# kernel-uek-debug-modules-extra 0:5.15.0-323.211.3.3.el9uek: kernel-uek-debug-modules-extra 0:5.15.0-323.211.3.3.el9uek for ol 9

kernel-uek-debug-modules-extra 0:5.15.0-323.211.3.3.el9uek, released August 11, 2026, fixes 352 CVEs in kernel-uek-debug-modules-extra. One of them is being exploited (CVE-2026-53266); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/ol-9-kernel-uek-debug-modules-extra-0-5.15.0-323.211.3.3.el9uek
- Platform: Linux
- Released: Aug 11, 2026
- Priority: Patch now (Closes CVE-2026-53266, exploited (CISA KEV))
- CVEs: 352, exploited: 1, on CISA KEV: 1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-uek-debug-modules-extra](https://patchblox.com/security/data/product/linux/kernel-uek-debug-modules-extra.md) | ol 9 | 0:5.15.0-323.211.3.3.el9uek |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-53266](https://patchblox.com/security/data/cve/CVE-2026-53266.md) | Patch now | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | CISA KEV |
| [CVE-2026-63800](https://patchblox.com/security/data/cve/CVE-2026-63800.md) | Urgent | pNFS: Fix use-after-free in pnfs_update_layout() | 9.8 | 0.0064 |  |
| [CVE-2026-52914](https://patchblox.com/security/data/cve/CVE-2026-52914.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0063 |  |
| [CVE-2026-64089](https://patchblox.com/security/data/cve/CVE-2026-64089.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0055 |  |
| [CVE-2026-64125](https://patchblox.com/security/data/cve/CVE-2026-64125.md) | Urgent | kernel-64kb: net: bcmgenet: keep RBUF EEE/PM disabled (bsc#1272346). | 9.8 | 0.0055 |  |
| [CVE-2026-52982](https://patchblox.com/security/data/cve/CVE-2026-52982.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0054 |  |
| [CVE-2026-53043](https://patchblox.com/security/data/cve/CVE-2026-53043.md) | Urgent | ocfs2/dlm: validate qr_numregions in dlm_match_regions() | 9.8 | 0.0051 |  |
| [CVE-2026-64046](https://patchblox.com/security/data/cve/CVE-2026-64046.md) | Urgent | kernel-64kb: net: tls: prevent chain-after-chain in plain text SG (bsc#1273059). | 9.8 | 0.0051 |  |
| [CVE-2026-64047](https://patchblox.com/security/data/cve/CVE-2026-64047.md) | Urgent | kernel-64kb: net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring (bsc#1273060). | 9.8 | 0.0051 |  |
| [CVE-2026-52931](https://patchblox.com/security/data/cve/CVE-2026-52931.md) | Urgent | batman-adv: tp_meter: avoid use of uninit sender vars | 9.8 | 0.0050 |  |
| [CVE-2026-52993](https://patchblox.com/security/data/cve/CVE-2026-52993.md) | Urgent | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 |  |
| [CVE-2026-53309](https://patchblox.com/security/data/cve/CVE-2026-53309.md) | Urgent | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison | 9.8 | 0.0040 |  |
| [CVE-2026-52955](https://patchblox.com/security/data/cve/CVE-2026-52955.md) | Urgent | kernel-default: libceph: Fix potential out-of-bounds access in crush_decode() (bsc#1269159). | 9.8 | 0.0038 |  |
| [CVE-2026-53002](https://patchblox.com/security/data/cve/CVE-2026-53002.md) | Urgent | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 |  |
| [CVE-2026-53075](https://patchblox.com/security/data/cve/CVE-2026-53075.md) | Urgent | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 |  |
| [CVE-2026-52934](https://patchblox.com/security/data/cve/CVE-2026-52934.md) | Urgent | batman-adv: tvlv: reject oversized TVLV packets | 9.8 | 0.0024 |  |
| [CVE-2026-63824](https://patchblox.com/security/data/cve/CVE-2026-63824.md) | Urgent | KEYS: fix overflow in keyctl_pkey_params_get_2() | 9.8 | 0.0017 |  |
| [CVE-2026-53403](https://patchblox.com/security/data/cve/CVE-2026-53403.md) | Urgent | fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var | 9.8 | 0.0013 |  |
| [CVE-2026-52919](https://patchblox.com/security/data/cve/CVE-2026-52919.md) | Urgent | batman-adv: fix tp_meter counter underflow during shutdown | 9.8 | 0.0012 |  |
| [CVE-2026-52947](https://patchblox.com/security/data/cve/CVE-2026-52947.md) | Urgent | net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove | 9.8 | 0.0011 |  |
| [CVE-2026-53062](https://patchblox.com/security/data/cve/CVE-2026-53062.md) | Urgent | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 |  |
| [CVE-2026-63913](https://patchblox.com/security/data/cve/CVE-2026-63913.md) | High | kernel-64k-modules-core: kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check | 8.8 | 0.0097 |  |
| [CVE-2026-52929](https://patchblox.com/security/data/cve/CVE-2026-52929.md) | High | sctp: stream: fully roll back denied add-stream state | 9.8 | 0.0087 |  |
| [CVE-2026-53176](https://patchblox.com/security/data/cve/CVE-2026-53176.md) | High | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN | 9.8 | 0.0076 |  |
| [CVE-2026-52958](https://patchblox.com/security/data/cve/CVE-2026-52958.md) | High | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 |  |
| [CVE-2026-53003](https://patchblox.com/security/data/cve/CVE-2026-53003.md) | High | pppoe: drop PFC frames | 7.5 | 0.0072 |  |
| [CVE-2026-63912](https://patchblox.com/security/data/cve/CVE-2026-63912.md) | High | kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836). | 9.8 | 0.0071 |  |
| [CVE-2026-63922](https://patchblox.com/security/data/cve/CVE-2026-63922.md) | High | kernel: kernel: ipv6: exthdrs: refresh nh after handling HAO option | 9.8 | 0.0071 |  |
| [CVE-2026-63924](https://patchblox.com/security/data/cve/CVE-2026-63924.md) | High | kernel: kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() | 9.8 | 0.0071 |  |
| [CVE-2026-52924](https://patchblox.com/security/data/cve/CVE-2026-52924.md) | High | sctp: purge outqueue on stale COOKIE-ECHO handling | 9.8 | 0.0066 |  |
| [CVE-2026-63919](https://patchblox.com/security/data/cve/CVE-2026-63919.md) | High | kernel-default: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907). | 8.8 | 0.0065 |  |
| [CVE-2026-52986](https://patchblox.com/security/data/cve/CVE-2026-52986.md) | High | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 |  |
| [CVE-2026-52999](https://patchblox.com/security/data/cve/CVE-2026-52999.md) | High | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 |  |
| [CVE-2026-63796](https://patchblox.com/security/data/cve/CVE-2026-63796.md) | High | ocfs2: reject oversized group bitmap descriptors | 8.8 | 0.0059 |  |
| [CVE-2026-52998](https://patchblox.com/security/data/cve/CVE-2026-52998.md) | High | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 |  |
| [CVE-2026-53221](https://patchblox.com/security/data/cve/CVE-2026-53221.md) | High | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | 9.8 | 0.0058 |  |
| [CVE-2026-53228](https://patchblox.com/security/data/cve/CVE-2026-53228.md) | High | ipv6: sit: reload inner IPv6 header after GSO offloads | 9.8 | 0.0058 |  |
| [CVE-2026-53225](https://patchblox.com/security/data/cve/CVE-2026-53225.md) | High | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 9.1 | 0.0058 |  |
| [CVE-2026-46133](https://patchblox.com/security/data/cve/CVE-2026-46133.md) | High | RDMA/rxe: Reject unknown opcodes before ICRC processing | 8.8 | 0.0057 |  |
| [CVE-2026-63976](https://patchblox.com/security/data/cve/CVE-2026-63976.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0057 |  |
| [CVE-2026-46177](https://patchblox.com/security/data/cve/CVE-2026-46177.md) | High | kernel-uek64k: ipmi: Add limits to event and receive message requests (Corey Minyard) [Orabug: 39460490] | 7.5 | 0.0056 |  |
| [CVE-2026-53398](https://patchblox.com/security/data/cve/CVE-2026-53398.md) | High | NFSD: Fix SECINFO_NO_NAME decode error cleanup | 9.8 | 0.0054 |  |
| [CVE-2026-53397](https://patchblox.com/security/data/cve/CVE-2026-53397.md) | High | nfsd: fix posix_acl leak on SETACL decode failure | 8.8 | 0.0053 |  |
| [CVE-2026-63808](https://patchblox.com/security/data/cve/CVE-2026-63808.md) | High | kernel-rt-64k: kernel: exfat: fix potential use-after-free in exfat_find_dir_entry() | 9.8 | 0.0053 |  |
| [CVE-2026-64113](https://patchblox.com/security/data/cve/CVE-2026-64113.md) | High | perf: kernel: ixgbevf: fix use-after-free in VEPA multicast source pruning | 9.8 | 0.0053 |  |
| [CVE-2026-46119](https://patchblox.com/security/data/cve/CVE-2026-46119.md) | High | libceph: Fix slab-out-of-bounds access in auth message processing | 9.1 | 0.0053 |  |
| [CVE-2026-53268](https://patchblox.com/security/data/cve/CVE-2026-53268.md) | High | netfilter: conntrack_irc: fix possible out-of-bounds read | 8.2 | 0.0052 |  |
| [CVE-2026-52954](https://patchblox.com/security/data/cve/CVE-2026-52954.md) | High | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 |  |
| [CVE-2026-52957](https://patchblox.com/security/data/cve/CVE-2026-52957.md) | High | libceph: Fix potential null-ptr-deref in decode_choose_args() | 7.5 | 0.0052 |  |
| [CVE-2026-53391](https://patchblox.com/security/data/cve/CVE-2026-53391.md) | High | NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr | 8.8 | 0.0052 |  |
| [CVE-2026-63984](https://patchblox.com/security/data/cve/CVE-2026-63984.md) | High | kernel-default: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865). | 9.8 | 0.0051 |  |
| [CVE-2026-63993](https://patchblox.com/security/data/cve/CVE-2026-63993.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after s... | 9.8 | 0.0051 |  |
| [CVE-2026-63994](https://patchblox.com/security/data/cve/CVE-2026-63994.md) | High | kernel-default: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035). | 9.8 | 0.0051 |  |
| [CVE-2026-64007](https://patchblox.com/security/data/cve/CVE-2026-64007.md) | High | kernel-default: netfilter: synproxy: refresh tcphdr after skb_ensure_writable (bsc#1273105). | 9.8 | 0.0051 |  |
| [CVE-2026-53186](https://patchblox.com/security/data/cve/CVE-2026-53186.md) | High | RDMA/srp: bound SRP_RSP sense copy by the received length | 9.1 | 0.0051 |  |
| [CVE-2026-63992](https://patchblox.com/security/data/cve/CVE-2026-63992.md) | High | kernel-default: tunnels: do not assume transport header in iptunnel_pmtud_check_icmp() (bsc#1272868). | 9.1 | 0.0051 |  |
| [CVE-2026-63801](https://patchblox.com/security/data/cve/CVE-2026-63801.md) | High | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 8.8 | 0.0051 |  |
| [CVE-2026-64116](https://patchblox.com/security/data/cve/CVE-2026-64116.md) | High | kernel-64kb: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() (bsc#1273751). | 7.5 | 0.0051 |  |
| [CVE-2026-53215](https://patchblox.com/security/data/cve/CVE-2026-53215.md) | High | kernel-64kb: net: mvpp2: refill RX buffers before XDP or skb use (bsc#1269680). | 9.8 | 0.0050 |  |
| [CVE-2026-53216](https://patchblox.com/security/data/cve/CVE-2026-53216.md) | High | kernel-64kb: net: mvpp2: limit XDP frame size to the RX buffer (bsc#1269587). | 9.8 | 0.0050 |  |
| [CVE-2026-53199](https://patchblox.com/security/data/cve/CVE-2026-53199.md) | High | hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf | 7.5 | 0.0050 |  |
| [CVE-2026-53264](https://patchblox.com/security/data/cve/CVE-2026-53264.md) | High | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 7.8 | 0.0049 |  |
| [CVE-2026-46137](https://patchblox.com/security/data/cve/CVE-2026-46137.md) | High | mptcp: pm: ADD_ADDR rtx: fix potential data-race | 9.8 | 0.0048 |  |
| [CVE-2026-46124](https://patchblox.com/security/data/cve/CVE-2026-46124.md) | High | kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847). | 7.5 | 0.0048 |  |
| [CVE-2026-64600](https://patchblox.com/security/data/cve/CVE-2026-64600.md) | High | xfs: resample the data fork mapping after cycling ILOCK | 7.8 | 0.0047 |  |
| [CVE-2026-52946](https://patchblox.com/security/data/cve/CVE-2026-52946.md) | High | fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling | 7.5 | 0.0047 |  |
| [CVE-2026-46306](https://patchblox.com/security/data/cve/CVE-2026-46306.md) | High | flow_dissector: do not dissect PPPoE PFC frames | 8.1 | 0.0045 |  |
| [CVE-2026-53131](https://patchblox.com/security/data/cve/CVE-2026-53131.md) | High | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 |  |
| [CVE-2026-53071](https://patchblox.com/security/data/cve/CVE-2026-53071.md) | High | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp | 8.8 | 0.0043 |  |
| [CVE-2026-64091](https://patchblox.com/security/data/cve/CVE-2026-64091.md) | High | kernel-uek64k-modules-extra: batman-adv: tt: fix TOCTOU race for reported vlans (Sven Eckelmann) [Orabug: 39754748] | 9.8 | 0.0043 |  |
| [CVE-2026-53088](https://patchblox.com/security/data/cve/CVE-2026-53088.md) | High | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb | 9.8 | 0.0040 |  |
| [CVE-2026-45843](https://patchblox.com/security/data/cve/CVE-2026-45843.md) | High | slip: bound decode() reads against the compressed packet length | 8.2 | 0.0040 |  |
| [CVE-2026-53006](https://patchblox.com/security/data/cve/CVE-2026-53006.md) | High | ipv6: fix possible UAF in icmpv6_rcv() | 9.8 | 0.0039 |  |
| [CVE-2026-53049](https://patchblox.com/security/data/cve/CVE-2026-53049.md) | High | kernel: kernel: gfs2: add some missing log locking | 9.8 | 0.0039 |  |
| [CVE-2026-63893](https://patchblox.com/security/data/cve/CVE-2026-63893.md) | High | kernel-default: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607). | 8.1 | 0.0039 |  |
| [CVE-2026-53217](https://patchblox.com/security/data/cve/CVE-2026-53217.md) | High | net: mvpp2: sync RX data at the hardware packet offset | 8.6 | 0.0038 |  |
| [CVE-2026-53069](https://patchblox.com/security/data/cve/CVE-2026-53069.md) | High | kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186). | 7.5 | 0.0038 |  |
| [CVE-2026-63916](https://patchblox.com/security/data/cve/CVE-2026-63916.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0036 |  |
| [CVE-2026-46304](https://patchblox.com/security/data/cve/CVE-2026-46304.md) | High | nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free | 7.5 | 0.0035 |  |
| [CVE-2026-63947](https://patchblox.com/security/data/cve/CVE-2026-63947.md) | High | kernel-64k-modules-core: kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() | 8.8 | 0.0035 |  |
| [CVE-2026-63925](https://patchblox.com/security/data/cve/CVE-2026-63925.md) | High | kernel-64kb: macsec: fix replay protection at XPN lower-PN wrap (bsc#1273008). | 8.1 | 0.0035 |  |
| [CVE-2024-36922](https://patchblox.com/security/data/cve/CVE-2024-36922.md) | High | wifi: iwlwifi: read txq->read_ptr under lock | 7.8 | 0.0035 |  |
| [CVE-2026-53357](https://patchblox.com/security/data/cve/CVE-2026-53357.md) | High | Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() | 8.0 | 0.0033 |  |
| [CVE-2026-46303](https://patchblox.com/security/data/cve/CVE-2026-46303.md) | High | isofs: validate Rock Ridge CE continuation extent against volume size | 8.2 | 0.0032 |  |
| [CVE-2026-63831](https://patchblox.com/security/data/cve/CVE-2026-63831.md) | High | mac802154: llsec: add skb_cow_data() before in-place crypto | 8.8 | 0.0031 |  |
| [CVE-2026-64178](https://patchblox.com/security/data/cve/CVE-2026-64178.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0030 |  |
| [CVE-2026-52920](https://patchblox.com/security/data/cve/CVE-2026-52920.md) | High | netfilter: xt_policy: fix strict mode inbound policy matching | 8.3 | 0.0030 |  |
| [CVE-2026-31626](https://patchblox.com/security/data/cve/CVE-2026-31626.md) | High | staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() | 7.1 | 0.0029 |  |
| [CVE-2026-46198](https://patchblox.com/security/data/cve/CVE-2026-46198.md) | High | bpftool: batman-adv: fix integer overflow on buff_pos (Lyes Bourennani) [Orabug: 39460580] | 8.8 | 0.0028 |  |
| [CVE-2026-53358](https://patchblox.com/security/data/cve/CVE-2026-53358.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0028 |  |
| [CVE-2026-64088](https://patchblox.com/security/data/cve/CVE-2026-64088.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0028 |  |
| [CVE-2026-53254](https://patchblox.com/security/data/cve/CVE-2026-53254.md) | High | Bluetooth: RFCOMM: validate skb length in MCC handlers | 8.1 | 0.0028 |  |
| [CVE-2026-63891](https://patchblox.com/security/data/cve/CVE-2026-63891.md) | High | kernel-64kb: thunderbolt: property: Cap recursion depth in __tb_property_parse_dir() (bsc#1272641). | 7.0 | 0.0028 |  |
| [CVE-2026-46212](https://patchblox.com/security/data/cve/CVE-2026-46212.md) | High | batman-adv: bla: prevent use-after-free when deleting claims | 8.8 | 0.0027 |  |
| [CVE-2026-63975](https://patchblox.com/security/data/cve/CVE-2026-63975.md) | High | kernel-default: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694). | 8.8 | 0.0027 |  |
| [CVE-2026-63867](https://patchblox.com/security/data/cve/CVE-2026-63867.md) | High | kernel-uek64k: mptcp: close TOCTOU race while computing rcv_wnd (Paolo Abeni) [Orabug: 39754146] | 8.2 | 0.0027 |  |
| [CVE-2026-53196](https://patchblox.com/security/data/cve/CVE-2026-53196.md) | High | USB: serial: io_ti: fix heap overflow in get_manuf_info() | 8.8 | 0.0027 |  |
| [CVE-2026-64095](https://patchblox.com/security/data/cve/CVE-2026-64095.md) | High | bpftool: batman-adv: bla: avoid double decrement of bla.num_requests (Sven Eckelmann) [Orabug: 39754761] | 7.1 | 0.0027 |  |
| [CVE-2026-53253](https://patchblox.com/security/data/cve/CVE-2026-53253.md) | High | Bluetooth: bnep: reject short frames before parsing | 7.1 | 0.0027 |  |
| [CVE-2026-53256](https://patchblox.com/security/data/cve/CVE-2026-53256.md) | High | kernel-rt-devel: kernel: Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind() | 8.1 | 0.0026 |  |
| [CVE-2026-46238](https://patchblox.com/security/data/cve/CVE-2026-46238.md) | High | batman-adv: stop caching unowned originator pointers in BAT IV | 8.8 | 0.0026 |  |
| [CVE-2026-53275](https://patchblox.com/security/data/cve/CVE-2026-53275.md) | High | ipv6: mcast: Fix use-after-free when processing MLD queries | 8.8 | 0.0026 |  |
| [CVE-2026-53146](https://patchblox.com/security/data/cve/CVE-2026-53146.md) | High | thunderbolt: Limit XDomain response copy to actual frame size | 7.1 | 0.0026 |  |
| [CVE-2026-64096](https://patchblox.com/security/data/cve/CVE-2026-64096.md) | High | kernel-uek64k-core: batman-adv: mcast: fix use-after-free in orig_node RCU release (Sven Eckelmann) [Orabug: 39754765] | 8.8 | 0.0026 |  |
| [CVE-2026-53157](https://patchblox.com/security/data/cve/CVE-2026-53157.md) | High | net: phonet: free phonet_device after RCU grace period | 7.8 | 0.0025 |  |
| [CVE-2026-46307](https://patchblox.com/security/data/cve/CVE-2026-46307.md) | High | wifi: ath5k: do not access array OOB | 8.3 | 0.0024 |  |
| [CVE-2026-46275](https://patchblox.com/security/data/cve/CVE-2026-46275.md) | High | Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths | 7.8 | 0.0023 |  |
| [CVE-2026-52918](https://patchblox.com/security/data/cve/CVE-2026-52918.md) | High | Bluetooth: serialize accept_q access | 8.8 | 0.0022 |  |
| [CVE-2026-52923](https://patchblox.com/security/data/cve/CVE-2026-52923.md) | High | ipc: limit next_id allocation to the valid ID range | 7.8 | 0.0022 |  |
| [CVE-2023-45896](https://patchblox.com/security/data/cve/CVE-2023-45896.md) | High | kernel-uek64k: fs/ntfs3: Add more attributes checks in mi_enum_attr() (Konstantin Komarov) | 7.1 | 0.0020 |  |
| [CVE-2026-53072](https://patchblox.com/security/data/cve/CVE-2026-53072.md) | High | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER | 8.8 | 0.0020 |  |
| [CVE-2026-46113](https://patchblox.com/security/data/cve/CVE-2026-46113.md) | High | kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN | 8.8 | 0.0020 |  |
| [CVE-2026-52969](https://patchblox.com/security/data/cve/CVE-2026-52969.md) | High | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 |  |
| [CVE-2026-53212](https://patchblox.com/security/data/cve/CVE-2026-53212.md) | High | netfilter: nft_tunnel: fix use-after-free on object destroy | 7.8 | 0.0019 |  |
| [CVE-2026-53369](https://patchblox.com/security/data/cve/CVE-2026-53369.md) | High | kernel-64kb: udf: reject descriptors with oversized CRC length (bsc#1271818). | 8.4 | 0.0019 |  |
| [CVE-2026-63926](https://patchblox.com/security/data/cve/CVE-2026-63926.md) | High | kernel-64kb: bpf: sockmap: fix tail fragment offset in bpf_msg_push_data (bsc#1273019). | 8.4 | 0.0019 |  |
| [CVE-2026-64039](https://patchblox.com/security/data/cve/CVE-2026-64039.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.7 | 0.0019 |  |
| [CVE-2026-64529](https://patchblox.com/security/data/cve/CVE-2026-64529.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: qat - remove unused character device and... | 7.8 | 0.0018 |  |
| [CVE-2026-63860](https://patchblox.com/security/data/cve/CVE-2026-63860.md) | High | kernel-64kb: RDMA/core: Prefer NLA_NUL_STRING (bsc#1272429). | 8.4 | 0.0018 |  |
| [CVE-2026-45991](https://patchblox.com/security/data/cve/CVE-2026-45991.md) | High | udf: fix partition descriptor append bookkeeping | 7.8 | 0.0018 |  |
| [CVE-2026-63875](https://patchblox.com/security/data/cve/CVE-2026-63875.md) | High | kernel-modules: kernel: arm64: tlb: Flush walk cache when unsharing PMD tables | 8.8 | 0.0018 |  |
| [CVE-2026-63899](https://patchblox.com/security/data/cve/CVE-2026-63899.md) | High | kernel: kernel: USB: serial: mxuport: fix memory corruption with small endpoint | 8.8 | 0.0018 |  |
| [CVE-2026-63898](https://patchblox.com/security/data/cve/CVE-2026-63898.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63901](https://patchblox.com/security/data/cve/CVE-2026-63901.md) | High | kernel-64kb: USB: serial: digi_acceleport: fix memory corruption with small endpoints (bsc#1272501). | 7.8 | 0.0018 |  |
| [CVE-2026-63836](https://patchblox.com/security/data/cve/CVE-2026-63836.md) | High | batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd | 7.5 | 0.0017 |  |
| [CVE-2026-63807](https://patchblox.com/security/data/cve/CVE-2026-63807.md) | High | KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level | 8.8 | 0.0017 |  |
| [CVE-2026-63920](https://patchblox.com/security/data/cve/CVE-2026-63920.md) | High | kernel-default: ipv6: validate extension header length before copying to cmsg (bsc#1272877). | 8.1 | 0.0017 |  |
| [CVE-2026-53112](https://patchblox.com/security/data/cve/CVE-2026-53112.md) | High | wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet | 7.8 | 0.0017 |  |
| [CVE-2026-63902](https://patchblox.com/security/data/cve/CVE-2026-63902.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2026-63903](https://patchblox.com/security/data/cve/CVE-2026-63903.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2026-63904](https://patchblox.com/security/data/cve/CVE-2026-63904.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2026-63917](https://patchblox.com/security/data/cve/CVE-2026-63917.md) | High | kernel-default: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904). | 8.8 | 0.0017 |  |
| [CVE-2026-63928](https://patchblox.com/security/data/cve/CVE-2026-63928.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-63956](https://patchblox.com/security/data/cve/CVE-2026-63956.md) | High | kernel-64kb: USB: serial: cypress_m8: fix memory corruption with small endpoint (bsc#1272473). | 7.8 | 0.0017 |  |
| [CVE-2026-63957](https://patchblox.com/security/data/cve/CVE-2026-63957.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-64528](https://patchblox.com/security/data/cve/CVE-2026-64528.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  tty: serial: samsung: Remove redundant port lock... | n/a | 0.0017 |  |
| [CVE-2026-63905](https://patchblox.com/security/data/cve/CVE-2026-63905.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-64219](https://patchblox.com/security/data/cve/CVE-2026-64219.md) | High | drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async | 7.8 | 0.0017 |  |
| [CVE-2026-64191](https://patchblox.com/security/data/cve/CVE-2026-64191.md) | High | i2c: stub: Reject I2C block transfers with invalid length | 9.8 | 0.0017 |  |
| [CVE-2026-63870](https://patchblox.com/security/data/cve/CVE-2026-63870.md) | High | kernel-uek64k-modules-extra-netfilter: ELSA-2026-500248: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0017 |  |
| [CVE-2026-63927](https://patchblox.com/security/data/cve/CVE-2026-63927.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2026-45850](https://patchblox.com/security/data/cve/CVE-2026-45850.md) | High | ipvs: skip ipv6 extension headers for csum checks | 7.5 | 0.0016 |  |
| [CVE-2026-53022](https://patchblox.com/security/data/cve/CVE-2026-53022.md) | High | platform/x86: dell-wmi-sysman: bound enumeration string aggregation | 7.0 | 0.0016 |  |
| [CVE-2026-63823](https://patchblox.com/security/data/cve/CVE-2026-63823.md) | High | keys: Pin request_key_auth payload in instantiate paths | 8.8 | 0.0016 |  |
| [CVE-2026-64527](https://patchblox.com/security/data/cve/CVE-2026-64527.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/hyperv: validate VMBus packet size in receiv... | 7.0 | 0.0016 |  |
| [CVE-2026-63961](https://patchblox.com/security/data/cve/CVE-2026-63961.md) | High | usb: typec: altmodes/displayport: validate count before reading Status Update VDO | 7.1 | 0.0016 |  |
| [CVE-2026-63921](https://patchblox.com/security/data/cve/CVE-2026-63921.md) | High | kernel-default: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918). | 8.8 | 0.0016 |  |
| [CVE-2026-53270](https://patchblox.com/security/data/cve/CVE-2026-53270.md) | High | ipvs: clear the svc scheduler ptr early on edit | 9.8 | 0.0016 |  |
| [CVE-2026-52912](https://patchblox.com/security/data/cve/CVE-2026-52912.md) | High | netfilter: nf_queue: hold bridge skb->dev while queued | 7.8 | 0.0016 |  |
| [CVE-2026-63809](https://patchblox.com/security/data/cve/CVE-2026-63809.md) | High | bpf: use kvfree() for replaced sysctl write buffer | 7.8 | 0.0015 |  |
| [CVE-2026-46174](https://patchblox.com/security/data/cve/CVE-2026-46174.md) | High | x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache | 9.8 | 0.0015 |  |
| [CVE-2026-64118](https://patchblox.com/security/data/cve/CVE-2026-64118.md) | High | kernel-64kb: qed: fix double free in qed_cxt_tables_alloc() (bsc#1273749). | 8.4 | 0.0015 |  |
| [CVE-2026-53273](https://patchblox.com/security/data/cve/CVE-2026-53273.md) | High | kernel-64kb: tee: optee: prevent use-after-free when the client exits before the supplicant (bsc#1269713). | 7.8 | 0.0015 |  |
| [CVE-2026-52933](https://patchblox.com/security/data/cve/CVE-2026-52933.md) | High | io_uring/poll: fix signed comparison in io_poll_get_ownership() | 7.8 | 0.0015 |  |
| [CVE-2026-53194](https://patchblox.com/security/data/cve/CVE-2026-53194.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2026-53329](https://patchblox.com/security/data/cve/CVE-2026-53329.md) | High | drm/amd/display: Use krealloc_array() in dal_vector_reserve() | 7.8 | 0.0015 |  |
| [CVE-2026-63914](https://patchblox.com/security/data/cve/CVE-2026-63914.md) | High | bpftool: xfrm: route MIGRATE notifications to caller's netns (Maoyi Xie) [Orabug: 39754286] | 7.3 | 0.0015 |  |
| [CVE-2026-46294](https://patchblox.com/security/data/cve/CVE-2026-46294.md) | High | kernel-uek: dm: fix a buffer overflow in ioctl processing (Mikulas Patocka) [Orabug: 39524585] | 7.8 | 0.0015 |  |
| [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 |  |
| [CVE-2026-64009](https://patchblox.com/security/data/cve/CVE-2026-64009.md) | High | kernel-64kb: xfrm: Check for underflow in xfrm_state_mtu (bsc#1273879). | 7.8 | 0.0014 |  |
| [CVE-2026-46189](https://patchblox.com/security/data/cve/CVE-2026-46189.md) | High | kernel-uek-modules-extra: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [Orabug: 39460540] | 7.8 | 0.0014 |  |
| [CVE-2026-52910](https://patchblox.com/security/data/cve/CVE-2026-52910.md) | High | bpf: Free reuseport cBPF prog after RCU grace period. | 7.8 | 0.0014 |  |
| [CVE-2026-53195](https://patchblox.com/security/data/cve/CVE-2026-53195.md) | High | USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() | 7.8 | 0.0014 |  |
| [CVE-2026-64018](https://patchblox.com/security/data/cve/CVE-2026-64018.md) | High | kernel-default: Security update for the Linux Kernel | 9.3 | 0.0014 |  |
| [CVE-2026-46149](https://patchblox.com/security/data/cve/CVE-2026-46149.md) | High | scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() | 8.8 | 0.0014 |  |
| [CVE-2026-63794](https://patchblox.com/security/data/cve/CVE-2026-63794.md) | High | KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path | 8.8 | 0.0014 |  |
| [CVE-2026-46209](https://patchblox.com/security/data/cve/CVE-2026-46209.md) | High | kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460... | 8.4 | 0.0014 |  |
| [CVE-2026-64524](https://patchblox.com/security/data/cve/CVE-2026-64524.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/hyperv: validate resolution_count and fix WI... | 7.7 | 0.0014 |  |
| [CVE-2026-46180](https://patchblox.com/security/data/cve/CVE-2026-46180.md) | High | wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task | 7.8 | 0.0014 |  |
| [CVE-2026-53016](https://patchblox.com/security/data/cve/CVE-2026-53016.md) | High | crypto: ccp - copy IV using skcipher ivsize | 7.8 | 0.0014 |  |
| [CVE-2026-53059](https://patchblox.com/security/data/cve/CVE-2026-53059.md) | High | dm log: fix out-of-bounds write due to region_count overflow | 7.8 | 0.0014 |  |
| [CVE-2026-64153](https://patchblox.com/security/data/cve/CVE-2026-64153.md) | High | bpftool: drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN (Mikko Perttunen) [Orabug: 39754904] | 8.8 | 0.0014 |  |
| [CVE-2026-53381](https://patchblox.com/security/data/cve/CVE-2026-53381.md) | High | virtiofs: fix UAF on submount umount | 8.1 | 0.0014 |  |
| [CVE-2026-46197](https://patchblox.com/security/data/cve/CVE-2026-46197.md) | High | drm/amdkfd: validate SVM ioctl nattr against buffer size | 7.8 | 0.0014 |  |
| [CVE-2026-46206](https://patchblox.com/security/data/cve/CVE-2026-46206.md) | High | batman-adv: reject new tp_meter sessions during teardown | 7.8 | 0.0014 |  |
| [CVE-2026-46208](https://patchblox.com/security/data/cve/CVE-2026-46208.md) | High | batman-adv: stop tp_meter sessions during mesh teardown | 7.8 | 0.0014 |  |
| [CVE-2026-52962](https://patchblox.com/security/data/cve/CVE-2026-52962.md) | High | ceph: fix a buffer leak in __ceph_setxattr() | 7.8 | 0.0014 |  |
| [CVE-2026-46274](https://patchblox.com/security/data/cve/CVE-2026-46274.md) | High | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | 7.8 | 0.0014 |  |
| [CVE-2026-46193](https://patchblox.com/security/data/cve/CVE-2026-46193.md) | High | kernel-uek-debug-devel: xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460554] | 7.0 | 0.0014 |  |
| [CVE-2026-46191](https://patchblox.com/security/data/cve/CVE-2026-46191.md) | High | fbcon: Avoid OOB font access if console rotation fails | 7.7 | 0.0014 |  |
| [CVE-2026-64114](https://patchblox.com/security/data/cve/CVE-2026-64114.md) | High | kernel-default: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 (bsc#1273742). | 8.8 | 0.0014 |  |
| [CVE-2026-53223](https://patchblox.com/security/data/cve/CVE-2026-53223.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue sk... | 8.1 | 0.0014 |  |
| [CVE-2026-64115](https://patchblox.com/security/data/cve/CVE-2026-64115.md) | High | kernel-default: vsock/vmci: fix UAF when peer resets connection during handshake (bsc#1273745). | 8.8 | 0.0014 |  |
| [CVE-2026-53148](https://patchblox.com/security/data/cve/CVE-2026-53148.md) | High | thunderbolt: Clamp XDomain response data copy to allocation size | 7.8 | 0.0014 |  |
| [CVE-2026-64126](https://patchblox.com/security/data/cve/CVE-2026-64126.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.3 | 0.0014 |  |
| [CVE-2026-46132](https://patchblox.com/security/data/cve/CVE-2026-46132.md) | High | bpftool: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo (Kai Aizen) [Orabug: 39460297] | 7.0 | 0.0014 |  |
| [CVE-2026-31617](https://patchblox.com/security/data/cve/CVE-2026-31617.md) | High | usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() | 7.8 | 0.0013 |  |
| [CVE-2026-53356](https://patchblox.com/security/data/cve/CVE-2026-53356.md) | High | drm/i915/gem: Fix phys BO pread/pwrite with offset | 7.8 | 0.0013 |  |
| [CVE-2026-46172](https://patchblox.com/security/data/cve/CVE-2026-46172.md) | High | kernel-64kb: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (bsc#1266903). | 7.0 | 0.0013 |  |
| [CVE-2026-52970](https://patchblox.com/security/data/cve/CVE-2026-52970.md) | High | netfilter: nft_ct: fix missing expect put in obj eval | 7.0 | 0.0013 |  |
| [CVE-2026-53388](https://patchblox.com/security/data/cve/CVE-2026-53388.md) | High | fuse: re-lock request before replacing page cache folio | 8.8 | 0.0013 |  |
| [CVE-2026-64032](https://patchblox.com/security/data/cve/CVE-2026-64032.md) | High | kernel-rt-64k-debug-devel: kernel: bridge: mcast: Fix a possible use-after-free when removing a bridge port | 8.8 | 0.0013 |  |
| [CVE-2026-63803](https://patchblox.com/security/data/cve/CVE-2026-63803.md) | High | hdlc_ppp: sync per-proto timers before freeing hdlc state | 8.4 | 0.0013 |  |
| [CVE-2026-52942](https://patchblox.com/security/data/cve/CVE-2026-52942.md) | High | netfilter: nf_log: validate MAC header was set before dumping it | 7.1 | 0.0013 |  |
| [CVE-2026-45840](https://patchblox.com/security/data/cve/CVE-2026-45840.md) | High | kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479] | 7.0 | 0.0013 |  |
| [CVE-2026-63971](https://patchblox.com/security/data/cve/CVE-2026-63971.md) | High | kernel-default: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678). | 8.8 | 0.0013 |  |
| [CVE-2026-46122](https://patchblox.com/security/data/cve/CVE-2026-46122.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-46163](https://patchblox.com/security/data/cve/CVE-2026-46163.md) | High | wifi: b43legacy: enforce bounds check on firmware key index in RX path | 7.8 | 0.0013 |  |
| [CVE-2026-46234](https://patchblox.com/security/data/cve/CVE-2026-46234.md) | High | vsock: fix buffer size clamping order | 7.8 | 0.0013 |  |
| [CVE-2026-63942](https://patchblox.com/security/data/cve/CVE-2026-63942.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-53011](https://patchblox.com/security/data/cve/CVE-2026-53011.md) | High | net/sched: taprio: fix use-after-free in advance_sched() on schedule switch | 8.8 | 0.0013 |  |
| [CVE-2026-53189](https://patchblox.com/security/data/cve/CVE-2026-53189.md) | High | bpftool: kernel: mm/huge_memory: update file PMD counter before folio_put() | 8.8 | 0.0013 |  |
| [CVE-2026-64002](https://patchblox.com/security/data/cve/CVE-2026-64002.md) | High | kernel-default: ipv4: free net->ipv4.sysctl_local_reserved_ports after unregister_net_sysctl_table() (bsc#1273774). | 8.8 | 0.0013 |  |
| [CVE-2026-46065](https://patchblox.com/security/data/cve/CVE-2026-46065.md) | High | fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info | 7.8 | 0.0013 |  |
| [CVE-2026-46150](https://patchblox.com/security/data/cve/CVE-2026-46150.md) | High | fanotify: fix false positive on permission events | 7.8 | 0.0013 |  |
| [CVE-2026-46178](https://patchblox.com/security/data/cve/CVE-2026-46178.md) | High | kernel-uek64k: RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() (Jason Gunthorpe) [Orabug: 39460496] | 7.8 | 0.0013 |  |
| [CVE-2026-53136](https://patchblox.com/security/data/cve/CVE-2026-53136.md) | High | bpftool: kernel: drm/amd/display: Clamp VBIOS HDMI retimer register count to array size | 7.8 | 0.0013 |  |
| [CVE-2026-63985](https://patchblox.com/security/data/cve/CVE-2026-63985.md) | High | kernel-64kb: ethtool: eeprom: add more safeties to EEPROM Netlink fallback (bsc#1272963). | 7.8 | 0.0013 |  |
| [CVE-2026-64133](https://patchblox.com/security/data/cve/CVE-2026-64133.md) | High | ALSA: asihpi: Fix potential OOB array access at reading cache | 7.8 | 0.0013 |  |
| [CVE-2026-64218](https://patchblox.com/security/data/cve/CVE-2026-64218.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  batman-adv: bla: fix report_work leak on backbon... | 7.8 | 0.0013 |  |
| [CVE-2026-53004](https://patchblox.com/security/data/cve/CVE-2026-53004.md) | High | kernel-uek-modules-extra: sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks (Michael Bommarito) [Orabug: 39621757] | 7.8 | 0.0013 |  |
| [CVE-2026-53167](https://patchblox.com/security/data/cve/CVE-2026-53167.md) | High | fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios | 7.0 | 0.0013 |  |
| [CVE-2026-53218](https://patchblox.com/security/data/cve/CVE-2026-53218.md) | High | netfilter: nft_exthdr: fix register tracking for F_PRESENT flag | 7.0 | 0.0013 |  |
| [CVE-2026-53249](https://patchblox.com/security/data/cve/CVE-2026-53249.md) | High | ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | 7.0 | 0.0013 |  |
| [CVE-2026-46120](https://patchblox.com/security/data/cve/CVE-2026-46120.md) | High | kernel: kernel: ip6_gre: Use cached t->net in ip6erspan_changelink() | 8.8 | 0.0013 |  |
| [CVE-2026-52917](https://patchblox.com/security/data/cve/CVE-2026-52917.md) | High | sctp: diag: reject stale associations in dump_one path | 8.8 | 0.0013 |  |
| [CVE-2026-53149](https://patchblox.com/security/data/cve/CVE-2026-53149.md) | High | thunderbolt: Bound root directory content to block size | 7.1 | 0.0013 |  |
| [CVE-2026-46160](https://patchblox.com/security/data/cve/CVE-2026-46160.md) | High | btrfs: fix missing last_unlink_trans update when removing a directory | 7.0 | 0.0013 |  |
| [CVE-2026-63865](https://patchblox.com/security/data/cve/CVE-2026-63865.md) | High | kernel-64kb: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks (bsc#1272486). | 8.8 | 0.0013 |  |
| [CVE-2026-64103](https://patchblox.com/security/data/cve/CVE-2026-64103.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: isci: Fix use-after-free in device removal... | 7.8 | 0.0013 |  |
| [CVE-2026-64123](https://patchblox.com/security/data/cve/CVE-2026-64123.md) | High | bpftool: net: hsr: defer node table free until after RCU readers (Michael Bommarito) [Orabug: 39754840] | 7.8 | 0.0013 |  |
| [CVE-2026-52915](https://patchblox.com/security/data/cve/CVE-2026-52915.md) | High | netfilter: ip6t_hbh: reject oversized option lists | 7.1 | 0.0013 |  |
| [CVE-2026-53041](https://patchblox.com/security/data/cve/CVE-2026-53041.md) | High | ocfs2: fix listxattr handling when the buffer is full | 7.1 | 0.0013 |  |
| [CVE-2026-53138](https://patchblox.com/security/data/cve/CVE-2026-53138.md) | High | drm/amd/display: Bound VBIOS record-chain walk loops | 7.1 | 0.0013 |  |
| [CVE-2026-64014](https://patchblox.com/security/data/cve/CVE-2026-64014.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 |  |
| [CVE-2026-31619](https://patchblox.com/security/data/cve/CVE-2026-31619.md) | High | ALSA: fireworks: bound device-supplied status before string array lookup | 7.3 | 0.0013 |  |
| [CVE-2026-31623](https://patchblox.com/security/data/cve/CVE-2026-31623.md) | High | net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() | 7.1 | 0.0013 |  |
| [CVE-2026-53150](https://patchblox.com/security/data/cve/CVE-2026-53150.md) | High | thunderbolt: Reject zero-length property entries in validator | 7.0 | 0.0013 |  |
| [CVE-2026-53168](https://patchblox.com/security/data/cve/CVE-2026-53168.md) | High | fuse: reject fuse_notify() pagecache ops on directories | 7.0 | 0.0013 |  |
| [CVE-2026-53181](https://patchblox.com/security/data/cve/CVE-2026-53181.md) | High | vsock/vmci: fix sk_ack_backlog leak on failed handshake | 7.0 | 0.0013 |  |
| [CVE-2026-53208](https://patchblox.com/security/data/cve/CVE-2026-53208.md) | High | Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig | 7.0 | 0.0013 |  |
| [CVE-2026-46230](https://patchblox.com/security/data/cve/CVE-2026-46230.md) | High | drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg | 8.8 | 0.0012 |  |
| [CVE-2026-53064](https://patchblox.com/security/data/cve/CVE-2026-53064.md) | High | dm cache: fix null-deref with concurrent writes in passthrough mode | 7.1 | 0.0012 |  |
| [CVE-2026-53021](https://patchblox.com/security/data/cve/CVE-2026-53021.md) | High | scsi: target: core: Fix integer overflow in UNMAP bounds check | 7.0 | 0.0012 |  |
| [CVE-2026-53040](https://patchblox.com/security/data/cve/CVE-2026-53040.md) | High | bpftool: ocfs2: validate bg_bits during freefrag scan (Zhengyuan Huang) [Orabug: 39621868] | 7.1 | 0.0012 |  |
| [CVE-2026-52927](https://patchblox.com/security/data/cve/CVE-2026-52927.md) | High | netfilter: ebtables: fix OOB read in compat_mtw_from_user | 7.8 | 0.0012 |  |
| [CVE-2026-64174](https://patchblox.com/security/data/cve/CVE-2026-64174.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: cfg80211: advance loop vars in cfg80211_me... | 8.8 | 0.0012 |  |
| [CVE-2026-46231](https://patchblox.com/security/data/cve/CVE-2026-46231.md) | High | batman-adv: bla: put backbone reference on failed claim hash insert | 7.1 | 0.0012 |  |
| [CVE-2026-46233](https://patchblox.com/security/data/cve/CVE-2026-46233.md) | High | batman-adv: bla: only purge non-released claims | 7.1 | 0.0012 |  |
| [CVE-2026-53255](https://patchblox.com/security/data/cve/CVE-2026-53255.md) | High | Bluetooth: MGMT: validate advertising TLV before type checks | 7.1 | 0.0012 |  |
| [CVE-2026-64237](https://patchblox.com/security/data/cve/CVE-2026-64237.md) | High | Input: elan_i2c - validate firmware size before use | 7.1 | 0.0012 |  |
| [CVE-2026-64034](https://patchblox.com/security/data/cve/CVE-2026-64034.md) | High | kernel-default: Security update for the Linux Kernel | 9.3 | 0.0012 |  |
| [CVE-2026-53073](https://patchblox.com/security/data/cve/CVE-2026-53073.md) | High | Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error | 8.8 | 0.0011 |  |
| [CVE-2026-52926](https://patchblox.com/security/data/cve/CVE-2026-52926.md) | High | batman-adv: clear current gateway during teardown | 7.8 | 0.0011 |  |
| [CVE-2026-52909](https://patchblox.com/security/data/cve/CVE-2026-52909.md) | High | ip6_vti: set netns_immutable on the fallback device. | 7.8 | 0.0011 |  |
| [CVE-2026-46319](https://patchblox.com/security/data/cve/CVE-2026-46319.md) | High | net/sched: act_ct: Only release RCU read lock after ct_ft | 8.8 | 0.0011 |  |
| [CVE-2026-53354](https://patchblox.com/security/data/cve/CVE-2026-53354.md) | High | arm64: errata: Mitigate TLBI errata on various Arm CPUs | 8.8 | 0.0010 |  |
| [CVE-2026-46227](https://patchblox.com/security/data/cve/CVE-2026-46227.md) | High | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 |  |
| [CVE-2026-46090](https://patchblox.com/security/data/cve/CVE-2026-46090.md) | High | ALSA: aloop: Fix peer runtime UAF during format-change stop | 7.8 | 0.0010 |  |
| [CVE-2026-53050](https://patchblox.com/security/data/cve/CVE-2026-53050.md) | High | quota: Fix race of dquot_scan_active() with quota deactivation | 7.8 | 0.0010 |  |
| [CVE-2026-53239](https://patchblox.com/security/data/cve/CVE-2026-53239.md) | High | xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() | 8.8 | 0.0010 |  |
| [CVE-2026-46107](https://patchblox.com/security/data/cve/CVE-2026-46107.md) | High | dm-thin: fix metadata refcount underflow | 7.8 | 0.0010 |  |
| [CVE-2026-53096](https://patchblox.com/security/data/cve/CVE-2026-53096.md) | High | bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path | 7.8 | 0.0010 |  |
| [CVE-2026-53265](https://patchblox.com/security/data/cve/CVE-2026-53265.md) | High | dm cache policy smq: check allocation under invalidate lock | 7.8 | 0.0010 |  |
| [CVE-2026-53192](https://patchblox.com/security/data/cve/CVE-2026-53192.md) | High | ALSA: timer: Fix UAF at snd_timer_user_params() | 8.8 | 0.0010 |  |
| [CVE-2024-26886](https://patchblox.com/security/data/cve/CVE-2024-26886.md) | Routine | kernel-uek64k: Bluetooth: af_bluetooth: Fix deadlock (Luiz Augusto von Dentz) [Orabug: 36544919] | 6.5 | 0.0049 |  |
| [CVE-2024-49925](https://patchblox.com/security/data/cve/CVE-2024-49925.md) | Routine | fbdev: efifb: Register sysfs groups through driver core | 5.5 | 0.0027 |  |
| [CVE-2024-27389](https://patchblox.com/security/data/cve/CVE-2024-27389.md) | Routine | kernel-uek64k: pstore: inode: Only d_invalidate() is needed (Kees Cook) [Orabug: 36598300] | 5.5 | 0.0024 |  |
| [CVE-2024-50012](https://patchblox.com/security/data/cve/CVE-2024-50012.md) | Routine | kernel-64kb: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386). | 5.5 | 0.0023 |  |
| [CVE-2026-63892](https://patchblox.com/security/data/cve/CVE-2026-63892.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2025-23131](https://patchblox.com/security/data/cve/CVE-2025-23131.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0020 |  |
| [CVE-2026-53047](https://patchblox.com/security/data/cve/CVE-2026-53047.md) | Routine | efi/capsule-loader: fix incorrect sizeof in phys array reallocation | 5.5 | 0.0018 |  |
| [CVE-2026-63822](https://patchblox.com/security/data/cve/CVE-2026-63822.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-63834](https://patchblox.com/security/data/cve/CVE-2026-63834.md) | Routine | batman-adv: tp_meter: restrict number of unacked list entries | 5.5 | 0.0017 |  |
| [CVE-2026-63835](https://patchblox.com/security/data/cve/CVE-2026-63835.md) | Routine | batman-adv: v: prevent OGM aggregation on disabled hardif | 4.4 | 0.0017 |  |
| [CVE-2026-63897](https://patchblox.com/security/data/cve/CVE-2026-63897.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-63900](https://patchblox.com/security/data/cve/CVE-2026-63900.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-52963](https://patchblox.com/security/data/cve/CVE-2026-52963.md) | Routine | ALSA: usb-audio: Bound MIDI endpoint descriptor scans | 5.5 | 0.0016 |  |
| [CVE-2026-53039](https://patchblox.com/security/data/cve/CVE-2026-53039.md) | Routine | kernel-uek: ocfs2: validate group add input before caching (Zhengyuan Huang) [Orabug: 39621864] | 5.5 | 0.0016 |  |
| [CVE-2026-53093](https://patchblox.com/security/data/cve/CVE-2026-53093.md) | Routine | wifi: brcmfmac: Fix error pointer dereference | 5.5 | 0.0016 |  |
| [CVE-2026-53128](https://patchblox.com/security/data/cve/CVE-2026-53128.md) | Routine | drbd: Balance RCU calls in drbd_adm_dump_devices() | 5.5 | 0.0016 |  |
| [CVE-2026-63948](https://patchblox.com/security/data/cve/CVE-2026-63948.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-63908](https://patchblox.com/security/data/cve/CVE-2026-63908.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-64094](https://patchblox.com/security/data/cve/CVE-2026-64094.md) | Routine | bpftool: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface (Sven Eckelmann) [Orabug: 39754757] | 5.5 | 0.0016 |  |
| [CVE-2026-53012](https://patchblox.com/security/data/cve/CVE-2026-53012.md) | Routine | nexthop: fix IPv6 route referencing IPv4 nexthop | 5.5 | 0.0014 |  |
| [CVE-2026-46196](https://patchblox.com/security/data/cve/CVE-2026-46196.md) | Routine | tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func() | 5.5 | 0.0013 |  |
| [CVE-2026-53295](https://patchblox.com/security/data/cve/CVE-2026-53295.md) | Routine | mailbox: add sanity check for channel array | 5.5 | 0.0013 |  |
| [CVE-2026-45841](https://patchblox.com/security/data/cve/CVE-2026-45841.md) | Routine | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 5.5 | 0.0013 |  |
| [CVE-2026-53227](https://patchblox.com/security/data/cve/CVE-2026-53227.md) | Routine | net: openvswitch: fix possible kfree_skb of ERR_PTR | 5.5 | 0.0013 |  |
| [CVE-2026-45844](https://patchblox.com/security/data/cve/CVE-2026-45844.md) | Routine | bpftool: netfilter: arp_tables: fix IEEE1394 ARP payload parsing (Pablo Neira Ayuso) [Orabug: 39451507] | 5.5 | 0.0013 |  |
| [CVE-2026-52948](https://patchblox.com/security/data/cve/CVE-2026-52948.md) | Routine | i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl | 5.5 | 0.0013 |  |
| [CVE-2026-53385](https://patchblox.com/security/data/cve/CVE-2026-53385.md) | Routine | vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write | 5.5 | 0.0013 |  |
| [CVE-2026-46128](https://patchblox.com/security/data/cve/CVE-2026-46128.md) | Routine | bpftool: ipmi: Check event message buffer response for bad data (Corey Minyard) [Orabug: 39460284] | 5.5 | 0.0013 |  |
| [CVE-2026-46146](https://patchblox.com/security/data/cve/CVE-2026-46146.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-46161](https://patchblox.com/security/data/cve/CVE-2026-46161.md) | Routine | bpftool: md/raid10: fix divide-by-zero in setup_geo() with zero far_copies (Junrui Luo) [Orabug: 39460415] | 5.5 | 0.0013 |  |
| [CVE-2026-46167](https://patchblox.com/security/data/cve/CVE-2026-46167.md) | Routine | kernel-uek: usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl (Greg Kroah-Hartman) [Orabug: 39460438] | 5.5 | 0.0013 |  |
| [CVE-2026-46214](https://patchblox.com/security/data/cve/CVE-2026-46214.md) | Routine | kernel-uek-debug-modules-extra: vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646] | 5.5 | 0.0013 |  |
| [CVE-2026-53252](https://patchblox.com/security/data/cve/CVE-2026-53252.md) | Routine | Bluetooth: fix memory leak in error path of hci_alloc_dev() | 5.5 | 0.0013 |  |
| [CVE-2026-53325](https://patchblox.com/security/data/cve/CVE-2026-53325.md) | Routine | agp/amd64: Fix broken error propagation in agp_amd64_probe() | 5.5 | 0.0013 |  |
| [CVE-2026-63990](https://patchblox.com/security/data/cve/CVE-2026-63990.md) | Routine | kernel-64kb: bonding: refuse to enslave CAN devices (bsc#1273027). | 5.5 | 0.0013 |  |
| [CVE-2026-64028](https://patchblox.com/security/data/cve/CVE-2026-64028.md) | Routine | kernel-uek64k: tracing: Avoid NULL return from hist_field_name() on truncation (David Carlier) [Orabug: 39784962] | 5.5 | 0.0013 |  |
| [CVE-2026-45838](https://patchblox.com/security/data/cve/CVE-2026-45838.md) | Routine | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 5.5 | 0.0013 |  |
| [CVE-2026-45842](https://patchblox.com/security/data/cve/CVE-2026-45842.md) | Routine | slip: reject VJ receive packets on instances with no rstate array | 5.5 | 0.0013 |  |
| [CVE-2026-53001](https://patchblox.com/security/data/cve/CVE-2026-53001.md) | Routine | kernel-uek: netfilter: xtables: restrict several matches to inet family (Pablo Neira Ayuso) [Orabug: 39621740] | 5.5 | 0.0013 |  |
| [CVE-2026-53134](https://patchblox.com/security/data/cve/CVE-2026-53134.md) | Routine | kernel-64kb: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819). | 5.5 | 0.0013 |  |
| [CVE-2026-53219](https://patchblox.com/security/data/cve/CVE-2026-53219.md) | Routine | netfilter: x_tables: avoid leaking percpu counter pointers | 5.5 | 0.0013 |  |
| [CVE-2026-46127](https://patchblox.com/security/data/cve/CVE-2026-46127.md) | Routine | kernel-uek-modules: RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() (Jason Gunthorpe) [Orabug: 39460277] | 5.5 | 0.0013 |  |
| [CVE-2026-46168](https://patchblox.com/security/data/cve/CVE-2026-46168.md) | Routine | mptcp: fix scheduling with atomic in timestamp sockopt | 5.5 | 0.0013 |  |
| [CVE-2026-46184](https://patchblox.com/security/data/cve/CVE-2026-46184.md) | Routine | kernel-uek64k-modules: sound: ua101: fix division by zero at probe (Seungju Cheon) [Orabug: 39460519] | 5.5 | 0.0013 |  |
| [CVE-2026-52984](https://patchblox.com/security/data/cve/CVE-2026-52984.md) | Routine | kernel-uek-container: net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677] | 5.5 | 0.0013 |  |
| [CVE-2026-53060](https://patchblox.com/security/data/cve/CVE-2026-53060.md) | Routine | dm cache metadata: fix memory leak on metadata abort retry | 5.5 | 0.0013 |  |
| [CVE-2026-64090](https://patchblox.com/security/data/cve/CVE-2026-64090.md) | Routine | bpftool: batman-adv: tt: avoid empty VLAN responses (Sven Eckelmann) [Orabug: 39754744] | 5.5 | 0.0013 |  |
| [CVE-2026-64092](https://patchblox.com/security/data/cve/CVE-2026-64092.md) | Routine | kernel-uek64k: batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown (Sven Eckelmann) [Orabug: 39784982] | 5.5 | 0.0013 |  |
| [CVE-2026-45846](https://patchblox.com/security/data/cve/CVE-2026-45846.md) | Routine | bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() | 5.5 | 0.0013 |  |
| [CVE-2026-45834](https://patchblox.com/security/data/cve/CVE-2026-45834.md) | Routine | Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() | 5.5 | 0.0013 |  |
| [CVE-2026-45835](https://patchblox.com/security/data/cve/CVE-2026-45835.md) | Routine | Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() | 5.5 | 0.0013 |  |
| [CVE-2026-45836](https://patchblox.com/security/data/cve/CVE-2026-45836.md) | Routine | Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() | 5.5 | 0.0013 |  |
| [CVE-2026-46151](https://patchblox.com/security/data/cve/CVE-2026-46151.md) | Routine | usb: usblp: fix heap leak in IEEE 1284 device ID via short response | 5.5 | 0.0013 |  |
| [CVE-2026-53177](https://patchblox.com/security/data/cve/CVE-2026-53177.md) | Routine | bnxt_en: Fix NULL pointer dereference | 5.5 | 0.0013 |  |
| [CVE-2026-53245](https://patchblox.com/security/data/cve/CVE-2026-53245.md) | Routine | net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr | 5.5 | 0.0013 |  |
| [CVE-2026-46044](https://patchblox.com/security/data/cve/CVE-2026-46044.md) | Routine | kernel-uek-modules-extra: ipmi:ssif: Clean up kthread on errors (Corey Minyard) [Orabug: 39452264] | 5.5 | 0.0012 |  |
| [CVE-2026-46108](https://patchblox.com/security/data/cve/CVE-2026-46108.md) | Routine | kernel-uek: ipmi:si: Return state to normal if message allocation fails (Corey Minyard) [Orabug: 39460202] | 5.5 | 0.0012 |  |
| [CVE-2026-46276](https://patchblox.com/security/data/cve/CVE-2026-46276.md) | Routine | bpftool: drm/amdgpu: fix zero-size GDS range init on RDNA4 (Arjan van de Ven) [Orabug: 39524543] | 5.5 | 0.0012 |  |
| [CVE-2026-46292](https://patchblox.com/security/data/cve/CVE-2026-46292.md) | Routine | pmdomain: core: Fix detach procedure for virtual devices in genpd | 5.5 | 0.0012 |  |
| [CVE-2026-52916](https://patchblox.com/security/data/cve/CVE-2026-52916.md) | Routine | batman-adv: frag: disallow unicast fragment in fragment | 5.5 | 0.0012 |  |
| [CVE-2026-52985](https://patchblox.com/security/data/cve/CVE-2026-52985.md) | Routine | kernel-uek-debug-devel: netdevsim: zero initialize struct iphdr in dummy sk_buff (Nikola Z | 5.5 | 0.0012 |  |
| [CVE-2026-53048](https://patchblox.com/security/data/cve/CVE-2026-53048.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  gfs2: prevent NULL pointer dereference during un... | 5.5 | 0.0012 |  |
| [CVE-2026-53061](https://patchblox.com/security/data/cve/CVE-2026-53061.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dm cache: fix dirty mapping checking in passthro... | 5.5 | 0.0012 |  |
| [CVE-2026-53135](https://patchblox.com/security/data/cve/CVE-2026-53135.md) | Routine | drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs | 5.5 | 0.0012 |  |
| [CVE-2026-53163](https://patchblox.com/security/data/cve/CVE-2026-53163.md) | Routine | locking/rtmutex: Skip remove_waiter() when waiter is not enqueued | 5.5 | 0.0012 |  |
| [CVE-2026-53213](https://patchblox.com/security/data/cve/CVE-2026-53213.md) | Routine | drm/vc4: fix krealloc() memory leak | 5.5 | 0.0012 |  |
| [CVE-2026-53238](https://patchblox.com/security/data/cve/CVE-2026-53238.md) | Routine | netlabel: validate unlabeled address and mask attribute lengths | 5.5 | 0.0012 |  |
| [CVE-2026-53287](https://patchblox.com/security/data/cve/CVE-2026-53287.md) | Routine | audit: fix incorrect inheritable capability in CAPSET records | 5.5 | 0.0012 |  |
| [CVE-2026-53291](https://patchblox.com/security/data/cve/CVE-2026-53291.md) | Routine | ALSA: hda/conexant: Fix missing error check for jack detection | 5.5 | 0.0012 |  |
| [CVE-2026-53337](https://patchblox.com/security/data/cve/CVE-2026-53337.md) | Routine | net: bonding: fix NULL pointer dereference in bond_do_ioctl() | 5.5 | 0.0012 |  |
| [CVE-2026-64012](https://patchblox.com/security/data/cve/CVE-2026-64012.md) | Routine | kernel-64kb: net/sched: sch_sfb: Replace direct dequeue call with peek and qdisc_dequeue_peeked (bsc#1273764). | 5.5 | 0.0012 |  |
| [CVE-2026-64155](https://patchblox.com/security/data/cve/CVE-2026-64155.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: ath11k: fix error path leaks in some WMI W... | 5.5 | 0.0012 |  |
| [CVE-2026-64220](https://patchblox.com/security/data/cve/CVE-2026-64220.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  device property: set fwnode->secondary to NULL i... | 5.5 | 0.0012 |  |
| [CVE-2026-43496](https://patchblox.com/security/data/cve/CVE-2026-43496.md) | Routine | net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked | 5.5 | 0.0012 |  |
| [CVE-2026-63868](https://patchblox.com/security/data/cve/CVE-2026-63868.md) | Routine | kernel-64kb: net: garp: fix unsigned integer underflow in garp_pdu_parse_attr (bsc#1272497). | 5.5 | 0.0012 |  |
| [CVE-2026-52930](https://patchblox.com/security/data/cve/CVE-2026-52930.md) | Routine | ipc/shm: serialize orphan cleanup with shm_nattch updates | 5.5 | 0.0012 |  |
| [CVE-2026-53269](https://patchblox.com/security/data/cve/CVE-2026-53269.md) | Routine | kernel-64kb: netfilter: synproxy: add mutex to guard hook reference counting (bsc#1269579). | 5.5 | 0.0012 |  |
| [CVE-2026-64166](https://patchblox.com/security/data/cve/CVE-2026-64166.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  firmware: arm_ffa: Check for NULL FF-A ID table... | 5.5 | 0.0012 |  |
| [CVE-2026-46220](https://patchblox.com/security/data/cve/CVE-2026-46220.md) | Routine | bpftool: drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission (John B | 5.5 | 0.0012 |  |
| [CVE-2026-53080](https://patchblox.com/security/data/cve/CVE-2026-53080.md) | Routine | net/sched: cls_fw: fix NULL dereference of "old" filters before change() | 5.5 | 0.0012 |  |
| [CVE-2026-53263](https://patchblox.com/security/data/cve/CVE-2026-53263.md) | Routine | 6lowpan: fix off-by-one in multicast context address compression | 5.5 | 0.0012 |  |
| [CVE-2026-64185](https://patchblox.com/security/data/cve/CVE-2026-64185.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  sysfs: don't remove existing directory on update... | 5.5 | 0.0012 |  |
| [CVE-2026-64240](https://patchblox.com/security/data/cve/CVE-2026-64240.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  media: rc: igorplugusb: fix control request setu... | 5.5 | 0.0012 |  |
| [CVE-2026-53074](https://patchblox.com/security/data/cve/CVE-2026-53074.md) | Routine | bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb | 6.4 | 0.0011 |  |
| [CVE-2026-52921](https://patchblox.com/security/data/cve/CVE-2026-52921.md) | Routine | netfilter: ipset: stop hash:* range iteration at end | 5.5 | 0.0011 |  |
| [CVE-2026-52925](https://patchblox.com/security/data/cve/CVE-2026-52925.md) | Routine | vrf: Fix a potential NPD when removing a port from a VRF | 5.5 | 0.0011 |  |
| [CVE-2026-52928](https://patchblox.com/security/data/cve/CVE-2026-52928.md) | Routine | af_unix: Reject SIOCATMARK on non-stream sockets | 5.5 | 0.0011 |  |
| [CVE-2026-64164](https://patchblox.com/security/data/cve/CVE-2026-64164.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: tracepoints: fix sleep while in atomic co... | 5.5 | 0.0011 |  |
| [CVE-2026-64170](https://patchblox.com/security/data/cve/CVE-2026-64170.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  spi: qup: fix error pointer deref after DMA setu... | 5.5 | 0.0011 |  |
| [CVE-2026-64173](https://patchblox.com/security/data/cve/CVE-2026-64173.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tracing: Do not call map->ops->elt_free() if elt... | 5.5 | 0.0011 |  |
| [CVE-2026-64177](https://patchblox.com/security/data/cve/CVE-2026-64177.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  phonet/pep: disable BH around forwarded sk_recei... | 5.5 | 0.0011 |  |
| [CVE-2026-53304](https://patchblox.com/security/data/cve/CVE-2026-53304.md) | Routine | scsi: sg: Resolve soft lockup issue when opening /dev/sgX | 5.5 | 0.0010 |  |
| [CVE-2026-46159](https://patchblox.com/security/data/cve/CVE-2026-46159.md) | Routine | btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak | 5.5 | 0.0010 |  |
| [CVE-2026-53037](https://patchblox.com/security/data/cve/CVE-2026-53037.md) | Routine | HID: usbhid: fix deadlock in hid_post_reset() | 5.5 | 0.0010 |  |
| [CVE-2026-53352](https://patchblox.com/security/data/cve/CVE-2026-53352.md) | Routine | signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() | 5.5 | 0.0010 |  |
| [CVE-2026-46187](https://patchblox.com/security/data/cve/CVE-2026-46187.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 4.7 | 0.0010 |  |
| [CVE-2026-46252](https://patchblox.com/security/data/cve/CVE-2026-46252.md) | Routine | regulator: core: fix locking in regulator_resolve_supply() error path | 5.5 | 0.0009 |  |

---

Data as of 2026-11-12T13:55:20Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.