{
  "fix": "RLSA-2026:83207",
  "url": "https://patchblox.com/security/fix/linux/rlsa-2026-83207",
  "summary": "RLSA-2026:83207, released November 7, 2026, fixes 20 CVEs in kernel (version 0:6.12.0-211.66.1.el10_2). None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "kernel security update",
  "released": "2026-11-07T00:39:51Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-89526, rated Critical",
  "supported": true,
  "cveCount": 20,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.00712,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://errata.rockylinux.org/RLSA-2026:83207",
  "appliesTo": [
    {
      "product": "kernel",
      "productUrl": "https://patchblox.com/security/product/linux/kernel",
      "release": "rocky 10",
      "fixedVersion": "0:6.12.0-211.66.1.el10_2",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-89526",
      "url": "https://patchblox.com/security/cve/CVE-2026-89526",
      "title": "svcrdma: Validate Read chunk positions before reconstruction",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00682,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89689",
      "url": "https://patchblox.com/security/cve/CVE-2026-89689",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  nfsd: don\u0027t free session slots that are still in...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00614,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-90036",
      "url": "https://patchblox.com/security/cve/CVE-2026-90036",
      "title": "NFSD: Prevent client use-after-free during blocked-lock reaping",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00484,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93207",
      "url": "https://patchblox.com/security/cve/CVE-2026-93207",
      "title": "SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63974",
      "url": "https://patchblox.com/security/cve/CVE-2026-63974",
      "title": "Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68140",
      "url": "https://patchblox.com/security/cve/CVE-2026-68140",
      "title": "net/iucv: fix use-after-free of a severed iucv_path",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00275,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-68377",
      "url": "https://patchblox.com/security/cve/CVE-2026-68377",
      "title": "net/sched: act_tunnel_key: Defer dst_release to RCU callback",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45859",
      "url": "https://patchblox.com/security/cve/CVE-2026-45859",
      "title": "netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00712,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-80985",
      "url": "https://patchblox.com/security/cve/CVE-2026-80985",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/smc: carry oversized SMC-Rv2 LLC messages in...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00526,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-93228",
      "url": "https://patchblox.com/security/cve/CVE-2026-93228",
      "title": "svcrdma: Reject Write/Reply chunks with segcount 0",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.1,
      "epss": 0.00501,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64162",
      "url": "https://patchblox.com/security/cve/CVE-2026-64162",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64030",
      "url": "https://patchblox.com/security/cve/CVE-2026-64030",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-72262",
      "url": "https://patchblox.com/security/cve/CVE-2026-72262",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: SOF: ipc3-control: Fix heap overflow in by...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63899",
      "url": "https://patchblox.com/security/cve/CVE-2026-63899",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-89894",
      "url": "https://patchblox.com/security/cve/CVE-2026-89894",
      "title": "media: cx231xx: reject geometry changes while the VBI queue is busy",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64032",
      "url": "https://patchblox.com/security/cve/CVE-2026-64032",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53011",
      "url": "https://patchblox.com/security/cve/CVE-2026-53011",
      "title": "net/sched: taprio: fix use-after-free in advance_sched() on schedule switch",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74641",
      "url": "https://patchblox.com/security/cve/CVE-2026-74641",
      "title": "ALSA: usx2y: bound the hwdep mmap fault offset",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-74574",
      "url": "https://patchblox.com/security/cve/CVE-2026-74574",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dmaengine: idxd: fix fdev setup failure cleanup...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46319",
      "url": "https://patchblox.com/security/cve/CVE-2026-46319",
      "title": "net/sched: act_ct: Only release RCU read lock after ct_ft",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T06:34:28Z"
}