# OPENSUSE-SU-2026:22167-1: Security update for 13 packages

OPENSUSE-SU-2026:22167-1, released November 7, 2026, fixes 129 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/opensuse-su-2026-22167-1
- Platform: Linux
- Released: Nov 7, 2026
- Priority: Urgent (Closes CVE-2026-99999, rated Critical)
- CVEs: 129, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/openSUSE-SU-2026:22167-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [dtb-aarch64](https://patchblox.com/security/data/product/linux/dtb-aarch64.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 |
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1.160000.2.29 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 |
| [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 |
| [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 |
| [kernel-rt](https://patchblox.com/security/data/product/linux/kernel-rt.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | opensuse-leap 16.0 | 6.12.0-160000.40.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-99999](https://patchblox.com/security/data/cve/CVE-2026-99999.md) | Urgent | ipv4: validate checksum_start before completing checksum | 9.3 | 0.0079 |  |
| [CVE-2026-72319](https://patchblox.com/security/data/cve/CVE-2026-72319.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  ipvs: ensure inner headers in ICMP errors are in... | 9.8 | 0.0075 |  |
| [CVE-2026-72041](https://patchblox.com/security/data/cve/CVE-2026-72041.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  espintcp: use sk_msg_free_partial to fix partial... | 9.8 | 0.0071 |  |
| [CVE-2026-89778](https://patchblox.com/security/data/cve/CVE-2026-89778.md) | Urgent | isofs: fix out-of-bounds page array access on empty zisofs block | 9.8 | 0.0070 |  |
| [CVE-2026-89636](https://patchblox.com/security/data/cve/CVE-2026-89636.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  smb: client: clear ce->tgthint in free_tgts()  W... | 9.8 | 0.0066 |  |
| [CVE-2026-72355](https://patchblox.com/security/data/cve/CVE-2026-72355.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix barriering when walking subrequest li... | 9.8 | 0.0064 |  |
| [CVE-2026-89558](https://patchblox.com/security/data/cve/CVE-2026-89558.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  md/raid10: fix still_degraded being inverted in... | 9.8 | 0.0064 |  |
| [CVE-2026-98171](https://patchblox.com/security/data/cve/CVE-2026-98171.md) | Urgent | smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs | 9.8 | 0.0054 |  |
| [CVE-2026-98323](https://patchblox.com/security/data/cve/CVE-2026-98323.md) | Urgent | RDMA/siw: Bound fragmented header copies by the remaining length | 9.8 | 0.0051 |  |
| [CVE-2026-89631](https://patchblox.com/security/data/cve/CVE-2026-89631.md) | Urgent | smb: client: reject a tree connect response whose byte count is too small | 9.1 | 0.0049 |  |
| [CVE-2026-98365](https://patchblox.com/security/data/cve/CVE-2026-98365.md) | Urgent | RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access | 9.8 | 0.0038 |  |
| [CVE-2026-64068](https://patchblox.com/security/data/cve/CVE-2026-64068.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix missing locking around retry adding n... | 9.8 | 0.0035 |  |
| [CVE-2026-98174](https://patchblox.com/security/data/cve/CVE-2026-98174.md) | Urgent | smb: client: fix rlist race and missing initialization | 9.8 | 0.0033 |  |
| [CVE-2026-98167](https://patchblox.com/security/data/cve/CVE-2026-98167.md) | Urgent | smb: client: fix server->total_read for compound encrypted PDUs | 9.8 | 0.0022 |  |
| [CVE-2026-98170](https://patchblox.com/security/data/cve/CVE-2026-98170.md) | Urgent | smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() | 9.8 | 0.0022 |  |
| [CVE-2026-98269](https://patchblox.com/security/data/cve/CVE-2026-98269.md) | Urgent | btrfs: abort transaction on failure to update inode for hole punching and reflinking | 9.8 | 0.0017 |  |
| [CVE-2026-98352](https://patchblox.com/security/data/cve/CVE-2026-98352.md) | Urgent | RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted | 9.8 | 0.0016 |  |
| [CVE-2026-98253](https://patchblox.com/security/data/cve/CVE-2026-98253.md) | Urgent | RDMA/ucma: Serialize join and leave on copy_to_user failure | 9.8 | 0.0013 |  |
| [CVE-2026-98252](https://patchblox.com/security/data/cve/CVE-2026-98252.md) | Urgent | RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() | 9.8 | 0.0012 |  |
| [CVE-2026-90011](https://patchblox.com/security/data/cve/CVE-2026-90011.md) | High | scsi: target: iscsi: Reserve a terminator byte for the login payload | 9.8 | 0.0084 |  |
| [CVE-2026-98432](https://patchblox.com/security/data/cve/CVE-2026-98432.md) | High | ipv4: free inet_opt and ireq_opt after an RCU grace period | 9.8 | 0.0076 |  |
| [CVE-2026-89528](https://patchblox.com/security/data/cve/CVE-2026-89528.md) | High | svcrdma: Reject Read lists that exceed the page budget | 7.5 | 0.0071 |  |
| [CVE-2026-72253](https://patchblox.com/security/data/cve/CVE-2026-72253.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_conntrack_sip: validate skb_dst()... | 7.5 | 0.0070 |  |
| [CVE-2026-97555](https://patchblox.com/security/data/cve/CVE-2026-97555.md) | High | smb: client: fix heap overflow in DACL owner/group rewrite | 9.8 | 0.0058 |  |
| [CVE-2026-64116](https://patchblox.com/security/data/cve/CVE-2026-64116.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 7.5 | 0.0051 |  |
| [CVE-2026-74587](https://patchblox.com/security/data/cve/CVE-2026-74587.md) | High | sctp: fix use-after-free of cached ASCONF chunk | 9.8 | 0.0050 |  |
| [CVE-2026-74611](https://patchblox.com/security/data/cve/CVE-2026-74611.md) | High | tls: rx: restore msg_iter before TLS 1.3 optimistic retry | 9.8 | 0.0049 |  |
| [CVE-2026-74624](https://patchblox.com/security/data/cve/CVE-2026-74624.md) | High | netfilter: nf_conntrack: defer invalid log until after unlock | 7.5 | 0.0048 |  |
| [CVE-2026-98130](https://patchblox.com/security/data/cve/CVE-2026-98130.md) | High | sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START | 8.1 | 0.0045 |  |
| [CVE-2026-98169](https://patchblox.com/security/data/cve/CVE-2026-98169.md) | High | smb: client: fix potential OOB read in smb3_enum_snapshots() | 7.1 | 0.0045 |  |
| [CVE-2026-63830](https://patchblox.com/security/data/cve/CVE-2026-63830.md) | High | net: skmsg: preserve sg.copy across SG transforms | 9.4 | 0.0044 |  |
| [CVE-2026-97562](https://patchblox.com/security/data/cve/CVE-2026-97562.md) | High | smb: client: pin DFS superblock in iterator callback | 7.8 | 0.0041 |  |
| [CVE-2026-98261](https://patchblox.com/security/data/cve/CVE-2026-98261.md) | High | cifs: Fix server use-after-free in cifs_chan_skip_or_disable() | 8.1 | 0.0041 |  |
| [CVE-2026-72493](https://patchblox.com/security/data/cve/CVE-2026-72493.md) | High | net: serialize netif_running() check in enqueue_to_backlog() | 9.9 | 0.0040 |  |
| [CVE-2026-98357](https://patchblox.com/security/data/cve/CVE-2026-98357.md) | High | IB/isert: wait for deferred control PDU completions before releasing the connection | 8.1 | 0.0035 |  |
| [CVE-2026-98173](https://patchblox.com/security/data/cve/CVE-2026-98173.md) | High | smb: client: fix use-after-free of iface in cifs_try_adding_channels() | 7.5 | 0.0035 |  |
| [CVE-2026-93787](https://patchblox.com/security/data/cve/CVE-2026-93787.md) | High | smb: client: bound dirent name against end of SMB response in cifs_filldir | 9.8 | 0.0034 |  |
| [CVE-2026-64435](https://patchblox.com/security/data/cve/CVE-2026-64435.md) | High | audit: Fix data races of skb_queue_len() readers on audit_queue | 8.2 | 0.0033 |  |
| [CVE-2026-98175](https://patchblox.com/security/data/cve/CVE-2026-98175.md) | High | smb: client: cancel reconnect work in clean_demultiplex_info() | 8.1 | 0.0032 |  |
| [CVE-2026-93806](https://patchblox.com/security/data/cve/CVE-2026-93806.md) | High | wifi: cfg80211: validate assoc response length before status and IE access | 8.8 | 0.0025 |  |
| [CVE-2026-97558](https://patchblox.com/security/data/cve/CVE-2026-97558.md) | High | smb: client: fix cifsFileInfo reference leak in deferred close | 7.1 | 0.0023 |  |
| [CVE-2026-97564](https://patchblox.com/security/data/cve/CVE-2026-97564.md) | High | smb: client: reject userspace cifs.idmap descriptions | 7.8 | 0.0022 |  |
| [CVE-2026-97533](https://patchblox.com/security/data/cve/CVE-2026-97533.md) | High | x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF | n/a | 0.0022 |  |
| [CVE-2026-97559](https://patchblox.com/security/data/cve/CVE-2026-97559.md) | High | smb: client: fail DACL rewrite when the new DACL exceeds 64K | 7.8 | 0.0021 |  |
| [CVE-2026-97554](https://patchblox.com/security/data/cve/CVE-2026-97554.md) | High | smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() | 7.1 | 0.0021 |  |
| [CVE-2026-97556](https://patchblox.com/security/data/cve/CVE-2026-97556.md) | High | smb: client: avoid leaking refcount when cifs_sb_tlink() fails | 8.8 | 0.0021 |  |
| [CVE-2026-93134](https://patchblox.com/security/data/cve/CVE-2026-93134.md) | High | printk: Fix possible console use-after-free | 7.8 | 0.0021 |  |
| [CVE-2026-97942](https://patchblox.com/security/data/cve/CVE-2026-97942.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  x86/alternatives: Exclude text poking against ch... | n/a | 0.0020 |  |
| [CVE-2026-97943](https://patchblox.com/security/data/cve/CVE-2026-97943.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  x86/mm/pat: Acquire init_mm write lock on collap... | n/a | 0.0020 |  |
| [CVE-2026-97563](https://patchblox.com/security/data/cve/CVE-2026-97563.md) | High | smb: client: reject out-of-bounds DataOffset in CIFSSMBRead() | 7.3 | 0.0020 |  |
| [CVE-2026-98260](https://patchblox.com/security/data/cve/CVE-2026-98260.md) | High | exec: Cleanup POSIX timers right after de_thread() | 8.8 | 0.0019 |  |
| [CVE-2026-64461](https://patchblox.com/security/data/cve/CVE-2026-64461.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  PCI: mediatek: Fix IRQ domain leak when port fai... | n/a | 0.0018 |  |
| [CVE-2026-98015](https://patchblox.com/security/data/cve/CVE-2026-98015.md) | High | net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put | 7.8 | 0.0018 |  |
| [CVE-2026-89811](https://patchblox.com/security/data/cve/CVE-2026-89811.md) | High | drm/amdkfd: Add TLB flush after MES queue eviction/suspension | 8.8 | 0.0018 |  |
| [CVE-2026-98089](https://patchblox.com/security/data/cve/CVE-2026-98089.md) | High | bonding: alb: fix uninitialized transport header access in alb_determine_nd() | 8.1 | 0.0017 |  |
| [CVE-2026-93785](https://patchblox.com/security/data/cve/CVE-2026-93785.md) | High | cifs: validate idmap key payload length | 7.8 | 0.0017 |  |
| [CVE-2026-98016](https://patchblox.com/security/data/cve/CVE-2026-98016.md) | High | net/mlx5e: Fix use-after-free race in sample_restore_put() | 7.8 | 0.0017 |  |
| [CVE-2026-80893](https://patchblox.com/security/data/cve/CVE-2026-80893.md) | High | mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() | 7.0 | 0.0017 |  |
| [CVE-2026-64280](https://patchblox.com/security/data/cve/CVE-2026-64280.md) | High | fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() | 8.8 | 0.0017 |  |
| [CVE-2026-72110](https://patchblox.com/security/data/cve/CVE-2026-72110.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf,fork: wipe ->bpf_storage before bailouts tha... | 7.8 | 0.0017 |  |
| [CVE-2026-72172](https://patchblox.com/security/data/cve/CVE-2026-72172.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/mm_init: fix uninitialized struct pages for Z... | 7.8 | 0.0017 |  |
| [CVE-2026-72250](https://patchblox.com/security/data/cve/CVE-2026-72250.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_conntrack_reasm: guard mac_header... | 7.8 | 0.0017 |  |
| [CVE-2026-90289](https://patchblox.com/security/data/cve/CVE-2026-90289.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Resize MST HDCP per-connector a... | 7.8 | 0.0017 |  |
| [CVE-2026-93066](https://patchblox.com/security/data/cve/CVE-2026-93066.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  x86/mm/pat: Take cpa_lock around large-page coll... | n/a | 0.0017 |  |
| [CVE-2026-72213](https://patchblox.com/security/data/cve/CVE-2026-72213.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/hugetlb: fix hugetlb cgroup rsvd charge/uncha... | 7.1 | 0.0016 |  |
| [CVE-2026-89755](https://patchblox.com/security/data/cve/CVE-2026-89755.md) | High | mm/migrate_device: clear stale mapping after freeing swapcache | 7.8 | 0.0016 |  |
| [CVE-2026-98041](https://patchblox.com/security/data/cve/CVE-2026-98041.md) | High | bpf: Don't predict JMP32 pointer vs zero comparisons | 7.0 | 0.0015 |  |
| [CVE-2026-74578](https://patchblox.com/security/data/cve/CVE-2026-74578.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: algif_skcipher - force synchronous proce... | 7.1 | 0.0015 |  |
| [CVE-2026-74614](https://patchblox.com/security/data/cve/CVE-2026-74614.md) | High | vsock/virtio: read virtqueues under worker locks | 8.4 | 0.0014 |  |
| [CVE-2026-89754](https://patchblox.com/security/data/cve/CVE-2026-89754.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/pagewalk: fix stale walk->action escaping wal... | 7.8 | 0.0014 |  |
| [CVE-2026-72405](https://patchblox.com/security/data/cve/CVE-2026-72405.md) | High | net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync | 7.8 | 0.0014 |  |
| [CVE-2026-97415](https://patchblox.com/security/data/cve/CVE-2026-97415.md) | High | btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF | 7.8 | 0.0013 |  |
| [CVE-2026-74544](https://patchblox.com/security/data/cve/CVE-2026-74544.md) | High | net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds | 7.8 | 0.0013 |  |
| [CVE-2026-98127](https://patchblox.com/security/data/cve/CVE-2026-98127.md) | High | smb/client: validate new EOF for insert range | 7.8 | 0.0013 |  |
| [CVE-2026-98360](https://patchblox.com/security/data/cve/CVE-2026-98360.md) | High | RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds | 7.1 | 0.0013 |  |
| [CVE-2026-64058](https://patchblox.com/security/data/cve/CVE-2026-64058.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix netfs_read_folio() to wait on writeba... | 7.8 | 0.0013 |  |
| [CVE-2026-64063](https://patchblox.com/security/data/cve/CVE-2026-64063.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix streaming write being overwritten  In... | 7.8 | 0.0013 |  |
| [CVE-2026-74306](https://patchblox.com/security/data/cve/CVE-2026-74306.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  vfio/qat: fix f_pos race in qat_vf_resume_write(... | 7.8 | 0.0013 |  |
| [CVE-2026-74312](https://patchblox.com/security/data/cve/CVE-2026-74312.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  vhost/vdpa: validate virtqueue index in mmap and... | 7.8 | 0.0013 |  |
| [CVE-2026-74715](https://patchblox.com/security/data/cve/CVE-2026-74715.md) | High | bpf: Fix netns reference imbalance in conntrack kfuncs | 7.8 | 0.0013 |  |
| [CVE-2026-80977](https://patchblox.com/security/data/cve/CVE-2026-80977.md) | High | net: skbuff: don't touch shared zerocopy state in skb_tx_error() | 7.8 | 0.0013 |  |
| [CVE-2026-93798](https://patchblox.com/security/data/cve/CVE-2026-93798.md) | High | btrfs: fix reloc root cleanup in merge_reloc_roots() | 7.8 | 0.0013 |  |
| [CVE-2026-89640](https://patchblox.com/security/data/cve/CVE-2026-89640.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  cifs: fix loff_t underflow in cifs_remap_file_ra... | 7.1 | 0.0013 |  |
| [CVE-2026-64424](https://patchblox.com/security/data/cve/CVE-2026-64424.md) | High | netpoll: fix a use-after-free on shutdown path | 7.8 | 0.0013 |  |
| [CVE-2026-89593](https://patchblox.com/security/data/cve/CVE-2026-89593.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  hugetlb: only adjust reservation during unmappin... | 7.1 | 0.0013 |  |
| [CVE-2026-98216](https://patchblox.com/security/data/cve/CVE-2026-98216.md) | High | IB/hfi1: Fix the PIO_CRED credit-return mmap | 7.1 | 0.0013 |  |
| [CVE-2026-64428](https://patchblox.com/security/data/cve/CVE-2026-64428.md) | High | gpio: sch: use raw_spinlock_t in the irq startup path | 7.1 | 0.0012 |  |
| [CVE-2026-46028](https://patchblox.com/security/data/cve/CVE-2026-46028.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: algif_aead - snapshot IV for async AEAD... | 7.0 | 0.0012 |  |
| [CVE-2026-98367](https://patchblox.com/security/data/cve/CVE-2026-98367.md) | High | RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept | 7.8 | 0.0012 |  |
| [CVE-2026-80572](https://patchblox.com/security/data/cve/CVE-2026-80572.md) | High | Input: byd - synchronize timer deletion before freeing private data | 7.8 | 0.0012 |  |
| [CVE-2026-74583](https://patchblox.com/security/data/cve/CVE-2026-74583.md) | High | net/sched: cls_route: fix fastmap use-after-free on filter | 8.8 | 0.0012 |  |
| [CVE-2026-98359](https://patchblox.com/security/data/cve/CVE-2026-98359.md) | High | RDMA/core: Reject unregistering netdevs in ib_get_eth_speed | 7.8 | 0.0012 |  |
| [CVE-2026-98366](https://patchblox.com/security/data/cve/CVE-2026-98366.md) | High | RDMA/rxe: validate access flags before swapping the MR's PD | 7.8 | 0.0012 |  |
| [CVE-2026-80579](https://patchblox.com/security/data/cve/CVE-2026-80579.md) | High | fbdev: clear fb_info->mode before deleting a videomode | 7.8 | 0.0011 |  |
| [CVE-2026-68323](https://patchblox.com/security/data/cve/CVE-2026-68323.md) | High | tipc: serialize udp bearer replicast list updates | 7.8 | 0.0010 |  |
| [CVE-2026-31731](https://patchblox.com/security/data/cve/CVE-2026-31731.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  thermal: core: Address thermal zone removal race... | 7.8 | 0.0010 |  |
| [CVE-2026-90283](https://patchblox.com/security/data/cve/CVE-2026-90283.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  hugetlbfs: release subpool on fill_super failure... | 6.7 | 0.0023 |  |
| [CVE-2026-72236](https://patchblox.com/security/data/cve/CVE-2026-72236.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  s390/perf_cpum_cf: Add missing array_index_nospe... | n/a | 0.0023 |  |
| [CVE-2026-89987](https://patchblox.com/security/data/cve/CVE-2026-89987.md) | Routine | mm/huge_memory: transfer the pmd dirty bit to the folio on zap | 5.5 | 0.0022 |  |
| [CVE-2026-72015](https://patchblox.com/security/data/cve/CVE-2026-72015.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/resctrl: Fix double-add of pseudo-locked regi... | 5.5 | 0.0022 |  |
| [CVE-2026-98077](https://patchblox.com/security/data/cve/CVE-2026-98077.md) | Routine | netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() | 5.5 | 0.0022 |  |
| [CVE-2026-93252](https://patchblox.com/security/data/cve/CVE-2026-93252.md) | Routine | ocfs2: fix circular locking dependency in ocfs2_init_acl() | 4.7 | 0.0022 |  |
| [CVE-2026-72081](https://patchblox.com/security/data/cve/CVE-2026-72081.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: elx: efct: Fix I/O leak on unsupported add... | n/a | 0.0022 |  |
| [CVE-2026-97561](https://patchblox.com/security/data/cve/CVE-2026-97561.md) | Routine | smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid | 6.5 | 0.0021 |  |
| [CVE-2026-68242](https://patchblox.com/security/data/cve/CVE-2026-68242.md) | Routine | drm/i915/gt: Fix NULL deref on sched_engine alloc failure | 5.5 | 0.0021 |  |
| [CVE-2026-72040](https://patchblox.com/security/data/cve/CVE-2026-72040.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  ipmi: fix refcount leak in i_ipmi_request()  Whe... | 5.5 | 0.0021 |  |
| [CVE-2026-72305](https://patchblox.com/security/data/cve/CVE-2026-72305.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  VDUSE: avoid leaking information to userspace  T... | 5.5 | 0.0021 |  |
| [CVE-2026-68241](https://patchblox.com/security/data/cve/CVE-2026-68241.md) | Routine | drm/i915/mst: limit DP MST ESI service loop | 4.6 | 0.0021 |  |
| [CVE-2026-97945](https://patchblox.com/security/data/cve/CVE-2026-97945.md) | Routine | x86/mm: Fix user-space data loss with MADV_FREE and THP | 6.1 | 0.0021 |  |
| [CVE-2026-72174](https://patchblox.com/security/data/cve/CVE-2026-72174.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  fs/proc/task_mmu: fix hugetlb self-deadlock in p... | 5.5 | 0.0021 |  |
| [CVE-2026-72212](https://patchblox.com/security/data/cve/CVE-2026-72212.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  mm/memory_hotplug: fix incorrect altmap passing... | 5.5 | 0.0021 |  |
| [CVE-2026-98010](https://patchblox.com/security/data/cve/CVE-2026-98010.md) | Routine | net/sched: drr: clamp quantum in change class | 6.1 | 0.0018 |  |
| [CVE-2026-98347](https://patchblox.com/security/data/cve/CVE-2026-98347.md) | Routine | IB/IPoIB: Avoid restoring OPER_UP after multicast flush | 4.7 | 0.0018 |  |
| [CVE-2026-93222](https://patchblox.com/security/data/cve/CVE-2026-93222.md) | Routine | signal: avoid shared siginfo namespace rewrites | 4.4 | 0.0018 |  |
| [CVE-2026-97416](https://patchblox.com/security/data/cve/CVE-2026-97416.md) | Routine | btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() | 6.7 | 0.0017 |  |
| [CVE-2026-74379](https://patchblox.com/security/data/cve/CVE-2026-74379.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  dax/kmem: account for partial discontiguous reso... | 5.5 | 0.0017 |  |
| [CVE-2026-68233](https://patchblox.com/security/data/cve/CVE-2026-68233.md) | Routine | drm/vc4: Shut down BO cache timer before teardown | 4.7 | 0.0017 |  |
| [CVE-2026-97491](https://patchblox.com/security/data/cve/CVE-2026-97491.md) | Routine | net/rds: Don't sleep inside rds_ib_conn_path_shutdown | 4.4 | 0.0017 |  |
| [CVE-2026-74368](https://patchblox.com/security/data/cve/CVE-2026-74368.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: ath12k: fix memory leak in ath12k_wifi7_dp... | n/a | 0.0017 |  |
| [CVE-2026-98273](https://patchblox.com/security/data/cve/CVE-2026-98273.md) | Routine | x86/kprobes: Fix crash when probing CS CALL instructions | 5.5 | 0.0017 |  |
| [CVE-2026-98354](https://patchblox.com/security/data/cve/CVE-2026-98354.md) | Routine | RDMA/mad: Fix receive buffer leak when PKey enforcement fails | 5.5 | 0.0017 |  |
| [CVE-2026-98358](https://patchblox.com/security/data/cve/CVE-2026-98358.md) | Routine | IB/iser: reject a remote invalidation of an unregistered direction | 5.5 | 0.0017 |  |
| [CVE-2026-64012](https://patchblox.com/security/data/cve/CVE-2026-64012.md) | Routine | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli)  [Orabug: 39853924]  [5.1... | 5.5 | 0.0012 |  |
| [CVE-2026-64060](https://patchblox.com/security/data/cve/CVE-2026-64060.md) | Routine | netfs: Fix leak of request in netfs_write_begin() error handling | 5.5 | 0.0012 |  |
| [CVE-2026-64064](https://patchblox.com/security/data/cve/CVE-2026-64064.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix netfs_invalidate_folio() to clear dir... | 5.5 | 0.0012 |  |
| [CVE-2026-98126](https://patchblox.com/security/data/cve/CVE-2026-98126.md) | Routine | smb/client: validate new EOF for zero range | 5.5 | 0.0012 |  |
| [CVE-2026-98125](https://patchblox.com/security/data/cve/CVE-2026-98125.md) | Routine | smb/client: fix stale page cache in insert/collapse range | 5.5 | 0.0012 |  |
| [CVE-2026-64062](https://patchblox.com/security/data/cve/CVE-2026-64062.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: Fix potential deadlock in write-through m... | 5.5 | 0.0009 |  |
| [CVE-2026-53108](https://patchblox.com/security/data/cve/CVE-2026-53108.md) | Routine | powerpc/64s: Fix unmap race with PMD migration entries | 5.5 | 0.0009 |  |

---

Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.