{
  "fix": "OPENSUSE-SU-2026:22167-1",
  "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-22167-1",
  "summary": "OPENSUSE-SU-2026:22167-1, released November 7, 2026, fixes 129 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 13 packages",
  "released": "2026-11-07T00:47:19Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-99999, rated Critical",
  "supported": true,
  "cveCount": 129,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00841,
  "maxCvss": 9.9,
  "vendorAdvisory": "https://osv.dev/vulnerability/openSUSE-SU-2026:22167-1",
  "appliesTo": [
    {
      "product": "dtb-aarch64",
      "productUrl": "https://patchblox.com/security/product/linux/dtb-aarch64",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1",
      "supported": true
    },
    {
      "product": "kernel-64kb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1",
      "supported": true
    },
    {
      "product": "kernel-azure",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-azure",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1.160000.2.29",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1",
      "supported": true
    },
    {
      "product": "kernel-kvmsmall",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-kvmsmall",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1",
      "supported": true
    },
    {
      "product": "kernel-obs-qa",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-qa",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1",
      "supported": true
    },
    {
      "product": "kernel-rt",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-rt",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1",
      "supported": true
    },
    {
      "product": "kernel-zfcpdump",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "6.12.0-160000.40.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-99999",
      "url": "https://patchblox.com/security/cve/CVE-2026-99999",
      "title": "ipv4: validate checksum_start before completing checksum",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.3,
      "epss": 0.00788,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72319",
      "url": "https://patchblox.com/security/cve/CVE-2026-72319",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipvs: ensure inner headers in ICMP errors are in...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00745,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72041",
      "url": "https://patchblox.com/security/cve/CVE-2026-72041",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  espintcp: use sk_msg_free_partial to fix partial...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89778",
      "url": "https://patchblox.com/security/cve/CVE-2026-89778",
      "title": "isofs: fix out-of-bounds page array access on empty zisofs block",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00697,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89636",
      "url": "https://patchblox.com/security/cve/CVE-2026-89636",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: clear ce-\u003Etgthint in free_tgts()  W...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72355",
      "url": "https://patchblox.com/security/cve/CVE-2026-72355",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix barriering when walking subrequest li...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00641,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89558",
      "url": "https://patchblox.com/security/cve/CVE-2026-89558",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  md/raid10: fix still_degraded being inverted in...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00635,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98171",
      "url": "https://patchblox.com/security/cve/CVE-2026-98171",
      "title": "smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00537,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98323",
      "url": "https://patchblox.com/security/cve/CVE-2026-98323",
      "title": "RDMA/siw: Bound fragmented header copies by the remaining length",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89631",
      "url": "https://patchblox.com/security/cve/CVE-2026-89631",
      "title": "smb: client: reject a tree connect response whose byte count is too small",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.1,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98365",
      "url": "https://patchblox.com/security/cve/CVE-2026-98365",
      "title": "RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00377,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64068",
      "url": "https://patchblox.com/security/cve/CVE-2026-64068",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix missing locking around retry adding n...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00353,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98174",
      "url": "https://patchblox.com/security/cve/CVE-2026-98174",
      "title": "smb: client: fix rlist race and missing initialization",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0033,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98167",
      "url": "https://patchblox.com/security/cve/CVE-2026-98167",
      "title": "smb: client: fix server-\u003Etotal_read for compound encrypted PDUs",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00222,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98170",
      "url": "https://patchblox.com/security/cve/CVE-2026-98170",
      "title": "smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98269",
      "url": "https://patchblox.com/security/cve/CVE-2026-98269",
      "title": "btrfs: abort transaction on failure to update inode for hole punching and reflinking",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98352",
      "url": "https://patchblox.com/security/cve/CVE-2026-98352",
      "title": "RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98253",
      "url": "https://patchblox.com/security/cve/CVE-2026-98253",
      "title": "RDMA/ucma: Serialize join and leave on copy_to_user failure",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98252",
      "url": "https://patchblox.com/security/cve/CVE-2026-98252",
      "title": "RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90011",
      "url": "https://patchblox.com/security/cve/CVE-2026-90011",
      "title": "scsi: target: iscsi: Reserve a terminator byte for the login payload",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00841,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98432",
      "url": "https://patchblox.com/security/cve/CVE-2026-98432",
      "title": "ipv4: free inet_opt and ireq_opt after an RCU grace period",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.0076,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89528",
      "url": "https://patchblox.com/security/cve/CVE-2026-89528",
      "title": "svcrdma: Reject Read lists that exceed the page budget",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00707,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72253",
      "url": "https://patchblox.com/security/cve/CVE-2026-72253",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_conntrack_sip: validate skb_dst()...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00696,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97555",
      "url": "https://patchblox.com/security/cve/CVE-2026-97555",
      "title": "smb: client: fix heap overflow in DACL owner/group rewrite",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00584,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64116",
      "url": "https://patchblox.com/security/cve/CVE-2026-64116",
      "title": "bpftool: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.00511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74587",
      "url": "https://patchblox.com/security/cve/CVE-2026-74587",
      "title": "sctp: fix use-after-free of cached ASCONF chunk",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74611",
      "url": "https://patchblox.com/security/cve/CVE-2026-74611",
      "title": "tls: rx: restore msg_iter before TLS 1.3 optimistic retry",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74624",
      "url": "https://patchblox.com/security/cve/CVE-2026-74624",
      "title": "netfilter: nf_conntrack: defer invalid log until after unlock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00479,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98130",
      "url": "https://patchblox.com/security/cve/CVE-2026-98130",
      "title": "sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00453,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98169",
      "url": "https://patchblox.com/security/cve/CVE-2026-98169",
      "title": "smb: client: fix potential OOB read in smb3_enum_snapshots()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00448,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63830",
      "url": "https://patchblox.com/security/cve/CVE-2026-63830",
      "title": "net: skmsg: preserve sg.copy across SG transforms",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.4,
      "epss": 0.00441,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97562",
      "url": "https://patchblox.com/security/cve/CVE-2026-97562",
      "title": "smb: client: pin DFS superblock in iterator callback",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98261",
      "url": "https://patchblox.com/security/cve/CVE-2026-98261",
      "title": "cifs: Fix server use-after-free in cifs_chan_skip_or_disable()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00405,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72493",
      "url": "https://patchblox.com/security/cve/CVE-2026-72493",
      "title": "net: serialize netif_running() check in enqueue_to_backlog()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.9,
      "epss": 0.00403,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98357",
      "url": "https://patchblox.com/security/cve/CVE-2026-98357",
      "title": "IB/isert: wait for deferred control PDU completions before releasing the connection",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00354,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98173",
      "url": "https://patchblox.com/security/cve/CVE-2026-98173",
      "title": "smb: client: fix use-after-free of iface in cifs_try_adding_channels()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00345,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93787",
      "url": "https://patchblox.com/security/cve/CVE-2026-93787",
      "title": "smb: client: bound dirent name against end of SMB response in cifs_filldir",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00344,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64435",
      "url": "https://patchblox.com/security/cve/CVE-2026-64435",
      "title": "audit: Fix data races of skb_queue_len() readers on audit_queue",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.2,
      "epss": 0.00331,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98175",
      "url": "https://patchblox.com/security/cve/CVE-2026-98175",
      "title": "smb: client: cancel reconnect work in clean_demultiplex_info()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00321,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93806",
      "url": "https://patchblox.com/security/cve/CVE-2026-93806",
      "title": "wifi: cfg80211: validate assoc response length before status and IE access",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97558",
      "url": "https://patchblox.com/security/cve/CVE-2026-97558",
      "title": "smb: client: fix cifsFileInfo reference leak in deferred close",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97564",
      "url": "https://patchblox.com/security/cve/CVE-2026-97564",
      "title": "smb: client: reject userspace cifs.idmap descriptions",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97533",
      "url": "https://patchblox.com/security/cve/CVE-2026-97533",
      "title": "x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF",
      "priority": "High",
      "severity": "important",
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97559",
      "url": "https://patchblox.com/security/cve/CVE-2026-97559",
      "title": "smb: client: fail DACL rewrite when the new DACL exceeds 64K",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97554",
      "url": "https://patchblox.com/security/cve/CVE-2026-97554",
      "title": "smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97556",
      "url": "https://patchblox.com/security/cve/CVE-2026-97556",
      "title": "smb: client: avoid leaking refcount when cifs_sb_tlink() fails",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93134",
      "url": "https://patchblox.com/security/cve/CVE-2026-93134",
      "title": "printk: Fix possible console use-after-free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97942",
      "url": "https://patchblox.com/security/cve/CVE-2026-97942",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  x86/alternatives: Exclude text poking against ch...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97943",
      "url": "https://patchblox.com/security/cve/CVE-2026-97943",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  x86/mm/pat: Acquire init_mm write lock on collap...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00203,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97563",
      "url": "https://patchblox.com/security/cve/CVE-2026-97563",
      "title": "smb: client: reject out-of-bounds DataOffset in CIFSSMBRead()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98260",
      "url": "https://patchblox.com/security/cve/CVE-2026-98260",
      "title": "exec: Cleanup POSIX timers right after de_thread()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64461",
      "url": "https://patchblox.com/security/cve/CVE-2026-64461",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  PCI: mediatek: Fix IRQ domain leak when port fai...",
      "priority": "High",
      "severity": "IMPORTANT",
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98015",
      "url": "https://patchblox.com/security/cve/CVE-2026-98015",
      "title": "net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89811",
      "url": "https://patchblox.com/security/cve/CVE-2026-89811",
      "title": "drm/amdkfd: Add TLB flush after MES queue eviction/suspension",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98089",
      "url": "https://patchblox.com/security/cve/CVE-2026-98089",
      "title": "bonding: alb: fix uninitialized transport header access in alb_determine_nd()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93785",
      "url": "https://patchblox.com/security/cve/CVE-2026-93785",
      "title": "cifs: validate idmap key payload length",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98016",
      "url": "https://patchblox.com/security/cve/CVE-2026-98016",
      "title": "net/mlx5e: Fix use-after-free race in sample_restore_put()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80893",
      "url": "https://patchblox.com/security/cve/CVE-2026-80893",
      "title": "mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()",
      "priority": "High",
      "severity": "Low",
      "cvss": 7,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64280",
      "url": "https://patchblox.com/security/cve/CVE-2026-64280",
      "title": "fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72110",
      "url": "https://patchblox.com/security/cve/CVE-2026-72110",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf,fork: wipe -\u003Ebpf_storage before bailouts tha...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72172",
      "url": "https://patchblox.com/security/cve/CVE-2026-72172",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/mm_init: fix uninitialized struct pages for Z...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72250",
      "url": "https://patchblox.com/security/cve/CVE-2026-72250",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_conntrack_reasm: guard mac_header...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90289",
      "url": "https://patchblox.com/security/cve/CVE-2026-90289",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Resize MST HDCP per-connector a...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93066",
      "url": "https://patchblox.com/security/cve/CVE-2026-93066",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  x86/mm/pat: Take cpa_lock around large-page coll...",
      "priority": "High",
      "severity": "important",
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72213",
      "url": "https://patchblox.com/security/cve/CVE-2026-72213",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/hugetlb: fix hugetlb cgroup rsvd charge/uncha...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89755",
      "url": "https://patchblox.com/security/cve/CVE-2026-89755",
      "title": "mm/migrate_device: clear stale mapping after freeing swapcache",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98041",
      "url": "https://patchblox.com/security/cve/CVE-2026-98041",
      "title": "bpf: Don\u0027t predict JMP32 pointer vs zero comparisons",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74578",
      "url": "https://patchblox.com/security/cve/CVE-2026-74578",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: algif_skcipher - force synchronous proce...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74614",
      "url": "https://patchblox.com/security/cve/CVE-2026-74614",
      "title": "vsock/virtio: read virtqueues under worker locks",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89754",
      "url": "https://patchblox.com/security/cve/CVE-2026-89754",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/pagewalk: fix stale walk-\u003Eaction escaping wal...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72405",
      "url": "https://patchblox.com/security/cve/CVE-2026-72405",
      "title": "net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97415",
      "url": "https://patchblox.com/security/cve/CVE-2026-97415",
      "title": "btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74544",
      "url": "https://patchblox.com/security/cve/CVE-2026-74544",
      "title": "net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98127",
      "url": "https://patchblox.com/security/cve/CVE-2026-98127",
      "title": "smb/client: validate new EOF for insert range",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98360",
      "url": "https://patchblox.com/security/cve/CVE-2026-98360",
      "title": "RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64058",
      "url": "https://patchblox.com/security/cve/CVE-2026-64058",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix netfs_read_folio() to wait on writeba...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64063",
      "url": "https://patchblox.com/security/cve/CVE-2026-64063",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix streaming write being overwritten  In...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74306",
      "url": "https://patchblox.com/security/cve/CVE-2026-74306",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  vfio/qat: fix f_pos race in qat_vf_resume_write(...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74312",
      "url": "https://patchblox.com/security/cve/CVE-2026-74312",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  vhost/vdpa: validate virtqueue index in mmap and...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74715",
      "url": "https://patchblox.com/security/cve/CVE-2026-74715",
      "title": "bpf: Fix netns reference imbalance in conntrack kfuncs",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80977",
      "url": "https://patchblox.com/security/cve/CVE-2026-80977",
      "title": "net: skbuff: don\u0027t touch shared zerocopy state in skb_tx_error()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93798",
      "url": "https://patchblox.com/security/cve/CVE-2026-93798",
      "title": "btrfs: fix reloc root cleanup in merge_reloc_roots()",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89640",
      "url": "https://patchblox.com/security/cve/CVE-2026-89640",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: fix loff_t underflow in cifs_remap_file_ra...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64424",
      "url": "https://patchblox.com/security/cve/CVE-2026-64424",
      "title": "netpoll: fix a use-after-free on shutdown path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89593",
      "url": "https://patchblox.com/security/cve/CVE-2026-89593",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  hugetlb: only adjust reservation during unmappin...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98216",
      "url": "https://patchblox.com/security/cve/CVE-2026-98216",
      "title": "IB/hfi1: Fix the PIO_CRED credit-return mmap",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64428",
      "url": "https://patchblox.com/security/cve/CVE-2026-64428",
      "title": "gpio: sch: use raw_spinlock_t in the irq startup path",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46028",
      "url": "https://patchblox.com/security/cve/CVE-2026-46028",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: algif_aead - snapshot IV for async AEAD...",
      "priority": "High",
      "severity": "medium",
      "cvss": 7,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98367",
      "url": "https://patchblox.com/security/cve/CVE-2026-98367",
      "title": "RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80572",
      "url": "https://patchblox.com/security/cve/CVE-2026-80572",
      "title": "Input: byd - synchronize timer deletion before freeing private data",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74583",
      "url": "https://patchblox.com/security/cve/CVE-2026-74583",
      "title": "net/sched: cls_route: fix fastmap use-after-free on filter",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98359",
      "url": "https://patchblox.com/security/cve/CVE-2026-98359",
      "title": "RDMA/core: Reject unregistering netdevs in ib_get_eth_speed",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98366",
      "url": "https://patchblox.com/security/cve/CVE-2026-98366",
      "title": "RDMA/rxe: validate access flags before swapping the MR\u0027s PD",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80579",
      "url": "https://patchblox.com/security/cve/CVE-2026-80579",
      "title": "fbdev: clear fb_info-\u003Emode before deleting a videomode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00112,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68323",
      "url": "https://patchblox.com/security/cve/CVE-2026-68323",
      "title": "tipc: serialize udp bearer replicast list updates",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31731",
      "url": "https://patchblox.com/security/cve/CVE-2026-31731",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  thermal: core: Address thermal zone removal race...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90283",
      "url": "https://patchblox.com/security/cve/CVE-2026-90283",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  hugetlbfs: release subpool on fill_super failure...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.7,
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72236",
      "url": "https://patchblox.com/security/cve/CVE-2026-72236",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  s390/perf_cpum_cf: Add missing array_index_nospe...",
      "priority": "Routine",
      "epss": 0.00227,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89987",
      "url": "https://patchblox.com/security/cve/CVE-2026-89987",
      "title": "mm/huge_memory: transfer the pmd dirty bit to the folio on zap",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00217,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72015",
      "url": "https://patchblox.com/security/cve/CVE-2026-72015",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs/resctrl: Fix double-add of pseudo-locked regi...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98077",
      "url": "https://patchblox.com/security/cve/CVE-2026-98077",
      "title": "netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93252",
      "url": "https://patchblox.com/security/cve/CVE-2026-93252",
      "title": "ocfs2: fix circular locking dependency in ocfs2_init_acl()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72081",
      "url": "https://patchblox.com/security/cve/CVE-2026-72081",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: elx: efct: Fix I/O leak on unsupported add...",
      "priority": "Routine",
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97561",
      "url": "https://patchblox.com/security/cve/CVE-2026-97561",
      "title": "smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00212,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68242",
      "url": "https://patchblox.com/security/cve/CVE-2026-68242",
      "title": "drm/i915/gt: Fix NULL deref on sched_engine alloc failure",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72040",
      "url": "https://patchblox.com/security/cve/CVE-2026-72040",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipmi: fix refcount leak in i_ipmi_request()  Whe...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72305",
      "url": "https://patchblox.com/security/cve/CVE-2026-72305",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  VDUSE: avoid leaking information to userspace  T...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68241",
      "url": "https://patchblox.com/security/cve/CVE-2026-68241",
      "title": "drm/i915/mst: limit DP MST ESI service loop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.6,
      "epss": 0.00211,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97945",
      "url": "https://patchblox.com/security/cve/CVE-2026-97945",
      "title": "x86/mm: Fix user-space data loss with MADV_FREE and THP",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72174",
      "url": "https://patchblox.com/security/cve/CVE-2026-72174",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  fs/proc/task_mmu: fix hugetlb self-deadlock in p...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72212",
      "url": "https://patchblox.com/security/cve/CVE-2026-72212",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  mm/memory_hotplug: fix incorrect altmap passing...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00206,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98010",
      "url": "https://patchblox.com/security/cve/CVE-2026-98010",
      "title": "net/sched: drr: clamp quantum in change class",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98347",
      "url": "https://patchblox.com/security/cve/CVE-2026-98347",
      "title": "IB/IPoIB: Avoid restoring OPER_UP after multicast flush",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93222",
      "url": "https://patchblox.com/security/cve/CVE-2026-93222",
      "title": "signal: avoid shared siginfo namespace rewrites",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.4,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97416",
      "url": "https://patchblox.com/security/cve/CVE-2026-97416",
      "title": "btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.7,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74379",
      "url": "https://patchblox.com/security/cve/CVE-2026-74379",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dax/kmem: account for partial discontiguous reso...",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68233",
      "url": "https://patchblox.com/security/cve/CVE-2026-68233",
      "title": "drm/vc4: Shut down BO cache timer before teardown",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-97491",
      "url": "https://patchblox.com/security/cve/CVE-2026-97491",
      "title": "net/rds: Don\u0027t sleep inside rds_ib_conn_path_shutdown",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.4,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74368",
      "url": "https://patchblox.com/security/cve/CVE-2026-74368",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: ath12k: fix memory leak in ath12k_wifi7_dp...",
      "priority": "Routine",
      "epss": 0.00168,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98273",
      "url": "https://patchblox.com/security/cve/CVE-2026-98273",
      "title": "x86/kprobes: Fix crash when probing CS CALL instructions",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98354",
      "url": "https://patchblox.com/security/cve/CVE-2026-98354",
      "title": "RDMA/mad: Fix receive buffer leak when PKey enforcement fails",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98358",
      "url": "https://patchblox.com/security/cve/CVE-2026-98358",
      "title": "IB/iser: reject a remote invalidation of an unregistered direction",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64012",
      "url": "https://patchblox.com/security/cve/CVE-2026-64012",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64060",
      "url": "https://patchblox.com/security/cve/CVE-2026-64060",
      "title": "netfs: Fix leak of request in netfs_write_begin() error handling",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64064",
      "url": "https://patchblox.com/security/cve/CVE-2026-64064",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix netfs_invalidate_folio() to clear dir...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98126",
      "url": "https://patchblox.com/security/cve/CVE-2026-98126",
      "title": "smb/client: validate new EOF for zero range",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-98125",
      "url": "https://patchblox.com/security/cve/CVE-2026-98125",
      "title": "smb/client: fix stale page cache in insert/collapse range",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64062",
      "url": "https://patchblox.com/security/cve/CVE-2026-64062",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix potential deadlock in write-through m...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53108",
      "url": "https://patchblox.com/security/cve/CVE-2026-53108",
      "title": "powerpc/64s: Fix unmap race with PMD migration entries",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0009,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}