-52958", "title": "libceph: Fix potential out-of-bounds access in osdmap_decode()", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00735, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53003", "url": "https://patchblox.com/security/cve/CVE-2026-53003", "title": "pppoe: drop PFC frames", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63912", "url": "https://patchblox.com/security/cve/CVE-2026-63912", "title": "kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836).", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63922", "url": "https://patchblox.com/security/cve/CVE-2026-63922", "title": "kernel: kernel: ipv6: exthdrs: refresh nh after handling HAO option", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63924", "url": "https://patchblox.com/security/cve/CVE-2026-63924", "title": "kernel: kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52924", "url": "https://patchblox.com/security/cve/CVE-2026-52924", "title": "sctp: purge outqueue on stale COOKIE-ECHO handling", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00659, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63919", "url": "https://patchblox.com/security/cve/CVE-2026-63919", "title": "kernel-default: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.0065, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52986", "url": "https://patchblox.com/security/cve/CVE-2026-52986", "title": "netfilter: nf_conntrack_sip: don\u0027t use simple_strtoul", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00634, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52999", "url": "https://patchblox.com/security/cve/CVE-2026-52999", "title": "netfilter: nfnetlink_osf: fix out-of-bounds read on option matching", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00591, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63796", "url": "https://patchblox.com/security/cve/CVE-2026-63796", "title": "ocfs2: reject oversized group bitmap descriptors", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00587, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52998", "url": "https://patchblox.com/security/cve/CVE-2026-52998", "title": "netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00579, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53221", "url": "https://patchblox.com/security/cve/CVE-2026-53221", "title": "ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53228", "url": "https://patchblox.com/security/cve/CVE-2026-53228", "title": "ipv6: sit: reload inner IPv6 header after GSO offloads", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53225", "url": "https://patchblox.com/security/cve/CVE-2026-53225", "title": "sctp: fix uninit-value in __sctp_rcv_asconf_lookup()", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46133", "url": "https://patchblox.com/security/cve/CVE-2026-46133", "title": "RDMA/rxe: Reject unknown opcodes before ICRC processing", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00574, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63976", "url": "https://patchblox.com/security/cve/CVE-2026-63976", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00569, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46177", "url": "https://patchblox.com/security/cve/CVE-2026-46177", "title": "kernel-uek64k: ipmi: Add limits to event and receive message requests (Corey Minyard) [Orabug: 39460490]", "priority": "High", "severity": "N/A", "cvss": 7.5, "epss": 0.00564, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53398", "url": "https://patchblox.com/security/cve/CVE-2026-53398", "title": "NFSD: Fix SECINFO_NO_NAME decode error cleanup", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00543, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53397", "url": "https://patchblox.com/security/cve/CVE-2026-53397", "title": "nfsd: fix posix_acl leak on SETACL decode failure", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00529, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63808", "url": "https://patchblox.com/security/cve/CVE-2026-63808", "title": "kernel-rt-64k: kernel: exfat: fix potential use-after-free in exfat_find_dir_entry()", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64113", "url": "https://patchblox.com/security/cve/CVE-2026-64113", "title": "perf: kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46119", "url": "https://patchblox.com/security/cve/CVE-2026-46119", "title": "libceph: Fix slab-out-of-bounds access in auth message processing", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53268", "url": "https://patchblox.com/security/cve/CVE-2026-53268", "title": "netfilter: conntrack_irc: fix possible out-of-bounds read", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52954", "url": "https://patchblox.com/security/cve/CVE-2026-52954", "title": "libceph: handle rbtree insertion error in decode_choose_args()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52957", "url": "https://patchblox.com/security/cve/CVE-2026-52957", "title": "libceph: Fix potential null-ptr-deref in decode_choose_args()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53391", "url": "https://patchblox.com/security/cve/CVE-2026-53391", "title": "NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00517, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63984", "url": "https://patchblox.com/security/cve/CVE-2026-63984", "title": "kernel-default: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63993", "url": "https://patchblox.com/security/cve/CVE-2026-63993", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nvxlan: do not reuse cached ip_hdr() value after s...", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63994", "url": "https://patchblox.com/security/cve/CVE-2026-63994", "title": "kernel-default: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64007", "url": "https://patchblox.com/security/cve/CVE-2026-64007", "title": "kernel-default: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105).", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53186", "url": "https://patchblox.com/security/cve/CVE-2026-53186", "title": "RDMA/srp: bound SRP_RSP sense copy by the received length", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63992", "url": "https://patchblox.com/security/cve/CVE-2026-63992", "title": "kernel-default: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868).", "priority": "High", "severity": "important", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63801", "url": "https://patchblox.com/security/cve/CVE-2026-63801", "title": "tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64116", "url": "https://patchblox.com/security/cve/CVE-2026-64116", "title": "kernel-64kb: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751).", "priority": "High", "severity": "N/A", "cvss": 7.5, "epss": 0.00511, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53215", "url": "https://patchblox.com/security/cve/CVE-2026-53215", "title": "kernel-64kb: net: mvpp2: refill RX buffers before XDP or skb use (bsc#1269680).", "priority": "High", "severity": "N/A", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53216", "url": "https://patchblox.com/security/cve/CVE-2026-53216", "title": "kernel-64kb: net: mvpp2: limit XDP frame size to the RX buffer (bsc#1269587).", "priority": "High", "severity": "IMPORTANT", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53199", "url": "https://patchblox.com/security/cve/CVE-2026-53199", "title": "hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53264", "url": "https://patchblox.com/security/cve/CVE-2026-53264", "title": "net/sched: act_api: use RCU with deferred freeing for action lifecycle", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00485, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46137", "url": "https://patchblox.com/security/cve/CVE-2026-46137", "title": "mptcp: pm: ADD_ADDR rtx: fix potential data-race", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00477, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46124", "url": "https://patchblox.com/security/cve/CVE-2026-46124", "title": "kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847).", "priority": "High", "severity": "N/A", "cvss": 7.5, "epss": 0.00476, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64600", "url": "https://patchblox.com/security/cve/CVE-2026-64600", "title": "xfs: resample the data fork mapping after cycling ILOCK", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52946", "url": "https://patchblox.com/security/cve/CVE-2026-52946", "title": "fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46306", "url": "https://patchblox.com/security/cve/CVE-2026-46306", "title": "flow_dissector: do not dissect PPPoE PFC frames", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00449, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53131", "url": "https://patchblox.com/security/cve/CVE-2026-53131", "title": "netfilter: require Ethernet MAC header before using eth_hdr()", "priority": "High", "severity": "Moderate", "cvss": 9.4, "epss": 0.00435, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53071", "url": "https://patchblox.com/security/cve/CVE-2026-53071", "title": "Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00429, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64091", "url": "https://patchblox.com/security/cve/CVE-2026-64091", "title": "kernel-uek64k-modules-extra: batman-adv: tt: fix TOCTOU race for reported vlans (Sven Eckelmann) [Orabug: 39754748]", "priority": "High", "severity": "N/A", "cvss": 9.8, "epss": 0.00426, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53088", "url": "https://patchblox.com/security/cve/CVE-2026-53088", "title": "net: bcmgenet: fix off-by-one in bcmgenet_put_txcb", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45843", "url": "https://patchblox.com/security/cve/CVE-2026-45843", "title": "slip: bound decode() reads against the compressed packet length", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00398, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53006", "url": "https://patchblox.com/security/cve/CVE-2026-53006", "title": "ipv6: fix possible UAF in icmpv6_rcv()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00394, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53049", "url": "https://patchblox.com/security/cve/CVE-2026-53049", "title": "kernel: kernel: gfs2: add some missing log locking", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00388, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63893", "url": "https://patchblox.com/security/cve/CVE-2026-63893", "title": "kernel-default: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).", "priority": "High", "severity": "N/A", "cvss": 8.1, "epss": 0.00387, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53217", "url": "https://patchblox.com/security/cve/CVE-2026-53217", "title": "net: mvpp2: sync RX data at the hardware packet offset", "priority": "High", "severity": "Moderate", "cvss": 8.6, "epss": 0.00384, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53069", "url": "https://patchblox.com/security/cve/CVE-2026-53069", "title": "kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).", "priority": "High", "severity": "N/A", "cvss": 7.5, "epss": 0.0038, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63916", "url": "https://patchblox.com/security/cve/CVE-2026-63916", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46304", "url": "https://patchblox.com/security/cve/CVE-2026-46304", "title": "nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00349, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63947", "url": "https://patchblox.com/security/cve/CVE-2026-63947", "title": "kernel-64k-modules-core: kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report()", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63925", "url": "https://patchblox.com/security/cve/CVE-2026-63925", "title": "kernel-64kb: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008).", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-36922", "url": "https://patchblox.com/security/cve/CVE-2024-36922", "title": "wifi: iwlwifi: read txq-\u003Eread_ptr under lock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53357", "url": "https://patchblox.com/security/cve/CVE-2026-53357", "title": "Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00332, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46303", "url": "https://patchblox.com/security/cve/CVE-2026-46303", "title": "isofs: validate Rock Ridge CE continuation extent against volume size", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.0032, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63831", "url": "https://patchblox.com/security/cve/CVE-2026-63831", "title": "mac802154: llsec: add skb_cow_data() before in-place crypto", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00307, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64178", "url": "https://patchblox.com/security/cve/CVE-2026-64178", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00304, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52920", "url": "https://patchblox.com/security/cve/CVE-2026-52920", "title": "netfilter: xt_policy: fix strict mode inbound policy matching", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00299, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31626", "url": "https://patchblox.com/security/cve/CVE-2026-31626", "title": "staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00288, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46198", "url": "https://patchblox.com/security/cve/CVE-2026-46198", "title": "bpftool: batman-adv: fix integer overflow on buff_pos (Lyes Bourennani) [Orabug: 39460580]", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00281, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53358", "url": "https://patchblox.com/security/cve/CVE-2026-53358", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00281, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64088", "url": "https://patchblox.com/security/cve/CVE-2026-64088", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00281, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53254", "url": "https://patchblox.com/security/cve/CVE-2026-53254", "title": "Bluetooth: RFCOMM: validate skb length in MCC handlers", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63891", "url": "https://patchblox.com/security/cve/CVE-2026-63891", "title": "kernel-64kb: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641).", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46212", "url": "https://patchblox.com/security/cve/CVE-2026-46212", "title": "batman-adv: bla: prevent use-after-free when deleting claims", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00274, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63975", "url": "https://patchblox.com/security/cve/CVE-2026-63975", "title": "kernel-default: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).", "priority": "High", "severity": "moderate", "cvss": 8.8, "epss": 0.00274, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63867", "url": "https://patchblox.com/security/cve/CVE-2026-63867", "title": "kernel-uek64k: mptcp: close TOCTOU race while computing rcv_wnd (Paolo Abeni) [Orabug: 39754146]", "priority": "High", "severity": "N/A", "cvss": 8.2, "epss": 0.00274, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53196", "url": "https://patchblox.com/security/cve/CVE-2026-53196", "title": "USB: serial: io_ti: fix heap overflow in get_manuf_info()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00271, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64095", "url": "https://patchblox.com/security/cve/CVE-2026-64095", "title": "bpftool: batman-adv: bla: avoid double decrement of bla.num_requests (Sven Eckelmann) [Orabug: 39754761]", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00267, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53253", "url": "https://patchblox.com/security/cve/CVE-2026-53253", "title": "Bluetooth: bnep: reject short frames before parsing", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53256", "url": "https://patchblox.com/security/cve/CVE-2026-53256", "title": "kernel-rt-devel: kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00264, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46238", "url": "https://patchblox.com/security/cve/CVE-2026-46238", "title": "batman-adv: stop caching unowned originator pointers in BAT IV", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00262, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53275", "url": "https://patchblox.com/security/cve/CVE-2026-53275", "title": "ipv6: mcast: Fix use-after-free when processing MLD queries", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00262, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53146", "url": "https://patchblox.com/security/cve/CVE-2026-53146", "title": "thunderbolt: Limit XDomain response copy to actual frame size", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0026, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64096", "url": "https://patchblox.com/security/cve/CVE-2026-64096", "title": "kernel-uek64k-core: batman-adv: mcast: fix use-after-free in orig_node RCU release (Sven Eckelmann) [Orabug: 39754765]", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00255, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53157", "url": "https://patchblox.com/security/cve/CVE-2026-53157", "title": "net: phonet: free phonet_device after RCU grace period", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46307", "url": "https://patchblox.com/security/cve/CVE-2026-46307", "title": "wifi: ath5k: do not access array OOB", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46275", "url": "https://patchblox.com/security/cve/CVE-2026-46275", "title": "Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00226, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52918", "url": "https://patchblox.com/security/cve/CVE-2026-52918", "title": "Bluetooth: serialize accept_q access", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00218, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52923", "url": "https://patchblox.com/security/cve/CVE-2026-52923", "title": "ipc: limit next_id allocation to the valid ID range", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2023-45896", "url": "https://patchblox.com/security/cve/CVE-2023-45896", "title": "kernel-uek64k: fs/ntfs3: Add more attributes checks in mi_enum_attr() (Konstantin Komarov)", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53072", "url": "https://patchblox.com/security/cve/CVE-2026-53072", "title": "Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46113", "url": "https://patchblox.com/security/cve/CVE-2026-46113", "title": "kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52969", "url": "https://patchblox.com/security/cve/CVE-2026-52969", "title": "KVM: Reject wrapped offset in kvm_reset_dirty_gfn()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53212", "url": "https://patchblox.com/security/cve/CVE-2026-53212", "title": "netfilter: nft_tunnel: fix use-after-free on object destroy", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00194, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53369", "url": "https://patchblox.com/security/cve/CVE-2026-53369", "title": "kernel-64kb: udf: reject descriptors with oversized CRC length (bsc#1271818).", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63926", "url": "https://patchblox.com/security/cve/CVE-2026-63926", "title": "kernel-64kb: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019).", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64039", "url": "https://patchblox.com/security/cve/CVE-2026-64039", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.7, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64529", "url": "https://patchblox.com/security/cve/CVE-2026-64529", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - remove unused character device and...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63860", "url": "https://patchblox.com/security/cve/CVE-2026-63860", "title": "kernel-64kb: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429).", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45991", "url": "https://patchblox.com/security/cve/CVE-2026-45991", "title": "udf: fix partition descriptor append bookkeeping", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63875", "url": "https://patchblox.com/security/cve/CVE-2026-63875", "title": "kernel-modules: kernel: arm64: tlb: Flush walk cache when unsharing PMD tables", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63899", "url": "https://patchblox.com/security/cve/CVE-2026-63899", "title": "kernel: kernel: USB: serial: mxuport: fix memory corruption with small endpoint", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63898", "url": "https://patchblox.com/security/cve/CVE-2026-63898", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63901", "url": "https://patchblox.com/security/cve/CVE-2026-63901", "title": "kernel-64kb: USB: serial: digi_acceleport: fix memory corruption with small endpoints (bsc#1272501).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63836", "url": "https://patchblox.com/security/cve/CVE-2026-63836", "title": "batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63807", "url": "https://patchblox.com/security/cve/CVE-2026-63807", "title": "KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63920", "url": "https://patchblox.com/security/cve/CVE-2026-63920", "title": "kernel-default: ipv6: validate extension header length before copying to cmsg (bsc#1272877).", "priority": "High", "severity": "IMPORTANT", "cvss": 8.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53112", "url": "https://patchblox.com/security/cve/CVE-2026-53112", "title": "wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63902", "url": "https://patchblox.com/security/cve/CVE-2026-63902", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63903", "url": "https://patchblox.com/security/cve/CVE-2026-63903", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63904", "url": "https://patchblox.com/security/cve/CVE-2026-63904", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63917", "url": "https://patchblox.com/security/cve/CVE-2026-63917", "title": "kernel-default: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63928", "url": "https://patchblox.com/security/cve/CVE-2026-63928", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63956", "url": "https://patchblox.com/security/cve/CVE-2026-63956", "title": "kernel-64kb: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473).", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63957", "url": "https://patchblox.com/security/cve/CVE-2026-63957", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64528", "url": "https://patchblox.com/security/cve/CVE-2026-64528", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63905", "url": "https://patchblox.com/security/cve/CVE-2026-63905", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64219", "url": "https://patchblox.com/security/cve/CVE-2026-64219", "title": "drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64191", "url": "https://patchblox.com/security/cve/CVE-2026-64191", "title": "i2c: stub: Reject I2C block transfers with invalid length", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63870", "url": "https://patchblox.com/security/cve/CVE-2026-63870", "title": "kernel-uek64k-modules-extra-netfilter: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT)", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63927", "url": "https://patchblox.com/security/cve/CVE-2026-63927", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45850", "url": "https://patchblox.com/security/cve/CVE-2026-45850", "title": "ipvs: skip ipv6 extension headers for csum checks", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53022", "url": "https://patchblox.com/security/cve/CVE-2026-53022", "title": "platform/x86: dell-wmi-sysman: bound enumeration string aggregation", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63823", "url": "https://patchblox.com/security/cve/CVE-2026-63823", "title": "keys: Pin request_key_auth payload in instantiate paths", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64527", "url": "https://patchblox.com/security/cve/CVE-2026-64527", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receiv...", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63961", "url": "https://patchblox.com/security/cve/CVE-2026-63961", "title": "usb: typec: altmodes/displayport: validate count before reading Status Update VDO", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63921", "url": "https://patchblox.com/security/cve/CVE-2026-63921", "title": "kernel-default: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53270", "url": "https://patchblox.com/security/cve/CVE-2026-53270", "title": "ipvs: clear the svc scheduler ptr early on edit", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52912", "url": "https://patchblox.com/security/cve/CVE-2026-52912", "title": "netfilter: nf_queue: hold bridge skb-\u003Edev while queued", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63809", "url": "https://patchblox.com/security/cve/CVE-2026-63809", "title": "bpf: use kvfree() for replaced sysctl write buffer", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46174", "url": "https://patchblox.com/security/cve/CVE-2026-46174", "title": "x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64118", "url": "https://patchblox.com/security/cve/CVE-2026-64118", "title": "kernel-64kb: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749).", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53273", "url": "https://patchblox.com/security/cve/CVE-2026-53273", "title": "kernel-64kb: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713).", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52933", "url": "https://patchblox.com/security/cve/CVE-2026-52933", "title": "io_uring/poll: fix signed comparison in io_poll_get_ownership()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53194", "url": "https://patchblox.com/security/cve/CVE-2026-53194", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53329", "url": "https://patchblox.com/security/cve/CVE-2026-53329", "title": "drm/amd/display: Use krealloc_array() in dal_vector_reserve()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63914", "url": "https://patchblox.com/security/cve/CVE-2026-63914", "title": "bpftool: xfrm: route MIGRATE notifications to caller\u0027s netns (Maoyi Xie) [Orabug: 39754286]", "priority": "High", "severity": "N/A", "cvss": 7.3, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46294", "url": "https://patchblox.com/security/cve/CVE-2026-46294", "title": "kernel-uek: dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585]", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52972", "url": "https://patchblox.com/security/cve/CVE-2026-52972", "title": "crypto: af_alg - Cap AEAD AD length to 0x80000000", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64009", "url": "https://patchblox.com/security/cve/CVE-2026-64009", "title": "kernel-64kb: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879).", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46189", "url": "https://patchblox.com/security/cve/CVE-2026-46189", "title": "kernel-uek-modules-extra: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [Orabug: 39460540]", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52910", "url": "https://patchblox.com/security/cve/CVE-2026-52910", "title": "bpf: Free reuseport cBPF prog after RCU grace period.", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53195", "url": "https://patchblox.com/security/cve/CVE-2026-53195", "title": "USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64018", "url": "https://patchblox.com/security/cve/CVE-2026-64018", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "important", "cvss": 9.3, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46149", "url": "https://patchblox.com/security/cve/CVE-2026-46149", "title": "scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63794", "url": "https://patchblox.com/security/cve/CVE-2026-63794", "title": "KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46209", "url": "https://patchblox.com/security/cve/CVE-2026-46209", "title": "kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460...", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64524", "url": "https://patchblox.com/security/cve/CVE-2026-64524", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WI...", "priority": "High", "severity": "high", "cvss": 7.7, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46180", "url": "https://patchblox.com/security/cve/CVE-2026-46180", "title": "wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53016", "url": "https://patchblox.com/security/cve/CVE-2026-53016", "title": "crypto: ccp - copy IV using skcipher ivsize", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53059", "url": "https://patchblox.com/security/cve/CVE-2026-53059", "title": "dm log: fix out-of-bounds write due to region_count overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64153", "url": "https://patchblox.com/security/cve/CVE-2026-64153", "title": "bpftool: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (Mikko Perttunen) [Orabug: 39754904]", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53381", "url": "https://patchblox.com/security/cve/CVE-2026-53381", "title": "virtiofs: fix UAF on submount umount", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46197", "url": "https://patchblox.com/security/cve/CVE-2026-46197", "title": "drm/amdkfd: validate SVM ioctl nattr against buffer size", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46206", "url": "https://patchblox.com/security/cve/CVE-2026-46206", "title": "batman-adv: reject new tp_meter sessions during teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46208", "url": "https://patchblox.com/security/cve/CVE-2026-46208", "title": "batman-adv: stop tp_meter sessions during mesh teardown", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52962", "url": "https://patchblox.com/security/cve/CVE-2026-52962", "title": "ceph: fix a buffer leak in __ceph_setxattr()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46274", "url": "https://patchblox.com/security/cve/CVE-2026-46274", "title": "io-wq: check that the predecessor is hashed in io_wq_remove_pending()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46193", "url": "https://patchblox.com/security/cve/CVE-2026-46193", "title": "kernel-uek-debug-devel: xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460554]", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46191", "url": "https://patchblox.com/security/cve/CVE-2026-46191", "title": "fbcon: Avoid OOB font access if console rotation fails", "priority": "High", "severity": "Important", "cvss": 7.7, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64114", "url": "https://patchblox.com/security/cve/CVE-2026-64114", "title": "kernel-default: ipv4: raw: reject IP_HDRINCL packets with ihl \u003C 5 (bsc#1273742).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53223", "url": "https://patchblox.com/security/cve/CVE-2026-53223", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnet: guard timestamp cmsgs to real error queue sk...", "priority": "High", "severity": "moderate", "cvss": 8.1, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64115", "url": "https://patchblox.com/security/cve/CVE-2026-64115", "title": "kernel-default: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53148", "url": "https://patchblox.com/security/cve/CVE-2026-53148", "title": "thunderbolt: Clamp XDomain response data copy to allocation size", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64126", "url": "https://patchblox.com/security/cve/CVE-2026-64126", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.3, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46132", "url": "https://patchblox.com/security/cve/CVE-2026-46132", "title": "bpftool: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297]", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31617", "url": "https://patchblox.com/security/cve/CVE-2026-31617", "title": "usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53356", "url": "https://patchblox.com/security/cve/CVE-2026-53356", "title": "drm/i915/gem: Fix phys BO pread/pwrite with offset", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46172", "url": "https://patchblox.com/security/cve/CVE-2026-46172", "title": "kernel-64kb: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (bsc#1266903).", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52970", "url": "https://patchblox.com/security/cve/CVE-2026-52970", "title": "netfilter: nft_ct: fix missing expect put in obj eval", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53388", "url": "https://patchblox.com/security/cve/CVE-2026-53388", "title": "fuse: re-lock request before replacing page cache folio", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64032", "url": "https://patchblox.com/security/cve/CVE-2026-64032", "title": "kernel-rt-64k-debug-devel: kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63803", "url": "https://patchblox.com/security/cve/CVE-2026-63803", "title": "hdlc_ppp: sync per-proto timers before freeing hdlc state", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52942", "url": "https://patchblox.com/security/cve/CVE-2026-52942", "title": "netfilter: nf_log: validate MAC header was set before dumping it", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45840", "url": "https://patchblox.com/security/cve/CVE-2026-45840", "title": "kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479]", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63971", "url": "https://patchblox.com/security/cve/CVE-2026-63971", "title": "kernel-default: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46122", "url": "https://patchblox.com/security/cve/CVE-2026-46122", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46163", "url": "https://patchblox.com/security/cve/CVE-2026-46163", "title": "wifi: b43legacy: enforce bounds check on firmware key index in RX path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46234", "url": "https://patchblox.com/security/cve/CVE-2026-46234", "title": "vsock: fix buffer size clamping order", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63942", "url": "https://patchblox.com/security/cve/CVE-2026-63942", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53011", "url": "https://patchblox.com/security/cve/CVE-2026-53011", "title": "net/sched: taprio: fix use-after-free in advance_sched() on schedule switch", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53189", "url": "https://patchblox.com/security/cve/CVE-2026-53189", "title": "bpftool: kernel: mm/huge_memory: update file PMD counter before folio_put()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64002", "url": "https://patchblox.com/security/cve/CVE-2026-64002", "title": "kernel-default: ipv4: free net-\u003Eipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774).", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46065", "url": "https://patchblox.com/security/cve/CVE-2026-46065", "title": "fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46150", "url": "https://patchblox.com/security/cve/CVE-2026-46150", "title": "fanotify: fix false positive on permission events", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46178", "url": "https://patchblox.com/security/cve/CVE-2026-46178", "title": "kernel-uek64k: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (Jason Gunthorpe) [Orabug: 39460496]", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53136", "url": "https://patchblox.com/security/cve/CVE-2026-53136", "title": "bpftool: kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63985", "url": "https://patchblox.com/security/cve/CVE-2026-63985", "title": "kernel-64kb: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963).", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64133", "url": "https://patchblox.com/security/cve/CVE-2026-64133", "title": "ALSA: asihpi: Fix potential OOB array access at reading cache", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64218", "url": "https://patchblox.com/security/cve/CVE-2026-64218", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_work leak on backbon...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53004", "url": "https://patchblox.com/security/cve/CVE-2026-53004", "title": "kernel-uek-modules-extra: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757]", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53167", "url": "https://patchblox.com/security/cve/CVE-2026-53167", "title": "fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53218", "url": "https://patchblox.com/security/cve/CVE-2026-53218", "title": "netfilter: nft_exthdr: fix register tracking for F_PRESENT flag", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53249", "url": "https://patchblox.com/security/cve/CVE-2026-53249", "title": "ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46120", "url": "https://patchblox.com/security/cve/CVE-2026-46120", "title": "kernel: kernel: ip6_gre: Use cached t-\u003Enet in ip6erspan_changelink()", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52917", "url": "https://patchblox.com/security/cve/CVE-2026-52917", "title": "sctp: diag: reject stale associations in dump_one path", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53149", "url": "https://patchblox.com/security/cve/CVE-2026-53149", "title": "thunderbolt: Bound root directory content to block size", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46160", "url": "https://patchblox.com/security/cve/CVE-2026-46160", "title": "btrfs: fix missing last_unlink_trans update when removing a directory", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63865", "url": "https://patchblox.com/security/cve/CVE-2026-63865", "title": "kernel-64kb: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486).", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64103", "url": "https://patchblox.com/security/cve/CVE-2026-64103", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device removal...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64123", "url": "https://patchblox.com/security/cve/CVE-2026-64123", "title": "bpftool: net: hsr: defer node table free until after RCU readers (Michael Bommarito) [Orabug: 39754840]", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52915", "url": "https://patchblox.com/security/cve/CVE-2026-52915", "title": "netfilter: ip6t_hbh: reject oversized option lists", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53041", "url": "https://patchblox.com/security/cve/CVE-2026-53041", "title": "ocfs2: fix listxattr handling when the buffer is full", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53138", "url": "https://patchblox.com/security/cve/CVE-2026-53138", "title": "drm/amd/display: Bound VBIOS record-chain walk loops", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64014", "url": "https://patchblox.com/security/cve/CVE-2026-64014", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31619", "url": "https://patchblox.com/security/cve/CVE-2026-31619", "title": "ALSA: fireworks: bound device-supplied status before string array lookup", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31623", "url": "https://patchblox.com/security/cve/CVE-2026-31623", "title": "net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53150", "url": "https://patchblox.com/security/cve/CVE-2026-53150", "title": "thunderbolt: Reject zero-length property entries in validator", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53168", "url": "https://patchblox.com/security/cve/CVE-2026-53168", "title": "fuse: reject fuse_notify() pagecache ops on directories", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53181", "url": "https://patchblox.com/security/cve/CVE-2026-53181", "title": "vsock/vmci: fix sk_ack_backlog leak on failed handshake", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53208", "url": "https://patchblox.com/security/cve/CVE-2026-53208", "title": "Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46230", "url": "https://patchblox.com/security/cve/CVE-2026-46230", "title": "drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53064", "url": "https://patchblox.com/security/cve/CVE-2026-53064", "title": "dm cache: fix null-deref with concurrent writes in passthrough mode", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53021", "url": "https://patchblox.com/security/cve/CVE-2026-53021", "title": "scsi: target: core: Fix integer overflow in UNMAP bounds check", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53040", "url": "https://patchblox.com/security/cve/CVE-2026-53040", "title": "bpftool: ocfs2: validate bg_bits during freefrag scan (Zhengyuan Huang) [Orabug: 39621868]", "priority": "High", "severity": "N/A", "cvss": 7.1, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52927", "url": "https://patchblox.com/security/cve/CVE-2026-52927", "title": "netfilter: ebtables: fix OOB read in compat_mtw_from_user", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64174", "url": "https://patchblox.com/security/cve/CVE-2026-64174", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211_me...", "priority": "High", "severity": "medium", "cvss": 8.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46231", "url": "https://patchblox.com/security/cve/CVE-2026-46231", "title": "batman-adv: bla: put backbone reference on failed claim hash insert", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46233", "url": "https://patchblox.com/security/cve/CVE-2026-46233", "title": "batman-adv: bla: only purge non-released claims", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53255", "url": "https://patchblox.com/security/cve/CVE-2026-53255", "title": "Bluetooth: MGMT: validate advertising TLV before type checks", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64237", "url": "https://patchblox.com/security/cve/CVE-2026-64237", "title": "Input: elan_i2c - validate firmware size before use", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64034", "url": "https://patchblox.com/security/cve/CVE-2026-64034", "title": "kernel-default: Security update for the Linux Kernel", "priority": "High", "severity": "N/A", "cvss": 9.3, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53073", "url": "https://patchblox.com/security/cve/CVE-2026-53073", "title": "Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52926", "url": "https://patchblox.com/security/cve/CVE-2026-52926", "title": "batman-adv: clear current gateway during teardown", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52909", "url": "https://patchblox.com/security/cve/CVE-2026-52909", "title": "ip6_vti: set netns_immutable on the fallback device.", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00113, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46319", "url": "https://patchblox.com/security/cve/CVE-2026-46319", "title": "net/sched: act_ct: Only release RCU read lock after ct_ft", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00105, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53354", "url": "https://patchblox.com/security/cve/CVE-2026-53354", "title": "arm64: errata: Mitigate TLBI errata on various Arm CPUs", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46227", "url": "https://patchblox.com/security/cve/CVE-2026-46227", "title": "sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46090", "url": "https://patchblox.com/security/cve/CVE-2026-46090", "title": "ALSA: aloop: Fix peer runtime UAF during format-change stop", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53050", "url": "https://patchblox.com/security/cve/CVE-2026-53050", "title": "quota: Fix race of dquot_scan_active() with quota deactivation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00104, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53239", "url": "https://patchblox.com/security/cve/CVE-2026-53239", "title": "xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46107", "url": "https://patchblox.com/security/cve/CVE-2026-46107", "title": "dm-thin: fix metadata refcount underflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53096", "url": "https://patchblox.com/security/cve/CVE-2026-53096", "title": "bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00102, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53265", "url": "https://patchblox.com/security/cve/CVE-2026-53265", "title": "dm cache policy smq: check allocation under invalidate lock", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00098, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53192", "url": "https://patchblox.com/security/cve/CVE-2026-53192", "title": "ALSA: timer: Fix UAF at snd_timer_user_params()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-26886", "url": "https://patchblox.com/security/cve/CVE-2024-26886", "title": "kernel-uek64k: Bluetooth: af_bluetooth: Fix deadlock (Luiz Augusto von Dentz) [Orabug: 36544919]", "priority": "Routine", "severity": "N/A", "cvss": 6.5, "epss": 0.00489, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-49925", "url": "https://patchblox.com/security/cve/CVE-2024-49925", "title": "fbdev: efifb: Register sysfs groups through driver core", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00273, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-27389", "url": "https://patchblox.com/security/cve/CVE-2024-27389", "title": "kernel-uek64k: pstore: inode: Only d_invalidate() is needed (Kees Cook) [Orabug: 36598300]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00237, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2024-50012", "url": "https://patchblox.com/security/cve/CVE-2024-50012", "title": "kernel-64kb: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386).", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63892", "url": "https://patchblox.com/security/cve/CVE-2026-63892", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00229, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-23131", "url": "https://patchblox.com/security/cve/CVE-2025-23131", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53047", "url": "https://patchblox.com/security/cve/CVE-2026-53047", "title": "efi/capsule-loader: fix incorrect sizeof in phys array reallocation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63822", "url": "https://patchblox.com/security/cve/CVE-2026-63822", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63834", "url": "https://patchblox.com/security/cve/CVE-2026-63834", "title": "batman-adv: tp_meter: restrict number of unacked list entries", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63835", "url": "https://patchblox.com/security/cve/CVE-2026-63835", "title": "batman-adv: v: prevent OGM aggregation on disabled hardif", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63897", "url": "https://patchblox.com/security/cve/CVE-2026-63897", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63900", "url": "https://patchblox.com/security/cve/CVE-2026-63900", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52963", "url": "https://patchblox.com/security/cve/CVE-2026-52963", "title": "ALSA: usb-audio: Bound MIDI endpoint descriptor scans", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53039", "url": "https://patchblox.com/security/cve/CVE-2026-53039", "title": "kernel-uek: ocfs2: validate group add input before caching (Zhengyuan Huang) [Orabug: 39621864]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53093", "url": "https://patchblox.com/security/cve/CVE-2026-53093", "title": "wifi: brcmfmac: Fix error pointer dereference", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53128", "url": "https://patchblox.com/security/cve/CVE-2026-53128", "title": "drbd: Balance RCU calls in drbd_adm_dump_devices()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63948", "url": "https://patchblox.com/security/cve/CVE-2026-63948", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63908", "url": "https://patchblox.com/security/cve/CVE-2026-63908", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64094", "url": "https://patchblox.com/security/cve/CVE-2026-64094", "title": "bpftool: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface (Sven Eckelmann) [Orabug: 39754757]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53012", "url": "https://patchblox.com/security/cve/CVE-2026-53012", "title": "nexthop: fix IPv6 route referencing IPv4 nexthop", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00137, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46196", "url": "https://patchblox.com/security/cve/CVE-2026-46196", "title": "tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53295", "url": "https://patchblox.com/security/cve/CVE-2026-53295", "title": "mailbox: add sanity check for channel array", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45841", "url": "https://patchblox.com/security/cve/CVE-2026-45841", "title": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53227", "url": "https://patchblox.com/security/cve/CVE-2026-53227", "title": "net: openvswitch: fix possible kfree_skb of ERR_PTR", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45844", "url": "https://patchblox.com/security/cve/CVE-2026-45844", "title": "bpftool: netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Pablo Neira Ayuso) [Orabug: 39451507]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52948", "url": "https://patchblox.com/security/cve/CVE-2026-52948", "title": "i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53385", "url": "https://patchblox.com/security/cve/CVE-2026-53385", "title": "vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46128", "url": "https://patchblox.com/security/cve/CVE-2026-46128", "title": "bpftool: ipmi: Check event message buffer response for bad data (Corey Minyard) [Orabug: 39460284]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46146", "url": "https://patchblox.com/security/cve/CVE-2026-46146", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46161", "url": "https://patchblox.com/security/cve/CVE-2026-46161", "title": "bpftool: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46167", "url": "https://patchblox.com/security/cve/CVE-2026-46167", "title": "kernel-uek: usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl (Greg Kroah-Hartman) [Orabug: 39460438]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46214", "url": "https://patchblox.com/security/cve/CVE-2026-46214", "title": "kernel-uek-debug-modules-extra: vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53252", "url": "https://patchblox.com/security/cve/CVE-2026-53252", "title": "Bluetooth: fix memory leak in error path of hci_alloc_dev()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53325", "url": "https://patchblox.com/security/cve/CVE-2026-53325", "title": "agp/amd64: Fix broken error propagation in agp_amd64_probe()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63990", "url": "https://patchblox.com/security/cve/CVE-2026-63990", "title": "kernel-64kb: bonding: refuse to enslave CAN devices (bsc#1273027).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64028", "url": "https://patchblox.com/security/cve/CVE-2026-64028", "title": "kernel-uek64k: tracing: Avoid NULL return from hist_field_name() on truncation (David Carlier) [Orabug: 39784962]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45838", "url": "https://patchblox.com/security/cve/CVE-2026-45838", "title": "bpf: fix end-of-list detection in cgroup_storage_get_next_key()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45842", "url": "https://patchblox.com/security/cve/CVE-2026-45842", "title": "slip: reject VJ receive packets on instances with no rstate array", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53001", "url": "https://patchblox.com/security/cve/CVE-2026-53001", "title": "kernel-uek: netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621740]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53134", "url": "https://patchblox.com/security/cve/CVE-2026-53134", "title": "kernel-64kb: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53219", "url": "https://patchblox.com/security/cve/CVE-2026-53219", "title": "netfilter: x_tables: avoid leaking percpu counter pointers", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46127", "url": "https://patchblox.com/security/cve/CVE-2026-46127", "title": "kernel-uek-modules: RDMA/ocrdma: Don\u0027t NULL deref uctx on errors in ocrdma_copy_pd_uresp() (Jason Gunthorpe) [Orabug: 39460277]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46168", "url": "https://patchblox.com/security/cve/CVE-2026-46168", "title": "mptcp: fix scheduling with atomic in timestamp sockopt", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46184", "url": "https://patchblox.com/security/cve/CVE-2026-46184", "title": "kernel-uek64k-modules: sound: ua101: fix division by zero at probe (Seungju Cheon) [Orabug: 39460519]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52984", "url": "https://patchblox.com/security/cve/CVE-2026-52984", "title": "kernel-uek-container: net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53060", "url": "https://patchblox.com/security/cve/CVE-2026-53060", "title": "dm cache metadata: fix memory leak on metadata abort retry", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64090", "url": "https://patchblox.com/security/cve/CVE-2026-64090", "title": "bpftool: batman-adv: tt: avoid empty VLAN responses (Sven Eckelmann) [Orabug: 39754744]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64092", "url": "https://patchblox.com/security/cve/CVE-2026-64092", "title": "kernel-uek64k: batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown (Sven Eckelmann) [Orabug: 39784982]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45846", "url": "https://patchblox.com/security/cve/CVE-2026-45846", "title": "bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45834", "url": "https://patchblox.com/security/cve/CVE-2026-45834", "title": "Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45835", "url": "https://patchblox.com/security/cve/CVE-2026-45835", "title": "Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45836", "url": "https://patchblox.com/security/cve/CVE-2026-45836", "title": "Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46151", "url": "https://patchblox.com/security/cve/CVE-2026-46151", "title": "usb: usblp: fix heap leak in IEEE 1284 device ID via short response", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53177", "url": "https://patchblox.com/security/cve/CVE-2026-53177", "title": "bnxt_en: Fix NULL pointer dereference", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53245", "url": "https://patchblox.com/security/cve/CVE-2026-53245", "title": "net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46044", "url": "https://patchblox.com/security/cve/CVE-2026-46044", "title": "kernel-uek-modules-extra: ipmi:ssif: Clean up kthread on errors (Corey Minyard) [Orabug: 39452264]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46108", "url": "https://patchblox.com/security/cve/CVE-2026-46108", "title": "kernel-uek: ipmi:si: Return state to normal if message allocation fails (Corey Minyard) [Orabug: 39460202]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46276", "url": "https://patchblox.com/security/cve/CVE-2026-46276", "title": "bpftool: drm/amdgpu: fix zero-size GDS range init on RDNA4 (Arjan van de Ven) [Orabug: 39524543]", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46292", "url": "https://patchblox.com/security/cve/CVE-2026-46292", "title": "pmdomain: core: Fix detach procedure for virtual devices in genpd", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52916", "url": "https://patchblox.com/security/cve/CVE-2026-52916", "title": "batman-adv: frag: disallow unicast fragment in fragment", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52985", "url": "https://patchblox.com/security/cve/CVE-2026-52985", "title": "kernel-uek-debug-devel: netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53048", "url": "https://patchblox.com/security/cve/CVE-2026-53048", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gfs2: prevent NULL pointer dereference during un...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53061", "url": "https://patchblox.com/security/cve/CVE-2026-53061", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm cache: fix dirty mapping checking in passthro...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53135", "url": "https://patchblox.com/security/cve/CVE-2026-53135", "title": "drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53163", "url": "https://patchblox.com/security/cve/CVE-2026-53163", "title": "locking/rtmutex: Skip remove_waiter() when waiter is not enqueued", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53213", "url": "https://patchblox.com/security/cve/CVE-2026-53213", "title": "drm/vc4: fix krealloc() memory leak", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53238", "url": "https://patchblox.com/security/cve/CVE-2026-53238", "title": "netlabel: validate unlabeled address and mask attribute lengths", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53287", "url": "https://patchblox.com/security/cve/CVE-2026-53287", "title": "audit: fix incorrect inheritable capability in CAPSET records", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53291", "url": "https://patchblox.com/security/cve/CVE-2026-53291", "title": "ALSA: hda/conexant: Fix missing error check for jack detection", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53337", "url": "https://patchblox.com/security/cve/CVE-2026-53337", "title": "net: bonding: fix NULL pointer dereference in bond_do_ioctl()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64012", "url": "https://patchblox.com/security/cve/CVE-2026-64012", "title": "kernel-64kb: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764).", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64155", "url": "https://patchblox.com/security/cve/CVE-2026-64155", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI W...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64220", "url": "https://patchblox.com/security/cve/CVE-2026-64220", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode-\u003Esecondary to NULL i...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43496", "url": "https://patchblox.com/security/cve/CVE-2026-43496", "title": "net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63868", "url": "https://patchblox.com/security/cve/CVE-2026-63868", "title": "kernel-64kb: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497).", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52930", "url": "https://patchblox.com/security/cve/CVE-2026-52930", "title": "ipc/shm: serialize orphan cleanup with shm_nattch updates", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53269", "url": "https://patchblox.com/security/cve/CVE-2026-53269", "title": "kernel-64kb: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579).", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64166", "url": "https://patchblox.com/security/cve/CVE-2026-64166", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46220", "url": "https://patchblox.com/security/cve/CVE-2026-46220", "title": "bpftool: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (John B", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53080", "url": "https://patchblox.com/security/cve/CVE-2026-53080", "title": "net/sched: cls_fw: fix NULL dereference of \u0022old\u0022 filters before change()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53263", "url": "https://patchblox.com/security/cve/CVE-2026-53263", "title": "6lowpan: fix off-by-one in multicast context address compression", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64185", "url": "https://patchblox.com/security/cve/CVE-2026-64185", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sysfs: don\u0027t remove existing directory on update...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00117, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64240", "url": "https://patchblox.com/security/cve/CVE-2026-64240", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00115, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53074", "url": "https://patchblox.com/security/cve/CVE-2026-53074", "title": "bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb", "priority": "Routine", "severity": "Moderate", "cvss": 6.4, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52921", "url": "https://patchblox.com/security/cve/CVE-2026-52921", "title": "netfilter: ipset: stop hash:* range iteration at end", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52925", "url": "https://patchblox.com/security/cve/CVE-2026-52925", "title": "vrf: Fix a potential NPD when removing a port from a VRF", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52928", "url": "https://patchblox.com/security/cve/CVE-2026-52928", "title": "af_unix: Reject SIOCATMARK on non-stream sockets", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64164", "url": "https://patchblox.com/security/cve/CVE-2026-64164", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic co...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64170", "url": "https://patchblox.com/security/cve/CVE-2026-64170", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setu...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64173", "url": "https://patchblox.com/security/cve/CVE-2026-64173", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Do not call map-\u003Eops-\u003Eelt_free() if elt...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64177", "url": "https://patchblox.com/security/cve/CVE-2026-64177", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: phonet/pep: disable BH around forwarded sk_recei...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53304", "url": "https://patchblox.com/security/cve/CVE-2026-53304", "title": "scsi: sg: Resolve soft lockup issue when opening /dev/sgX", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00101, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46159", "url": "https://patchblox.com/security/cve/CVE-2026-46159", "title": "btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00098, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53037", "url": "https://patchblox.com/security/cve/CVE-2026-53037", "title": "HID: usbhid: fix deadlock in hid_post_reset()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53352", "url": "https://patchblox.com/security/cve/CVE-2026-53352", "title": "signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46187", "url": "https://patchblox.com/security/cve/CVE-2026-46187", "title": "kernel-64kb: Security update for the Linux Kernel", "priority": "Routine", "severity": "N/A", "cvss": 4.7, "epss": 0.00095, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46252", "url": "https://patchblox.com/security/cve/CVE-2026-46252", "title": "regulator: core: fix locking in regulator_resolve_supply() error path", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00091, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-12T13:55:20Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }