{ "fix": "OPENSUSE-SU-2026:22091-1", "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22091-1", "summary": "OPENSUSE-SU-2026:22091-1, released November 7, 2026, fixes 401 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.", "platform": "linux", "type": "advisory", "title": "Security update for 13 packages", "released": "2026-11-07T00:47:19Z", "priority": "Urgent", "priorityTier": 2, "priorityReason": "Closes CVE-2026-89970, rated Critical", "supported": true, "cveCount": 401, "exploitedCveCount": 0, "kevCveCount": 0, "ransomwareCveCount": 0, "maxEpss": 0.01467, "maxCvss": 9.8, "vendorAdvisory": "https://osv.dev/vulnerability/openSUSE-SU-2026:22091-1", "appliesTo": [ { "product": "dtb-aarch64", "productUrl": "https://patchblox.com/security/product/linux/dtb-aarch64", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1", "supported": true }, { "product": "kernel-64kb", "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1", "supported": true }, { "product": "kernel-azure", "productUrl": "https://patchblox.com/security/product/linux/kernel-azure", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1", "supported": true }, { "product": "kernel-default", "productUrl": "https://patchblox.com/security/product/linux/kernel-default", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1", "supported": true }, { "product": "kernel-default-base", "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1.160000.2.25", "supported": true }, { "product": "kernel-docs", "productUrl": "https://patchblox.com/security/product/linux/kernel-docs", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1", "supported": true }, { "product": "kernel-kvmsmall", "productUrl": "https://patchblox.com/security/product/linux/kernel-kvmsmall", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1", "supported": true }, { "product": "kernel-obs-build", "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1", "supported": true }, { "product": "kernel-obs-qa", "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-qa", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1", "supported": true }, { "product": "kernel-rt", "productUrl": "https://patchblox.com/security/product/linux/kernel-rt", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1", "supported": true }, { "product": "kernel-source", "productUrl": "https://patchblox.com/security/product/linux/kernel-source", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1", "supported": true }, { "product": "kernel-syms", "productUrl": "https://patchblox.com/security/product/linux/kernel-syms", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1", "supported": true }, { "product": "kernel-zfcpdump", "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump", "release": "opensuse-leap 16.0", "fixedVersion": "6.12.0-160000.39.1", "supported": true } ], "cves": [ { "cveId": "CVE-2026-72130", "url": "https://patchblox.com/security/cve/CVE-2026-72130", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject short AUTH_RECEIVE buffers n...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00803, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89970", "url": "https://patchblox.com/security/cve/CVE-2026-89970", "title": "nvmet-auth: Synchronize timeout work during SQ teardown", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00803, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90151", "url": "https://patchblox.com/security/cve/CVE-2026-90151", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client alloc...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00749, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72299", "url": "https://patchblox.com/security/cve/CVE-2026-72299", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: restrict socket queue dumps in enqueue tra...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72351", "url": "https://patchblox.com/security/cve/CVE-2026-72351", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: gue: validate REMCSUM private option length GUE...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00745, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89688", "url": "https://patchblox.com/security/cve/CVE-2026-89688", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: drop the stateid, not the stateowner, on s...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00736, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72322", "url": "https://patchblox.com/security/cve/CVE-2026-72322", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Fix potential UAF in MLD delayed wo...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72491", "url": "https://patchblox.com/security/cve/CVE-2026-72491", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/9p: fix race condition on rdma-\u003Estate in tra...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68477", "url": "https://patchblox.com/security/cve/CVE-2026-68477", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: fix more places with wrong ipv6 transport...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72129", "url": "https://patchblox.com/security/cve/CVE-2026-72129", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero of...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74267", "url": "https://patchblox.com/security/cve/CVE-2026-74267", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_codel: Do not call qdisc_tree_red...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80976", "url": "https://patchblox.com/security/cve/CVE-2026-80976", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation deca...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89485", "url": "https://patchblox.com/security/cve/CVE-2026-89485", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlm_inspect_file loc...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89712", "url": "https://patchblox.com/security/cve/CVE-2026-89712", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc_expire_umount walk after dropp...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72436", "url": "https://patchblox.com/security/cve/CVE-2026-72436", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don\u0027t use test_bit() in lockle...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00712, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89697", "url": "https://patchblox.com/security/cve/CVE-2026-89697", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SET...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89526", "url": "https://patchblox.com/security/cve/CVE-2026-89526", "title": "svcrdma: Validate Read chunk positions before reconstruction", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00682, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89713", "url": "https://patchblox.com/security/cve/CVE-2026-89713", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: check truncate permission under inode lock...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00665, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89536", "url": "https://patchblox.com/security/cve/CVE-2026-89536", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: wait for in-flight client TLS handshake...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00635, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72348", "url": "https://patchblox.com/security/cve/CVE-2026-72348", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6tables: mark malformed IPv6 extens...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00626, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89658", "url": "https://patchblox.com/security/cve/CVE-2026-89658", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during NFSv4...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00617, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89660", "url": "https://patchblox.com/security/cve/CVE-2026-89660", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00617, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89703", "url": "https://patchblox.com/security/cve/CVE-2026-89703", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00617, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80694", "url": "https://patchblox.com/security/cve/CVE-2026-80694", "title": "net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.006, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89672", "url": "https://patchblox.com/security/cve/CVE-2026-89672", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs2 setacl by argp-\u003Emask The NFSACL...", "priority": "Urgent", "severity": "critical", "cvss": 9.1, "epss": 0.00596, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53384", "url": "https://patchblox.com/security/cve/CVE-2026-53384", "title": "serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00515, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64046", "url": "https://patchblox.com/security/cve/CVE-2026-64046", "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Urgent", "severity": "N/A", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74384", "url": "https://patchblox.com/security/cve/CVE-2026-74384", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix flex array size in struct nv...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74398", "url": "https://patchblox.com/security/cve/CVE-2026-74398", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: bail out of dad_failure when sta...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89541", "url": "https://patchblox.com/security/cve/CVE-2026-89541", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss_unwrap_resp_priv length check...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89542", "url": "https://patchblox.com/security/cve/CVE-2026-89542", "title": "SUNRPC: harden gss_krb5_unwrap_v2 against short tokens", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89551", "url": "https://patchblox.com/security/cve/CVE-2026-89551", "title": "SUNRPC: xdr_buf_trim: clamp buf-\u003Elen to avoid underflow", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89674", "url": "https://patchblox.com/security/cve/CVE-2026-89674", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR length calculation in nfsd4_ff_enc...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90414", "url": "https://patchblox.com/security/cve/CVE-2026-90414", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than w...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74376", "url": "https://patchblox.com/security/cve/CVE-2026-74376", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: md/raid10: reset read_slot when reusing r10bio f...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89533", "url": "https://patchblox.com/security/cve/CVE-2026-89533", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix offset arithmetic in read_chunk_ran...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89702", "url": "https://patchblox.com/security/cve/CVE-2026-89702", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: size fh_verify server sockaddr slot by xpt...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89479", "url": "https://patchblox.com/security/cve/CVE-2026-89479", "title": "sctp: stop processing a packet once its association is deleted", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68385", "url": "https://patchblox.com/security/cve/CVE-2026-68385", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csum_partial() without vector...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93207", "url": "https://patchblox.com/security/cve/CVE-2026-93207", "title": "SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80725", "url": "https://patchblox.com/security/cve/CVE-2026-80725", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: gro: properly validate BIG TCP aggregation...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00459, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64216", "url": "https://patchblox.com/security/cve/CVE-2026-64216", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential UAF in netfs_unlock_abandon...", "priority": "Urgent", "severity": "critical", "cvss": 9.8, "epss": 0.00457, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-100075", "url": "https://patchblox.com/security/cve/CVE-2026-100075", "title": "RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0043, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63881", "url": "https://patchblox.com/security/cve/CVE-2026-63881", "title": "drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.0019, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68146", "url": "https://patchblox.com/security/cve/CVE-2026-68146", "title": "ftrace: Add global mutex to serialize trace_parser access", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80686", "url": "https://patchblox.com/security/cve/CVE-2026-80686", "title": "mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63983", "url": "https://patchblox.com/security/cve/CVE-2026-63983", "title": "net/sched: fix packet loop on netem when duplicate is on", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80715", "url": "https://patchblox.com/security/cve/CVE-2026-80715", "title": "igc: remove napi_synchronize() in igc_down()", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64070", "url": "https://patchblox.com/security/cve/CVE-2026-64070", "title": "powerpc/hv-gpci: fix preempt count leak in sysfs show paths", "priority": "Urgent", "severity": "Critical", "cvss": 9.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74469", "url": "https://patchblox.com/security/cve/CVE-2026-74469", "title": "sctp: prevent peer transport count overflow", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.01467, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63913", "url": "https://patchblox.com/security/cve/CVE-2026-63913", "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00971, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90413", "url": "https://patchblox.com/security/cve/CVE-2026-90413", "title": "IB/isert: reject login PDUs declaring more data than was received", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00841, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89968", "url": "https://patchblox.com/security/cve/CVE-2026-89968", "title": "nvmet-tcp: reject unsolicited H2CData PDUs", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0082, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72098", "url": "https://patchblox.com/security/cve/CVE-2026-72098", "title": "dm-verity: fix buffer overflow in FEC calculation", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00789, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89696", "url": "https://patchblox.com/security/cve/CVE-2026-89696", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH t...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00752, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89680", "url": "https://patchblox.com/security/cve/CVE-2026-89680", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix nfsd_file leak on inter-server COPY se...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0074, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90104", "url": "https://patchblox.com/security/cve/CVE-2026-90104", "title": "NFSv4.1: zero referring call lists before decoding", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.0073, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89544", "url": "https://patchblox.com/security/cve/CVE-2026-89544", "title": "SUNRPC: fix gssx_dec_option_array error path bugs", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00724, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74268", "url": "https://patchblox.com/security/cve/CVE-2026-74268", "title": "tcp: clear sock_ops cb flags before force-closing a child socket", "priority": "High", "severity": "Low", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89482", "url": "https://patchblox.com/security/cve/CVE-2026-89482", "title": "nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89538", "url": "https://patchblox.com/security/cve/CVE-2026-89538", "title": "SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00714, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89686", "url": "https://patchblox.com/security/cve/CVE-2026-89686", "title": "nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00712, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89511", "url": "https://patchblox.com/security/cve/CVE-2026-89511", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: qede: Fix NULL pointer dereference in TPA fragme...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00707, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72247", "url": "https://patchblox.com/security/cve/CVE-2026-72247", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: fix zone comparison in...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89707", "url": "https://patchblox.com/security/cve/CVE-2026-89707", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: release path refs on follow_down() error...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90293", "url": "https://patchblox.com/security/cve/CVE-2026-90293", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: IB/isert: post the full-feature receive buffers...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90294", "url": "https://patchblox.com/security/cve/CVE-2026-90294", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: IB/isert: delay the final Login Response until t...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97557", "url": "https://patchblox.com/security/cve/CVE-2026-97557", "title": "smb: client: avoid leaking refcount in cifs_queue_oplock_break()", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00696, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89662", "url": "https://patchblox.com/security/cve/CVE-2026-89662", "title": "NFSD: Prevent lock owner use-after-free during client teardown", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89669", "url": "https://patchblox.com/security/cve/CVE-2026-89669", "title": "nfsd: initialize copy-notify stateid before publishing it", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00694, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80980", "url": "https://patchblox.com/security/cve/CVE-2026-80980", "title": "net/smc: stop killed, freed and out_of_sync sharing a byte", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00682, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74281", "url": "https://patchblox.com/security/cve/CVE-2026-74281", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tipc: reject inverted service ranges from peer b...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0068, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90228", "url": "https://patchblox.com/security/cve/CVE-2026-90228", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmet_exe...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.0068, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90149", "url": "https://patchblox.com/security/cve/CVE-2026-90149", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: fix NULL dereference for NFSv4....", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00665, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89665", "url": "https://patchblox.com/security/cve/CVE-2026-89665", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: reject out-of-range useconds in NFSv2 SETA...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00621, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89685", "url": "https://patchblox.com/security/cve/CVE-2026-89685", "title": "nfsd: fix clock domain mismatch in clients_still_reclaiming()", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00612, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68376", "url": "https://patchblox.com/security/cve/CVE-2026-68376", "title": "sctp: fix auth_hmacs array size in struct sctp_cookie", "priority": "High", "severity": "Low", "cvss": 8.1, "epss": 0.00605, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97573", "url": "https://patchblox.com/security/cve/CVE-2026-97573", "title": "bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00604, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74480", "url": "https://patchblox.com/security/cve/CVE-2026-74480", "title": "net: bridge: stop fast-leave after deleting a port group", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00579, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89547", "url": "https://patchblox.com/security/cve/CVE-2026-89547", "title": "SUNRPC: Check svc pool percpu counter allocation", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00561, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89671", "url": "https://patchblox.com/security/cve/CVE-2026-89671", "title": "nfsd: gate nfs3 setacl by argp-\u003Emask", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00545, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93107", "url": "https://patchblox.com/security/cve/CVE-2026-93107", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Avoid reprocessing the current packet...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00544, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74597", "url": "https://patchblox.com/security/cve/CVE-2026-74597", "title": "ip6_tunnel: clear skb2-\u003Ecb[] in ip6ip6_err()", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00543, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89535", "url": "https://patchblox.com/security/cve/CVE-2026-89535", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdma_rn_unregister before rd...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00537, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89706", "url": "https://patchblox.com/security/cve/CVE-2026-89706", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset write verifier when async COPY write...", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00526, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89704", "url": "https://patchblox.com/security/cve/CVE-2026-89704", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: sample writeback error cursor before async...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00526, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74473", "url": "https://patchblox.com/security/cve/CVE-2026-74473", "title": "vxlan: use pskb_network_may_pull() in route_shortcircuit()", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00525, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74752", "url": "https://patchblox.com/security/cve/CVE-2026-74752", "title": "sctp: validate cookie AUTH state before use", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00524, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74662", "url": "https://patchblox.com/security/cve/CVE-2026-74662", "title": "inet: frags: publish queues before arming timer", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00514, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68343", "url": "https://patchblox.com/security/cve/CVE-2026-68343", "title": "smb: client: validate DFS referral PathConsumed", "priority": "High", "severity": "Moderate", "cvss": 9.1, "epss": 0.00513, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89532", "url": "https://patchblox.com/security/cve/CVE-2026-89532", "title": "svcrdma: Fix pcl_for_each_segment for empty chunks", "priority": "High", "severity": "Important", "cvss": 9.1, "epss": 0.00502, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89684", "url": "https://patchblox.com/security/cve/CVE-2026-89684", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix cpntf publish race in nfs4_init_cp_sta...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97413", "url": "https://patchblox.com/security/cve/CVE-2026-97413", "title": "RDMA/rtrs-srv: Fix integer underflow in process_read and process_write", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74625", "url": "https://patchblox.com/security/cve/CVE-2026-74625", "title": "netfilter: bridge: release template ct on non-IP path", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89477", "url": "https://patchblox.com/security/cve/CVE-2026-89477", "title": "sctp: fix NULL deref on untransmitted RECONF completion", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89699", "url": "https://patchblox.com/security/cve/CVE-2026-89699", "title": "nfsd: validate symlink target length in NFSv4 CREATE", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00501, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74493", "url": "https://patchblox.com/security/cve/CVE-2026-74493", "title": "net/smc: fix socket use-after-free during link group termination", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74586", "url": "https://patchblox.com/security/cve/CVE-2026-74586", "title": "sctp: clear new_transport when removing a peer", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74588", "url": "https://patchblox.com/security/cve/CVE-2026-74588", "title": "sctp: keep chunk-\u003Etransport in step with the list it is queued on", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74628", "url": "https://patchblox.com/security/cve/CVE-2026-74628", "title": "net/x25: fix use-after-free of the socket by its timers", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74688", "url": "https://patchblox.com/security/cve/CVE-2026-74688", "title": "sctp: clear control chunk transport if it is being removed", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.005, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64132", "url": "https://patchblox.com/security/cve/CVE-2026-64132", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89530", "url": "https://patchblox.com/security/cve/CVE-2026-89530", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nsvcrdma: Reject inline replies that overflow the...", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89550", "url": "https://patchblox.com/security/cve/CVE-2026-89550", "title": "SUNRPC: svcauth_gss: enforce krb5 token minimum length", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00491, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74692", "url": "https://patchblox.com/security/cve/CVE-2026-74692", "title": "net/smc: fix TOCTOU race between smc_listen_out() and listener close", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74696", "url": "https://patchblox.com/security/cve/CVE-2026-74696", "title": "tcp: fix TFO max_qlen accounting across reuseport migration", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.0049, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80631", "url": "https://patchblox.com/security/cve/CVE-2026-80631", "title": "btrfs: lzo: reject compressed segment that overflows the compressed input", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00479, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64448", "url": "https://patchblox.com/security/cve/CVE-2026-64448", "title": "smb: client: restrict implied bcc[0] exemption to responses without data area", "priority": "High", "severity": "Important", "cvss": 8.2, "epss": 0.00463, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89663", "url": "https://patchblox.com/security/cve/CVE-2026-89663", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before droppin...", "priority": "High", "severity": "high", "cvss": 9.8, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74490", "url": "https://patchblox.com/security/cve/CVE-2026-74490", "title": "tipc: avoid use-after-free in poll trace queue dumps", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00455, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74697", "url": "https://patchblox.com/security/cve/CVE-2026-74697", "title": "bnxt_en: Disable EOP for TPA on all chips to prevent data corruption", "priority": "High", "severity": "Moderate", "cvss": 8.2, "epss": 0.0045, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74745", "url": "https://patchblox.com/security/cve/CVE-2026-74745", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: eth: bnxt: avoid deadlock when canceling IRQ aff...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00445, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64414", "url": "https://patchblox.com/security/cve/CVE-2026-64414", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: handle unreadable frags sashiko repo...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74385", "url": "https://patchblox.com/security/cve/CVE-2026-74385", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check return value of nvmet_tcp_set_q...", "priority": "High", "severity": "high", "cvss": 7.5, "epss": 0.00441, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80844", "url": "https://patchblox.com/security/cve/CVE-2026-80844", "title": "xfrm: ah6: validate routing header segments_left", "priority": "High", "severity": "Moderate", "cvss": 8.3, "epss": 0.00434, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89481", "url": "https://patchblox.com/security/cve/CVE-2026-89481", "title": "nvme-tcp: fix host memory disclosure on R2T for a read command", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00432, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89480", "url": "https://patchblox.com/security/cve/CVE-2026-89480", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00425, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74580", "url": "https://patchblox.com/security/cve/CVE-2026-74580", "title": "vhost: reset the vring metadata cache on vring reconfiguration", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00409, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64597", "url": "https://patchblox.com/security/cve/CVE-2026-64597", "title": "smb: client: fix double-free in SMB2_close() replay", "priority": "High", "severity": "Important", "cvss": 9.8, "epss": 0.00359, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-81000", "url": "https://patchblox.com/security/cve/CVE-2026-81000", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom tun_get_user()...", "priority": "High", "severity": "high", "cvss": 8.3, "epss": 0.00357, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68471", "url": "https://patchblox.com/security/cve/CVE-2026-68471", "title": "wifi: ieee80211: validate MLE common info length", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00347, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89569", "url": "https://patchblox.com/security/cve/CVE-2026-89569", "title": "Bluetooth: RFCOMM: serialize security confirmation handling", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00344, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74592", "url": "https://patchblox.com/security/cve/CVE-2026-74592", "title": "ima: Instantiate file_truncate and path_truncate hooks", "priority": "High", "severity": "Moderate", "cvss": 8.1, "epss": 0.00341, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64235", "url": "https://patchblox.com/security/cve/CVE-2026-64235", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs i...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00327, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80585", "url": "https://patchblox.com/security/cve/CVE-2026-80585", "title": "mptcp: fastopen: only mark MPTFO subflows with SYN data", "priority": "High", "severity": "Low", "cvss": 9.4, "epss": 0.00313, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89534", "url": "https://patchblox.com/security/cve/CVE-2026-89534", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: svcrdma: Clear sc_cm_id when ADDR_CHANGE replace...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00284, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64598", "url": "https://patchblox.com/security/cve/CVE-2026-64598", "title": "smb/client: Fix error code in smb2_aead_req_alloc()", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00278, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74356", "url": "https://patchblox.com/security/cve/CVE-2026-74356", "title": "vhost: fix vhost_get_avail_idx for a non empty ring", "priority": "High", "severity": "Moderate", "cvss": 7.4, "epss": 0.00247, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74538", "url": "https://patchblox.com/security/cve/CVE-2026-74538", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: lock sk in iso_connect_ind Acce...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00241, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80789", "url": "https://patchblox.com/security/cve/CVE-2026-80789", "title": "nvmet-tcp: bound SGL data length before allocating command buffers", "priority": "High", "severity": "Important", "cvss": 7.5, "epss": 0.00234, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93826", "url": "https://patchblox.com/security/cve/CVE-2026-93826", "title": "HID: hidpp: fix potential UAF in hidpp_connect_event()", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00234, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90150", "url": "https://patchblox.com/security/cve/CVE-2026-90150", "title": "pnfs/blocklayout: Fix device leaks on parse failure", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89694", "url": "https://patchblox.com/security/cve/CVE-2026-89694", "title": "nfsd: check client ownership when cancelling a copy-notify stateid", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93108", "url": "https://patchblox.com/security/cve/CVE-2026-93108", "title": "RDMA/ipoib: Drain RCU callbacks during module teardown", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89984", "url": "https://patchblox.com/security/cve/CVE-2026-89984", "title": "perf/x86/intel: Fix kernel address leakages in LBR stack", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72218", "url": "https://patchblox.com/security/cve/CVE-2026-72218", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file refcount leak on cached nlm...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72219", "url": "https://patchblox.com/security/cve/CVE-2026-72219", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: lockd: Plug nlm_file leak when nlm_do_fopen() fa...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90097", "url": "https://patchblox.com/security/cve/CVE-2026-90097", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Skip VMBus module cleanup fo...", "priority": "High", "severity": "important", "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90259", "url": "https://patchblox.com/security/cve/CVE-2026-90259", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix a wrong length calculation in...", "priority": "High", "severity": "important", "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93109", "url": "https://patchblox.com/security/cve/CVE-2026-93109", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Drain RCU callbacks during module tea...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92495", "url": "https://patchblox.com/security/cve/CVE-2026-92495", "title": "RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.0021, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89451", "url": "https://patchblox.com/security/cve/CVE-2026-89451", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Set handle-\u003Edev before the SVA handle...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89502", "url": "https://patchblox.com/security/cve/CVE-2026-89502", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Free cpu_buffer::free_page with sub...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90263", "url": "https://patchblox.com/security/cve/CVE-2026-90263", "title": "btrfs: check if root is readonly when setting posix acl", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97571", "url": "https://patchblox.com/security/cve/CVE-2026-97571", "title": "bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90101", "url": "https://patchblox.com/security/cve/CVE-2026-90101", "title": "bnxt_en: Fix call to hardware monitoring event handler", "priority": "High", "severity": "IMPORTANT", "cvss": 7.3, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80840", "url": "https://patchblox.com/security/cve/CVE-2026-80840", "title": "ipv6: seg6: clear IPv4 control block on IPIP decapsulation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00205, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93264", "url": "https://patchblox.com/security/cve/CVE-2026-93264", "title": "RDMA/efa: Fix PBL chunk length computation", "priority": "High", "severity": "Low", "cvss": 7.8, "epss": 0.00201, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90426", "url": "https://patchblox.com/security/cve/CVE-2026-90426", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Free the error IRQ before...", "priority": "High", "severity": "important", "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90430", "url": "https://patchblox.com/security/cve/CVE-2026-90430", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Publish an LVCMDQ only aft...", "priority": "High", "severity": "important", "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68162", "url": "https://patchblox.com/security/cve/CVE-2026-68162", "title": "sctp: avoid auth_enable sysctl UAF during netns teardown", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97947", "url": "https://patchblox.com/security/cve/CVE-2026-97947", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Fix potential NULL pointer derefer...", "priority": "High", "severity": "important", "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80864", "url": "https://patchblox.com/security/cve/CVE-2026-80864", "title": "RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp", "priority": "High", "severity": "Moderate", "cvss": 9.8, "epss": 0.00197, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80851", "url": "https://patchblox.com/security/cve/CVE-2026-80851", "title": "gtp: serialize PDP context updates", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89913", "url": "https://patchblox.com/security/cve/CVE-2026-89913", "title": "KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74256", "url": "https://patchblox.com/security/cve/CVE-2026-74256", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: fix integer overflow in bpf_msg_po...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89791", "url": "https://patchblox.com/security/cve/CVE-2026-89791", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap() reviva...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80852", "url": "https://patchblox.com/security/cve/CVE-2026-80852", "title": "tls: device: fix out-of-bounds write in tls_append_frag()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80863", "url": "https://patchblox.com/security/cve/CVE-2026-80863", "title": "RDMA/rxe: Fix OOB in free_rd_atomic_resources()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00182, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89912", "url": "https://patchblox.com/security/cve/CVE-2026-89912", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don\u0027t dereference a NULL c...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00181, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80521", "url": "https://patchblox.com/security/cve/CVE-2026-80521", "title": "af_unix: Unlink scc_entry in unix_del_edge().", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00178, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72066", "url": "https://patchblox.com/security/cve/CVE-2026-72066", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: cpu: hotplug: Bound hotplug states sysfs output...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80842", "url": "https://patchblox.com/security/cve/CVE-2026-80842", "title": "net: bridge: mcast: fix use-after-free of a master VLAN\u0027s multicast context", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90415", "url": "https://patchblox.com/security/cve/CVE-2026-90415", "title": "RDMA/cxgb4: free STAG index when TPT entry write fails", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89510", "url": "https://patchblox.com/security/cve/CVE-2026-89510", "title": "RDMA/cxgb4: Cancel reg_work before freeing device on remove", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90241", "url": "https://patchblox.com/security/cve/CVE-2026-90241", "title": "iommu/vt-d: Tear down scalable-mode context on probe failure", "priority": "High", "severity": "high", "cvss": 8.2, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72352", "url": "https://patchblox.com/security/cve/CVE-2026-72352", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: HID: bpf: Fix hid_bpf_get_data() range check hi...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64473", "url": "https://patchblox.com/security/cve/CVE-2026-64473", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vfio: Remove device debugfs before releasing dev...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72018", "url": "https://patchblox.com/security/cve/CVE-2026-72018", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dibs: loopback: validate offset and size in move...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80841", "url": "https://patchblox.com/security/cve/CVE-2026-80841", "title": "net/packet: defer vmalloc TX_RING free until skbs finish", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80836", "url": "https://patchblox.com/security/cve/CVE-2026-80836", "title": "crypto: virtio - bound the akcipher result length", "priority": "High", "severity": "Moderate", "cvss": 7.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89710", "url": "https://patchblox.com/security/cve/CVE-2026-89710", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: fix layout segment leak on the pnfs_lay...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74391", "url": "https://patchblox.com/security/cve/CVE-2026-74391", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seq_...", "priority": "High", "severity": "IMPORTANT", "cvss": 7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90203", "url": "https://patchblox.com/security/cve/CVE-2026-90203", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: Squashfs: check block offset is not negative If...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00171, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74283", "url": "https://patchblox.com/security/cve/CVE-2026-74283", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\ntipc: require net admin for TIPCv2 netlink mutato...", "priority": "High", "severity": "moderate", "cvss": 9.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72102", "url": "https://patchblox.com/security/cve/CVE-2026-72102", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dm_early_create: fix freeing used table on dm_re...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63956", "url": "https://patchblox.com/security/cve/CVE-2026-63956", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72406", "url": "https://patchblox.com/security/cve/CVE-2026-72406", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup gem_init_o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72435", "url": "https://patchblox.com/security/cve/CVE-2026-72435", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and r...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90309", "url": "https://patchblox.com/security/cve/CVE-2026-90309", "title": "RDMA/erdma: Hold CQ references when processing EQ events", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90358", "url": "https://patchblox.com/security/cve/CVE-2026-90358", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix trampoline stack size for 128-bit...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90388", "url": "https://patchblox.com/security/cve/CVE-2026-90388", "title": "iommu/dma: Check atomic pool allocation result directly", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93037", "url": "https://patchblox.com/security/cve/CVE-2026-93037", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1: Propagate sdma_txinit_ahg() errors s...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97940", "url": "https://patchblox.com/security/cve/CVE-2026-97940", "title": "ipv6: fix fib6 walker UAF on seq stop", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00169, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72434", "url": "https://patchblox.com/security/cve/CVE-2026-72434", "title": "netfilter: ipset: make sure gc is properly stopped", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74258", "url": "https://patchblox.com/security/cve/CVE-2026-74258", "title": "bpf: Guard __get_user acesss with access_ok for uprobe_multi data", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80779", "url": "https://patchblox.com/security/cve/CVE-2026-80779", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwsta...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89500", "url": "https://patchblox.com/security/cve/CVE-2026-89500", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89501", "url": "https://patchblox.com/security/cve/CVE-2026-89501", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Hold cpu_buffer::lock when resizing...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89503", "url": "https://patchblox.com/security/cve/CVE-2026-89503", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring_bu...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93212", "url": "https://patchblox.com/security/cve/CVE-2026-93212", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: guard nfsd_serv deref in nfsd_file_net_dis...", "priority": "High", "severity": "IMPORTANT", "cvss": 7.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90428", "url": "https://patchblox.com/security/cve/CVE-2026-90428", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Don\u0027t run the error ISR be...", "priority": "High", "severity": "important", "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93154", "url": "https://patchblox.com/security/cve/CVE-2026-93154", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Add refcounting to user ring MRs Pr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90308", "url": "https://patchblox.com/security/cve/CVE-2026-90308", "title": "RDMA/erdma: Hold QP references for AE and CM processing", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64299", "url": "https://patchblox.com/security/cve/CVE-2026-64299", "title": "tracing: Prevent out-of-bounds read in glob matching", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90240", "url": "https://patchblox.com/security/cve/CVE-2026-90240", "title": "iommu/vt-d: Flush context cache with correct SID when tearing down aliases", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72383", "url": "https://patchblox.com/security/cve/CVE-2026-72383", "title": "sctp: fix addr_wq_timer race in sctp_free_addr_wq()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72404", "url": "https://patchblox.com/security/cve/CVE-2026-72404", "title": "tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-81001", "url": "https://patchblox.com/security/cve/CVE-2026-81001", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: slip: fix use-after-free in sl_sync() slip_devs...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89789", "url": "https://patchblox.com/security/cve/CVE-2026-89789", "title": "gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90003", "url": "https://patchblox.com/security/cve/CVE-2026-90003", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: futex: Prevent rcuwait use-after-free during req...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90142", "url": "https://patchblox.com/security/cve/CVE-2026-90142", "title": "virtio_net: Fix resize of the RX ring", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90177", "url": "https://patchblox.com/security/cve/CVE-2026-90177", "title": "bpf: Check pointer type for all atomic RMW paths", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90292", "url": "https://patchblox.com/security/cve/CVE-2026-90292", "title": "RDMA/siw: Fix use-after-free in siw_accept()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92525", "url": "https://patchblox.com/security/cve/CVE-2026-92525", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate num_sge/cur_sge before indexi...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.00164, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89690", "url": "https://patchblox.com/security/cve/CVE-2026-89690", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: defer vfree of compound ops to fix rpc_sta...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89545", "url": "https://patchblox.com/security/cve/CVE-2026-89545", "title": "sunrpc: defer rq_argp and rq_resp free until after RCU grace period", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89747", "url": "https://patchblox.com/security/cve/CVE-2026-89747", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free in trace_pipe read o...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00163, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64324", "url": "https://patchblox.com/security/cve/CVE-2026-64324", "title": "udf: validate free block extents against the partition length", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80865", "url": "https://patchblox.com/security/cve/CVE-2026-80865", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Add missing access_ok call to copy_user_sym...", "priority": "High", "severity": "important", "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80880", "url": "https://patchblox.com/security/cve/CVE-2026-80880", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Properly support implicit ODP rereg_mr...", "priority": "High", "severity": "important", "epss": 0.00161, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89705", "url": "https://patchblox.com/security/cve/CVE-2026-89705", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: restore rq_status_counter to even on all n...", "priority": "High", "severity": "high", "cvss": 7.1, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90243", "url": "https://patchblox.com/security/cve/CVE-2026-90243", "title": "iommu/vt-d: Clear Present bit before tearing down copied context entry", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74465", "url": "https://patchblox.com/security/cve/CVE-2026-74465", "title": "net: openvswitch: fix potential UAF on meter attach failure", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00153, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64009", "url": "https://patchblox.com/security/cve/CVE-2026-64009", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system", "priority": "High", "severity": "important", "cvss": 7.8, "epss": 0.00144, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97957", "url": "https://patchblox.com/security/cve/CVE-2026-97957", "title": "net: hinic: fix mailbox segment buffer overflow", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00143, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89448", "url": "https://patchblox.com/security/cve/CVE-2026-89448", "title": "iommu/vt-d: Force requesting ACS when tboot is enabled", "priority": "High", "severity": "Moderate", "cvss": 9.3, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74492", "url": "https://patchblox.com/security/cve/CVE-2026-74492", "title": "netfilter: ipset: do not update comments from kernel-side hash adds", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00142, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93827", "url": "https://patchblox.com/security/cve/CVE-2026-93827", "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nvirtio-fs: avoid double-free on failed queue setu...", "priority": "High", "severity": "important", "cvss": 9.8, "epss": 0.0014, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64475", "url": "https://patchblox.com/security/cve/CVE-2026-64475", "title": "vfio/pci: Release the VGA arbiter client on register_device() failure", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74739", "url": "https://patchblox.com/security/cve/CVE-2026-74739", "title": "net/sched: cls_u32: skip hash tables in u32_bind_class()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89564", "url": "https://patchblox.com/security/cve/CVE-2026-89564", "title": "ip: orphan prefetched skbs before multicast forwarding", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74689", "url": "https://patchblox.com/security/cve/CVE-2026-74689", "title": "net/atm: fix slab-out-of-bounds read in vcc_setsockopt()", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74713", "url": "https://patchblox.com/security/cve/CVE-2026-74713", "title": "vhost_iotlb: bound map allocation in add_range", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00139, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68264", "url": "https://patchblox.com/security/cve/CVE-2026-68264", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Reset current_op in xe_pt_update_ops_...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74631", "url": "https://patchblox.com/security/cve/CVE-2026-74631", "title": "net: smc: fix splice entry lifetime imbalance in smc_rx_splice", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74589", "url": "https://patchblox.com/security/cve/CVE-2026-74589", "title": "bpf, sockmap: Fix sk_redir use-after-free in send verdict", "priority": "High", "severity": "Moderate", "cvss": 8.4, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80932", "url": "https://patchblox.com/security/cve/CVE-2026-80932", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: flush works in dependency order v...", "priority": "High", "severity": "high", "cvss": 8.4, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64422", "url": "https://patchblox.com/security/cve/CVE-2026-64422", "title": "net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00138, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74601", "url": "https://patchblox.com/security/cve/CVE-2026-74601", "title": "ring-buffer: Use current_context for safe per-CPU buffer swap", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74667", "url": "https://patchblox.com/security/cve/CVE-2026-74667", "title": "net/packet: reset the MAC header on the packet-socket transmit path", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00136, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68266", "url": "https://patchblox.com/security/cve/CVE-2026-68266", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BO...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00135, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64388", "url": "https://patchblox.com/security/cve/CVE-2026-64388", "title": "smb/client: fix chown/chgrp with SMB3 POSIX Extensions", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23352", "url": "https://patchblox.com/security/cve/CVE-2026-23352", "title": "x86/efi: defer freeing of boot services memory", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68451", "url": "https://patchblox.com/security/cve/CVE-2026-68451", "title": "s390/zcrypt: Validate length for CCA ECC private key requests", "priority": "High", "severity": "Important", "cvss": 8.8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80747", "url": "https://patchblox.com/security/cve/CVE-2026-80747", "title": "drm/amdkfd: Add bounds check for CRAT subtype length", "priority": "High", "severity": "Moderate", "cvss": 8, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74365", "url": "https://patchblox.com/security/cve/CVE-2026-74365", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Handle preemption in BTT lane acquis...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00132, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72012", "url": "https://patchblox.com/security/cve/CVE-2026-72012", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronize_rcu() when unr...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00131, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68452", "url": "https://patchblox.com/security/cve/CVE-2026-68452", "title": "s390/zcrypt: Validate length for CCA AES cipher key requests", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68454", "url": "https://patchblox.com/security/cve/CVE-2026-68454", "title": "KVM: s390: pci: Fix handling of AIF enable without AISB", "priority": "High", "severity": "Moderate", "cvss": 8.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74701", "url": "https://patchblox.com/security/cve/CVE-2026-74701", "title": "net/openvswitch: check Ethernet header length in key_extract()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89580", "url": "https://patchblox.com/security/cve/CVE-2026-89580", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in __bpf_get_stack get_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64154", "url": "https://patchblox.com/security/cve/CVE-2026-64154", "title": "drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.0013, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74515", "url": "https://patchblox.com/security/cve/CVE-2026-74515", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Reject adapter interrupt forward...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64377", "url": "https://patchblox.com/security/cve/CVE-2026-64377", "title": "cpufreq: qcom-cpufreq-hw: Fix possible double free", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64402", "url": "https://patchblox.com/security/cve/CVE-2026-64402", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: coresight: ultrasoc-smb: Fix OOB write in smb_sy...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72444", "url": "https://patchblox.com/security/cve/CVE-2026-72444", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: flow_dissector: check device type before reading...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74288", "url": "https://patchblox.com/security/cve/CVE-2026-74288", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don\u0027t dump dying fib_rule in fib...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74330", "url": "https://patchblox.com/security/cve/CVE-2026-74330", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: configfs: fix lockless traversals of -\u003Es_childre...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74440", "url": "https://patchblox.com/security/cve/CVE-2026-74440", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Wait on external BO kernel fences in exe...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74449", "url": "https://patchblox.com/security/cve/CVE-2026-74449", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix divide-by-zero in calculate...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74467", "url": "https://patchblox.com/security/cve/CVE-2026-74467", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Check CAP_NET_ADMIN for private ioctl...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74590", "url": "https://patchblox.com/security/cve/CVE-2026-74590", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fsverity: Fix bpf_get_fsverity_digest() dynptr a...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74594", "url": "https://patchblox.com/security/cve/CVE-2026-74594", "title": "sched/psi: Shut down rtpoll_timer in psi_cgroup_free()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74605", "url": "https://patchblox.com/security/cve/CVE-2026-74605", "title": "eventfs: Use children field for rcu head and add memory barriers", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74632", "url": "https://patchblox.com/security/cve/CVE-2026-74632", "title": "mm/huge_memory: fix huge_zero_pfn race", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74663", "url": "https://patchblox.com/security/cve/CVE-2026-74663", "title": "net/sched: reject overly deep qdisc hierarchies", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74666", "url": "https://patchblox.com/security/cve/CVE-2026-74666", "title": "packet: synchronize pressure clearing with ring reconfiguration", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74710", "url": "https://patchblox.com/security/cve/CVE-2026-74710", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: xsk: require at least 16 bytes of TX metadata A...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80613", "url": "https://patchblox.com/security/cve/CVE-2026-80613", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: veth: fix NAPI leak in XDP enable error path Du...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80979", "url": "https://patchblox.com/security/cve/CVE-2026-80979", "title": "net/smc: unregister the connection before draining the rx tasklet", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89540", "url": "https://patchblox.com/security/cve/CVE-2026-89540", "title": "sunrpc: init gssp_lock before publishing proc entry", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97421", "url": "https://patchblox.com/security/cve/CVE-2026-97421", "title": "RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00129, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68400", "url": "https://patchblox.com/security/cve/CVE-2026-68400", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix Endpoint Memory Access De...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74630", "url": "https://patchblox.com/security/cve/CVE-2026-74630", "title": "ipv6: prevent in6_dev_get() from resurrecting inet6_dev", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00128, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80664", "url": "https://patchblox.com/security/cve/CVE-2026-80664", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_nat: reject unsupported target fam...", "priority": "High", "severity": "high", "cvss": 7.3, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64372", "url": "https://patchblox.com/security/cve/CVE-2026-64372", "title": "cpufreq: pcc: fix use-after-free and double free in _OSC evaluation", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74257", "url": "https://patchblox.com/security/cve/CVE-2026-74257", "title": "sockmap: Fix use-after-free in udp_bpf_recvmsg()", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74289", "url": "https://patchblox.com/security/cve/CVE-2026-74289", "title": "ipv4: fib: Don\u0027t dump dying fib_info in fib_leaf_notify().", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74359", "url": "https://patchblox.com/security/cve/CVE-2026-74359", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: configfs_lookup(): don\u0027t leave -\u003Es_dentry dangli...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74450", "url": "https://patchblox.com/security/cve/CVE-2026-74450", "title": "drm/amd/pm: fix pptable use-after-free", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74471", "url": "https://patchblox.com/security/cve/CVE-2026-74471", "title": "tracing: Check return value of __register_event() in trace_module_add_events()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74609", "url": "https://patchblox.com/security/cve/CVE-2026-74609", "title": "tipc: read le-\u003Elink under the node lock in tipc_node_link_down()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74637", "url": "https://patchblox.com/security/cve/CVE-2026-74637", "title": "perf/core: Fix group leader use-after-free after sibling detach", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74660", "url": "https://patchblox.com/security/cve/CVE-2026-74660", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ebt_nflog: pin the NFLOG backend nf_...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74700", "url": "https://patchblox.com/security/cve/CVE-2026-74700", "title": "net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89508", "url": "https://patchblox.com/security/cve/CVE-2026-89508", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Lock the handler in ucma_set_ib_path(...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89548", "url": "https://patchblox.com/security/cve/CVE-2026-89548", "title": "SUNRPC: always drain cache_cleaner before destroying a cache_detail", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74726", "url": "https://patchblox.com/security/cve/CVE-2026-74726", "title": "bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor", "priority": "High", "severity": "Moderate", "cvss": 7.3, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74485", "url": "https://patchblox.com/security/cve/CVE-2026-74485", "title": "binfmt_misc: reject a flag character as the field delimiter", "priority": "High", "severity": "Moderate", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74603", "url": "https://patchblox.com/security/cve/CVE-2026-74603", "title": "ptp: ocp: Fix board ID over-read", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89691", "url": "https://patchblox.com/security/cve/CVE-2026-89691", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: clear opcnt on compound arg release to pre...", "priority": "High", "severity": "high", "cvss": 8.1, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64580", "url": "https://patchblox.com/security/cve/CVE-2026-64580", "title": "xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68290", "url": "https://patchblox.com/security/cve/CVE-2026-68290", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74606", "url": "https://patchblox.com/security/cve/CVE-2026-74606", "title": "eventfs: Fix use-after-free in eventfs_remove_rec()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74634", "url": "https://patchblox.com/security/cve/CVE-2026-74634", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Prevent subbuf order change when re...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74725", "url": "https://patchblox.com/security/cve/CVE-2026-74725", "title": "enic: fix tx_hang_reset use-after-free on device removal", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93782", "url": "https://patchblox.com/security/cve/CVE-2026-93782", "title": "vhost-scsi: flush backend after device ioctls", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98030", "url": "https://patchblox.com/security/cve/CVE-2026-98030", "title": "net: dsa: bcm_sf2: bound the CFP rule dump by the caller\u0027s buffer size", "priority": "High", "severity": "Important", "cvss": 7.8, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93810", "url": "https://patchblox.com/security/cve/CVE-2026-93810", "title": "cachefiles: Fix double fput", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98029", "url": "https://patchblox.com/security/cve/CVE-2026-98029", "title": "eth: nfp: bound the ntuple rule dump by the caller\u0027s buffer size", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97520", "url": "https://patchblox.com/security/cve/CVE-2026-97520", "title": "gfs2: move quota_init qc iterator increment", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74579", "url": "https://patchblox.com/security/cve/CVE-2026-74579", "title": "netfilter: nft_payload: fix mask build for partial field offload", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.0012, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64405", "url": "https://patchblox.com/security/cve/CVE-2026-64405", "title": "Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn()", "priority": "High", "severity": "Important", "cvss": 7.1, "epss": 0.00119, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74564", "url": "https://patchblox.com/security/cve/CVE-2026-74564", "title": "netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH", "priority": "High", "severity": "Low", "cvss": 7.1, "epss": 0.00118, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68382", "url": "https://patchblox.com/security/cve/CVE-2026-68382", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown...", "priority": "High", "severity": "high", "cvss": 7.8, "epss": 0.00106, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64418", "url": "https://patchblox.com/security/cve/CVE-2026-64418", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mm: shrinker: fix shrinker_info teardown race wi...", "priority": "High", "severity": "high", "cvss": 8.8, "epss": 0.00097, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74595", "url": "https://patchblox.com/security/cve/CVE-2026-74595", "title": "fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()", "priority": "High", "severity": "Moderate", "cvss": 7.8, "epss": 0.00092, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89603", "url": "https://patchblox.com/security/cve/CVE-2026-89603", "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: s...", "priority": "High", "severity": "Important", "cvss": 9.8, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2025-40136", "url": "https://patchblox.com/security/cve/CVE-2025-40136", "title": "crypto: hisilicon/qm - request reserved interrupt for virtual function", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00247, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72321", "url": "https://patchblox.com/security/cve/CVE-2026-72321", "title": "ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()", "priority": "Routine", "severity": "Low", "cvss": 3.1, "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89527", "url": "https://patchblox.com/security/cve/CVE-2026-89527", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svc_xprt_put to free listener on cr...", "priority": "Routine", "epss": 0.00223, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72070", "url": "https://patchblox.com/security/cve/CVE-2026-72070", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: wifi: libertas_tf: fix use-after-free in lbtf_fr...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72224", "url": "https://patchblox.com/security/cve/CVE-2026-72224", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: Free arenas on btt_init() error path...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72349", "url": "https://patchblox.com/security/cve/CVE-2026-72349", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_rateest: fix u64 truncation in xt_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72447", "url": "https://patchblox.com/security/cve/CVE-2026-72447", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: sctp: hold socket lock when dumping endpoints in...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0022, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90417", "url": "https://patchblox.com/security/cve/CVE-2026-90417", "title": "RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00219, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89673", "url": "https://patchblox.com/security/cve/CVE-2026-89673", "title": "kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues:\n\nThe following security issues we...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00217, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72166", "url": "https://patchblox.com/security/cve/CVE-2026-72166", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/9p: fix infinite loop in p9_client_rpc on fa...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72256", "url": "https://patchblox.com/security/cve/CVE-2026-72256", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_cluster: reject template conntrack...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72392", "url": "https://patchblox.com/security/cve/CVE-2026-72392", "title": "ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72433", "url": "https://patchblox.com/security/cve/CVE-2026-72433", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIF...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89784", "url": "https://patchblox.com/security/cve/CVE-2026-89784", "title": "SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90074", "url": "https://patchblox.com/security/cve/CVE-2026-90074", "title": "net/sched: fq_pie: clamp default quantum to avoid signed overflow", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90218", "url": "https://patchblox.com/security/cve/CVE-2026-90218", "title": "RDMA/cma: Fix WARNING in res_to_rt", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90307", "url": "https://patchblox.com/security/cve/CVE-2026-90307", "title": "RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97572", "url": "https://patchblox.com/security/cve/CVE-2026-97572", "title": "bnxt_en: Propagate RX ring init failures in bnxt_init_nic()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72025", "url": "https://patchblox.com/security/cve/CVE-2026-72025", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: s390/monwriter: Reject buffer reuse with differe...", "priority": "Routine", "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89780", "url": "https://patchblox.com/security/cve/CVE-2026-89780", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb-\u003Edev on deaggr...", "priority": "Routine", "epss": 0.00216, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74735", "url": "https://patchblox.com/security/cve/CVE-2026-74735", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: l2tp: fix tunnel and session refcount leak on se...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00215, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74386", "url": "https://patchblox.com/security/cve/CVE-2026-74386", "title": "nvmet-tcp: fix page fragment cache leak in error path", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80847", "url": "https://patchblox.com/security/cve/CVE-2026-80847", "title": "tcp: clamp route advmss to TCP_MIN_MSS", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00213, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90265", "url": "https://patchblox.com/security/cve/CVE-2026-90265", "title": "btrfs: defrag: fix deadlock between defrag and delalloc space reservation", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97605", "url": "https://patchblox.com/security/cve/CVE-2026-97605", "title": "erofs: preserve LZMA decoders on resize failure", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00212, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72413", "url": "https://patchblox.com/security/cve/CVE-2026-72413", "title": "sctp: fix err_chunk memory leaks in INIT handling", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72237", "url": "https://patchblox.com/security/cve/CVE-2026-72237", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/brs: Fix kernel address leakage A...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89539", "url": "https://patchblox.com/security/cve/CVE-2026-89539", "title": "SUNRPC: reject duplicate CREDS_VALUE options", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72147", "url": "https://patchblox.com/security/cve/CVE-2026-72147", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma-pcie: Reject devices without...", "priority": "Routine", "epss": 0.00211, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97934", "url": "https://patchblox.com/security/cve/CVE-2026-97934", "title": "tracing: Fix memory corruption from a \u0022STACKTRACE\u0022 histogram key", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89531", "url": "https://patchblox.com/security/cve/CVE-2026-89531", "title": "svcrdma: Reject connection when transport allocation fails", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89798", "url": "https://patchblox.com/security/cve/CVE-2026-89798", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: rpcrdma: arm rn_done before publishing the notif...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90182", "url": "https://patchblox.com/security/cve/CVE-2026-90182", "title": "blk-iocost: clear delay state when freeing policy data", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89453", "url": "https://patchblox.com/security/cve/CVE-2026-89453", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Put PCI device after handling PPR fau...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97902", "url": "https://patchblox.com/security/cve/CVE-2026-97902", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs: don\u0027t return -EINVAL for successful nested t...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.4, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68312", "url": "https://patchblox.com/security/cve/CVE-2026-68312", "title": "cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89698", "url": "https://patchblox.com/security/cve/CVE-2026-89698", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsd_genl_rqstp address fields to so...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97545", "url": "https://patchblox.com/security/cve/CVE-2026-97545", "title": "xfs: don\u0027t leak new_bp if xfs_btree_bload_drop_buf fails", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3, "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80984", "url": "https://patchblox.com/security/cve/CVE-2026-80984", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: do not dereference an unset send buffer...", "priority": "Routine", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90183", "url": "https://patchblox.com/security/cve/CVE-2026-90183", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: blk-iolatency: clear delay state when freeing po...", "priority": "Routine", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97574", "url": "https://patchblox.com/security/cve/CVE-2026-97574", "title": "bnxt_en: Don\u0027t free the live ring\u0027s TPA state on queue restart failure", "priority": "Routine", "epss": 0.00206, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97552", "url": "https://patchblox.com/security/cve/CVE-2026-97552", "title": "xfs: initialise error in xfs_defer_finish_one()", "priority": "Routine", "severity": "IMPORTANT", "cvss": 4.4, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97543", "url": "https://patchblox.com/security/cve/CVE-2026-97543", "title": "xfs: destroy seen inode bitmap when we fail to add a dirpath", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97544", "url": "https://patchblox.com/security/cve/CVE-2026-97544", "title": "xfs: don\u0027t leak dqacct if rhashtable insertion fails", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97546", "url": "https://patchblox.com/security/cve/CVE-2026-97546", "title": "xfs: don\u0027t spin forever on zero-length dirents when salvaging them", "priority": "Routine", "severity": "IMPORTANT", "cvss": 2.3, "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-90065", "url": "https://patchblox.com/security/cve/CVE-2026-90065", "title": "net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure", "priority": "Routine", "epss": 0.002, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-72128", "url": "https://patchblox.com/security/cve/CVE-2026-72128", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nvmet: fix refcount leak in nvmet_sq_create() I...", "priority": "Routine", "epss": 0.00198, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80846", "url": "https://patchblox.com/security/cve/CVE-2026-80846", "title": "xfrm: drop ESP-in-TCP packets with no ingress device", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80848", "url": "https://patchblox.com/security/cve/CVE-2026-80848", "title": "xfrm: espintcp: fix UAF during close", "priority": "Routine", "severity": "Moderate", "cvss": 5.9, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80793", "url": "https://patchblox.com/security/cve/CVE-2026-80793", "title": "ipv4: reject undersized MTUs in ip_do_fragment()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00195, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-63838", "url": "https://patchblox.com/security/cve/CVE-2026-63838", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: rsnd: Fix potential out-of-bounds access o...", "priority": "Routine", "epss": 0.00185, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89525", "url": "https://patchblox.com/security/cve/CVE-2026-89525", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: udf: reject VAT indexes equal to the entry count...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.7, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68367", "url": "https://patchblox.com/security/cve/CVE-2026-68367", "title": "usb: gadget: f_tcm: synchronize delayed set_alt with teardown", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00184, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64476", "url": "https://patchblox.com/security/cve/CVE-2026-64476", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Latch disable_idle_d3 per device When...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.0018, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93110", "url": "https://patchblox.com/security/cve/CVE-2026-93110", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Wait for RCU callbacks before unloadi...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74487", "url": "https://patchblox.com/security/cve/CVE-2026-74487", "title": "binfmt_misc: restore write access when removing an entry", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74671", "url": "https://patchblox.com/security/cve/CVE-2026-74671", "title": "ima: fix out-of-bounds read in xattr_verify()", "priority": "Routine", "severity": "Low", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80679", "url": "https://patchblox.com/security/cve/CVE-2026-80679", "title": "s390/dasd: Fix potential NULL pointer dereference", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93160", "url": "https://patchblox.com/security/cve/CVE-2026-93160", "title": "crypto: atmel-ecc - reject hardware ECDH without a public key", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74694", "url": "https://patchblox.com/security/cve/CVE-2026-74694", "title": "net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80983", "url": "https://patchblox.com/security/cve/CVE-2026-80983", "title": "net/smc: fix socket refcount leak in smc_switch_conns()", "priority": "Routine", "severity": "Low", "cvss": 2.5, "epss": 0.00177, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64474", "url": "https://patchblox.com/security/cve/CVE-2026-64474", "title": "vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00176, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89683", "url": "https://patchblox.com/security/cve/CVE-2026-89683", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dentry ref leak on V4ROOT export fileh...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.5, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64457", "url": "https://patchblox.com/security/cve/CVE-2026-64457", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: virtio_pci: fix vq info pointer lookup via wrong...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00175, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97477", "url": "https://patchblox.com/security/cve/CVE-2026-97477", "title": "RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()", "priority": "Routine", "severity": "Low", "cvss": 3.6, "epss": 0.00174, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93800", "url": "https://patchblox.com/security/cve/CVE-2026-93800", "title": "btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74290", "url": "https://patchblox.com/security/cve/CVE-2026-74290", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: Dont expose folded kernel p...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74600", "url": "https://patchblox.com/security/cve/CVE-2026-74600", "title": "mm/page_table_check: skip special zero mappings", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74636", "url": "https://patchblox.com/security/cve/CVE-2026-74636", "title": "tracing: Fix race between update_event_fields and, event_define_fields", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-92523", "url": "https://patchblox.com/security/cve/CVE-2026-92523", "title": "RDMA/nldev: validate dynamic counter attribute length", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93825", "url": "https://patchblox.com/security/cve/CVE-2026-93825", "title": "spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-89644", "url": "https://patchblox.com/security/cve/CVE-2026-89644", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O w...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 3.3, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74659", "url": "https://patchblox.com/security/cve/CVE-2026-74659", "title": "net: bridge: mrp: fix uninitialised bytes on the wire", "priority": "Routine", "severity": "Low", "cvss": 2.3, "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74389", "url": "https://patchblox.com/security/cve/CVE-2026-74389", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix log flood after cmd_mbox failure...", "priority": "Routine", "epss": 0.00173, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93829", "url": "https://patchblox.com/security/cve/CVE-2026-93829", "title": "smb: client: fix races in cifsd thread creation", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93814", "url": "https://patchblox.com/security/cve/CVE-2026-93814", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: spi: core: Abort active target transfer on contr...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 6.4, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74483", "url": "https://patchblox.com/security/cve/CVE-2026-74483", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don\u0027t leak the user namespace when...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74484", "url": "https://patchblox.com/security/cve/CVE-2026-74484", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: don\u0027t let an \u0027F\u0027 entry pin its own...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74602", "url": "https://patchblox.com/security/cve/CVE-2026-74602", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Initialise reader page order in rb_...", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74718", "url": "https://patchblox.com/security/cve/CVE-2026-74718", "title": "devlink: fix net namespace reference leak in reload", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98003", "url": "https://patchblox.com/security/cve/CVE-2026-98003", "title": "iommu/amd: Do not reallocate GA log buffers on resume", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98028", "url": "https://patchblox.com/security/cve/CVE-2026-98028", "title": "eth: nfp: drop the replaced rule from the list when reprogramming fails", "priority": "Routine", "severity": "IMPORTANT", "cvss": 5.3, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-93794", "url": "https://patchblox.com/security/cve/CVE-2026-93794", "title": "smb/client: flush dirty data before punching a hole", "priority": "Routine", "severity": "Low", "cvss": 3.3, "epss": 0.00168, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-74638", "url": "https://patchblox.com/security/cve/CVE-2026-74638", "title": "drm/v3d: Serialize the scheduler timeout handlers", "priority": "Routine", "severity": "Moderate", "cvss": 4.7, "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80895", "url": "https://patchblox.com/security/cve/CVE-2026-80895", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: mshv: Order pt_vp_array publish against irqfd as...", "priority": "Routine", "epss": 0.00166, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-68441", "url": "https://patchblox.com/security/cve/CVE-2026-68441", "title": "net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-80756", "url": "https://patchblox.com/security/cve/CVE-2026-80756", "title": "selinux: do not cancel a policy conversion that never started", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64594", "url": "https://patchblox.com/security/cve/CVE-2026-64594", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: initialize reset_work at allo...", "priority": "Routine", "epss": 0.00165, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64297", "url": "https://patchblox.com/security/cve/CVE-2026-64297", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: module: decompress: check return value of module...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.0016, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43272", "url": "https://patchblox.com/security/cve/CVE-2026-43272", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uniniti...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00159, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-97521", "url": "https://patchblox.com/security/cve/CVE-2026-97521", "title": "gfs2: fix quota init duplicate scan", "priority": "Routine", "severity": "Moderate", "cvss": 4.4, "epss": 0.00155, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46196", "url": "https://patchblox.com/security/cve/CVE-2026-46196", "title": "tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00134, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43210", "url": "https://patchblox.com/security/cve/CVE-2026-43210", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing: ring-buffer: Fix to check event length...", "priority": "Routine", "severity": "medium", "cvss": 6.1, "epss": 0.00127, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-45836", "url": "https://patchblox.com/security/cve/CVE-2026-45836", "title": "Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00126, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-53377", "url": "https://patchblox.com/security/cve/CVE-2026-53377", "title": "drm/msm: always recover the gpu", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64205", "url": "https://patchblox.com/security/cve/CVE-2026-64205", "title": "i2c: i801: fix hardware state machine corruption in error path", "priority": "Routine", "severity": "Moderate", "cvss": 5.5, "epss": 0.00125, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-98091", "url": "https://patchblox.com/security/cve/CVE-2026-98091", "title": "btrfs: detach failed sprout device from transaction update list", "priority": "Routine", "severity": "Moderate", "cvss": 6.7, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46044", "url": "https://patchblox.com/security/cve/CVE-2026-46044", "title": "kernel-uek-modules-extra: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli) [Orabug: 39853924]\n\n[5.1...", "priority": "Routine", "severity": "N/A", "cvss": 5.5, "epss": 0.00123, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-43409", "url": "https://patchblox.com/security/cve/CVE-2026-43409", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: kprobes: avoid crash when rmmod/insmod after ftr...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00122, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-46272", "url": "https://patchblox.com/security/cve/CVE-2026-46272", "title": "coresight: tmc-etr: Fix race condition between sysfs and perf mode", "priority": "Routine", "severity": "Low", "cvss": 4.7, "epss": 0.00121, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-64173", "url": "https://patchblox.com/security/cve/CVE-2026-64173", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Do not call map-\u003Eops-\u003Eelt_free() if elt...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00114, "kev": false, "ransomware": false, "exploited": false, "disclosed": false }, { "cveId": "CVE-2026-23199", "url": "https://patchblox.com/security/cve/CVE-2026-23199", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: procfs: avoid fetching build ID while holding VM...", "priority": "Routine", "severity": "medium", "cvss": 5.5, "epss": 0.00103, "kev": false, "ransomware": false, "exploited": false, "disclosed": false } ], "dataAsOf": "2026-11-10T13:56:55Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }