{
  "fix": "OPENSUSE-SU-2026:21388-1",
  "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21388-1",
  "summary": "OPENSUSE-SU-2026:21388-1, released July 21, 2026, fixes 252 CVEs across 13 products. 2 of them are being exploited (CVE-2026-53266); 2 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 13 packages",
  "released": "2026-07-21T08:27:32Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2026-53266, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 252,
  "exploitedCveCount": 2,
  "kevCveCount": 2,
  "ransomwareCveCount": 0,
  "maxEpss": 0.94194,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/openSUSE-SU-2026:21388-1",
  "appliesTo": [
    {
      "product": "dtb-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/dtb-aarch64",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1",
      "supported": true
    },
    {
      "product": "kernel-64kb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1",
      "supported": true
    },
    {
      "product": "kernel-azure",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-azure",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1.160000.2.17",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1",
      "supported": true
    },
    {
      "product": "kernel-kvmsmall",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-kvmsmall",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1",
      "supported": true
    },
    {
      "product": "kernel-obs-qa",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-qa",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1",
      "supported": true
    },
    {
      "product": "kernel-rt",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1",
      "supported": true
    },
    {
      "product": "kernel-zfcpdump",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.36.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-53266",
      "url": "https://patchblox.com/security/cve/CVE-2026-53266",
      "title": "netfilter: bridge: make ebt_snat ARP rewrite writable",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00934,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53362",
      "url": "https://patchblox.com/security/cve/CVE-2026-53362",
      "title": "ipv6: account for fraggap on the paged allocation path",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00709,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43407",
      "url": "https://patchblox.com/security/cve/CVE-2026-43407",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: Fix potential out-of-bounds access in c...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00656,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43406",
      "url": "https://patchblox.com/security/cve/CVE-2026-43406",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: prevent potential out-of-bounds reads i...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00613,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-10263",
      "url": "https://patchblox.com/security/cve/CVE-2025-10263",
      "title": "ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.3,
      "epss": 0.00544,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43383",
      "url": "https://patchblox.com/security/cve/CVE-2026-43383",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/tcp-md5: Fix MAC comparison to be constant-t...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.4,
      "epss": 0.00541,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43465",
      "url": "https://patchblox.com/security/cve/CVE-2026-43465",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: RX, Fix XDP multi-buf frag counting f...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00537,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53215",
      "url": "https://patchblox.com/security/cve/CVE-2026-53215",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.00502,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53216",
      "url": "https://patchblox.com/security/cve/CVE-2026-53216",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.00502,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46266",
      "url": "https://patchblox.com/security/cve/CVE-2026-46266",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  inet: RAW sockets using IPPROTO_RAW MUST drop in...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00465,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43384",
      "url": "https://patchblox.com/security/cve/CVE-2026-43384",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/tcp-ao: Fix MAC comparison to be constant-ti...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52993",
      "url": "https://patchblox.com/security/cve/CVE-2026-52993",
      "title": "tipc: fix double-free in tipc_buf_append()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00404,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52955",
      "url": "https://patchblox.com/security/cve/CVE-2026-52955",
      "title": "kernel-uek64k-core: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53086",
      "url": "https://patchblox.com/security/cve/CVE-2026-53086",
      "title": "net: bcmgenet: fix racing timeout handler",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00304,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53075",
      "url": "https://patchblox.com/security/cve/CVE-2026-53075",
      "title": "ppp: require CAP_NET_ADMIN in target netns for unattached ioctls",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45899",
      "url": "https://patchblox.com/security/cve/CVE-2026-45899",
      "title": "ext4: drop extent cache when splitting extent fails",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53036",
      "url": "https://patchblox.com/security/cve/CVE-2026-53036",
      "title": "bpf, arm64: Fix off-by-one in check_imm signed range check",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53053",
      "url": "https://patchblox.com/security/cve/CVE-2026-53053",
      "title": "iommu/amd: Fix clone_alias() to use the original device\u0027s devid",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52919",
      "url": "https://patchblox.com/security/cve/CVE-2026-52919",
      "title": "batman-adv: fix tp_meter counter underflow during shutdown",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43284",
      "url": "https://patchblox.com/security/cve/CVE-2026-43284",
      "title": "xfrm: esp: avoid in-place decrypt on shared skb frags",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.94194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46242",
      "url": "https://patchblox.com/security/cve/CVE-2026-46242",
      "title": "kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.04576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53176",
      "url": "https://patchblox.com/security/cve/CVE-2026-53176",
      "title": "IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00761,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52924",
      "url": "https://patchblox.com/security/cve/CVE-2026-52924",
      "title": "sctp: purge outqueue on stale COOKIE-ECHO handling",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00659,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46331",
      "url": "https://patchblox.com/security/cve/CVE-2026-46331",
      "title": "net/sched: fix pedit partial COW leading to page cache corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00639,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43083",
      "url": "https://patchblox.com/security/cve/CVE-2026-43083",
      "title": "net: ioam6: fix OOB and missing lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.006,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43405",
      "url": "https://patchblox.com/security/cve/CVE-2026-43405",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  libceph: Use u32 for non-negative values in ceph...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00598,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43101",
      "url": "https://patchblox.com/security/cve/CVE-2026-43101",
      "title": "ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31414",
      "url": "https://patchblox.com/security/cve/CVE-2026-31414",
      "title": "netfilter: nf_conntrack_expect: use expect-\u003Ehelper",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00581,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43452",
      "url": "https://patchblox.com/security/cve/CVE-2026-43452",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: x_tables: guard option walkers agains...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.2,
      "epss": 0.00541,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43194",
      "url": "https://patchblox.com/security/cve/CVE-2026-43194",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: consume xmit errors of GSO frames  udpgro_f...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00533,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46119",
      "url": "https://patchblox.com/security/cve/CVE-2026-46119",
      "title": "libceph: Fix slab-out-of-bounds access in auth message processing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46185",
      "url": "https://patchblox.com/security/cve/CVE-2026-46185",
      "title": "smb/client: fix out-of-bounds read in symlink_data()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43226",
      "url": "https://patchblox.com/security/cve/CVE-2026-43226",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/rds: No shortcut out of RDS_CONN_ERROR  RDS...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52954",
      "url": "https://patchblox.com/security/cve/CVE-2026-52954",
      "title": "libceph: handle rbtree insertion error in decode_choose_args()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52957",
      "url": "https://patchblox.com/security/cve/CVE-2026-52957",
      "title": "libceph: Fix potential null-ptr-deref in decode_choose_args()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46037",
      "url": "https://patchblox.com/security/cve/CVE-2026-46037",
      "title": "ipv4: icmp: validate reply type before using icmp_pointers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00512,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43373",
      "url": "https://patchblox.com/security/cve/CVE-2026-43373",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: ncsi: fix skb leak in error paths  Early re...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46024",
      "url": "https://patchblox.com/security/cve/CVE-2026-46024",
      "title": "libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43074",
      "url": "https://patchblox.com/security/cve/CVE-2026-43074",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00482,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53229",
      "url": "https://patchblox.com/security/cve/CVE-2026-53229",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: xsk: Fix DMA and xdp_frame leak on XD...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46124",
      "url": "https://patchblox.com/security/cve/CVE-2026-46124",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  isofs: validate block number from NFS file handl...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00476,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43158",
      "url": "https://patchblox.com/security/cve/CVE-2026-43158",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: fix freemap adjustments when adding xattrs...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00469,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43187",
      "url": "https://patchblox.com/security/cve/CVE-2026-43187",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfs: delete attr leaf freemap entries when empty...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00469,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43233",
      "url": "https://patchblox.com/security/cve/CVE-2026-43233",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46289",
      "url": "https://patchblox.com/security/cve/CVE-2026-46289",
      "title": "lib/scatterlist: fix length calculations in extract_kvec_to_sg",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43057",
      "url": "https://patchblox.com/security/cve/CVE-2026-43057",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: correctly handle tunneled traffic on IPV6_C...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00437,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43336",
      "url": "https://patchblox.com/security/cve/CVE-2026-43336",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  lib/crypto: chacha: Zeroize permuted_state befor...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00425,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46244",
      "url": "https://patchblox.com/security/cve/CVE-2026-46244",
      "title": "netfilter: nft_inner: Fix IPv6 inner_thoff desync",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.1,
      "epss": 0.00418,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43199",
      "url": "https://patchblox.com/security/cve/CVE-2026-43199",
      "title": "net/mlx5e: Fix \u0022scheduling while atomic\u0022 in IPsec MAC address query",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00415,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31450",
      "url": "https://patchblox.com/security/cve/CVE-2026-31450",
      "title": "ext4: publish jinode after initialization",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00412,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43466",
      "url": "https://patchblox.com/security/cve/CVE-2026-43466",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Fix DMA FIFO desync on error CQE SQ r...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.2,
      "epss": 0.00412,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53178",
      "url": "https://patchblox.com/security/cve/CVE-2026-53178",
      "title": "staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00405,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43469",
      "url": "https://patchblox.com/security/cve/CVE-2026-43469",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xprtrdma: Decrement re_receiving on the early ex...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00399,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53049",
      "url": "https://patchblox.com/security/cve/CVE-2026-53049",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00388,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53217",
      "url": "https://patchblox.com/security/cve/CVE-2026-53217",
      "title": "net: mvpp2: sync RX data at the hardware packet offset",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.6,
      "epss": 0.00384,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43139",
      "url": "https://patchblox.com/security/cve/CVE-2026-43139",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm6: fix uninitialized saddr in xfrm6_get_sadd...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.6,
      "epss": 0.00375,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43345",
      "url": "https://patchblox.com/security/cve/CVE-2026-43345",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: ipa: fix event ring index not programmed fo...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00353,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-39894",
      "url": "https://patchblox.com/security/cve/CVE-2025-39894",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: br_netfilter: do not check confirmed...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00332,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43502",
      "url": "https://patchblox.com/security/cve/CVE-2026-43502",
      "title": "net/rds: handle zerocopy send cleanup before the message is queued",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00324,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31771",
      "url": "https://patchblox.com/security/cve/CVE-2026-31771",
      "title": "Bluetooth: hci_event: move wake reason storage into validated event handlers",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.0032,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52943",
      "url": "https://patchblox.com/security/cve/CVE-2026-52943",
      "title": "net: skbuff: fix missing zerocopy reference in pskb_carve helpers",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43198",
      "url": "https://patchblox.com/security/cve/CVE-2026-43198",
      "title": "tcp: fix potential race in tcp_v6_syn_recv_sock()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00298,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46099",
      "url": "https://patchblox.com/security/cve/CVE-2026-46099",
      "title": "net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00288,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43213",
      "url": "https://patchblox.com/security/cve/CVE-2026-43213",
      "title": "wifi: rtw89: pci: validate sequence number of TX release report",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00283,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46320",
      "url": "https://patchblox.com/security/cve/CVE-2026-46320",
      "title": "tap: free page on error paths in tap_get_user_xdp()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.4,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31663",
      "url": "https://patchblox.com/security/cve/CVE-2026-31663",
      "title": "xfrm: hold dev ref until after transport_finish NF_HOOK",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00224,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52923",
      "url": "https://patchblox.com/security/cve/CVE-2026-52923",
      "title": "ipc: limit next_id allocation to the valid ID range",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45933",
      "url": "https://patchblox.com/security/cve/CVE-2026-45933",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Preserve id of register in sync_linked_regs...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43456",
      "url": "https://patchblox.com/security/cve/CVE-2026-43456",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:\n\nThe following security issues we...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45861",
      "url": "https://patchblox.com/security/cve/CVE-2026-45861",
      "title": "gfs2: Fix slab-use-after-free in qd_put",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45940",
      "url": "https://patchblox.com/security/cve/CVE-2026-45940",
      "title": "net: stmmac: fix oops when split header is enabled",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53081",
      "url": "https://patchblox.com/security/cve/CVE-2026-53081",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Enforce regsafe base id consistency for BPF...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43303",
      "url": "https://patchblox.com/security/cve/CVE-2026-43303",
      "title": "mm/page_alloc: clear page-\u003Eprivate in free_pages_prepare()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46253",
      "url": "https://patchblox.com/security/cve/CVE-2026-46253",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  pstore/ram: fix buffer overflow in persistent_ra...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31693",
      "url": "https://patchblox.com/security/cve/CVE-2026-31693",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: some missing initializations on replay  In...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31674",
      "url": "https://patchblox.com/security/cve/CVE-2026-31674",
      "title": "netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43248",
      "url": "https://patchblox.com/security/cve/CVE-2026-43248",
      "title": "vhost: move vdpa group bound check to vhost_vdpa",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31680",
      "url": "https://patchblox.com/security/cve/CVE-2026-31680",
      "title": "net: ipv6: flowlabel: defer exclusive option free until RCU teardown",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53306",
      "url": "https://patchblox.com/security/cve/CVE-2026-53306",
      "title": "tty: hvc_iucv: fix off-by-one in number of supported devices",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43374",
      "url": "https://patchblox.com/security/cve/CVE-2026-43374",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: nexthop: fix percpu use-after-free in remov...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46111",
      "url": "https://patchblox.com/security/cve/CVE-2026-46111",
      "title": "Bluetooth: hci_conn: fix potential UAF in create_big_sync",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43339",
      "url": "https://patchblox.com/security/cve/CVE-2026-43339",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv6: prevent possible UaF in addrconf_permanent_...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.1,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43298",
      "url": "https://patchblox.com/security/cve/CVE-2026-43298",
      "title": "drm/amdgpu: Skip vcn poison irq release on VF",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43491",
      "url": "https://patchblox.com/security/cve/CVE-2026-43491",
      "title": "net: qrtr: ns: Limit the maximum server registration per node",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52933",
      "url": "https://patchblox.com/security/cve/CVE-2026-52933",
      "title": "io_uring/poll: fix signed comparison in io_poll_get_ownership()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53194",
      "url": "https://patchblox.com/security/cve/CVE-2026-53194",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  USB: serial: kl5kusb105: fix bulk-out buffer ove...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45920",
      "url": "https://patchblox.com/security/cve/CVE-2026-45920",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: fix dirtyclusters double decrement on fs s...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46069",
      "url": "https://patchblox.com/security/cve/CVE-2026-46069",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46076",
      "url": "https://patchblox.com/security/cve/CVE-2026-46076",
      "title": "KVM: nSVM: Raise #UD if unhandled VMMCALL isn\u0027t intercepted by L1",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53090",
      "url": "https://patchblox.com/security/cve/CVE-2026-53090",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix ld_{abs,ind} failure path analysis in s...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43128",
      "url": "https://patchblox.com/security/cve/CVE-2026-43128",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/umem: Fix double dma_buf_unpin in failure p...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43205",
      "url": "https://patchblox.com/security/cve/CVE-2026-43205",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dpaa2-switch: validate num_ifs to prevent out-of...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52962",
      "url": "https://patchblox.com/security/cve/CVE-2026-52962",
      "title": "ceph: fix a buffer leak in __ceph_setxattr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43260",
      "url": "https://patchblox.com/security/cve/CVE-2026-43260",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bnxt_en: Fix RSS context delete logic  We need t...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46162",
      "url": "https://patchblox.com/security/cve/CVE-2026-46162",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ice: fix double free in ice_sf_eth_activate() er...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53281",
      "url": "https://patchblox.com/security/cve/CVE-2026-53281",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\niommu/vt-d: Avoid NULL pointer dereference or ref...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31452",
      "url": "https://patchblox.com/security/cve/CVE-2026-31452",
      "title": "ext4: convert inline data to extents when truncate exceeds inline size",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31469",
      "url": "https://patchblox.com/security/cve/CVE-2026-31469",
      "title": "virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43093",
      "url": "https://patchblox.com/security/cve/CVE-2026-43093",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: tighten UMEM headroom validation to account...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46322",
      "url": "https://patchblox.com/security/cve/CVE-2026-46322",
      "title": "tun: free page on build_skb failure in tun_xdp_one()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46172",
      "url": "https://patchblox.com/security/cve/CVE-2026-46172",
      "title": "kernel-uek64k: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43450",
      "url": "https://patchblox.com/security/cve/CVE-2026-43450",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: f...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46173",
      "url": "https://patchblox.com/security/cve/CVE-2026-46173",
      "title": "exit: prevent preemption of oopsing TASK_DEAD task",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43028",
      "url": "https://patchblox.com/security/cve/CVE-2026-43028",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: x_tables: ensure names are nul-termin...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46078",
      "url": "https://patchblox.com/security/cve/CVE-2026-46078",
      "title": "erofs: fix the out-of-bounds nameoff handling for trailing dirents",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45840",
      "url": "https://patchblox.com/security/cve/CVE-2026-45840",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45894",
      "url": "https://patchblox.com/security/cve/CVE-2026-45894",
      "title": "iommu/vt-d: Clear Present bit before tearing down PASID entry",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23248",
      "url": "https://patchblox.com/security/cve/CVE-2026-23248",
      "title": "perf/core: Fix refcount bug and potential UAF in perf_mmap",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31580",
      "url": "https://patchblox.com/security/cve/CVE-2026-31580",
      "title": "bcache: fix cached_dev.sb_bio use-after-free and crash",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45862",
      "url": "https://patchblox.com/security/cve/CVE-2026-45862",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Flush cache for PASID table before u...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45999",
      "url": "https://patchblox.com/security/cve/CVE-2026-45999",
      "title": "erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46116",
      "url": "https://patchblox.com/security/cve/CVE-2026-46116",
      "title": "xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31502",
      "url": "https://patchblox.com/security/cve/CVE-2026-31502",
      "title": "team: fix header_ops type confusion with non-Ethernet ports",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31673",
      "url": "https://patchblox.com/security/cve/CVE-2026-31673",
      "title": "af_unix: read UNIX_DIAG_VFS data under unix_state_lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45891",
      "url": "https://patchblox.com/security/cve/CVE-2026-45891",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: hns3: fix double free issue for tx spare bu...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46065",
      "url": "https://patchblox.com/security/cve/CVE-2026-46065",
      "title": "fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46150",
      "url": "https://patchblox.com/security/cve/CVE-2026-46150",
      "title": "fanotify: fix false positive on permission events",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46178",
      "url": "https://patchblox.com/security/cve/CVE-2026-46178",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53133",
      "url": "https://patchblox.com/security/cve/CVE-2026-53133",
      "title": "RDMA/umem: Fix truncation for block sizes \u003E= 4G",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31479",
      "url": "https://patchblox.com/security/cve/CVE-2026-31479",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ndrm/xe: always keep track of remap prev/next\nDuri...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43403",
      "url": "https://patchblox.com/security/cve/CVE-2026-43403",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nsfs: tighten permission checks for ns iteration...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31743",
      "url": "https://patchblox.com/security/cve/CVE-2026-31743",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nvmem: zynqmp_nvmem: Fix buffer size in DMA and...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46053",
      "url": "https://patchblox.com/security/cve/CVE-2026-46053",
      "title": "net: rds: fix MR cleanup on copy error",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46093",
      "url": "https://patchblox.com/security/cve/CVE-2026-46093",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/vmalloc: take vmap_purge_lock in shrinker  de...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31555",
      "url": "https://patchblox.com/security/cve/CVE-2026-31555",
      "title": "futex: Clear stale exiting pointer in futex_lock_pi() retry path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53167",
      "url": "https://patchblox.com/security/cve/CVE-2026-53167",
      "title": "fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53249",
      "url": "https://patchblox.com/security/cve/CVE-2026-53249",
      "title": "ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46120",
      "url": "https://patchblox.com/security/cve/CVE-2026-46120",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46160",
      "url": "https://patchblox.com/security/cve/CVE-2026-46160",
      "title": "btrfs: fix missing last_unlink_trans update when removing a directory",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43015",
      "url": "https://patchblox.com/security/cve/CVE-2026-43015",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: macb: fix clk handling on PCI glue driver r...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43016",
      "url": "https://patchblox.com/security/cve/CVE-2026-43016",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: sockmap: Fix use-after-free of sk-\u003Esk_socke...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53286",
      "url": "https://patchblox.com/security/cve/CVE-2026-53286",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: fix double free and use-after-free in aux...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43386",
      "url": "https://patchblox.com/security/cve/CVE-2026-43386",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  staging: rtl8723bs: fix potential out-of-bounds...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43449",
      "url": "https://patchblox.com/security/cve/CVE-2026-43449",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_s...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53041",
      "url": "https://patchblox.com/security/cve/CVE-2026-53041",
      "title": "ocfs2: fix listxattr handling when the buffer is full",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53156",
      "url": "https://patchblox.com/security/cve/CVE-2026-53156",
      "title": "nvmem: core: fix use-after-free bugs in error paths",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53168",
      "url": "https://patchblox.com/security/cve/CVE-2026-53168",
      "title": "fuse: reject fuse_notify() pagecache ops on directories",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31665",
      "url": "https://patchblox.com/security/cve/CVE-2026-31665",
      "title": "netfilter: nft_ct: fix use-after-free in timeout object destroy",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31492",
      "url": "https://patchblox.com/security/cve/CVE-2026-31492",
      "title": "RDMA/irdma: Initialize free_qp completion before using it",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45912",
      "url": "https://patchblox.com/security/cve/CVE-2026-45912",
      "title": "ext4: don\u0027t cache extent during splitting extent",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45983",
      "url": "https://patchblox.com/security/cve/CVE-2026-45983",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: never defer requests during idmap lookup...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45985",
      "url": "https://patchblox.com/security/cve/CVE-2026-45985",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: don\u0027t set EXT4_GET_BLOCKS_CONVERT when spl...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53021",
      "url": "https://patchblox.com/security/cve/CVE-2026-53021",
      "title": "scsi: target: core: Fix integer overflow in UNMAP bounds check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53040",
      "url": "https://patchblox.com/security/cve/CVE-2026-53040",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.1,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46259",
      "url": "https://patchblox.com/security/cve/CVE-2026-46259",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  procfs: fix missing RCU protection when reading...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.4,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53078",
      "url": "https://patchblox.com/security/cve/CVE-2026-53078",
      "title": "bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43283",
      "url": "https://patchblox.com/security/cve/CVE-2026-43283",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: ethernet: ec_bhf: Fix dma_free_coherent() d...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53262",
      "url": "https://patchblox.com/security/cve/CVE-2026-53262",
      "title": "l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52908",
      "url": "https://patchblox.com/security/cve/CVE-2026-52908",
      "title": "RDMA: During rereg_mr ensure that REREG_ACCESS is compatible",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43458",
      "url": "https://patchblox.com/security/cve/CVE-2026-43458",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  serial: caif: hold tty-\u003Elink reference in ldisc_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53272",
      "url": "https://patchblox.com/security/cve/CVE-2026-53272",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: fix use-after-free on sbi-\u003Esync_decompres...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45837",
      "url": "https://patchblox.com/security/cve/CVE-2026-45837",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix use-after-free in arena_vm_close on for...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46328",
      "url": "https://patchblox.com/security/cve/CVE-2026-46328",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  apparmor: fix rlimit for posix cpu timers  Posix...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.3,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52909",
      "url": "https://patchblox.com/security/cve/CVE-2026-52909",
      "title": "ip6_vti: set netns_immutable on the fallback device.",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00113,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52975",
      "url": "https://patchblox.com/security/cve/CVE-2026-52975",
      "title": "bonding: 3ad: implement proper RCU rules for port-\u003Eaggregator",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46319",
      "url": "https://patchblox.com/security/cve/CVE-2026-46319",
      "title": "net/sched: act_ct: Only release RCU read lock after ct_ft",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46227",
      "url": "https://patchblox.com/security/cve/CVE-2026-46227",
      "title": "sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53050",
      "url": "https://patchblox.com/security/cve/CVE-2026-53050",
      "title": "quota: Fix race of dquot_scan_active() with quota deactivation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46112",
      "url": "https://patchblox.com/security/cve/CVE-2026-46112",
      "title": "RDMA/hns: Fix unlocked call to hns_roce_qp_remove()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23451",
      "url": "https://patchblox.com/security/cve/CVE-2026-23451",
      "title": "kernel-livepatch-SLE15-SP6_Update_31: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:\n\nThe following security issues we...",
      "priority": "Routine",
      "epss": 0.00458,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31429",
      "url": "https://patchblox.com/security/cve/CVE-2026-31429",
      "title": "net: skb: fix cross-cache free of KFENCE-allocated skb head",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.6,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40341",
      "url": "https://patchblox.com/security/cve/CVE-2025-40341",
      "title": "futex: Don\u0027t leak robust_list pointer on exec race",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45901",
      "url": "https://patchblox.com/security/cve/CVE-2026-45901",
      "title": "netfilter: nf_tables: revert commit_mutex usage in reset path",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45961",
      "url": "https://patchblox.com/security/cve/CVE-2026-45961",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  gfs2: fix memory leaks in gfs2_fill_super error...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43191",
      "url": "https://patchblox.com/security/cve/CVE-2026-43191",
      "title": "drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52980",
      "url": "https://patchblox.com/security/cve/CVE-2026-52980",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched/fair: Clear rel_deadline when initializing...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53039",
      "url": "https://patchblox.com/security/cve/CVE-2026-53039",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53258",
      "url": "https://patchblox.com/security/cve/CVE-2026-53258",
      "title": "wifi: fix leak if split 6 GHz scanning fails",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45848",
      "url": "https://patchblox.com/security/cve/CVE-2026-45848",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  apparmor: fix NULL sock in aa_sock_file_perm  De...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45857",
      "url": "https://patchblox.com/security/cve/CVE-2026-45857",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: csiostor: Fix dereference of null pointer...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45858",
      "url": "https://patchblox.com/security/cve/CVE-2026-45858",
      "title": "ext4: don\u0027t zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45870",
      "url": "https://patchblox.com/security/cve/CVE-2026-45870",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  SUNRPC: auth_gss: fix memory leaks in XDR decodi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45884",
      "url": "https://patchblox.com/security/cve/CVE-2026-45884",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  apparmor: avoid per-cpu hold underflow in aa_get...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45888",
      "url": "https://patchblox.com/security/cve/CVE-2026-45888",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  md/raid1: fix memory leak in raid1_run()  raid1_...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45922",
      "url": "https://patchblox.com/security/cve/CVE-2026-45922",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SY...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45948",
      "url": "https://patchblox.com/security/cve/CVE-2026-45948",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ext4: fix memory leak in ext4_ext_shift_extents(...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45964",
      "url": "https://patchblox.com/security/cve/CVE-2026-45964",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  SUNRPC: fix gss_auth kref leak in gss_alloc_msg...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45965",
      "url": "https://patchblox.com/security/cve/CVE-2026-45965",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  apparmor: fix invalid deref of rawdata when expo...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31560",
      "url": "https://patchblox.com/security/cve/CVE-2026-31560",
      "title": "spi: spi-dw-dma: fix print error log when wait finish transaction",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43022",
      "url": "https://patchblox.com/security/cve/CVE-2026-43022",
      "title": "Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43036",
      "url": "https://patchblox.com/security/cve/CVE-2026-43036",
      "title": "net: use skb_header_pointer() for TCPv4 GSO frag_off check",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43107",
      "url": "https://patchblox.com/security/cve/CVE-2026-43107",
      "title": "xfrm: account XFRMA_IF_ID in aevent size calculation",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43492",
      "url": "https://patchblox.com/security/cve/CVE-2026-43492",
      "title": "lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46254",
      "url": "https://patchblox.com/security/cve/CVE-2026-46254",
      "title": "AppArmor: Allow apparmor to handle unaligned dfa tables",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43034",
      "url": "https://patchblox.com/security/cve/CVE-2026-43034",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bnxt_en: set backing store type from query type...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46079",
      "url": "https://patchblox.com/security/cve/CVE-2026-46079",
      "title": "rbd: fix null-ptr-deref when device_add_disk() fails",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31596",
      "url": "https://patchblox.com/security/cve/CVE-2026-31596",
      "title": "ocfs2: handle invalid dinode in ocfs2_group_extend",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.6,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45841",
      "url": "https://patchblox.com/security/cve/CVE-2026-45841",
      "title": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43089",
      "url": "https://patchblox.com/security/cve/CVE-2026-43089",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm_user: fix info leak in build_mapping()  str...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46161",
      "url": "https://patchblox.com/security/cve/CVE-2026-46161",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46214",
      "url": "https://patchblox.com/security/cve/CVE-2026-46214",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31495",
      "url": "https://patchblox.com/security/cve/CVE-2026-31495",
      "title": "netfilter: ctnetlink: use netlink policy range checks",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31752",
      "url": "https://patchblox.com/security/cve/CVE-2026-31752",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bridge: br_nd_send: validate ND option lengths...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43024",
      "url": "https://patchblox.com/security/cve/CVE-2026-43024",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_tables: reject immediate NF_QUEUE...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43035",
      "url": "https://patchblox.com/security/cve/CVE-2026-43035",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: sched: cls_api: fix tc_chain_fill_node to i...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43085",
      "url": "https://patchblox.com/security/cve/CVE-2026-43085",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nfnetlink_log: initialize nfgenmsg in...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45838",
      "url": "https://patchblox.com/security/cve/CVE-2026-45838",
      "title": "bpf: fix end-of-list detection in cgroup_storage_get_next_key()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46046",
      "url": "https://patchblox.com/security/cve/CVE-2026-46046",
      "title": "ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46101",
      "url": "https://patchblox.com/security/cve/CVE-2026-46101",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43124",
      "url": "https://patchblox.com/security/cve/CVE-2026-43124",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  pstore: ram_core: fix incorrect success return w...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43132",
      "url": "https://patchblox.com/security/cve/CVE-2026-43132",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dm-verity: correctly handle dm_bufio_client_crea...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43157",
      "url": "https://patchblox.com/security/cve/CVE-2026-43157",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  octeontx2-af: CGX: fix bitmap leaks  The RX/TX f...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43238",
      "url": "https://patchblox.com/security/cve/CVE-2026-43238",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/sched: act_skbedit: fix divide-by-zero in tc...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45974",
      "url": "https://patchblox.com/security/cve/CVE-2026-45974",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: fix invalid leaf access in btrfs_quota_en...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46005",
      "url": "https://patchblox.com/security/cve/CVE-2026-46005",
      "title": "xfs: fix a resource leak in xfs_alloc_buftarg()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53060",
      "url": "https://patchblox.com/security/cve/CVE-2026-53060",
      "title": "dm cache metadata: fix memory leak on metadata abort retry",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43175",
      "url": "https://patchblox.com/security/cve/CVE-2026-43175",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  clk: rs9: Reserve 8 struct clk_hw slots for for...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43080",
      "url": "https://patchblox.com/security/cve/CVE-2026-43080",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  l2tp: Drop large packets with UDP encap  syzbot...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53103",
      "url": "https://patchblox.com/security/cve/CVE-2026-53103",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: mt76: mt7925: fix potential deadlock in mt...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53122",
      "url": "https://patchblox.com/security/cve/CVE-2026-53122",
      "title": "btrfs: fix deadlock between reflink and transaction commit when using flushoncommit",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43010",
      "url": "https://patchblox.com/security/cve/CVE-2026-43010",
      "title": "bpf: Reject sleepable kprobe_multi programs at attach time",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43014",
      "url": "https://patchblox.com/security/cve/CVE-2026-43014",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: macb: properly unregister fixed rate clocks...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43094",
      "url": "https://patchblox.com/security/cve/CVE-2026-43094",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ixgbevf: add missing negotiate_features op to Hy...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43130",
      "url": "https://patchblox.com/security/cve/CVE-2026-43130",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Flush dev-IOTLB only when PCIe devic...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43145",
      "url": "https://patchblox.com/security/cve/CVE-2026-43145",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  remoteproc: imx_rproc: Fix invalid loaded resour...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43167",
      "url": "https://patchblox.com/security/cve/CVE-2026-43167",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm: always flush state and policy upon NETDEV_...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43171",
      "url": "https://patchblox.com/security/cve/CVE-2026-43171",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  EFI/CPER: don\u0027t dump the entire memory region  T...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45997",
      "url": "https://patchblox.com/security/cve/CVE-2026-45997",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: sd: fix missing put_disk() when device_add...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46071",
      "url": "https://patchblox.com/security/cve/CVE-2026-46071",
      "title": "KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46291",
      "url": "https://patchblox.com/security/cve/CVE-2026-46291",
      "title": "crypto: caam - guard HMAC key hex dumps in hash_digest_key",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53015",
      "url": "https://patchblox.com/security/cve/CVE-2026-53015",
      "title": "erofs: unify lcn as u64 for 32-bit platforms",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53139",
      "url": "https://patchblox.com/security/cve/CVE-2026-53139",
      "title": "drm/v3d: Skip CSD when it has zeroed workgroups",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53287",
      "url": "https://patchblox.com/security/cve/CVE-2026-53287",
      "title": "audit: fix incorrect inheritable capability in CAPSET records",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31438",
      "url": "https://patchblox.com/security/cve/CVE-2026-31438",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix kernel BUG in netfs_limit_iter() for...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31646",
      "url": "https://patchblox.com/security/cve/CVE-2026-31646",
      "title": "net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31647",
      "url": "https://patchblox.com/security/cve/CVE-2026-31647",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  idpf: fix PREEMPT_RT raw/bh spinlock nesting for...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43081",
      "url": "https://patchblox.com/security/cve/CVE-2026-43081",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: ipa: fix GENERIC_CMD register field masks f...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43086",
      "url": "https://patchblox.com/security/cve/CVE-2026-43086",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipvs: fix NULL deref in ip_vs_add_service error...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43090",
      "url": "https://patchblox.com/security/cve/CVE-2026-43090",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xfrm: fix refcount leak in xfrm_migrate_policy_f...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43092",
      "url": "https://patchblox.com/security/cve/CVE-2026-43092",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: validate MTU against usable frame size on b...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43161",
      "url": "https://patchblox.com/security/cve/CVE-2026-43161",
      "title": "iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53285",
      "url": "https://patchblox.com/security/cve/CVE-2026-53285",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Wrap DCN32 phantom-plane alloca...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43351",
      "url": "https://patchblox.com/security/cve/CVE-2026-43351",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: arm64: Eagerly init vgic dist/redist on vgi...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53274",
      "url": "https://patchblox.com/security/cve/CVE-2026-53274",
      "title": "net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31664",
      "url": "https://patchblox.com/security/cve/CVE-2026-31664",
      "title": "xfrm: clear trailing padding in build_polexpire()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31670",
      "url": "https://patchblox.com/security/cve/CVE-2026-31670",
      "title": "net: rfkill: prevent unlimited numbers of rfkill events from being created",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43053",
      "url": "https://patchblox.com/security/cve/CVE-2026-43053",
      "title": "xfs: close crash window in attr dabtree inactivation",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53263",
      "url": "https://patchblox.com/security/cve/CVE-2026-53263",
      "title": "6lowpan: fix off-by-one in multicast context address compression",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43470",
      "url": "https://patchblox.com/security/cve/CVE-2026-43470",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nfs: return EISDIR on nfs3_proc_create if d_alia...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46314",
      "url": "https://patchblox.com/security/cve/CVE-2026-46314",
      "title": "drm/v3d: Reject empty multisync extension to prevent infinite loop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00115,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43119",
      "url": "https://patchblox.com/security/cve/CVE-2026-43119",
      "title": "Bluetooth: hci_sync: annotate data-races around hdev-\u003Ereq_status",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43337",
      "url": "https://patchblox.com/security/cve/CVE-2026-43337",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Fix NULL pointer dereference in...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43457",
      "url": "https://patchblox.com/security/cve/CVE-2026-43457",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mctp: i2c: fix skb memory leak in receive path...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43471",
      "url": "https://patchblox.com/security/cve/CVE-2026-43471",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: ufs: core: Fix possible NULL pointer deref...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46051",
      "url": "https://patchblox.com/security/cve/CVE-2026-46051",
      "title": "md/raid5: fix soft lockup in retry_aligned_read()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46050",
      "url": "https://patchblox.com/security/cve/CVE-2026-46050",
      "title": "md/raid10: fix deadlock with check operation and nowait requests",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23394",
      "url": "https://patchblox.com/security/cve/CVE-2026-23394",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  af_unix: Give up GC if MSG_PEEK intervened",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.7,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31466",
      "url": "https://patchblox.com/security/cve/CVE-2026-31466",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/huge_memory: fix folio isn\u0027t locked in softle...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31499",
      "url": "https://patchblox.com/security/cve/CVE-2026-31499",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46063",
      "url": "https://patchblox.com/security/cve/CVE-2026-46063",
      "title": "x86/shstk: Prevent deadlock during shstk sigreturn",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43468",
      "url": "https://patchblox.com/security/cve/CVE-2026-43468",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/mlx5: Fix deadlock between devlink lock and...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00091,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43415",
      "url": "https://patchblox.com/security/cve/CVE-2026-43415",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: ufs: core: Fix SError in ufshcd_rtc_work()...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.7,
      "epss": 0.00089,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}