{ "fix": "OPENSUSE-SU-2026:21910-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-21910-1", "summary": "OPENSUSE-SU-2026:21910-1, released September 22, 2026, fixes 885 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 13 packages", "released": "2026-09-22T15:26:20Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-72339, rated Critical", "supported": true, "cveCount": 885, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.00873, "maxCvss": 10, "vendorAdvisory": "https://osv.dev/vulnerability/openSUSE-SU-2026:21910-1", "appliesTo": [ { "product": "dtb-aarch64", "productUrl": "https://patchblox.com/security/product/linux/dtb-aarch64", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1", "supported": true }, { "product": "kernel-64kb", "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1", "supported": true }, { "product": "kernel-azure", "productUrl": "https://patchblox.com/security/product/linux/kernel-azure", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1", "supported": true }, { "product": "kernel-default", "productUrl": "https://patchblox.com/security/product/linux/kernel-default", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1", "supported": true }, { "product": "kernel-default-base", "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1.160000.2.22", "supported": true }, { "product": "kernel-docs", "productUrl": "https://patchblox.com/security/product/linux/kernel-docs", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1", "supported": true }, { "product": "kernel-kvmsmall", "productUrl": "https://patchblox.com/security/product/linux/kernel-kvmsmall", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1", "supported": true }, { "product": "kernel-obs-build", "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1", "supported": true }, { "product": "kernel-obs-qa", "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-qa", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1", "supported": true }, { "product": "kernel-rt", "productUrl": "https://patchblox.com/security/product/linux/kernel-rt", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1", "supported": true }, { "product": "kernel-source", "productUrl": "https://patchblox.com/security/product/linux/kernel-source", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1", "supported": true }, { "product": "kernel-syms", "productUrl": "https://patchblox.com/security/product/linux/kernel-syms", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1", "supported": true }, { "product": "kernel-zfcpdump", "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.38.1", "supported": true } ], "cves": [ { "cveId": "CVE-2026-72084", "url": "https://patchblox.com/security/cve/CVE-2026-72084", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72339", "url": "https://patchblox.com/security/cve/CVE-2026-72339", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on b...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72466", "url": "https://patchblox.com/security/cve/CVE-2026-72466", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80609", "url": "https://patchblox.com/security/cve/CVE-2026-80609", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe-\u003Elen_list[...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00738, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72296", "url": "https://patchblox.com/security/cve/CVE-2026-72296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00735, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72234", "url": "https://patchblox.com/security/cve/CVE-2026-72234", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb-\u003Edata only a...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00734, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72069", "url": "https://patchblox.com/security/cve/CVE-2026-72069", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00728, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72323", "url": "https://patchblox.com/security/cve/CVE-2026-72323", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72473", "url": "https://patchblox.com/security/cve/CVE-2026-72473", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC comple...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00721, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72020", "url": "https://patchblox.com/security/cve/CVE-2026-72020", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72251", "url": "https://patchblox.com/security/cve/CVE-2026-72251", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72137", "url": "https://patchblox.com/security/cve/CVE-2026-72137", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: nat_keepalive: avoid double free on send e...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.0071, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72399", "url": "https://patchblox.com/security/cve/CVE-2026-72399", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for x...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00682, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72366", "url": "https://patchblox.com/security/cve/CVE-2026-72366", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle as...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00663, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72317", "url": "https://patchblox.com/security/cve/CVE-2026-72317", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connec...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00644, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72046", "url": "https://patchblox.com/security/cve/CVE-2026-72046", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gve: fix header buffer corruption with header-sp...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72217", "url": "https://patchblox.com/security/cve/CVE-2026-72217", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores bef...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72221", "url": "https://patchblox.com/security/cve/CVE-2026-72221", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callbac...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72222", "url": "https://patchblox.com/security/cve/CVE-2026-72222", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80603", "url": "https://patchblox.com/security/cve/CVE-2026-80603", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00595, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72421", "url": "https://patchblox.com/security/cve/CVE-2026-72421", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don\u0027t ignore error route in local/mai...", "priority": "Urgent", "severity": "critical", "cvss": 10, "epss": 0.00571, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64541", "url": "https://patchblox.com/security/cve/CVE-2026-64541", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pinn...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00565, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64319", "url": "https://patchblox.com/security/cve/CVE-2026-64319", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bound...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00563, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64056", "url": "https://patchblox.com/security/cve/CVE-2026-64056", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port Th...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64089", "url": "https://patchblox.com/security/cve/CVE-2026-64089", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64125", "url": "https://patchblox.com/security/cve/CVE-2026-64125", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64535", "url": "https://patchblox.com/security/cve/CVE-2026-64535", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00547, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74394", "url": "https://patchblox.com/security/cve/CVE-2026-74394", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate dat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.0054, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68127", "url": "https://patchblox.com/security/cve/CVE-2026-68127", "title": "ila: reload IPv6 header after pskb_may_pull in checksum adjust", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68144", "url": "https://patchblox.com/security/cve/CVE-2026-68144", "title": "phonet: pep: fix use-after-free in pep_get_sb()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72494", "url": "https://patchblox.com/security/cve/CVE-2026-72494", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with comp...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80557", "url": "https://patchblox.com/security/cve/CVE-2026-80557", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via m...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63984", "url": "https://patchblox.com/security/cve/CVE-2026-63984", "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64047", "url": "https://patchblox.com/security/cve/CVE-2026-64047", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64055", "url": "https://patchblox.com/security/cve/CVE-2026-64055", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74406", "url": "https://patchblox.com/security/cve/CVE-2026-74406", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64551", "url": "https://patchblox.com/security/cve/CVE-2026-64551", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74255", "url": "https://patchblox.com/security/cve/CVE-2026-74255", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc_l2_send_msg() Syzbot repo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80681", "url": "https://patchblox.com/security/cve/CVE-2026-80681", "title": "vxlan: re-fetch eth header after route_shortcircuit()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64000", "url": "https://patchblox.com/security/cve/CVE-2026-64000", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervisio...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64033", "url": "https://patchblox.com/security/cve/CVE-2026-64033", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Fix use-after-free in path file creat...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00488, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74345", "url": "https://patchblox.com/security/cve/CVE-2026-74345", "title": "RDMA/siw: Fix endpoint/socket association handling", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00477, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74545", "url": "https://patchblox.com/security/cve/CVE-2026-74545", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: rtase: fix double free of multi-frag skb on DMA...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64232", "url": "https://patchblox.com/security/cve/CVE-2026-64232", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_in...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00431, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53309", "url": "https://patchblox.com/security/cve/CVE-2026-53309", "title": "ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80721", "url": "https://patchblox.com/security/cve/CVE-2026-80721", "title": "Bluetooth: ISO: ensure no dangling hcon references in iso_conn", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00375, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74665", "url": "https://patchblox.com/security/cve/CVE-2026-74665", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00373, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68121", "url": "https://patchblox.com/security/cve/CVE-2026-68121", "title": "pppoe: reload header pointer after dev_hard_header()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00367, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64534", "url": "https://patchblox.com/security/cve/CVE-2026-64534", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_un...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00323, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68354", "url": "https://patchblox.com/security/cve/CVE-2026-68354", "title": "firewire: net: Fix fragmented datagram reassembly", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00282, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68198", "url": "https://patchblox.com/security/cve/CVE-2026-68198", "title": "wifi: ath6kl: fix use-after-free in aggr_reset_state()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68402", "url": "https://patchblox.com/security/cve/CVE-2026-68402", "title": "wifi: cfg80211: bound element ID read when checking non-inheritance", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68360", "url": "https://patchblox.com/security/cve/CVE-2026-68360", "title": "hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68359", "url": "https://patchblox.com/security/cve/CVE-2026-68359", "title": "hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68212", "url": "https://patchblox.com/security/cve/CVE-2026-68212", "title": "media: saa7134: Fix a possible memory leak in saa7134_video_init1", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68214", "url": "https://patchblox.com/security/cve/CVE-2026-68214", "title": "media: rtl2832: fix use-after-free in rtl2832_remove()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68218", "url": "https://patchblox.com/security/cve/CVE-2026-68218", "title": "media: pci: dm1105: Free allocated workqueue", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68180", "url": "https://patchblox.com/security/cve/CVE-2026-68180", "title": "intel_th: fix MSC output device reference leak", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68395", "url": "https://patchblox.com/security/cve/CVE-2026-68395", "title": "ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68207", "url": "https://patchblox.com/security/cve/CVE-2026-68207", "title": "media: ti: vpe: unwind v4l2 device registration on probe error", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68166", "url": "https://patchblox.com/security/cve/CVE-2026-68166", "title": "userfaultfd: prevent registration of special VMAs", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68349", "url": "https://patchblox.com/security/cve/CVE-2026-68349", "title": "wifi: carl9170: fix buffer overflow in rx_stream failover path", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00204, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72288", "url": "https://patchblox.com/security/cve/CVE-2026-72288", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64565", "url": "https://patchblox.com/security/cve/CVE-2026-64565", "title": "Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68132", "url": "https://patchblox.com/security/cve/CVE-2026-68132", "title": "super: fix emergency thaw deadlock on frozen block devices", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68325", "url": "https://patchblox.com/security/cve/CVE-2026-68325", "title": "iommu/amd: Bound the early ACPI HID map", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68406", "url": "https://patchblox.com/security/cve/CVE-2026-68406", "title": "wifi: cfg80211: validate PMSR FTM preamble range", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68357", "url": "https://patchblox.com/security/cve/CVE-2026-68357", "title": "watchdog: pretimeout: Fix UAF in watchdog_unregister_governor()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68210", "url": "https://patchblox.com/security/cve/CVE-2026-68210", "title": "media: stm32: dcmi: unregister notifier on probe failure", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68310", "url": "https://patchblox.com/security/cve/CVE-2026-68310", "title": "wifi: mt76: mt7915: guard HE capability lookups", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68407", "url": "https://patchblox.com/security/cve/CVE-2026-68407", "title": "wifi: nl80211: free RNR data on MBSSID mismatch", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68399", "url": "https://patchblox.com/security/cve/CVE-2026-68399", "title": "bpf: Fix UAF in sock clone early bailouts", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63828", "url": "https://patchblox.com/security/cve/CVE-2026-63828", "title": "apparmor: mediate the implicit connect of TCP fast open sendmsg", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0017, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64562", "url": "https://patchblox.com/security/cve/CVE-2026-64562", "title": "KVM: nVMX: Hide shadow VMCS right after VMCLEAR", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68340", "url": "https://patchblox.com/security/cve/CVE-2026-68340", "title": "hwmon: occ: validate poll response sensor blocks", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00148, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52991", "url": "https://patchblox.com/security/cve/CVE-2026-52991", "title": "sched/psi: fix race between file release and pressure write", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74712", "url": "https://patchblox.com/security/cve/CVE-2026-74712", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create_direct_ke...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80693", "url": "https://patchblox.com/security/cve/CVE-2026-80693", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to th...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74517", "url": "https://patchblox.com/security/cve/CVE-2026-74517", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Cancel delayed I/O APIC EOI handling b...", "priority": "Urgent", "severity": "critical", "cvss": 9.3, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68391", "url": "https://patchblox.com/security/cve/CVE-2026-68391", "title": "Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68377", "url": "https://patchblox.com/security/cve/CVE-2026-68377", "title": "net/sched: act_tunnel_key: Defer dst_release to RCU callback", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64017", "url": "https://patchblox.com/security/cve/CVE-2026-64017", "title": "blk-mq: pop cached request if it is usable", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68153", "url": "https://patchblox.com/security/cve/CVE-2026-68153", "title": "libceph: remove debugfs files before client teardown", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68236", "url": "https://patchblox.com/security/cve/CVE-2026-68236", "title": "drm/amd/display: set new_stream to NULL after release", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68142", "url": "https://patchblox.com/security/cve/CVE-2026-68142", "title": "geneve: require CAP_NET_ADMIN in the device netns for changelink", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00124, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63999", "url": "https://patchblox.com/security/cve/CVE-2026-63999", "title": "ethtool: rss: fix indir_table and hkey leak on get_rxfh failure", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53077", "url": "https://patchblox.com/security/cve/CVE-2026-53077", "title": "net/rds: Restrict use of RDS/IB to the initial network namespace", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68143", "url": "https://patchblox.com/security/cve/CVE-2026-68143", "title": "net: slip: serialize receive against buffer reallocation", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00107, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52929", "url": "https://patchblox.com/security/cve/CVE-2026-52929", "title": "sctp: stream: fully roll back denied add-stream state", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00873, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72398", "url": "https://patchblox.com/security/cve/CVE-2026-72398", "title": "sctp: add INIT verification after cookie unpacking", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00803, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64320", "url": "https://patchblox.com/security/cve/CVE-2026-64320", "title": "nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00803, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63887", "url": "https://patchblox.com/security/cve/CVE-2026-63887", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nscsi: target: iscsi: Bound iscsi_encode_text_outp...", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00778, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63888", "url": "https://patchblox.com/security/cve/CVE-2026-63888", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00778, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68159", "url": "https://patchblox.com/security/cve/CVE-2026-68159", "title": "libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45860", "url": "https://patchblox.com/security/cve/CVE-2026-45860", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: increase the connection...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72083", "url": "https://patchblox.com/security/cve/CVE-2026-72083", "title": "kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72502", "url": "https://patchblox.com/security/cve/CVE-2026-72502", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74321", "url": "https://patchblox.com/security/cve/CVE-2026-74321", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrf...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80646", "url": "https://patchblox.com/security/cve/CVE-2026-80646", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00716, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63922", "url": "https://patchblox.com/security/cve/CVE-2026-63922", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63924", "url": "https://patchblox.com/security/cve/CVE-2026-63924", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64268", "url": "https://patchblox.com/security/cve/CVE-2026-64268", "title": "RDMA/siw: bound Read Response placement to the RREAD length", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68154", "url": "https://patchblox.com/security/cve/CVE-2026-68154", "title": "libceph: reject zero bucket types in crush_decode", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68158", "url": "https://patchblox.com/security/cve/CVE-2026-68158", "title": "libceph: Fix multiplication overflow in decode_new_up_state_weight()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64269", "url": "https://patchblox.com/security/cve/CVE-2026-64269", "title": "RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68155", "url": "https://patchblox.com/security/cve/CVE-2026-68155", "title": "libceph: Reject monmaps advertising zero monitors", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72242", "url": "https://patchblox.com/security/cve/CVE-2026-72242", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68157", "url": "https://patchblox.com/security/cve/CVE-2026-68157", "title": "libceph: guard missing CRUSH type name lookup", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74282", "url": "https://patchblox.com/security/cve/CVE-2026-74282", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64303", "url": "https://patchblox.com/security/cve/CVE-2026-64303", "title": "spi: fsl-lpspi: terminate the RX channel on TX prepare failure path", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68156", "url": "https://patchblox.com/security/cve/CVE-2026-68156", "title": "libceph: refresh auth-\u003Eauthorizer_buf{,_len} after authorizer update", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68161", "url": "https://patchblox.com/security/cve/CVE-2026-68161", "title": "sctp: close UDP tunnel sockets during netns teardown", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00682, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46195", "url": "https://patchblox.com/security/cve/CVE-2026-46195", "title": "smb: client: validate dacloffset before building DACL pointers", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00675, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72464", "url": "https://patchblox.com/security/cve/CVE-2026-72464", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed r...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00675, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72254", "url": "https://patchblox.com/security/cve/CVE-2026-72254", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: reject fib expression on the...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00665, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72107", "url": "https://patchblox.com/security/cve/CVE-2026-72107", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm era: fix out-of-bounds memory access for non-...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0065, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74316", "url": "https://patchblox.com/security/cve/CVE-2026-74316", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4_drop_revoked_s...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0063, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72330", "url": "https://patchblox.com/security/cve/CVE-2026-72330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_re...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00622, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72035", "url": "https://patchblox.com/security/cve/CVE-2026-72035", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: Replace direct dequeue ca...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00589, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68300", "url": "https://patchblox.com/security/cve/CVE-2026-68300", "title": "sctp: auth: verify auth requirement when auth_chunk is NULL", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0058, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80590", "url": "https://patchblox.com/security/cve/CVE-2026-80590", "title": "inet: frags: strip GSO state from fragments before reassembly", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64545", "url": "https://patchblox.com/security/cve/CVE-2026-64545", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_re...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00578, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53228", "url": "https://patchblox.com/security/cve/CVE-2026-53228", "title": "ipv6: sit: reload inner IPv6 header after GSO offloads", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64577", "url": "https://patchblox.com/security/cve/CVE-2026-64577", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gtp: check skb_pull_data() return in gtp1u_send_...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00576, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46133", "url": "https://patchblox.com/security/cve/CVE-2026-46133", "title": "RDMA/rxe: Reject unknown opcodes before ICRC processing", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00574, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68123", "url": "https://patchblox.com/security/cve/CVE-2026-68123", "title": "openvswitch: fix GSO userspace truncation underflow", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74737", "url": "https://patchblox.com/security/cve/CVE-2026-74737", "title": "net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00552, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68136", "url": "https://patchblox.com/security/cve/CVE-2026-68136", "title": "net: gro: fix double aggregation of flush-marked skbs", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00539, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43125", "url": "https://patchblox.com/security/cve/CVE-2026-43125", "title": "dlm: validate length in dlm_search_rsb_tree", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00538, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64450", "url": "https://patchblox.com/security/cve/CVE-2026-64450", "title": "tipc: fix out-of-bounds read in broadcast Gap ACK blocks", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68137", "url": "https://patchblox.com/security/cve/CVE-2026-68137", "title": "net/x25: fix use-after-free in x25_kill_by_neigh()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74743", "url": "https://patchblox.com/security/cve/CVE-2026-74743", "title": "macvlan: inherit needed_headroom and needed_tailroom from lowerdev", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00536, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68096", "url": "https://patchblox.com/security/cve/CVE-2026-68096", "title": "audit: fix recursive locking deadlock in audit_dupe_exe()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00533, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63808", "url": "https://patchblox.com/security/cve/CVE-2026-63808", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64113", "url": "https://patchblox.com/security/cve/CVE-2026-64113", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00527, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68117", "url": "https://patchblox.com/security/cve/CVE-2026-68117", "title": "tipc: clear sock-\u003Esk on the failed-insert path in tipc_sk_create()", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68141", "url": "https://patchblox.com/security/cve/CVE-2026-68141", "title": "net/af_iucv: fix NULL deref in afiucv_hs_callback_syn()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00523, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63993", "url": "https://patchblox.com/security/cve/CVE-2026-63993", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nvxlan: do not reuse cached ip_hdr() value after s...", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64007", "url": "https://patchblox.com/security/cve/CVE-2026-64007", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74495", "url": "https://patchblox.com/security/cve/CVE-2026-74495", "title": "igbvf: Fix leak in TX DMA error cleanup", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74669", "url": "https://patchblox.com/security/cve/CVE-2026-74669", "title": "ipvs: clear IPv4 options after rebasing tunnel ICMP errors", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80558", "url": "https://patchblox.com/security/cve/CVE-2026-80558", "title": "libceph: Avoid using invalid osd indices from primary_temp", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80561", "url": "https://patchblox.com/security/cve/CVE-2026-80561", "title": "libceph: fix multiple unsafe decodes in decode_locker()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63992", "url": "https://patchblox.com/security/cve/CVE-2026-63992", "title": "kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.1, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64355", "url": "https://patchblox.com/security/cve/CVE-2026-64355", "title": "bpf: Reject fragmented frames in devmap", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74616", "url": "https://patchblox.com/security/cve/CVE-2026-74616", "title": "xdp: reject clones that overrun skb_shared_info tailroom", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63801", "url": "https://patchblox.com/security/cve/CVE-2026-63801", "title": "tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74744", "url": "https://patchblox.com/security/cve/CVE-2026-74744", "title": "ipvlan: inherit needed_headroom and needed_tailroom from phy_dev", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68315", "url": "https://patchblox.com/security/cve/CVE-2026-68315", "title": "sctp: validate stream count in sctp_process_strreset_inreq()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00512, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68129", "url": "https://patchblox.com/security/cve/CVE-2026-68129", "title": "gve: fix Rx queue stall on alloc failure", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00511, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74730", "url": "https://patchblox.com/security/cve/CVE-2026-74730", "title": "NFS: Pin the \u0027struct nfs_server\u0027 during a FREE_STATEID call", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0051, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68299", "url": "https://patchblox.com/security/cve/CVE-2026-68299", "title": "vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64048", "url": "https://patchblox.com/security/cve/CVE-2026-64048", "title": "python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64312", "url": "https://patchblox.com/security/cve/CVE-2026-64312", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74523", "url": "https://patchblox.com/security/cve/CVE-2026-74523", "title": "qede: sync udp_tunnel ports outside qede_lock in the recovery path", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74717", "url": "https://patchblox.com/security/cve/CVE-2026-74717", "title": "net/mlx5: fw_tracer, return NULL on create error", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74705", "url": "https://patchblox.com/security/cve/CVE-2026-74705", "title": "udp: fix potential use-after-free in tunnel segmentation", "priority": "High", "severity": "Moderate", "cvss": 10, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64102", "url": "https://patchblox.com/security/cve/CVE-2026-64102", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72438", "url": "https://patchblox.com/security/cve/CVE-2026-72438", "title": "md/raid10: fix writes_pending and barrier reference leaks on discard failures", "priority": "High", "severity": "Low", "cvss": 7.5, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68082", "url": "https://patchblox.com/security/cve/CVE-2026-68082", "title": "libceph: fix two unsafe bare decodes in decode_lockers()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00499, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68426", "url": "https://patchblox.com/security/cve/CVE-2026-68426", "title": "xfrm: fix stale skb-\u003Eprev after async crypto steals a GSO segment", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00498, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72440", "url": "https://patchblox.com/security/cve/CVE-2026-72440", "title": "md/raid1: fix writes_pending and barrier reference leaks on write failures", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00498, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74612", "url": "https://patchblox.com/security/cve/CVE-2026-74612", "title": "veth: fix skb length accounting after XDP frag adjustment", "priority": "High", "severity": "Moderate", "cvss": 10, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46115", "url": "https://patchblox.com/security/cve/CVE-2026-46115", "title": "block: add pgmap check to biovec_phys_mergeable", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74269", "url": "https://patchblox.com/security/cve/CVE-2026-74269", "title": "bnxt: fix head underflow on XDP head-grow", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74474", "url": "https://patchblox.com/security/cve/CVE-2026-74474", "title": "vxlan: use pskb_network_may_pull() for transmit path header pulls", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74723", "url": "https://patchblox.com/security/cve/CVE-2026-74723", "title": "btrfs: lzo: reject inline extents without valid headers", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74476", "url": "https://patchblox.com/security/cve/CVE-2026-74476", "title": "veth: convert frag_list skbs before running XDP", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53264", "url": "https://patchblox.com/security/cve/CVE-2026-53264", "title": "net/sched: act_api: use RCU with deferred freeing for action lifecycle", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00485, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80714", "url": "https://patchblox.com/security/cve/CVE-2026-80714", "title": "ipvs: do not propagate one-packet flag to synced conns", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53284", "url": "https://patchblox.com/security/cve/CVE-2026-53284", "title": "btrfs: only release the dirty pages io tree after successful writes", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74550", "url": "https://patchblox.com/security/cve/CVE-2026-74550", "title": "net: do not send ICMP/NDISC Redirects when peer allocation fails", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74695", "url": "https://patchblox.com/security/cve/CVE-2026-74695", "title": "netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68302", "url": "https://patchblox.com/security/cve/CVE-2026-68302", "title": "amt: re-read skb header pointers after every pull", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00477, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64148", "url": "https://patchblox.com/security/cve/CVE-2026-64148", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: pds_core: fix error handling in pdsc_devcmd_wait...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00469, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52946", "url": "https://patchblox.com/security/cve/CVE-2026-52946", "title": "fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72100", "url": "https://patchblox.com/security/cve/CVE-2026-72100", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of lim...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00464, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64383", "url": "https://patchblox.com/security/cve/CVE-2026-64383", "title": "smb: client: fix double-free in SMB2_flush() replay", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64384", "url": "https://patchblox.com/security/cve/CVE-2026-64384", "title": "smb: client: fix change notify replay double-free", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64385", "url": "https://patchblox.com/security/cve/CVE-2026-64385", "title": "smb: client: fix double-free in SMB2_ioctl() replay", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64386", "url": "https://patchblox.com/security/cve/CVE-2026-64386", "title": "smb: client: fix query_info() replay double-free", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64387", "url": "https://patchblox.com/security/cve/CVE-2026-64387", "title": "smb: client: fix query directory replay double-free", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74475", "url": "https://patchblox.com/security/cve/CVE-2026-74475", "title": "vxlan: use neigh_ha_snapshot() in route_shortcircuit()", "priority": "High", "severity": "Low", "cvss": 10, "epss": 0.00454, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64380", "url": "https://patchblox.com/security/cve/CVE-2026-64380", "title": "smb: client: harden POSIX SID length parsing", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00443, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64003", "url": "https://patchblox.com/security/cve/CVE-2026-64003", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Run queues for all non-SDEV_DEL devi...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68120", "url": "https://patchblox.com/security/cve/CVE-2026-68120", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64162", "url": "https://patchblox.com/security/cve/CVE-2026-64162", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00435, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74598", "url": "https://patchblox.com/security/cve/CVE-2026-74598", "title": "ipv6: fix Route Information option length validation", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74581", "url": "https://patchblox.com/security/cve/CVE-2026-74581", "title": "net: ipv6: clear suppressed fib6 rule result", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00421, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64368", "url": "https://patchblox.com/security/cve/CVE-2026-64368", "title": "mm/slab: do not limit zeroing to orig_size when only red zoning is enabled", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00417, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68352", "url": "https://patchblox.com/security/cve/CVE-2026-68352", "title": "wifi: ath6kl: fix OOB read from firmware IE lengths in connect event", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00415, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68196", "url": "https://patchblox.com/security/cve/CVE-2026-68196", "title": "wifi: wilc1000: validate assoc response length before subtracting header", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00413, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68192", "url": "https://patchblox.com/security/cve/CVE-2026-68192", "title": "wifi: brcmfmac: make release_scratchbuffers idempotent", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00408, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74556", "url": "https://patchblox.com/security/cve/CVE-2026-74556", "title": "scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80586", "url": "https://patchblox.com/security/cve/CVE-2026-80586", "title": "mptcp: options: reset DSS fields in case of unexpected size", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00399, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72469", "url": "https://patchblox.com/security/cve/CVE-2026-72469", "title": "xprtrdma: Fix ep kref imbalance on ADDR_CHANGE", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00398, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46135", "url": "https://patchblox.com/security/cve/CVE-2026-46135", "title": "nvmet-tcp: fix race between ICReq handling and queue teardown", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00397, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68199", "url": "https://patchblox.com/security/cve/CVE-2026-68199", "title": "wifi: ath6kl: fix OOB access from firmware ADDBA window size", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00383, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80589", "url": "https://patchblox.com/security/cve/CVE-2026-80589", "title": "block: stop the timeout timer when releasing a never added disk", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64210", "url": "https://patchblox.com/security/cve/CVE-2026-64210", "title": "net/mlx5e: xsk: Fix unlocked writing to ICOSQ", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.0037, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68433", "url": "https://patchblox.com/security/cve/CVE-2026-68433", "title": "libceph: bound get_version reply decode to front len", "priority": "High", "severity": "Low", "cvss": 8.6, "epss": 0.00364, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63889", "url": "https://patchblox.com/security/cve/CVE-2026-63889", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00359, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64313", "url": "https://patchblox.com/security/cve/CVE-2026-64313", "title": "crypto: ecc - Fix carry overflow in vli multiplication", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64364", "url": "https://patchblox.com/security/cve/CVE-2026-64364", "title": "HID: multitouch: fix out-of-bounds bit access on mt_io_flags", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00355, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64382", "url": "https://patchblox.com/security/cve/CVE-2026-64382", "title": "smb: client: fix double-free in SMB2_open() replay", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00354, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46304", "url": "https://patchblox.com/security/cve/CVE-2026-46304", "title": "nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00349, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63925", "url": "https://patchblox.com/security/cve/CVE-2026-63925", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64093", "url": "https://patchblox.com/security/cve/CVE-2026-64093", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: directly shut down timer o...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00346, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68124", "url": "https://patchblox.com/security/cve/CVE-2026-68124", "title": "mctp: serial: handle zero-length frames to prevent rx buffer overflow", "priority": "High", "severity": "Important", "cvss": 9.6, "epss": 0.00343, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53180", "url": "https://patchblox.com/security/cve/CVE-2026-53180", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock in tmigr_handle_r...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0034, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74557", "url": "https://patchblox.com/security/cve/CVE-2026-74557", "title": "scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00329, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64445", "url": "https://patchblox.com/security/cve/CVE-2026-64445", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00317, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68125", "url": "https://patchblox.com/security/cve/CVE-2026-68125", "title": "mac802154: llsec: reject frames shorter than the authentication tag", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00317, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64024", "url": "https://patchblox.com/security/cve/CVE-2026-64024", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.4, "epss": 0.00308, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68470", "url": "https://patchblox.com/security/cve/CVE-2026-68470", "title": "wifi: mac80211: validate extension-frame layout before RX", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00307, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64178", "url": "https://patchblox.com/security/cve/CVE-2026-64178", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00304, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52920", "url": "https://patchblox.com/security/cve/CVE-2026-52920", "title": "netfilter: xt_policy: fix strict mode inbound policy matching", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00299, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43239", "url": "https://patchblox.com/security/cve/CVE-2026-43239", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: prevent races in -\u003Equery_interfaces...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00294, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64442", "url": "https://patchblox.com/security/cve/CVE-2026-64442", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64444", "url": "https://patchblox.com/security/cve/CVE-2026-64444", "title": "staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68353", "url": "https://patchblox.com/security/cve/CVE-2026-68353", "title": "wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00287, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64547", "url": "https://patchblox.com/security/cve/CVE-2026-64547", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packet_len before pa...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00284, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64088", "url": "https://patchblox.com/security/cve/CVE-2026-64088", "title": "kernel-uek-devel: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.8, "epss": 0.00281, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64443", "url": "https://patchblox.com/security/cve/CVE-2026-64443", "title": "staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.0028, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64540", "url": "https://patchblox.com/security/cve/CVE-2026-64540", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in geneli...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68373", "url": "https://patchblox.com/security/cve/CVE-2026-68373", "title": "wifi: at76c50x-usb: avoid length underflow in at76_guess_freq()", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64406", "url": "https://patchblox.com/security/cve/CVE-2026-64406", "title": "Bluetooth: fix UAF in bt_accept_dequeue()", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63891", "url": "https://patchblox.com/security/cve/CVE-2026-63891", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Cap recursion depth in __...", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00275, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64561", "url": "https://patchblox.com/security/cve/CVE-2026-64561", "title": "KVM: x86: Check for invalid/obsolete root *after* making MMU pages available", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00273, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64440", "url": "https://patchblox.com/security/cve/CVE-2026-64440", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HT_caps_han...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00267, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64403", "url": "https://patchblox.com/security/cve/CVE-2026-64403", "title": "Bluetooth: L2CAP: validate option length before reading conf opt value", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00266, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64408", "url": "https://patchblox.com/security/cve/CVE-2026-64408", "title": "Bluetooth: bnep: pin L2CAP connection during netdev registration", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68091", "url": "https://patchblox.com/security/cve/CVE-2026-68091", "title": "HID: wacom: stop hardware after post-start probe failures", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68326", "url": "https://patchblox.com/security/cve/CVE-2026-68326", "title": "wifi: mwifiex: bound uAP association event IEs to the event buffer", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68397", "url": "https://patchblox.com/security/cve/CVE-2026-68397", "title": "net/iucv: take a reference on the socket found in afiucv_hs_rcv()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00263, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68425", "url": "https://patchblox.com/security/cve/CVE-2026-68425", "title": "IB/mad: Drop unmatched RMPP responses before reassembly", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00261, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64536", "url": "https://patchblox.com/security/cve/CVE-2026-64536", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tk...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00259, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74537", "url": "https://patchblox.com/security/cve/CVE-2026-74537", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_conn_rea...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72108", "url": "https://patchblox.com/security/cve/CVE-2026-72108", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consiste...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00257, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64434", "url": "https://patchblox.com/security/cve/CVE-2026-64434", "title": "Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64554", "url": "https://patchblox.com/security/cve/CVE-2026-64554", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00256, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68389", "url": "https://patchblox.com/security/cve/CVE-2026-68389", "title": "Bluetooth: hci_qca: Clear memdump state on invalid dump size", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00254, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64586", "url": "https://patchblox.com/security/cve/CVE-2026-64586", "title": "wifi: brcmfmac: drain bus_reset work on device removal", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0025, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68393", "url": "https://patchblox.com/security/cve/CVE-2026-68393", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: extend conn_hash lookup cri...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00245, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74534", "url": "https://patchblox.com/security/cve/CVE-2026-74534", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix refcounting of iso_conn iso...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00242, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74535", "url": "https://patchblox.com/security/cve/CVE-2026-74535", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid deadlocks in iso_sock_time...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00241, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74533", "url": "https://patchblox.com/security/cve/CVE-2026-74533", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix race of kfree vs kref_get_un...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00239, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68278", "url": "https://patchblox.com/security/cve/CVE-2026-68278", "title": "drm/dp/mst: fix buffer overflows in sideband chunk accumulation", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00238, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64515", "url": "https://patchblox.com/security/cve/CVE-2026-64515", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If eith...", "priority": "High", "severity": "high", "cvss": 8.3, "epss": 0.00236, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68480", "url": "https://patchblox.com/security/cve/CVE-2026-68480", "title": "x86/bugs: Make Safe-RET robust against interrupt injection", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00234, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68398", "url": "https://patchblox.com/security/cve/CVE-2026-68398", "title": "ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00232, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64507", "url": "https://patchblox.com/security/cve/CVE-2026-64507", "title": "x86/bugs: Enable IBPB flush on BPF JIT allocation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68414", "url": "https://patchblox.com/security/cve/CVE-2026-68414", "title": "wifi: cfg80211: cancel sched scan results work on unregister", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00231, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68138", "url": "https://patchblox.com/security/cve/CVE-2026-68138", "title": "net/sched: serialize qdisc_rtab_list against concurrent get/put", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64452", "url": "https://patchblox.com/security/cve/CVE-2026-64452", "title": "6lowpan: fix NHC entry use-after-free on error path", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68351", "url": "https://patchblox.com/security/cve/CVE-2026-68351", "title": "wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68188", "url": "https://patchblox.com/security/cve/CVE-2026-68188", "title": "Bluetooth: RFCOMM: Fix session UAF in set_termios", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68368", "url": "https://patchblox.com/security/cve/CVE-2026-68368", "title": "usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72306", "url": "https://patchblox.com/security/cve/CVE-2026-72306", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vduse: Fix race in vduse_dev_msg_sync and vduse_...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68169", "url": "https://patchblox.com/security/cve/CVE-2026-68169", "title": "mptcp: pm: userspace: fix use-after-free in get_local_id", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68181", "url": "https://patchblox.com/security/cve/CVE-2026-68181", "title": "mei: bus: access mei_device under device_lock on cleanup", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68165", "url": "https://patchblox.com/security/cve/CVE-2026-68165", "title": "mm/damon/core: validate ranges in damon_set_regions()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68182", "url": "https://patchblox.com/security/cve/CVE-2026-68182", "title": "comedi: comedi_parport: deal with premature interrupt", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68286", "url": "https://patchblox.com/security/cve/CVE-2026-68286", "title": "drop_monitor: perform u64_stats updates under IRQ-disabled section", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80667", "url": "https://patchblox.com/security/cve/CVE-2026-80667", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete() on...", "priority": "High", "severity": "important", "epss": 0.00209, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63810", "url": "https://patchblox.com/security/cve/CVE-2026-63810", "title": "block: Avoid mounting the bdev pseudo-filesystem in userspace", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00207, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68193", "url": "https://patchblox.com/security/cve/CVE-2026-68193", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio...", "priority": "High", "severity": "moderate", "cvss": 8.1, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64572", "url": "https://patchblox.com/security/cve/CVE-2026-64572", "title": "ipv4: fib: free fib_alias with kfree_rcu() on insert error path", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53365", "url": "https://patchblox.com/security/cve/CVE-2026-53365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-...", "priority": "High", "severity": "medium", "cvss": 8.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64010", "url": "https://patchblox.com/security/cve/CVE-2026-64010", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free race in nfc_llcp_r...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72342", "url": "https://patchblox.com/security/cve/CVE-2026-72342", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72343", "url": "https://patchblox.com/security/cve/CVE-2026-72343", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer a...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00196, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68085", "url": "https://patchblox.com/security/cve/CVE-2026-68085", "title": "Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64490", "url": "https://patchblox.com/security/cve/CVE-2026-64490", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00193, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64367", "url": "https://patchblox.com/security/cve/CVE-2026-64367", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to pre...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68255", "url": "https://patchblox.com/security/cve/CVE-2026-68255", "title": "drm/virtio: bound EDID block reads to the response buffer", "priority": "High", "severity": "Moderate", "cvss": 7.7, "epss": 0.00189, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63926", "url": "https://patchblox.com/security/cve/CVE-2026-63926", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72280", "url": "https://patchblox.com/security/cve/CVE-2026-72280", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68093", "url": "https://patchblox.com/security/cve/CVE-2026-68093", "title": "KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.00186, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72289", "url": "https://patchblox.com/security/cve/CVE-2026-72289", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...", "priority": "High", "severity": "Important", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72495", "url": "https://patchblox.com/security/cve/CVE-2026-72495", "title": "RDMA/bnxt_re: Avoid repeated requests to allocate WC pages", "priority": "High", "severity": "Low", "cvss": 9.3, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64039", "url": "https://patchblox.com/security/cve/CVE-2026-64039", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix dumping of the unaligned r...", "priority": "High", "severity": "high", "cvss": 7.7, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72487", "url": "https://patchblox.com/security/cve/CVE-2026-72487", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr be...", "priority": "High", "severity": "high", "cvss": 7.7, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64484", "url": "https://patchblox.com/security/cve/CVE-2026-64484", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_new1() return value...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68363", "url": "https://patchblox.com/security/cve/CVE-2026-68363", "title": "wifi: ath9k: hif_usb: don\u0027t dereference hif_dev after re-arming firmware request", "priority": "High", "severity": "Low", "cvss": 8.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68366", "url": "https://patchblox.com/security/cve/CVE-2026-68366", "title": "usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer", "priority": "High", "severity": "Important", "cvss": 8.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64470", "url": "https://patchblox.com/security/cve/CVE-2026-64470", "title": "Bluetooth: btusb: fix use-after-free on marvell probe failure", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64471", "url": "https://patchblox.com/security/cve/CVE-2026-64471", "title": "Bluetooth: btusb: fix use-after-free on registration failure", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68135", "url": "https://patchblox.com/security/cve/CVE-2026-68135", "title": "net: hip04: fix RX buffer leak on build_skb failure", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68350", "url": "https://patchblox.com/security/cve/CVE-2026-68350", "title": "wifi: carl9170: fix OOB read from off-by-two in TX status handler", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68365", "url": "https://patchblox.com/security/cve/CVE-2026-68365", "title": "USB: serial: io_edgeport: cap received transmit credits", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64483", "url": "https://patchblox.com/security/cve/CVE-2026-64483", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: bound the sample count t...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64570", "url": "https://patchblox.com/security/cve/CVE-2026-64570", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix fils_discovery double free o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72425", "url": "https://patchblox.com/security/cve/CVE-2026-72425", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_rese...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00183, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68371", "url": "https://patchblox.com/security/cve/CVE-2026-68371", "title": "usb: musb: omap2430: Do not put borrowed of_node in probe", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64300", "url": "https://patchblox.com/security/cve/CVE-2026-64300", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in map_range() map_range...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74584", "url": "https://patchblox.com/security/cve/CVE-2026-74584", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page before exposing t...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63860", "url": "https://patchblox.com/security/cve/CVE-2026-63860", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68179", "url": "https://patchblox.com/security/cve/CVE-2026-68179", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock erro...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68289", "url": "https://patchblox.com/security/cve/CVE-2026-68289", "title": "tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64513", "url": "https://patchblox.com/security/cve/CVE-2026-64513", "title": "KVM: x86: Unconditionally recompute CR8 intercept on PPR update", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68202", "url": "https://patchblox.com/security/cve/CVE-2026-68202", "title": "ALSA: seq: close a re-opened queue timer in the destructor", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68206", "url": "https://patchblox.com/security/cve/CVE-2026-68206", "title": "media: v4l2-ctrls: validate HEVC active reference counts", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68213", "url": "https://patchblox.com/security/cve/CVE-2026-68213", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on sta...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68216", "url": "https://patchblox.com/security/cve/CVE-2026-68216", "title": "media: pwc: Return queued buffers on start_streaming() failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68088", "url": "https://patchblox.com/security/cve/CVE-2026-68088", "title": "usb: gadget: function: rndis: add length check to response query", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64503", "url": "https://patchblox.com/security/cve/CVE-2026-64503", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on w...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63970", "url": "https://patchblox.com/security/cve/CVE-2026-63970", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64286", "url": "https://patchblox.com/security/cve/CVE-2026-64286", "title": "KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64287", "url": "https://patchblox.com/security/cve/CVE-2026-64287", "title": "KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63898", "url": "https://patchblox.com/security/cve/CVE-2026-63898", "title": "kernel-uek-container: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63901", "url": "https://patchblox.com/security/cve/CVE-2026-63901", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64481", "url": "https://patchblox.com/security/cve/CVE-2026-64481", "title": "ALSA: hda/cs35l41: Fix firmware load work teardown", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68204", "url": "https://patchblox.com/security/cve/CVE-2026-68204", "title": "media: vivid: check for vb2_is_busy() when toggling caps", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68209", "url": "https://patchblox.com/security/cve/CVE-2026-68209", "title": "media: sun4i-csi: Return queued buffers on start_streaming() failure", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72282", "url": "https://patchblox.com/security/cve/CVE-2026-72282", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsib...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72350", "url": "https://patchblox.com/security/cve/CVE-2026-72350", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74296", "url": "https://patchblox.com/security/cve/CVE-2026-74296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW\u2011provided UAR index rat...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74297", "url": "https://patchblox.com/security/cve/CVE-2026-74297", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE si...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63906", "url": "https://patchblox.com/security/cve/CVE-2026-63906", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Fix use-after-free in omap2...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68219", "url": "https://patchblox.com/security/cve/CVE-2026-68219", "title": "media: nxp: imx8-isi: Fix potential out-of-bounds issues", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72034", "url": "https://patchblox.com/security/cve/CVE-2026-72034", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fhandle: reject detached mounts in capable_wrt_m...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72347", "url": "https://patchblox.com/security/cve/CVE-2026-72347", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift par...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72345", "url": "https://patchblox.com/security/cve/CVE-2026-72345", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB erro...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72019", "url": "https://patchblox.com/security/cve/CVE-2026-72019", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: macsec: don\u0027t read an unset MAC header in macsec...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74346", "url": "https://patchblox.com/security/cve/CVE-2026-74346", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registrati...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63920", "url": "https://patchblox.com/security/cve/CVE-2026-63920", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64265", "url": "https://patchblox.com/security/cve/CVE-2026-64265", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72072", "url": "https://patchblox.com/security/cve/CVE-2026-72072", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadat...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64317", "url": "https://patchblox.com/security/cve/CVE-2026-64317", "title": "isofs: bound Rock Ridge symlink components to the SL record", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00172, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64604", "url": "https://patchblox.com/security/cve/CVE-2026-64604", "title": "KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68201", "url": "https://patchblox.com/security/cve/CVE-2026-68201", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave\u0027s callback before its...", "priority": "High", "severity": "high", "cvss": 8.3, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63917", "url": "https://patchblox.com/security/cve/CVE-2026-63917", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64276", "url": "https://patchblox.com/security/cve/CVE-2026-64276", "title": "Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64277", "url": "https://patchblox.com/security/cve/CVE-2026-64277", "title": "Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64304", "url": "https://patchblox.com/security/cve/CVE-2026-64304", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72136", "url": "https://patchblox.com/security/cve/CVE-2026-72136", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in t...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64104", "url": "https://patchblox.com/security/cve/CVE-2026-64104", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Explicitly leak pages in unknow...", "priority": "High", "severity": "high", "cvss": 8.7, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63928", "url": "https://patchblox.com/security/cve/CVE-2026-63928", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64270", "url": "https://patchblox.com/security/cve/CVE-2026-64270", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packe...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64271", "url": "https://patchblox.com/security/cve/CVE-2026-64271", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on ever...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64272", "url": "https://patchblox.com/security/cve/CVE-2026-64272", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S a...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64273", "url": "https://patchblox.com/security/cve/CVE-2026-64273", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64274", "url": "https://patchblox.com/security/cve/CVE-2026-64274", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contac...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64296", "url": "https://patchblox.com/security/cve/CVE-2026-64296", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_e...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64322", "url": "https://patchblox.com/security/cve/CVE-2026-64322", "title": "udf: validate sparing table length as an entry count, not a byte count", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64333", "url": "https://patchblox.com/security/cve/CVE-2026-64333", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer c...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72036", "url": "https://patchblox.com/security/cve/CVE-2026-72036", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue ca...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72164", "url": "https://patchblox.com/security/cve/CVE-2026-72164", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72450", "url": "https://patchblox.com/security/cve/CVE-2026-72450", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen dur...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72488", "url": "https://patchblox.com/security/cve/CVE-2026-72488", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_coun...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64582", "url": "https://patchblox.com/security/cve/CVE-2026-64582", "title": "RDMA/rxe: Fix a use-after-free problem in rxe_mmap", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68307", "url": "https://patchblox.com/security/cve/CVE-2026-68307", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link repl...", "priority": "High", "severity": "moderate", "cvss": 8.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68267", "url": "https://patchblox.com/security/cve/CVE-2026-68267", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA...", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72485", "url": "https://patchblox.com/security/cve/CVE-2026-72485", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: coresight: platform: defer connection counter in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80838", "url": "https://patchblox.com/security/cve/CVE-2026-80838", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: keep the last remote linked during FDB fl...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68306", "url": "https://patchblox.com/security/cve/CVE-2026-68306", "title": "wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64518", "url": "https://patchblox.com/security/cve/CVE-2026-64518", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64519", "url": "https://patchblox.com/security/cve/CVE-2026-64519", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocati...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74286", "url": "https://patchblox.com/security/cve/CVE-2026-74286", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: pfcp: allocate per-cpu tstats for PFCP netd...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64563", "url": "https://patchblox.com/security/cve/CVE-2026-64563", "title": "rhashtable: clear stale iter-\u003Ep on table restart", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00167, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72243", "url": "https://patchblox.com/security/cve/CVE-2026-72243", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TC...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64219", "url": "https://patchblox.com/security/cve/CVE-2026-64219", "title": "drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64593", "url": "https://patchblox.com/security/cve/CVE-2026-64593", "title": "btrfs: do not trim a device which is not writeable", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64323", "url": "https://patchblox.com/security/cve/CVE-2026-64323", "title": "udf: validate VAT header length against the VAT inode size", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64504", "url": "https://patchblox.com/security/cve/CVE-2026-64504", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FI...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64346", "url": "https://patchblox.com/security/cve/CVE-2026-64346", "title": "usb: gadget: udc: Fix use-after-free in gadget_match_driver", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68178", "url": "https://patchblox.com/security/cve/CVE-2026-68178", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is op...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72389", "url": "https://patchblox.com/security/cve/CVE-2026-72389", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bridge: stp: Fix a potential use-after-free when...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72103", "url": "https://patchblox.com/security/cve/CVE-2026-72103", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller\u0027s thread keyring vi...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72297", "url": "https://patchblox.com/security/cve/CVE-2026-72297", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72500", "url": "https://patchblox.com/security/cve/CVE-2026-72500", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmwar...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63918", "url": "https://patchblox.com/security/cve/CVE-2026-63918", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68228", "url": "https://patchblox.com/security/cve/CVE-2026-68228", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move src_buf Removal...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68260", "url": "https://patchblox.com/security/cve/CVE-2026-68260", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vm_ctx-\u003Elock before map...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64556", "url": "https://patchblox.com/security/cve/CVE-2026-64556", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00162, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63823", "url": "https://patchblox.com/security/cve/CVE-2026-63823", "title": "keys: Pin request_key_auth payload in instantiate paths", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68416", "url": "https://patchblox.com/security/cve/CVE-2026-68416", "title": "mtd: fix double free and WARN_ON in add_mtd_device() error paths", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68448", "url": "https://patchblox.com/security/cve/CVE-2026-68448", "title": "ovl: check access to copy_file_range source with src mounter creds", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64527", "url": "https://patchblox.com/security/cve/CVE-2026-64527", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receiv...", "priority": "High", "severity": "N/A", "cvss": 7, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64243", "url": "https://patchblox.com/security/cve/CVE-2026-64243", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bound...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64294", "url": "https://patchblox.com/security/cve/CVE-2026-64294", "title": "mm: do file ownership checks with the proper mount idmap", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68229", "url": "https://patchblox.com/security/cve/CVE-2026-68229", "title": "media: cedrus: skip invalid H.264 reference list entries", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64306", "url": "https://patchblox.com/security/cve/CVE-2026-64306", "title": "crypto: drbg - Fix returning success on failure in CTR_DRBG", "priority": "High", "severity": "Moderate", "cvss": 7, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-31530", "url": "https://patchblox.com/security/cve/CVE-2026-31530", "title": "cxl/port: Fix use after free of parent_port in cxl_detach_ep()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63921", "url": "https://patchblox.com/security/cve/CVE-2026-63921", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72061", "url": "https://patchblox.com/security/cve/CVE-2026-72061", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAP_NET_ADMIN in the device ne...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00158, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-52912", "url": "https://patchblox.com/security/cve/CVE-2026-52912", "title": "netfilter: nf_queue: hold bridge skb-\u003Edev while queued", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64574", "url": "https://patchblox.com/security/cve/CVE-2026-64574", "title": "wifi: mac80211: tear down new links on vif update error path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00157, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64589", "url": "https://patchblox.com/security/cve/CVE-2026-64589", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registratio...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64603", "url": "https://patchblox.com/security/cve/CVE-2026-64603", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify han...", "priority": "High", "severity": "IMPORTANT", "epss": 0.00156, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64247", "url": "https://patchblox.com/security/cve/CVE-2026-64247", "title": "KVM: x86: hyper-v: Bound the bank index when querying sparse banks", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64015", "url": "https://patchblox.com/security/cve/CVE-2026-64015", "title": "kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64526", "url": "https://patchblox.com/security/cve/CVE-2026-64526", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnl_ops_complet...", "priority": "High", "severity": "important", "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-71075", "url": "https://patchblox.com/security/cve/CVE-2025-71075", "title": "scsi: aic94xx: fix use-after-free in device removal path", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00154, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64118", "url": "https://patchblox.com/security/cve/CVE-2026-64118", "title": "kernel-uek64k: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 8.4, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68442", "url": "https://patchblox.com/security/cve/CVE-2026-68442", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: don\u0027t propagate EXTENT_FLAG_LOGGING to sp...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00152, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68294", "url": "https://patchblox.com/security/cve/CVE-2026-68294", "title": "net: qrtr: restrict socket creation to the initial network namespace", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72045", "url": "https://patchblox.com/security/cve/CVE-2026-72045", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72051", "url": "https://patchblox.com/security/cve/CVE-2026-72051", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_tunnel: require CAP_NET_ADMIN in the de...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72052", "url": "https://patchblox.com/security/cve/CVE-2026-72052", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the devic...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72053", "url": "https://patchblox.com/security/cve/CVE-2026-72053", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAP_NET_ADMIN in the device n...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72054", "url": "https://patchblox.com/security/cve/CVE-2026-72054", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip_vti: require CAP_NET_ADMIN in the device...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72055", "url": "https://patchblox.com/security/cve/CVE-2026-72055", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the devic...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00151, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68086", "url": "https://patchblox.com/security/cve/CVE-2026-68086", "title": "mm/khugepaged: write all dirty file folios when collapsing", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0015, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63941", "url": "https://patchblox.com/security/cve/CVE-2026-63941", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCR_EL2 provided by a...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64456", "url": "https://patchblox.com/security/cve/CVE-2026-64456", "title": "hwrng: virtio: clamp device-reported used.len at copy_data()", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64283", "url": "https://patchblox.com/security/cve/CVE-2026-64283", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding offset\u002Bs...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64315", "url": "https://patchblox.com/security/cve/CVE-2026-64315", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard...", "priority": "High", "severity": "high", "cvss": 7, "epss": 0.00149, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64298", "url": "https://patchblox.com/security/cve/CVE-2026-64298", "title": "NFSv4: include MAY_WRITE in open permission mask for O_TRUNC", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00147, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68432", "url": "https://patchblox.com/security/cve/CVE-2026-68432", "title": "vxlan: require CAP_NET_ADMIN in the device netns for changelink", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00146, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64446", "url": "https://patchblox.com/security/cve/CVE-2026-64446", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00145, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68253", "url": "https://patchblox.com/security/cve/CVE-2026-68253", "title": "drm/i915/hdcp: check streams[] bounds before overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74378", "url": "https://patchblox.com/security/cve/CVE-2026-74378", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wq...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64548", "url": "https://patchblox.com/security/cve/CVE-2026-64548", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy \u002B len in b...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64552", "url": "https://patchblox.com/security/cve/CVE-2026-64552", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() rece...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63879", "url": "https://patchblox.com/security/cve/CVE-2026-63879", "title": "drm/amdgpu: fix amdgpu_hmm_range_get_pages", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80731", "url": "https://patchblox.com/security/cve/CVE-2026-80731", "title": "net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64524", "url": "https://patchblox.com/security/cve/CVE-2026-64524", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WI...", "priority": "High", "severity": "high", "cvss": 7.7, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53059", "url": "https://patchblox.com/security/cve/CVE-2026-53059", "title": "dm log: fix out-of-bounds write due to region_count overflow", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00141, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74510", "url": "https://patchblox.com/security/cve/CVE-2026-74510", "title": "Bluetooth: mgmt: fix UAF in pair command cancellation", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68293", "url": "https://patchblox.com/security/cve/CVE-2026-68293", "title": "net/mlx5: Fix MCIA register buffer overflow on 32 dword reads", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53091", "url": "https://patchblox.com/security/cve/CVE-2026-53091", "title": "net: pull headers in qdisc_pkt_len_segs_init()", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64084", "url": "https://patchblox.com/security/cve/CVE-2026-64084", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) cap PDIO scan in get_mult...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64085", "url": "https://patchblox.com/security/cve/CVE-2026-64085", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) bounce blackbox records t...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64086", "url": "https://patchblox.com/security/cve/CVE-2026-64086", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) include PEC byte in pmbus...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64463", "url": "https://patchblox.com/security/cve/CVE-2026-64463", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci_rt1711h: unregister TCPCI port...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68222", "url": "https://patchblox.com/security/cve/CVE-2026-68222", "title": "media: msi2500: Return queued buffers on start_streaming() failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72459", "url": "https://patchblox.com/security/cve/CVE-2026-72459", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on al...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68128", "url": "https://patchblox.com/security/cve/CVE-2026-68128", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_pro...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68145", "url": "https://patchblox.com/security/cve/CVE-2026-68145", "title": "iomap: fix out-of-bounds bitmap_set() with zero-length range", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68257", "url": "https://patchblox.com/security/cve/CVE-2026-68257", "title": "drm/amdkfd: fix 32-bit overflow in CWSR total size calculation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68370", "url": "https://patchblox.com/security/cve/CVE-2026-68370", "title": "usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64114", "url": "https://patchblox.com/security/cve/CVE-2026-64114", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68108", "url": "https://patchblox.com/security/cve/CVE-2026-68108", "title": "drm/amdgpu/vce: fix integer overflow in image size", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68338", "url": "https://patchblox.com/security/cve/CVE-2026-68338", "title": "net/packet: avoid fanout hook re-registration after unregister", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68149", "url": "https://patchblox.com/security/cve/CVE-2026-68149", "title": "fs: preserve ACL_DONT_CACHE state in forget_cached_acl()", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53223", "url": "https://patchblox.com/security/cve/CVE-2026-53223", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnet: guard timestamp cmsgs to real error queue sk...", "priority": "High", "severity": "moderate", "cvss": 8.1, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64111", "url": "https://patchblox.com/security/cve/CVE-2026-64111", "title": "kernel-zfcpdump-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64115", "url": "https://patchblox.com/security/cve/CVE-2026-64115", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53033", "url": "https://patchblox.com/security/cve/CVE-2026-53033", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Take state lock for af_unix iter...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68284", "url": "https://patchblox.com/security/cve/CVE-2026-68284", "title": "bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68335", "url": "https://patchblox.com/security/cve/CVE-2026-68335", "title": "rds: drop incoming messages that cross network namespace boundaries", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64126", "url": "https://patchblox.com/security/cve/CVE-2026-64126", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.3, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64099", "url": "https://patchblox.com/security/cve/CVE-2026-64099", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68152", "url": "https://patchblox.com/security/cve/CVE-2026-68152", "title": "amt: fix use-after-free in AMT delayed works", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53388", "url": "https://patchblox.com/security/cve/CVE-2026-53388", "title": "fuse: re-lock request before replacing page cache folio", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63803", "url": "https://patchblox.com/security/cve/CVE-2026-63803", "title": "hdlc_ppp: sync per-proto timers before freeing hdlc state", "priority": "High", "severity": "Important", "cvss": 8.4, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64071", "url": "https://patchblox.com/security/cve/CVE-2026-64071", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_m...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64073", "url": "https://patchblox.com/security/cve/CVE-2026-64073", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_single(...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64279", "url": "https://patchblox.com/security/cve/CVE-2026-64279", "title": "i2c: core: fix adapter deregistration race", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80530", "url": "https://patchblox.com/security/cve/CVE-2026-80530", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing is...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53330", "url": "https://patchblox.com/security/cve/CVE-2026-53330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_ge...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00133, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68200", "url": "https://patchblox.com/security/cve/CVE-2026-68200", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don\u0027t re-enter an instance callback...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68273", "url": "https://patchblox.com/security/cve/CVE-2026-68273", "title": "drm/amdgpu: Fix context pstate override handling", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53092", "url": "https://patchblox.com/security/cve/CVE-2026-53092", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63804", "url": "https://patchblox.com/security/cve/CVE-2026-63804", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2_qd_dealloc gfs...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64423", "url": "https://patchblox.com/security/cve/CVE-2026-64423", "title": "ipv4: igmp: remove multicast group from hash table on device destruction", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74481", "url": "https://patchblox.com/security/cve/CVE-2026-74481", "title": "mm/page_reporting: use system_freezable_wq to fix UAF during suspend", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64411", "url": "https://patchblox.com/security/cve/CVE-2026-64411", "title": "netfilter: ebtables: terminate table name before find_table_lock()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64412", "url": "https://patchblox.com/security/cve/CVE-2026-64412", "title": "netfilter: ebtables: module names must be null-terminated", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68258", "url": "https://patchblox.com/security/cve/CVE-2026-68258", "title": "drm/amdkfd: Check bounds on CRIU restore queue type and mqd size", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68262", "url": "https://patchblox.com/security/cve/CVE-2026-68262", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvr_se...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68348", "url": "https://patchblox.com/security/cve/CVE-2026-68348", "title": "ASoC: tas2781: bound firmware description string parsing", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64002", "url": "https://patchblox.com/security/cve/CVE-2026-64002", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv4: free net-\u003Eipv4.sysctl_local_reserved_ports...", "priority": "High", "severity": "important", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74527", "url": "https://patchblox.com/security/cve/CVE-2026-74527", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23306", "url": "https://patchblox.com/security/cve/CVE-2026-23306", "title": "scsi: pm8001: Fix use-after-free in pm8001_queue_command()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63985", "url": "https://patchblox.com/security/cve/CVE-2026-63985", "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "High", "severity": "N/A", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64097", "url": "https://patchblox.com/security/cve/CVE-2026-64097", "title": "drm/amd/display: Validate GPIO pin LUT table size before iterating", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64133", "url": "https://patchblox.com/security/cve/CVE-2026-64133", "title": "ALSA: asihpi: Fix potential OOB array access at reading cache", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68104", "url": "https://patchblox.com/security/cve/CVE-2026-68104", "title": "drm/amdgpu: invoke pm_genpd_remove() before freeing genpd", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68106", "url": "https://patchblox.com/security/cve/CVE-2026-68106", "title": "drm/amdgpu: fix division by zero with invalid uvd dimensions", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68245", "url": "https://patchblox.com/security/cve/CVE-2026-68245", "title": "drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68297", "url": "https://patchblox.com/security/cve/CVE-2026-68297", "title": "tipc: fix u16 MTU truncation in media and bearer MTU validation", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74390", "url": "https://patchblox.com/security/cve/CVE-2026-74390", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix out-of-bounds write in irdma_cop...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74397", "url": "https://patchblox.com/security/cve/CVE-2026-74397", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64546", "url": "https://patchblox.com/security/cve/CVE-2026-64546", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block(...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64109", "url": "https://patchblox.com/security/cve/CVE-2026-64109", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail-\u003Elen in unix_strea...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64555", "url": "https://patchblox.com/security/cve/CVE-2026-64555", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72497", "url": "https://patchblox.com/security/cve/CVE-2026-72497", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The v...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72499", "url": "https://patchblox.com/security/cve/CVE-2026-72499", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64053", "url": "https://patchblox.com/security/cve/CVE-2026-64053", "title": "kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.3, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64051", "url": "https://patchblox.com/security/cve/CVE-2026-64051", "title": "kernel-rt-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 8.1, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53031", "url": "https://patchblox.com/security/cve/CVE-2026-53031", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Validate node_id in arena_alloc_pages() ar...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53094", "url": "https://patchblox.com/security/cve/CVE-2026-53094", "title": "bpf: Fix stale offload-\u003Eprog pointer after constant blinding", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53109", "url": "https://patchblox.com/security/cve/CVE-2026-53109", "title": "powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63987", "url": "https://patchblox.com/security/cve/CVE-2026-63987", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63995", "url": "https://patchblox.com/security/cve/CVE-2026-63995", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: validate start_cmd_payload_size f...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63996", "url": "https://patchblox.com/security/cve/CVE-2026-63996", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64001", "url": "https://patchblox.com/security/cve/CVE-2026-64001", "title": "ALSA: pcm: oss: Fix setup list UAF on proc write error", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64134", "url": "https://patchblox.com/security/cve/CVE-2026-64134", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don\u0027t setup bogus iov_iter for silenc...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64137", "url": "https://patchblox.com/security/cve/CVE-2026-64137", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netl...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64217", "url": "https://patchblox.com/security/cve/CVE-2026-64217", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_i...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64225", "url": "https://patchblox.com/security/cve/CVE-2026-64225", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64348", "url": "https://patchblox.com/security/cve/CVE-2026-64348", "title": "usb: free iso schedules on failed submit", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64354", "url": "https://patchblox.com/security/cve/CVE-2026-64354", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before e...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64365", "url": "https://patchblox.com/security/cve/CVE-2026-64365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: letsketch: fix UAF on inrange_timer at driv...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64381", "url": "https://patchblox.com/security/cve/CVE-2026-64381", "title": "smb: client: Fix next buffer leak in receive_encrypted_standard()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68374", "url": "https://patchblox.com/security/cve/CVE-2026-68374", "title": "usb: core: sysfs: add lock to bos_descriptors_read()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68392", "url": "https://patchblox.com/security/cve/CVE-2026-68392", "title": "Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "cvesTruncated": true, "dataAsOf": "2026-11-10T13:56:55Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }