{
  "fix": "RHSA-2026:97040",
  "url": "https://patchblox.com/security/fix/linux/rhsa-2026-97040",
  "summary": "RHSA-2026:97040, released August 10, 2026, fixes 16 CVEs in kernel (version 6.12.0-264.9.1.el10_3). None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "kernel security update",
  "released": "2026-08-10T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-64025, rated Critical",
  "supported": true,
  "cveCount": 16,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00609,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://access.redhat.com/errata/RHSA-2026:97040",
  "appliesTo": [
    {
      "product": "kernel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel",
      "release": "RHEL 10",
      "fixedVersion": "6.12.0-264.9.1.el10_3",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-64025",
      "url": "https://patchblox.com/security/cve/CVE-2026-64025",
      "title": "kernel-64kb: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00369,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64020",
      "url": "https://patchblox.com/security/cve/CVE-2026-64020",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nvme-pci: fix dma_vecs leak on p2p memory  We do...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00609,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68379",
      "url": "https://patchblox.com/security/cve/CVE-2026-68379",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tcp: fix TIME_WAIT socket reference leak on PSP...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00601,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23240",
      "url": "https://patchblox.com/security/cve/CVE-2026-23240",
      "title": "tls: Fix race condition in tls_sw_cancel_work_tx()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00563,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64000",
      "url": "https://patchblox.com/security/cve/CVE-2026-64000",
      "title": "kernel-default: net: hsr: fix potential OOB access in supervision frame handling (bsc#1273030).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00491,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53395",
      "url": "https://patchblox.com/security/cve/CVE-2026-53395",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: fix dead ACL conflict guard in nfsd4_creat...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00488,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52945",
      "url": "https://patchblox.com/security/cve/CVE-2026-52945",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  Revert \u0022wireguard: device: enable threaded NAPI\u0022...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68390",
      "url": "https://patchblox.com/security/cve/CVE-2026-68390",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: hci_sync: hold hdev-\u003Elock for hci_con...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52952",
      "url": "https://patchblox.com/security/cve/CVE-2026-52952",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu: Fix WARN_ON in __iommu_group_set_domain_n...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68103",
      "url": "https://patchblox.com/security/cve/CVE-2026-68103",
      "title": "drm/amdgpu: reject mapping a reserved doorbell to a new queue",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63914",
      "url": "https://patchblox.com/security/cve/CVE-2026-63914",
      "title": "bpftool: xfrm: route MIGRATE notifications to caller\u0027s netns (Maoyi Xie) [Orabug: 39754286]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.3,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23239",
      "url": "https://patchblox.com/security/cve/CVE-2026-23239",
      "title": "espintcp: Fix race condition in espintcp_close()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64279",
      "url": "https://patchblox.com/security/cve/CVE-2026-64279",
      "title": "i2c: core: fix adapter deregistration race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63987",
      "url": "https://patchblox.com/security/cve/CVE-2026-63987",
      "title": "kernel-64kb: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES (bsc#1272971).",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64496",
      "url": "https://patchblox.com/security/cve/CVE-2026-64496",
      "title": "iio: event: Fix event FIFO reset race",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64375",
      "url": "https://patchblox.com/security/cve/CVE-2026-64375",
      "title": "proc: protect ptrace_may_access() with exec_update_lock (FD links)",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:20:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}