# OPENSUSE-SU-2026:21388-1: Security update for 13 packages OPENSUSE-SU-2026:21388-1, released July 21, 2026, fixes 252 CVEs across 13 products. 2 of them are being exploited (CVE-2026-53266); 2 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-21388-1 - Platform: Linux - Released: Jul 21, 2026 - Priority: Patch now (Closes CVE-2026-53266, exploited (CISA KEV)) - CVEs: 252, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:21388-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 | | [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 | | [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 | | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1.160000.2.17 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 | | [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 | | [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 | | [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 | | [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 16.0 | 6.12.0-160000.36.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-53266](https://patchblox.com/security/data/cve/CVE-2026-53266.md) | Patch now | netfilter: bridge: make ebt_snat ARP rewrite writable | 8.8 | 0.0093 | CISA KEV | | [CVE-2026-53362](https://patchblox.com/security/data/cve/CVE-2026-53362.md) | Patch now | ipv6: account for fraggap on the paged allocation path | 7.8 | 0.0071 | CISA KEV | | [CVE-2026-43407](https://patchblox.com/security/data/cve/CVE-2026-43407.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in c... | 9.1 | 0.0066 | | | [CVE-2026-43406](https://patchblox.com/security/data/cve/CVE-2026-43406.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads i... | 9.1 | 0.0061 | | | [CVE-2025-10263](https://patchblox.com/security/data/cve/CVE-2025-10263.md) | Urgent | ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel] | 9.3 | 0.0054 | | | [CVE-2026-43383](https://patchblox.com/security/data/cve/CVE-2026-43383.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/tcp-md5: Fix MAC comparison to be constant-t... | 9.4 | 0.0054 | | | [CVE-2026-43465](https://patchblox.com/security/data/cve/CVE-2026-43465.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix XDP multi-buf frag counting f... | 9.8 | 0.0054 | | | [CVE-2026-53215](https://patchblox.com/security/data/cve/CVE-2026-53215.md) | Urgent | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0050 | | | [CVE-2026-53216](https://patchblox.com/security/data/cve/CVE-2026-53216.md) | Urgent | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0050 | | | [CVE-2026-46266](https://patchblox.com/security/data/cve/CVE-2026-46266.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: inet: RAW sockets using IPPROTO_RAW MUST drop in... | 9.1 | 0.0047 | | | [CVE-2026-43384](https://patchblox.com/security/data/cve/CVE-2026-43384.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/tcp-ao: Fix MAC comparison to be constant-ti... | 9.8 | 0.0046 | | | [CVE-2026-52993](https://patchblox.com/security/data/cve/CVE-2026-52993.md) | Urgent | tipc: fix double-free in tipc_buf_append() | 9.8 | 0.0040 | | | [CVE-2026-52955](https://patchblox.com/security/data/cve/CVE-2026-52955.md) | Urgent | kernel-uek64k-core: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0038 | | | [CVE-2026-53086](https://patchblox.com/security/data/cve/CVE-2026-53086.md) | Urgent | net: bcmgenet: fix racing timeout handler | 9.8 | 0.0030 | | | [CVE-2026-53075](https://patchblox.com/security/data/cve/CVE-2026-53075.md) | Urgent | ppp: require CAP_NET_ADMIN in target netns for unattached ioctls | 9.8 | 0.0027 | | | [CVE-2026-45899](https://patchblox.com/security/data/cve/CVE-2026-45899.md) | Urgent | ext4: drop extent cache when splitting extent fails | 9.8 | 0.0016 | | | [CVE-2026-53036](https://patchblox.com/security/data/cve/CVE-2026-53036.md) | Urgent | bpf, arm64: Fix off-by-one in check_imm signed range check | 9.8 | 0.0014 | | | [CVE-2026-53053](https://patchblox.com/security/data/cve/CVE-2026-53053.md) | Urgent | iommu/amd: Fix clone_alias() to use the original device's devid | 9.8 | 0.0013 | | | [CVE-2026-52919](https://patchblox.com/security/data/cve/CVE-2026-52919.md) | Urgent | batman-adv: fix tp_meter counter underflow during shutdown | 9.8 | 0.0012 | | | [CVE-2026-43284](https://patchblox.com/security/data/cve/CVE-2026-43284.md) | High | xfrm: esp: avoid in-place decrypt on shared skb frags | 8.8 | 0.9419 | | | [CVE-2026-46242](https://patchblox.com/security/data/cve/CVE-2026-46242.md) | High | kpatch-patch-5_14_0-687_10_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 7.8 | 0.0458 | | | [CVE-2026-53176](https://patchblox.com/security/data/cve/CVE-2026-53176.md) | High | IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN | 9.8 | 0.0076 | | | [CVE-2026-52924](https://patchblox.com/security/data/cve/CVE-2026-52924.md) | High | sctp: purge outqueue on stale COOKIE-ECHO handling | 9.8 | 0.0066 | | | [CVE-2026-46331](https://patchblox.com/security/data/cve/CVE-2026-46331.md) | High | net/sched: fix pedit partial COW leading to page cache corruption | 8.1 | 0.0064 | | | [CVE-2026-43083](https://patchblox.com/security/data/cve/CVE-2026-43083.md) | High | net: ioam6: fix OOB and missing lock | 9.1 | 0.0060 | | | [CVE-2026-43405](https://patchblox.com/security/data/cve/CVE-2026-43405.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: libceph: Use u32 for non-negative values in ceph... | 7.5 | 0.0060 | | | [CVE-2026-43101](https://patchblox.com/security/data/cve/CVE-2026-43101.md) | High | ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() | 7.5 | 0.0059 | | | [CVE-2026-31414](https://patchblox.com/security/data/cve/CVE-2026-31414.md) | High | netfilter: nf_conntrack_expect: use expect->helper | 9.8 | 0.0058 | | | [CVE-2026-43452](https://patchblox.com/security/data/cve/CVE-2026-43452.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: guard option walkers agains... | 8.2 | 0.0054 | | | [CVE-2026-43194](https://patchblox.com/security/data/cve/CVE-2026-43194.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: consume xmit errors of GSO frames udpgro_f... | 7.5 | 0.0053 | | | [CVE-2026-46119](https://patchblox.com/security/data/cve/CVE-2026-46119.md) | High | libceph: Fix slab-out-of-bounds access in auth message processing | 9.1 | 0.0053 | | | [CVE-2026-46185](https://patchblox.com/security/data/cve/CVE-2026-46185.md) | High | smb/client: fix out-of-bounds read in symlink_data() | 9.1 | 0.0053 | | | [CVE-2026-43226](https://patchblox.com/security/data/cve/CVE-2026-43226.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/rds: No shortcut out of RDS_CONN_ERROR RDS... | 7.5 | 0.0052 | | | [CVE-2026-52954](https://patchblox.com/security/data/cve/CVE-2026-52954.md) | High | libceph: handle rbtree insertion error in decode_choose_args() | 7.5 | 0.0052 | | | [CVE-2026-52957](https://patchblox.com/security/data/cve/CVE-2026-52957.md) | High | libceph: Fix potential null-ptr-deref in decode_choose_args() | 7.5 | 0.0052 | | | [CVE-2026-46037](https://patchblox.com/security/data/cve/CVE-2026-46037.md) | High | ipv4: icmp: validate reply type before using icmp_pointers | 8.2 | 0.0051 | | | [CVE-2026-43373](https://patchblox.com/security/data/cve/CVE-2026-43373.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ncsi: fix skb leak in error paths Early re... | 7.5 | 0.0050 | | | [CVE-2026-46024](https://patchblox.com/security/data/cve/CVE-2026-46024.md) | High | libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply() | 7.5 | 0.0049 | | | [CVE-2026-43074](https://patchblox.com/security/data/cve/CVE-2026-43074.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.8 | 0.0048 | | | [CVE-2026-53229](https://patchblox.com/security/data/cve/CVE-2026-53229.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: xsk: Fix DMA and xdp_frame leak on XD... | 7.5 | 0.0048 | | | [CVE-2026-46124](https://patchblox.com/security/data/cve/CVE-2026-46124.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handl... | 7.5 | 0.0048 | | | [CVE-2026-43158](https://patchblox.com/security/data/cve/CVE-2026-43158.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix freemap adjustments when adding xattrs... | 8.8 | 0.0047 | | | [CVE-2026-43187](https://patchblox.com/security/data/cve/CVE-2026-43187.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfs: delete attr leaf freemap entries when empty... | 8.8 | 0.0047 | | | [CVE-2026-43233](https://patchblox.com/security/data/cve/CVE-2026-43233.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.2 | 0.0046 | | | [CVE-2026-46289](https://patchblox.com/security/data/cve/CVE-2026-46289.md) | High | lib/scatterlist: fix length calculations in extract_kvec_to_sg | 9.8 | 0.0046 | | | [CVE-2026-43057](https://patchblox.com/security/data/cve/CVE-2026-43057.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_C... | 7.5 | 0.0044 | | | [CVE-2026-43336](https://patchblox.com/security/data/cve/CVE-2026-43336.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: lib/crypto: chacha: Zeroize permuted_state befor... | 7.5 | 0.0043 | | | [CVE-2026-46244](https://patchblox.com/security/data/cve/CVE-2026-46244.md) | High | netfilter: nft_inner: Fix IPv6 inner_thoff desync | 9.1 | 0.0042 | | | [CVE-2026-43199](https://patchblox.com/security/data/cve/CVE-2026-43199.md) | High | net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query | 7.5 | 0.0042 | | | [CVE-2026-31450](https://patchblox.com/security/data/cve/CVE-2026-31450.md) | High | ext4: publish jinode after initialization | 8.8 | 0.0041 | | | [CVE-2026-43466](https://patchblox.com/security/data/cve/CVE-2026-43466.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ r... | 8.2 | 0.0041 | | | [CVE-2026-53178](https://patchblox.com/security/data/cve/CVE-2026-53178.md) | High | staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction | 8.1 | 0.0041 | | | [CVE-2026-43469](https://patchblox.com/security/data/cve/CVE-2026-43469.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decrement re_receiving on the early ex... | 7.5 | 0.0040 | | | [CVE-2026-53049](https://patchblox.com/security/data/cve/CVE-2026-53049.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0039 | | | [CVE-2026-53217](https://patchblox.com/security/data/cve/CVE-2026-53217.md) | High | net: mvpp2: sync RX data at the hardware packet offset | 8.6 | 0.0038 | | | [CVE-2026-43139](https://patchblox.com/security/data/cve/CVE-2026-43139.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm6: fix uninitialized saddr in xfrm6_get_sadd... | 8.6 | 0.0038 | | | [CVE-2026-43345](https://patchblox.com/security/data/cve/CVE-2026-43345.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix event ring index not programmed fo... | 7.5 | 0.0035 | | | [CVE-2025-39894](https://patchblox.com/security/data/cve/CVE-2025-39894.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: br_netfilter: do not check confirmed... | 7.0 | 0.0033 | | | [CVE-2026-43502](https://patchblox.com/security/data/cve/CVE-2026-43502.md) | High | net/rds: handle zerocopy send cleanup before the message is queued | 7.8 | 0.0032 | | | [CVE-2026-31771](https://patchblox.com/security/data/cve/CVE-2026-31771.md) | High | Bluetooth: hci_event: move wake reason storage into validated event handlers | 8.1 | 0.0032 | | | [CVE-2026-52943](https://patchblox.com/security/data/cve/CVE-2026-52943.md) | High | net: skbuff: fix missing zerocopy reference in pskb_carve helpers | 7.8 | 0.0030 | | | [CVE-2026-43198](https://patchblox.com/security/data/cve/CVE-2026-43198.md) | High | tcp: fix potential race in tcp_v6_syn_recv_sock() | 9.8 | 0.0030 | | | [CVE-2026-46099](https://patchblox.com/security/data/cve/CVE-2026-46099.md) | High | net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels | 8.1 | 0.0029 | | | [CVE-2026-43213](https://patchblox.com/security/data/cve/CVE-2026-43213.md) | High | wifi: rtw89: pci: validate sequence number of TX release report | 7.5 | 0.0028 | | | [CVE-2026-46320](https://patchblox.com/security/data/cve/CVE-2026-46320.md) | High | tap: free page on error paths in tap_get_user_xdp() | 7.4 | 0.0025 | | | [CVE-2026-31663](https://patchblox.com/security/data/cve/CVE-2026-31663.md) | High | xfrm: hold dev ref until after transport_finish NF_HOOK | 8.8 | 0.0022 | | | [CVE-2026-52923](https://patchblox.com/security/data/cve/CVE-2026-52923.md) | High | ipc: limit next_id allocation to the valid ID range | 7.8 | 0.0022 | | | [CVE-2026-45933](https://patchblox.com/security/data/cve/CVE-2026-45933.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve id of register in sync_linked_regs... | 7.8 | 0.0020 | | | [CVE-2026-43456](https://patchblox.com/security/data/cve/CVE-2026-43456.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues we... | 7.8 | 0.0019 | | | [CVE-2026-45861](https://patchblox.com/security/data/cve/CVE-2026-45861.md) | High | gfs2: Fix slab-use-after-free in qd_put | 8.8 | 0.0019 | | | [CVE-2026-45940](https://patchblox.com/security/data/cve/CVE-2026-45940.md) | High | net: stmmac: fix oops when split header is enabled | 7.0 | 0.0018 | | | [CVE-2026-53081](https://patchblox.com/security/data/cve/CVE-2026-53081.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce regsafe base id consistency for BPF... | 7.8 | 0.0018 | | | [CVE-2026-43303](https://patchblox.com/security/data/cve/CVE-2026-43303.md) | High | mm/page_alloc: clear page->private in free_pages_prepare() | 7.8 | 0.0017 | | | [CVE-2026-46253](https://patchblox.com/security/data/cve/CVE-2026-46253.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: pstore/ram: fix buffer overflow in persistent_ra... | 7.8 | 0.0017 | | | [CVE-2026-31693](https://patchblox.com/security/data/cve/CVE-2026-31693.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In... | 7.8 | 0.0017 | | | [CVE-2026-31674](https://patchblox.com/security/data/cve/CVE-2026-31674.md) | High | netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() | 7.1 | 0.0017 | | | [CVE-2026-43248](https://patchblox.com/security/data/cve/CVE-2026-43248.md) | High | vhost: move vdpa group bound check to vhost_vdpa | 8.8 | 0.0016 | | | [CVE-2026-31680](https://patchblox.com/security/data/cve/CVE-2026-31680.md) | High | net: ipv6: flowlabel: defer exclusive option free until RCU teardown | 7.8 | 0.0016 | | | [CVE-2026-53306](https://patchblox.com/security/data/cve/CVE-2026-53306.md) | High | tty: hvc_iucv: fix off-by-one in number of supported devices | 7.1 | 0.0016 | | | [CVE-2026-43374](https://patchblox.com/security/data/cve/CVE-2026-43374.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: nexthop: fix percpu use-after-free in remov... | 7.8 | 0.0016 | | | [CVE-2026-46111](https://patchblox.com/security/data/cve/CVE-2026-46111.md) | High | Bluetooth: hci_conn: fix potential UAF in create_big_sync | 7.8 | 0.0016 | | | [CVE-2026-43339](https://patchblox.com/security/data/cve/CVE-2026-43339.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible UaF in addrconf_permanent_... | 8.1 | 0.0016 | | | [CVE-2026-43298](https://patchblox.com/security/data/cve/CVE-2026-43298.md) | High | drm/amdgpu: Skip vcn poison irq release on VF | 7.8 | 0.0016 | | | [CVE-2026-43491](https://patchblox.com/security/data/cve/CVE-2026-43491.md) | High | net: qrtr: ns: Limit the maximum server registration per node | 7.0 | 0.0015 | | | [CVE-2026-52933](https://patchblox.com/security/data/cve/CVE-2026-52933.md) | High | io_uring/poll: fix signed comparison in io_poll_get_ownership() | 7.8 | 0.0015 | | | [CVE-2026-53194](https://patchblox.com/security/data/cve/CVE-2026-53194.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: USB: serial: kl5kusb105: fix bulk-out buffer ove... | 7.8 | 0.0015 | | | [CVE-2026-45920](https://patchblox.com/security/data/cve/CVE-2026-45920.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix dirtyclusters double decrement on fs s... | 7.8 | 0.0015 | | | [CVE-2026-46069](https://patchblox.com/security/data/cve/CVE-2026-46069.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0014 | | | [CVE-2026-46076](https://patchblox.com/security/data/cve/CVE-2026-46076.md) | High | KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 | 8.8 | 0.0014 | | | [CVE-2026-53090](https://patchblox.com/security/data/cve/CVE-2026-53090.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix ld_{abs,ind} failure path analysis in s... | 7.8 | 0.0014 | | | [CVE-2026-43128](https://patchblox.com/security/data/cve/CVE-2026-43128.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Fix double dma_buf_unpin in failure p... | 8.1 | 0.0014 | | | [CVE-2026-43205](https://patchblox.com/security/data/cve/CVE-2026-43205.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: validate num_ifs to prevent out-of... | 7.8 | 0.0014 | | | [CVE-2026-52962](https://patchblox.com/security/data/cve/CVE-2026-52962.md) | High | ceph: fix a buffer leak in __ceph_setxattr() | 7.8 | 0.0014 | | | [CVE-2026-43260](https://patchblox.com/security/data/cve/CVE-2026-43260.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix RSS context delete logic We need t... | 7.8 | 0.0014 | | | [CVE-2026-46162](https://patchblox.com/security/data/cve/CVE-2026-46162.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix double free in ice_sf_eth_activate() er... | 7.8 | 0.0014 | | | [CVE-2026-53281](https://patchblox.com/security/data/cve/CVE-2026-53281.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid NULL pointer dereference or ref... | 8.8 | 0.0014 | | | [CVE-2026-31452](https://patchblox.com/security/data/cve/CVE-2026-31452.md) | High | ext4: convert inline data to extents when truncate exceeds inline size | 7.8 | 0.0014 | | | [CVE-2026-31469](https://patchblox.com/security/data/cve/CVE-2026-31469.md) | High | virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false | 7.8 | 0.0014 | | | [CVE-2026-43093](https://patchblox.com/security/data/cve/CVE-2026-43093.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xsk: tighten UMEM headroom validation to account... | 7.8 | 0.0014 | | | [CVE-2026-46322](https://patchblox.com/security/data/cve/CVE-2026-46322.md) | High | tun: free page on build_skb failure in tun_xdp_one() | 7.1 | 0.0013 | | | [CVE-2026-46172](https://patchblox.com/security/data/cve/CVE-2026-46172.md) | High | kernel-uek64k: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.0 | 0.0013 | | | [CVE-2026-43450](https://patchblox.com/security/data/cve/CVE-2026-43450.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: f... | 8.8 | 0.0013 | | | [CVE-2026-46173](https://patchblox.com/security/data/cve/CVE-2026-46173.md) | High | exit: prevent preemption of oopsing TASK_DEAD task | 7.8 | 0.0013 | | | [CVE-2026-43028](https://patchblox.com/security/data/cve/CVE-2026-43028.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: ensure names are nul-termin... | 7.1 | 0.0013 | | | [CVE-2026-46078](https://patchblox.com/security/data/cve/CVE-2026-46078.md) | High | erofs: fix the out-of-bounds nameoff handling for trailing dirents | 7.1 | 0.0013 | | | [CVE-2026-45840](https://patchblox.com/security/data/cve/CVE-2026-45840.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.0 | 0.0013 | | | [CVE-2026-45894](https://patchblox.com/security/data/cve/CVE-2026-45894.md) | High | iommu/vt-d: Clear Present bit before tearing down PASID entry | 8.8 | 0.0013 | | | [CVE-2026-23248](https://patchblox.com/security/data/cve/CVE-2026-23248.md) | High | perf/core: Fix refcount bug and potential UAF in perf_mmap | 7.8 | 0.0013 | | | [CVE-2026-31580](https://patchblox.com/security/data/cve/CVE-2026-31580.md) | High | bcache: fix cached_dev.sb_bio use-after-free and crash | 7.8 | 0.0013 | | | [CVE-2026-45862](https://patchblox.com/security/data/cve/CVE-2026-45862.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush cache for PASID table before u... | 7.8 | 0.0013 | | | [CVE-2026-45999](https://patchblox.com/security/data/cve/CVE-2026-45999.md) | High | erofs: fix unsigned underflow in z_erofs_lz4_handle_overlap() | 7.1 | 0.0013 | | | [CVE-2026-46116](https://patchblox.com/security/data/cve/CVE-2026-46116.md) | High | xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete | 8.4 | 0.0013 | | | [CVE-2026-31502](https://patchblox.com/security/data/cve/CVE-2026-31502.md) | High | team: fix header_ops type confusion with non-Ethernet ports | 7.8 | 0.0013 | | | [CVE-2026-31673](https://patchblox.com/security/data/cve/CVE-2026-31673.md) | High | af_unix: read UNIX_DIAG_VFS data under unix_state_lock | 7.8 | 0.0013 | | | [CVE-2026-45891](https://patchblox.com/security/data/cve/CVE-2026-45891.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix double free issue for tx spare bu... | 7.8 | 0.0013 | | | [CVE-2026-46065](https://patchblox.com/security/data/cve/CVE-2026-46065.md) | High | fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info | 7.8 | 0.0013 | | | [CVE-2026-46150](https://patchblox.com/security/data/cve/CVE-2026-46150.md) | High | fanotify: fix false positive on permission events | 7.8 | 0.0013 | | | [CVE-2026-46178](https://patchblox.com/security/data/cve/CVE-2026-46178.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0013 | | | [CVE-2026-53133](https://patchblox.com/security/data/cve/CVE-2026-53133.md) | High | RDMA/umem: Fix truncation for block sizes >= 4G | 7.8 | 0.0013 | | | [CVE-2026-31479](https://patchblox.com/security/data/cve/CVE-2026-31479.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/xe: always keep track of remap prev/next Duri... | 8.8 | 0.0013 | | | [CVE-2026-43403](https://patchblox.com/security/data/cve/CVE-2026-43403.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nsfs: tighten permission checks for ns iteration... | 8.8 | 0.0013 | | | [CVE-2026-31743](https://patchblox.com/security/data/cve/CVE-2026-31743.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmp_nvmem: Fix buffer size in DMA and... | 7.8 | 0.0013 | | | [CVE-2026-46053](https://patchblox.com/security/data/cve/CVE-2026-46053.md) | High | net: rds: fix MR cleanup on copy error | 7.8 | 0.0013 | | | [CVE-2026-46093](https://patchblox.com/security/data/cve/CVE-2026-46093.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mm/vmalloc: take vmap_purge_lock in shrinker de... | 7.8 | 0.0013 | | | [CVE-2026-31555](https://patchblox.com/security/data/cve/CVE-2026-31555.md) | High | futex: Clear stale exiting pointer in futex_lock_pi() retry path | 7.0 | 0.0013 | | | [CVE-2026-53167](https://patchblox.com/security/data/cve/CVE-2026-53167.md) | High | fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios | 7.0 | 0.0013 | | | [CVE-2026-53249](https://patchblox.com/security/data/cve/CVE-2026-53249.md) | High | ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options | 7.0 | 0.0013 | | | [CVE-2026-46120](https://patchblox.com/security/data/cve/CVE-2026-46120.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.8 | 0.0013 | | | [CVE-2026-46160](https://patchblox.com/security/data/cve/CVE-2026-46160.md) | High | btrfs: fix missing last_unlink_trans update when removing a directory | 7.0 | 0.0013 | | | [CVE-2026-43015](https://patchblox.com/security/data/cve/CVE-2026-43015.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: macb: fix clk handling on PCI glue driver r... | 7.8 | 0.0013 | | | [CVE-2026-43016](https://patchblox.com/security/data/cve/CVE-2026-43016.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: sockmap: Fix use-after-free of sk->sk_socke... | 7.8 | 0.0013 | | | [CVE-2026-53286](https://patchblox.com/security/data/cve/CVE-2026-53286.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: idpf: fix double free and use-after-free in aux... | 7.8 | 0.0013 | | | [CVE-2026-43386](https://patchblox.com/security/data/cve/CVE-2026-43386.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix potential out-of-bounds... | 7.1 | 0.0013 | | | [CVE-2026-43449](https://patchblox.com/security/data/cve/CVE-2026-43449.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_s... | 7.1 | 0.0013 | | | [CVE-2026-53041](https://patchblox.com/security/data/cve/CVE-2026-53041.md) | High | ocfs2: fix listxattr handling when the buffer is full | 7.1 | 0.0013 | | | [CVE-2026-53156](https://patchblox.com/security/data/cve/CVE-2026-53156.md) | High | nvmem: core: fix use-after-free bugs in error paths | 7.8 | 0.0013 | | | [CVE-2026-53168](https://patchblox.com/security/data/cve/CVE-2026-53168.md) | High | fuse: reject fuse_notify() pagecache ops on directories | 7.0 | 0.0013 | | | [CVE-2026-31665](https://patchblox.com/security/data/cve/CVE-2026-31665.md) | High | netfilter: nft_ct: fix use-after-free in timeout object destroy | 7.8 | 0.0012 | | | [CVE-2026-31492](https://patchblox.com/security/data/cve/CVE-2026-31492.md) | High | RDMA/irdma: Initialize free_qp completion before using it | 7.1 | 0.0012 | | | [CVE-2026-45912](https://patchblox.com/security/data/cve/CVE-2026-45912.md) | High | ext4: don't cache extent during splitting extent | 7.1 | 0.0012 | | | [CVE-2026-45983](https://patchblox.com/security/data/cve/CVE-2026-45983.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: never defer requests during idmap lookup... | 7.0 | 0.0012 | | | [CVE-2026-45985](https://patchblox.com/security/data/cve/CVE-2026-45985.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: don't set EXT4_GET_BLOCKS_CONVERT when spl... | 7.0 | 0.0012 | | | [CVE-2026-53021](https://patchblox.com/security/data/cve/CVE-2026-53021.md) | High | scsi: target: core: Fix integer overflow in UNMAP bounds check | 7.0 | 0.0012 | | | [CVE-2026-53040](https://patchblox.com/security/data/cve/CVE-2026-53040.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.1 | 0.0012 | | | [CVE-2026-46259](https://patchblox.com/security/data/cve/CVE-2026-46259.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: procfs: fix missing RCU protection when reading... | 8.4 | 0.0012 | | | [CVE-2026-53078](https://patchblox.com/security/data/cve/CVE-2026-53078.md) | High | bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops | 7.8 | 0.0012 | | | [CVE-2026-43283](https://patchblox.com/security/data/cve/CVE-2026-43283.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ec_bhf: Fix dma_free_coherent() d... | 8.8 | 0.0012 | | | [CVE-2026-53262](https://patchblox.com/security/data/cve/CVE-2026-53262.md) | High | l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() | 7.8 | 0.0012 | | | [CVE-2026-52908](https://patchblox.com/security/data/cve/CVE-2026-52908.md) | High | RDMA: During rereg_mr ensure that REREG_ACCESS is compatible | 7.8 | 0.0012 | | | [CVE-2026-43458](https://patchblox.com/security/data/cve/CVE-2026-43458.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: serial: caif: hold tty->link reference in ldisc_... | 7.8 | 0.0012 | | | [CVE-2026-53272](https://patchblox.com/security/data/cve/CVE-2026-53272.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: erofs: fix use-after-free on sbi->sync_decompres... | 7.8 | 0.0012 | | | [CVE-2026-45837](https://patchblox.com/security/data/cve/CVE-2026-45837.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix use-after-free in arena_vm_close on for... | 7.8 | 0.0012 | | | [CVE-2026-46328](https://patchblox.com/security/data/cve/CVE-2026-46328.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: apparmor: fix rlimit for posix cpu timers Posix... | 7.3 | 0.0011 | | | [CVE-2026-52909](https://patchblox.com/security/data/cve/CVE-2026-52909.md) | High | ip6_vti: set netns_immutable on the fallback device. | 7.8 | 0.0011 | | | [CVE-2026-52975](https://patchblox.com/security/data/cve/CVE-2026-52975.md) | High | bonding: 3ad: implement proper RCU rules for port->aggregator | 7.8 | 0.0011 | | | [CVE-2026-46319](https://patchblox.com/security/data/cve/CVE-2026-46319.md) | High | net/sched: act_ct: Only release RCU read lock after ct_ft | 8.8 | 0.0011 | | | [CVE-2026-46227](https://patchblox.com/security/data/cve/CVE-2026-46227.md) | High | sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL | 8.4 | 0.0010 | | | [CVE-2026-53050](https://patchblox.com/security/data/cve/CVE-2026-53050.md) | High | quota: Fix race of dquot_scan_active() with quota deactivation | 7.8 | 0.0010 | | | [CVE-2026-46112](https://patchblox.com/security/data/cve/CVE-2026-46112.md) | High | RDMA/hns: Fix unlocked call to hns_roce_qp_remove() | 7.8 | 0.0010 | | | [CVE-2026-23451](https://patchblox.com/security/data/cve/CVE-2026-23451.md) | Routine | kernel-livepatch-SLE15-SP6_Update_31: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues we... | n/a | 0.0046 | | | [CVE-2026-31429](https://patchblox.com/security/data/cve/CVE-2026-31429.md) | Routine | net: skb: fix cross-cache free of KFENCE-allocated skb head | 6.6 | 0.0026 | | | [CVE-2025-40341](https://patchblox.com/security/data/cve/CVE-2025-40341.md) | Routine | futex: Don't leak robust_list pointer on exec race | 5.5 | 0.0025 | | | [CVE-2026-45901](https://patchblox.com/security/data/cve/CVE-2026-45901.md) | Routine | netfilter: nf_tables: revert commit_mutex usage in reset path | 5.5 | 0.0018 | | | [CVE-2026-45961](https://patchblox.com/security/data/cve/CVE-2026-45961.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: gfs2: fix memory leaks in gfs2_fill_super error... | 5.5 | 0.0016 | | | [CVE-2026-43191](https://patchblox.com/security/data/cve/CVE-2026-43191.md) | Routine | drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 | 5.5 | 0.0016 | | | [CVE-2026-52980](https://patchblox.com/security/data/cve/CVE-2026-52980.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: sched/fair: Clear rel_deadline when initializing... | 5.5 | 0.0016 | | | [CVE-2026-53039](https://patchblox.com/security/data/cve/CVE-2026-53039.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0016 | | | [CVE-2026-53258](https://patchblox.com/security/data/cve/CVE-2026-53258.md) | Routine | wifi: fix leak if split 6 GHz scanning fails | 5.5 | 0.0016 | | | [CVE-2026-45848](https://patchblox.com/security/data/cve/CVE-2026-45848.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL sock in aa_sock_file_perm De... | 5.5 | 0.0016 | | | [CVE-2026-45857](https://patchblox.com/security/data/cve/CVE-2026-45857.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: csiostor: Fix dereference of null pointer... | 5.5 | 0.0016 | | | [CVE-2026-45858](https://patchblox.com/security/data/cve/CVE-2026-45858.md) | Routine | ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 | 5.5 | 0.0016 | | | [CVE-2026-45870](https://patchblox.com/security/data/cve/CVE-2026-45870.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: auth_gss: fix memory leaks in XDR decodi... | 5.5 | 0.0016 | | | [CVE-2026-45884](https://patchblox.com/security/data/cve/CVE-2026-45884.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: apparmor: avoid per-cpu hold underflow in aa_get... | 5.5 | 0.0016 | | | [CVE-2026-45888](https://patchblox.com/security/data/cve/CVE-2026-45888.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: md/raid1: fix memory leak in raid1_run() raid1_... | 5.5 | 0.0016 | | | [CVE-2026-45922](https://patchblox.com/security/data/cve/CVE-2026-45922.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SY... | 5.5 | 0.0016 | | | [CVE-2026-45948](https://patchblox.com/security/data/cve/CVE-2026-45948.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ext4: fix memory leak in ext4_ext_shift_extents(... | 5.5 | 0.0016 | | | [CVE-2026-45964](https://patchblox.com/security/data/cve/CVE-2026-45964.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gss_auth kref leak in gss_alloc_msg... | 5.5 | 0.0016 | | | [CVE-2026-45965](https://patchblox.com/security/data/cve/CVE-2026-45965.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: apparmor: fix invalid deref of rawdata when expo... | 5.5 | 0.0016 | | | [CVE-2026-31560](https://patchblox.com/security/data/cve/CVE-2026-31560.md) | Routine | spi: spi-dw-dma: fix print error log when wait finish transaction | 5.5 | 0.0016 | | | [CVE-2026-43022](https://patchblox.com/security/data/cve/CVE-2026-43022.md) | Routine | Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists | 5.5 | 0.0016 | | | [CVE-2026-43036](https://patchblox.com/security/data/cve/CVE-2026-43036.md) | Routine | net: use skb_header_pointer() for TCPv4 GSO frag_off check | 5.5 | 0.0016 | | | [CVE-2026-43107](https://patchblox.com/security/data/cve/CVE-2026-43107.md) | Routine | xfrm: account XFRMA_IF_ID in aevent size calculation | 5.5 | 0.0016 | | | [CVE-2026-43492](https://patchblox.com/security/data/cve/CVE-2026-43492.md) | Routine | lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() | 5.5 | 0.0016 | | | [CVE-2026-46254](https://patchblox.com/security/data/cve/CVE-2026-46254.md) | Routine | AppArmor: Allow apparmor to handle unaligned dfa tables | 5.5 | 0.0016 | | | [CVE-2026-43034](https://patchblox.com/security/data/cve/CVE-2026-43034.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: set backing store type from query type... | 5.5 | 0.0016 | | | [CVE-2026-46079](https://patchblox.com/security/data/cve/CVE-2026-46079.md) | Routine | rbd: fix null-ptr-deref when device_add_disk() fails | 5.5 | 0.0014 | | | [CVE-2026-31596](https://patchblox.com/security/data/cve/CVE-2026-31596.md) | Routine | ocfs2: handle invalid dinode in ocfs2_group_extend | 6.6 | 0.0013 | | | [CVE-2026-45841](https://patchblox.com/security/data/cve/CVE-2026-45841.md) | Routine | netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO | 5.5 | 0.0013 | | | [CVE-2026-43089](https://patchblox.com/security/data/cve/CVE-2026-43089.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm_user: fix info leak in build_mapping() str... | 5.5 | 0.0013 | | | [CVE-2026-46161](https://patchblox.com/security/data/cve/CVE-2026-46161.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-46214](https://patchblox.com/security/data/cve/CVE-2026-46214.md) | Routine | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-31495](https://patchblox.com/security/data/cve/CVE-2026-31495.md) | Routine | netfilter: ctnetlink: use netlink policy range checks | 5.5 | 0.0013 | | | [CVE-2026-31752](https://patchblox.com/security/data/cve/CVE-2026-31752.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: bridge: br_nd_send: validate ND option lengths... | 5.5 | 0.0013 | | | [CVE-2026-43024](https://patchblox.com/security/data/cve/CVE-2026-43024.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: reject immediate NF_QUEUE... | 5.5 | 0.0013 | | | [CVE-2026-43035](https://patchblox.com/security/data/cve/CVE-2026-43035.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to i... | 5.5 | 0.0013 | | | [CVE-2026-43085](https://patchblox.com/security/data/cve/CVE-2026-43085.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: initialize nfgenmsg in... | 5.5 | 0.0013 | | | [CVE-2026-45838](https://patchblox.com/security/data/cve/CVE-2026-45838.md) | Routine | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 5.5 | 0.0013 | | | [CVE-2026-46046](https://patchblox.com/security/data/cve/CVE-2026-46046.md) | Routine | ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() | 5.5 | 0.0013 | | | [CVE-2026-46101](https://patchblox.com/security/data/cve/CVE-2026-46101.md) | Routine | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 5.5 | 0.0013 | | | [CVE-2026-43124](https://patchblox.com/security/data/cve/CVE-2026-43124.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: pstore: ram_core: fix incorrect success return w... | 5.5 | 0.0013 | | | [CVE-2026-43132](https://patchblox.com/security/data/cve/CVE-2026-43132.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity: correctly handle dm_bufio_client_crea... | 5.5 | 0.0013 | | | [CVE-2026-43157](https://patchblox.com/security/data/cve/CVE-2026-43157.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: fix bitmap leaks The RX/TX f... | 5.5 | 0.0013 | | | [CVE-2026-43238](https://patchblox.com/security/data/cve/CVE-2026-43238.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbedit: fix divide-by-zero in tc... | 5.5 | 0.0013 | | | [CVE-2026-45974](https://patchblox.com/security/data/cve/CVE-2026-45974.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid leaf access in btrfs_quota_en... | 5.5 | 0.0013 | | | [CVE-2026-46005](https://patchblox.com/security/data/cve/CVE-2026-46005.md) | Routine | xfs: fix a resource leak in xfs_alloc_buftarg() | 5.5 | 0.0013 | | | [CVE-2026-53060](https://patchblox.com/security/data/cve/CVE-2026-53060.md) | Routine | dm cache metadata: fix memory leak on metadata abort retry | 5.5 | 0.0013 | | | [CVE-2026-43175](https://patchblox.com/security/data/cve/CVE-2026-43175.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: clk: rs9: Reserve 8 struct clk_hw slots for for... | 5.5 | 0.0013 | | | [CVE-2026-43080](https://patchblox.com/security/data/cve/CVE-2026-43080.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: l2tp: Drop large packets with UDP encap syzbot... | 5.5 | 0.0013 | | | [CVE-2026-53103](https://patchblox.com/security/data/cve/CVE-2026-53103.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix potential deadlock in mt... | 5.5 | 0.0013 | | | [CVE-2026-53122](https://patchblox.com/security/data/cve/CVE-2026-53122.md) | Routine | btrfs: fix deadlock between reflink and transaction commit when using flushoncommit | 5.5 | 0.0013 | | | [CVE-2026-43010](https://patchblox.com/security/data/cve/CVE-2026-43010.md) | Routine | bpf: Reject sleepable kprobe_multi programs at attach time | 5.5 | 0.0012 | | | [CVE-2026-43014](https://patchblox.com/security/data/cve/CVE-2026-43014.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: macb: properly unregister fixed rate clocks... | 5.5 | 0.0012 | | | [CVE-2026-43094](https://patchblox.com/security/data/cve/CVE-2026-43094.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ixgbevf: add missing negotiate_features op to Hy... | 5.5 | 0.0012 | | | [CVE-2026-43130](https://patchblox.com/security/data/cve/CVE-2026-43130.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Flush dev-IOTLB only when PCIe devic... | 5.5 | 0.0012 | | | [CVE-2026-43145](https://patchblox.com/security/data/cve/CVE-2026-43145.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: remoteproc: imx_rproc: Fix invalid loaded resour... | 5.5 | 0.0012 | | | [CVE-2026-43167](https://patchblox.com/security/data/cve/CVE-2026-43167.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: always flush state and policy upon NETDEV_... | 5.5 | 0.0012 | | | [CVE-2026-43171](https://patchblox.com/security/data/cve/CVE-2026-43171.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't dump the entire memory region T... | 5.5 | 0.0012 | | | [CVE-2026-45997](https://patchblox.com/security/data/cve/CVE-2026-45997.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: sd: fix missing put_disk() when device_add... | 5.5 | 0.0012 | | | [CVE-2026-46071](https://patchblox.com/security/data/cve/CVE-2026-46071.md) | Routine | KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 | 5.5 | 0.0012 | | | [CVE-2026-46291](https://patchblox.com/security/data/cve/CVE-2026-46291.md) | Routine | crypto: caam - guard HMAC key hex dumps in hash_digest_key | 5.5 | 0.0012 | | | [CVE-2026-53015](https://patchblox.com/security/data/cve/CVE-2026-53015.md) | Routine | erofs: unify lcn as u64 for 32-bit platforms | 5.5 | 0.0012 | | | [CVE-2026-53139](https://patchblox.com/security/data/cve/CVE-2026-53139.md) | Routine | drm/v3d: Skip CSD when it has zeroed workgroups | 5.5 | 0.0012 | | | [CVE-2026-53287](https://patchblox.com/security/data/cve/CVE-2026-53287.md) | Routine | audit: fix incorrect inheritable capability in CAPSET records | 5.5 | 0.0012 | | | [CVE-2026-31438](https://patchblox.com/security/data/cve/CVE-2026-31438.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel BUG in netfs_limit_iter() for... | 5.5 | 0.0012 | | | [CVE-2026-31646](https://patchblox.com/security/data/cve/CVE-2026-31646.md) | Routine | net: lan966x: fix page_pool error handling in lan966x_fdma_rx_alloc_page_pool() | 5.5 | 0.0012 | | | [CVE-2026-31647](https://patchblox.com/security/data/cve/CVE-2026-31647.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: idpf: fix PREEMPT_RT raw/bh spinlock nesting for... | 5.5 | 0.0012 | | | [CVE-2026-43081](https://patchblox.com/security/data/cve/CVE-2026-43081.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net: ipa: fix GENERIC_CMD register field masks f... | 5.5 | 0.0012 | | | [CVE-2026-43086](https://patchblox.com/security/data/cve/CVE-2026-43086.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix NULL deref in ip_vs_add_service error... | 5.5 | 0.0012 | | | [CVE-2026-43090](https://patchblox.com/security/data/cve/CVE-2026-43090.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: fix refcount leak in xfrm_migrate_policy_f... | 5.5 | 0.0012 | | | [CVE-2026-43092](https://patchblox.com/security/data/cve/CVE-2026-43092.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: xsk: validate MTU against usable frame size on b... | 5.5 | 0.0012 | | | [CVE-2026-43161](https://patchblox.com/security/data/cve/CVE-2026-43161.md) | Routine | iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode | 5.5 | 0.0012 | | | [CVE-2026-53285](https://patchblox.com/security/data/cve/CVE-2026-53285.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Wrap DCN32 phantom-plane alloca... | 5.5 | 0.0012 | | | [CVE-2026-43351](https://patchblox.com/security/data/cve/CVE-2026-43351.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Eagerly init vgic dist/redist on vgi... | 5.5 | 0.0012 | | | [CVE-2026-53274](https://patchblox.com/security/data/cve/CVE-2026-53274.md) | Routine | net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS | 5.5 | 0.0012 | | | [CVE-2026-31664](https://patchblox.com/security/data/cve/CVE-2026-31664.md) | Routine | xfrm: clear trailing padding in build_polexpire() | 5.5 | 0.0012 | | | [CVE-2026-31670](https://patchblox.com/security/data/cve/CVE-2026-31670.md) | Routine | net: rfkill: prevent unlimited numbers of rfkill events from being created | 5.5 | 0.0012 | | | [CVE-2026-43053](https://patchblox.com/security/data/cve/CVE-2026-43053.md) | Routine | xfs: close crash window in attr dabtree inactivation | 5.5 | 0.0012 | | | [CVE-2026-53263](https://patchblox.com/security/data/cve/CVE-2026-53263.md) | Routine | 6lowpan: fix off-by-one in multicast context address compression | 5.5 | 0.0012 | | | [CVE-2026-43470](https://patchblox.com/security/data/cve/CVE-2026-43470.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: nfs: return EISDIR on nfs3_proc_create if d_alia... | 5.5 | 0.0012 | | | [CVE-2026-46314](https://patchblox.com/security/data/cve/CVE-2026-46314.md) | Routine | drm/v3d: Reject empty multisync extension to prevent infinite loop | 5.5 | 0.0012 | | | [CVE-2026-43119](https://patchblox.com/security/data/cve/CVE-2026-43119.md) | Routine | Bluetooth: hci_sync: annotate data-races around hdev->req_status | 5.5 | 0.0011 | | | [CVE-2026-43337](https://patchblox.com/security/data/cve/CVE-2026-43337.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix NULL pointer dereference in... | 5.5 | 0.0011 | | | [CVE-2026-43457](https://patchblox.com/security/data/cve/CVE-2026-43457.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mctp: i2c: fix skb memory leak in receive path... | 5.5 | 0.0011 | | | [CVE-2026-43471](https://patchblox.com/security/data/cve/CVE-2026-43471.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix possible NULL pointer deref... | 5.5 | 0.0011 | | | [CVE-2026-46051](https://patchblox.com/security/data/cve/CVE-2026-46051.md) | Routine | md/raid5: fix soft lockup in retry_aligned_read() | 5.5 | 0.0010 | | | [CVE-2026-46050](https://patchblox.com/security/data/cve/CVE-2026-46050.md) | Routine | md/raid10: fix deadlock with check operation and nowait requests | 5.5 | 0.0010 | | | [CVE-2026-23394](https://patchblox.com/security/data/cve/CVE-2026-23394.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Give up GC if MSG_PEEK intervened | 4.7 | 0.0010 | | | [CVE-2026-31466](https://patchblox.com/security/data/cve/CVE-2026-31466.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: fix folio isn't locked in softle... | 5.5 | 0.0009 | | | [CVE-2026-31499](https://patchblox.com/security/data/cve/CVE-2026-31499.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del... | 5.5 | 0.0009 | | | [CVE-2026-46063](https://patchblox.com/security/data/cve/CVE-2026-46063.md) | Routine | x86/shstk: Prevent deadlock during shstk sigreturn | 5.5 | 0.0009 | | | [CVE-2026-43468](https://patchblox.com/security/data/cve/CVE-2026-43468.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix deadlock between devlink lock and... | 5.5 | 0.0009 | | | [CVE-2026-43415](https://patchblox.com/security/data/cve/CVE-2026-43415.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix SError in ufshcd_rtc_work()... | 4.7 | 0.0009 | | --- Data as of 2026-11-10T20:03:11Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.