{
  "fix": "SUSE-SU-2026:2195-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-2195-1",
  "summary": "SUSE-SU-2026:2195-1, released July 1, 2026, fixes 69 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 7 packages",
  "released": "2026-07-01T08:17:32Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-31402, rated Critical",
  "supported": true,
  "cveCount": 69,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.01219,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:2195-1",
  "appliesTo": [
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.112.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.112.1.150600.12.52.1",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.112.1",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP6_Update_26",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp6-update-26",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.3.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.112.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.112.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.112.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-31402",
      "url": "https://patchblox.com/security/cve/CVE-2026-31402",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.01219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23450",
      "url": "https://patchblox.com/security/cve/CVE-2026-23450",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/smc: fix NULL dereference and UAF in smc_tcp...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00461,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31436",
      "url": "https://patchblox.com/security/cve/CVE-2026-31436",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31533",
      "url": "https://patchblox.com/security/cve/CVE-2026-31533",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net/tls: fix use-after-free in -EBUSY error path...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46331",
      "url": "https://patchblox.com/security/cve/CVE-2026-46331",
      "title": "net/sched: fix pedit partial COW leading to page cache corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00639,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23240",
      "url": "https://patchblox.com/security/cve/CVE-2026-23240",
      "title": "tls: Fix race condition in tls_sw_cancel_work_tx()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00563,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43365",
      "url": "https://patchblox.com/security/cve/CVE-2026-43365",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.2,
      "epss": 0.00506,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31685",
      "url": "https://patchblox.com/security/cve/CVE-2026-31685",
      "title": "netfilter: ip6t_eui64: reject invalid MAC header for all packets",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.4,
      "epss": 0.00485,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31669",
      "url": "https://patchblox.com/security/cve/CVE-2026-31669",
      "title": "mptcp: fix slab-use-after-free in __inet_lookup_established",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00471,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43190",
      "url": "https://patchblox.com/security/cve/CVE-2026-43190",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: xt_tcpmss: check remaining length befo...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.2,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31649",
      "url": "https://patchblox.com/security/cve/CVE-2026-31649",
      "title": "net: stmmac: fix integer underflow in chain mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00459,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43494",
      "url": "https://patchblox.com/security/cve/CVE-2026-43494",
      "title": "net/rds: reset op_nents when zerocopy page pin fails",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31662",
      "url": "https://patchblox.com/security/cve/CVE-2026-31662",
      "title": "tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00389,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31408",
      "url": "https://patchblox.com/security/cve/CVE-2026-31408",
      "title": "Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00322,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31607",
      "url": "https://patchblox.com/security/cve/CVE-2026-31607",
      "title": "usbip: validate number_of_packets in usbip_pack_ret_submit()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00311,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31622",
      "url": "https://patchblox.com/security/cve/CVE-2026-31622",
      "title": "NFC: digital: Bounds check NFC-A cascade depth in SDD response handler",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00289,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54518",
      "url": "https://patchblox.com/security/cve/CVE-2025-54518",
      "title": "AMD: CVE-2025-54518 CPU OP Cache Corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00287,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31694",
      "url": "https://patchblox.com/security/cve/CVE-2026-31694",
      "title": "fuse: reject oversized dirents in page cache",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00284,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43334",
      "url": "https://patchblox.com/security/cve/CVE-2026-43334",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: SMP: force responder MITM requirements...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23462",
      "url": "https://patchblox.com/security/cve/CVE-2026-23462",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00276,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43110",
      "url": "https://patchblox.com/security/cve/CVE-2026-43110",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: brcmfmac: validate bsscfg indices in IF ev...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.0027,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31570",
      "url": "https://patchblox.com/security/cve/CVE-2026-31570",
      "title": "can: gw: fix OOB heap access in cgw_csum_crc8_rel()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00263,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43038",
      "url": "https://patchblox.com/security/cve/CVE-2026-43038",
      "title": "kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00255,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23461",
      "url": "https://patchblox.com/security/cve/CVE-2026-23461",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31588",
      "url": "https://patchblox.com/security/cve/CVE-2026-31588",
      "title": "KVM: x86: Use scratch field in MMIO fragment to hold small write values",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23406",
      "url": "https://patchblox.com/security/cve/CVE-2026-23406",
      "title": "apparmor: fix side-effect bug in match_char() macro usage",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23407",
      "url": "https://patchblox.com/security/cve/CVE-2026-23407",
      "title": "apparmor: fix missing bounds check on DEFAULT table in verify_dfa()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23408",
      "url": "https://patchblox.com/security/cve/CVE-2026-23408",
      "title": "apparmor: Fix double free of ns_name in aa_replace_profiles()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23409",
      "url": "https://patchblox.com/security/cve/CVE-2026-23409",
      "title": "apparmor: fix differential encoding verification",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31787",
      "url": "https://patchblox.com/security/cve/CVE-2026-31787",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nxen/privcmd: fix double free via VMA splitting\npr...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43329",
      "url": "https://patchblox.com/security/cve/CVE-2026-43329",
      "title": "kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run...",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23209",
      "url": "https://patchblox.com/security/cve/CVE-2026-23209",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: L...",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31505",
      "url": "https://patchblox.com/security/cve/CVE-2026-31505",
      "title": "iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43126",
      "url": "https://patchblox.com/security/cve/CVE-2026-43126",
      "title": "ALSA: mixer: oss: Add card disconnect checkpoints",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43437",
      "url": "https://patchblox.com/security/cve/CVE-2026-43437",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ALSA: pcm: fix use-after-free on linked stream r...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23268",
      "url": "https://patchblox.com/security/cve/CVE-2026-23268",
      "title": "apparmor: fix unprivileged local user can do privileged policy management",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23411",
      "url": "https://patchblox.com/security/cve/CVE-2026-23411",
      "title": "apparmor: fix race between freeing data and fs accessing it",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23410",
      "url": "https://patchblox.com/security/cve/CVE-2026-23410",
      "title": "apparmor: fix race on rawdata dereference",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23269",
      "url": "https://patchblox.com/security/cve/CVE-2026-23269",
      "title": "apparmor: validate DFA start states are in bounds in unpack_pdb",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23449",
      "url": "https://patchblox.com/security/cve/CVE-2026-23449",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23458",
      "url": "https://patchblox.com/security/cve/CVE-2026-23458",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23273",
      "url": "https://patchblox.com/security/cve/CVE-2026-23273",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  macvlan: observe an RCU grace period in macvlan_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23351",
      "url": "https://patchblox.com/security/cve/CVE-2026-23351",
      "title": "netfilter: nft_set_pipapo: split gc into unlink and reclaim phase",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23239",
      "url": "https://patchblox.com/security/cve/CVE-2026-23239",
      "title": "espintcp: Fix race condition in espintcp_close()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31507",
      "url": "https://patchblox.com/security/cve/CVE-2026-31507",
      "title": "net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31586",
      "url": "https://patchblox.com/security/cve/CVE-2026-31586",
      "title": "mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31403",
      "url": "https://patchblox.com/security/cve/CVE-2026-31403",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31602",
      "url": "https://patchblox.com/security/cve/CVE-2026-31602",
      "title": "ALSA: ctxfi: Limit PTP to a single page",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43027",
      "url": "https://patchblox.com/security/cve/CVE-2026-43027",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_conntrack_helper: pass helper to e...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31528",
      "url": "https://patchblox.com/security/cve/CVE-2026-31528",
      "title": "perf: Make sure to use pmu_ctx-\u003Epmu for groups",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43330",
      "url": "https://patchblox.com/security/cve/CVE-2026-43330",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43025",
      "url": "https://patchblox.com/security/cve/CVE-2026-43025",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: ctnetlink: ignore explicit helper on...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.3,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43366",
      "url": "https://patchblox.com/security/cve/CVE-2026-43366",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31470",
      "url": "https://patchblox.com/security/cve/CVE-2026-31470",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43120",
      "url": "https://patchblox.com/security/cve/CVE-2026-43120",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/irdma: Fix double free related to rereg_use...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31512",
      "url": "https://patchblox.com/security/cve/CVE-2026-31512",
      "title": "Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43044",
      "url": "https://patchblox.com/security/cve/CVE-2026-43044",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  crypto: caam - fix DMA corruption on long hmac k...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43050",
      "url": "https://patchblox.com/security/cve/CVE-2026-43050",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  atm: lec: fix use-after-free in sock_def_readabl...",
      "priority": "High",
      "severity": "high",
      "cvss": 7,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23271",
      "url": "https://patchblox.com/security/cve/CVE-2026-23271",
      "title": "perf: Fix __perf_event_overflow() vs perf_remove_from_context() race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31700",
      "url": "https://patchblox.com/security/cve/CVE-2026-31700",
      "title": "net/packet: fix TOCTOU race on mmap\u0027d vnet_hdr in tpacket_snd()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43214",
      "url": "https://patchblox.com/security/cve/CVE-2026-43214",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: x86: Add SRCU protection for reading PDPTRs...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31504",
      "url": "https://patchblox.com/security/cve/CVE-2026-31504",
      "title": "net: fix fanout UAF in packet_release() via NETDEV_UP race",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23393",
      "url": "https://patchblox.com/security/cve/CVE-2026-23393",
      "title": "bridge: cfm: Fix race condition in peer_mep deletion",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00101,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31656",
      "url": "https://patchblox.com/security/cve/CVE-2026-31656",
      "title": "drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-2058",
      "url": "https://patchblox.com/security/cve/CVE-2023-2058",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Routine",
      "epss": 0.00609,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23405",
      "url": "https://patchblox.com/security/cve/CVE-2026-23405",
      "title": "apparmor: fix: limit the number of levels of policy namespaces",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23403",
      "url": "https://patchblox.com/security/cve/CVE-2026-23403",
      "title": "apparmor: fix memory leak in verify_header",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23404",
      "url": "https://patchblox.com/security/cve/CVE-2026-23404",
      "title": "apparmor: replace recursive profile removal with iterative approach",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31738",
      "url": "https://patchblox.com/security/cve/CVE-2026-31738",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues\n\nThe following security issues wer...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T20:03:11Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}