{
  "fix": "SUSE-SU-2026:2238-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-2238-1",
  "summary": "SUSE-SU-2026:2238-1, released June 30, 2026, fixes 204 CVEs across 10 products. One of them is being exploited (CVE-2026-46300); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 10 packages",
  "released": "2026-06-30T10:03:11Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2026-46300, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 204,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.1613,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:2238-1",
  "appliesTo": [
    {
      "product": "kernel-64kb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.55.1",
      "supported": true
    },
    {
      "product": "kernel-azure",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.55.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.55.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.55.1.150700.17.33.1",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.55.1",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP7_Update_15",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-update-15",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.55.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.55.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.55.1",
      "supported": true
    },
    {
      "product": "kernel-zfcpdump",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.55.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-46300",
      "url": "https://patchblox.com/security/cve/CVE-2026-46300",
      "title": "net: skbuff: preserve shared-frag marker during coalescing",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.1613,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23450",
      "url": "https://patchblox.com/security/cve/CVE-2026-23450",
      "title": "kernel-default: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() (bsc#1261584).",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00461,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23395",
      "url": "https://patchblox.com/security/cve/CVE-2026-23395",
      "title": "Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.1,
      "epss": 0.00273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43503",
      "url": "https://patchblox.com/security/cve/CVE-2026-43503",
      "title": "net: skbuff: propagate shared-frag marker through frag-transfer helpers",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01987,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23455",
      "url": "https://patchblox.com/security/cve/CVE-2026-23455",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: nf_conntrack_h323: check for zero leng...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 9.1,
      "epss": 0.01587,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31402",
      "url": "https://patchblox.com/security/cve/CVE-2026-31402",
      "title": "kernel-64kb: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (bsc#1261638).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.01219,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43037",
      "url": "https://patchblox.com/security/cve/CVE-2026-43037",
      "title": "ip6_tunnel: clear skb2-\u003Ecb[] in ip4ip6_err()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00688,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46331",
      "url": "https://patchblox.com/security/cve/CVE-2026-46331",
      "title": "net/sched: fix pedit partial COW leading to page cache corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00639,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31682",
      "url": "https://patchblox.com/security/cve/CVE-2026-31682",
      "title": "bridge: br_nd_send: linearize skb before parsing ND options",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00638,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43441",
      "url": "https://patchblox.com/security/cve/CVE-2026-43441",
      "title": "kernel-64kb: net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled (bsc#1264674).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23240",
      "url": "https://patchblox.com/security/cve/CVE-2026-23240",
      "title": "tls: Fix race condition in tls_sw_cancel_work_tx()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00563,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31405",
      "url": "https://patchblox.com/security/cve/CVE-2026-31405",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.0056,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23456",
      "url": "https://patchblox.com/security/cve/CVE-2026-23456",
      "title": "kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (bsc#1261703).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.2,
      "epss": 0.00543,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43365",
      "url": "https://patchblox.com/security/cve/CVE-2026-43365",
      "title": "kernel-64kb: xfs: fix undersized l_iclog_roundoff values (bsc#1265119).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.2,
      "epss": 0.00506,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31685",
      "url": "https://patchblox.com/security/cve/CVE-2026-31685",
      "title": "netfilter: ip6t_eui64: reject invalid MAC header for all packets",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.4,
      "epss": 0.00485,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31669",
      "url": "https://patchblox.com/security/cve/CVE-2026-31669",
      "title": "mptcp: fix slab-use-after-free in __inet_lookup_established",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00471,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31417",
      "url": "https://patchblox.com/security/cve/CVE-2026-31417",
      "title": "net/x25: Fix overflow when accumulating packets",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43190",
      "url": "https://patchblox.com/security/cve/CVE-2026-43190",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: xt_tcpmss: check remaining length befo...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.2,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31649",
      "url": "https://patchblox.com/security/cve/CVE-2026-31649",
      "title": "net: stmmac: fix integer underflow in chain mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00459,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31436",
      "url": "https://patchblox.com/security/cve/CVE-2026-31436",
      "title": "kernel-64kb: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (bsc#1262602).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23457",
      "url": "https://patchblox.com/security/cve/CVE-2026-23457",
      "title": "kernel-64kb: netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (bsc#1261686).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.6,
      "epss": 0.0045,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31668",
      "url": "https://patchblox.com/security/cve/CVE-2026-31668",
      "title": "seg6: separate dst_cache for input and output paths in seg6 lwtunnel",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00443,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43494",
      "url": "https://patchblox.com/security/cve/CVE-2026-43494",
      "title": "net/rds: reset op_nents when zerocopy page pin fails",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31533",
      "url": "https://patchblox.com/security/cve/CVE-2026-31533",
      "title": "kernel-default: net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption (bsc#1262758).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31662",
      "url": "https://patchblox.com/security/cve/CVE-2026-31662",
      "title": "tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00389,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31408",
      "url": "https://patchblox.com/security/cve/CVE-2026-31408",
      "title": "Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00322,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31607",
      "url": "https://patchblox.com/security/cve/CVE-2026-31607",
      "title": "usbip: validate number_of_packets in usbip_pack_ret_submit()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00311,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31622",
      "url": "https://patchblox.com/security/cve/CVE-2026-31622",
      "title": "NFC: digital: Bounds check NFC-A cascade depth in SDD response handler",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00289,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23246",
      "url": "https://patchblox.com/security/cve/CVE-2026-23246",
      "title": "wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00288,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54518",
      "url": "https://patchblox.com/security/cve/CVE-2025-54518",
      "title": "AMD: CVE-2025-54518 CPU OP Cache Corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00287,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31694",
      "url": "https://patchblox.com/security/cve/CVE-2026-31694",
      "title": "fuse: reject oversized dirents in page cache",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00284,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43334",
      "url": "https://patchblox.com/security/cve/CVE-2026-43334",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: SMP: force responder MITM requirements...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23462",
      "url": "https://patchblox.com/security/cve/CVE-2026-23462",
      "title": "kernel-default: Bluetooth: HIDP: Fix possible UAF (bsc#1261710).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00276,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43110",
      "url": "https://patchblox.com/security/cve/CVE-2026-43110",
      "title": "kernel-default: wifi: brcmfmac: validate bsscfg indices in IF events (bsc#1264482).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0027,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31393",
      "url": "https://patchblox.com/security/cve/CVE-2026-31393",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00268,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31570",
      "url": "https://patchblox.com/security/cve/CVE-2026-31570",
      "title": "can: gw: fix OOB heap access in cgw_csum_crc8_rel()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00263,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43038",
      "url": "https://patchblox.com/security/cve/CVE-2026-43038",
      "title": "kpatch-patch-4_18_0-553_125_1: kernel: ipv6: icmp: clear skb2-\u003Ecb[] in ip6_err_gen_icmpv6_unreach()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00255,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23461",
      "url": "https://patchblox.com/security/cve/CVE-2026-23461",
      "title": "kernel-source: Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user (bsc#1261707).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00239,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71238",
      "url": "https://patchblox.com/security/cve/CVE-2025-71238",
      "title": "scsi: qla2xxx: Fix bsg_done() causing double free",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00216,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31588",
      "url": "https://patchblox.com/security/cve/CVE-2026-31588",
      "title": "KVM: x86: Use scratch field in MMIO fragment to hold small write values",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23406",
      "url": "https://patchblox.com/security/cve/CVE-2026-23406",
      "title": "apparmor: fix side-effect bug in match_char() macro usage",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23407",
      "url": "https://patchblox.com/security/cve/CVE-2026-23407",
      "title": "apparmor: fix missing bounds check on DEFAULT table in verify_dfa()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23408",
      "url": "https://patchblox.com/security/cve/CVE-2026-23408",
      "title": "apparmor: Fix double free of ns_name in aa_replace_profiles()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23409",
      "url": "https://patchblox.com/security/cve/CVE-2026-23409",
      "title": "apparmor: fix differential encoding verification",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31787",
      "url": "https://patchblox.com/security/cve/CVE-2026-31787",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nxen/privcmd: fix double free via VMA splitting\npr...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31407",
      "url": "https://patchblox.com/security/cve/CVE-2026-31407",
      "title": "netfilter: conntrack: add missing netlink policy validations",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.0018,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43329",
      "url": "https://patchblox.com/security/cve/CVE-2026-43329",
      "title": "kernel-64kb: netfilter: flowtable: strictly check for maximum number of actions (bsc#1265085).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23383",
      "url": "https://patchblox.com/security/cve/CVE-2026-23383",
      "title": "bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23209",
      "url": "https://patchblox.com/security/cve/CVE-2026-23209",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23392",
      "url": "https://patchblox.com/security/cve/CVE-2026-23392",
      "title": "netfilter: nf_tables: release flowtable after rcu grace period on error",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31505",
      "url": "https://patchblox.com/security/cve/CVE-2026-31505",
      "title": "iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31675",
      "url": "https://patchblox.com/security/cve/CVE-2026-31675",
      "title": "net/sched: sch_netem: fix out-of-bounds access in packet corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43009",
      "url": "https://patchblox.com/security/cve/CVE-2026-43009",
      "title": "bpf: Fix incorrect pruning due to atomic fetch precision tracking",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43126",
      "url": "https://patchblox.com/security/cve/CVE-2026-43126",
      "title": "ALSA: mixer: oss: Add card disconnect checkpoints",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31525",
      "url": "https://patchblox.com/security/cve/CVE-2026-31525",
      "title": "bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31679",
      "url": "https://patchblox.com/security/cve/CVE-2026-31679",
      "title": "openvswitch: validate MPLS set/set_masked payload length",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43437",
      "url": "https://patchblox.com/security/cve/CVE-2026-43437",
      "title": "kernel-default: ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() (bsc#1265126).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23412",
      "url": "https://patchblox.com/security/cve/CVE-2026-23412",
      "title": "kernel-64kb: netfilter: bpf: defer hook memory release until rcu readers are done (bsc#1261412).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31426",
      "url": "https://patchblox.com/security/cve/CVE-2026-31426",
      "title": "ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23268",
      "url": "https://patchblox.com/security/cve/CVE-2026-23268",
      "title": "apparmor: fix unprivileged local user can do privileged policy management",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23411",
      "url": "https://patchblox.com/security/cve/CVE-2026-23411",
      "title": "apparmor: fix race between freeing data and fs accessing it",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31449",
      "url": "https://patchblox.com/security/cve/CVE-2026-31449",
      "title": "ext4: validate p_idx bounds in ext4_ext_correct_indexes",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23253",
      "url": "https://patchblox.com/security/cve/CVE-2026-23253",
      "title": "media: dvb-core: fix wrong reinitialization of ringbuffer on reopen",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23410",
      "url": "https://patchblox.com/security/cve/CVE-2026-23410",
      "title": "apparmor: fix race on rawdata dereference",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23343",
      "url": "https://patchblox.com/security/cve/CVE-2026-23343",
      "title": "xdp: produce a warning when calculated tailroom is negative",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23372",
      "url": "https://patchblox.com/security/cve/CVE-2026-23372",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23378",
      "url": "https://patchblox.com/security/cve/CVE-2026-23378",
      "title": "net/sched: act_ife: Fix metalist update behavior",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31488",
      "url": "https://patchblox.com/security/cve/CVE-2026-31488",
      "title": "drm/amd/display: Do not skip unrelated mode changes in DSC validation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23245",
      "url": "https://patchblox.com/security/cve/CVE-2026-23245",
      "title": "net/sched: act_gate: snapshot parameters with RCU on replace",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23318",
      "url": "https://patchblox.com/security/cve/CVE-2026-23318",
      "title": "ALSA: usb-audio: Use correct version for UAC3 header validation",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.7,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23269",
      "url": "https://patchblox.com/security/cve/CVE-2026-23269",
      "title": "apparmor: validate DFA start states are in bounds in unpack_pdb",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23336",
      "url": "https://patchblox.com/security/cve/CVE-2026-23336",
      "title": "wifi: cfg80211: cancel rfkill_block work in wiphy_unregister()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23168",
      "url": "https://patchblox.com/security/cve/CVE-2026-23168",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nflex_proportions: make fprop_new_period() hardirq...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23449",
      "url": "https://patchblox.com/security/cve/CVE-2026-23449",
      "title": "kernel-default: net/sched: teql: Fix double-free in teql_master_xmit (bsc#1261779).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23458",
      "url": "https://patchblox.com/security/cve/CVE-2026-23458",
      "title": "kernel-64kb: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (bsc#1261781).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23273",
      "url": "https://patchblox.com/security/cve/CVE-2026-23273",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31494",
      "url": "https://patchblox.com/security/cve/CVE-2026-31494",
      "title": "net: macb: use the current queue number for stats",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23351",
      "url": "https://patchblox.com/security/cve/CVE-2026-23351",
      "title": "netfilter: nft_set_pipapo: split gc into unlink and reclaim phase",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23354",
      "url": "https://patchblox.com/security/cve/CVE-2026-23354",
      "title": "kernel-64kb: x86/fred: Correct speculative safety in fred_extint() (bsc#1260801).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23442",
      "url": "https://patchblox.com/security/cve/CVE-2026-23442",
      "title": "ipv6: add NULL checks for idev in SRv6 paths",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23447",
      "url": "https://patchblox.com/security/cve/CVE-2026-23447",
      "title": "net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23448",
      "url": "https://patchblox.com/security/cve/CVE-2026-23448",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23300",
      "url": "https://patchblox.com/security/cve/CVE-2026-23300",
      "title": "net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23335",
      "url": "https://patchblox.com/security/cve/CVE-2026-23335",
      "title": "RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23239",
      "url": "https://patchblox.com/security/cve/CVE-2026-23239",
      "title": "espintcp: Fix race condition in espintcp_close()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31411",
      "url": "https://patchblox.com/security/cve/CVE-2026-31411",
      "title": "kernel-64kb: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (bsc#1261752).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31507",
      "url": "https://patchblox.com/security/cve/CVE-2026-31507",
      "title": "net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31586",
      "url": "https://patchblox.com/security/cve/CVE-2026-31586",
      "title": "mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23391",
      "url": "https://patchblox.com/security/cve/CVE-2026-23391",
      "title": "netfilter: xt_CT: drop pending enqueued packets on template removal",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31403",
      "url": "https://patchblox.com/security/cve/CVE-2026-31403",
      "title": "kernel-64kb: NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (bsc#1261796).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31602",
      "url": "https://patchblox.com/security/cve/CVE-2026-31602",
      "title": "ALSA: ctxfi: Limit PTP to a single page",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43027",
      "url": "https://patchblox.com/security/cve/CVE-2026-43027",
      "title": "kernel-default: netfilter: nf_conntrack_helper: pass helper to expect cleanup (bsc#1263933).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23315",
      "url": "https://patchblox.com/security/cve/CVE-2026-23315",
      "title": "wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23306",
      "url": "https://patchblox.com/security/cve/CVE-2026-23306",
      "title": "scsi: pm8001: Fix use-after-free in pm8001_queue_command()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23325",
      "url": "https://patchblox.com/security/cve/CVE-2026-23325",
      "title": "wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23339",
      "url": "https://patchblox.com/security/cve/CVE-2026-23339",
      "title": "nfc: nci: free skb on nci_transceive early error paths",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23363",
      "url": "https://patchblox.com/security/cve/CVE-2026-23363",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23367",
      "url": "https://patchblox.com/security/cve/CVE-2026-23367",
      "title": "wifi: radiotap: reject radiotap with unknown bits",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31528",
      "url": "https://patchblox.com/security/cve/CVE-2026-31528",
      "title": "perf: Make sure to use pmu_ctx-\u003Epmu for groups",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43330",
      "url": "https://patchblox.com/security/cve/CVE-2026-43330",
      "title": "kernel-64kb: crypto: caam - fix overflow on long hmac keys (bsc#1264801).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23454",
      "url": "https://patchblox.com/security/cve/CVE-2026-23454",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31515",
      "url": "https://patchblox.com/security/cve/CVE-2026-31515",
      "title": "af_key: validate families in pfkey_send_migrate()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23262",
      "url": "https://patchblox.com/security/cve/CVE-2026-23262",
      "title": "kernel-64kb: gve: Fix stats report corruption on queue count change (bsc#1259870).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43025",
      "url": "https://patchblox.com/security/cve/CVE-2026-43025",
      "title": "kernel-default: netfilter: ctnetlink: ignore explicit helper on new expectations (bsc#1263931).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.3,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23308",
      "url": "https://patchblox.com/security/cve/CVE-2026-23308",
      "title": "pinctrl: equilibrium: fix warning trace on load",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43366",
      "url": "https://patchblox.com/security/cve/CVE-2026-43366",
      "title": "kernel-docs: io_uring/kbuf: check if target buffer list is still legacy on recycle (bsc#1265116).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23397",
      "url": "https://patchblox.com/security/cve/CVE-2026-23397",
      "title": "nfnetlink_osf: validate individual option lengths in fingerprints",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31470",
      "url": "https://patchblox.com/security/cve/CVE-2026-31470",
      "title": "kernel-64kb: virt: tdx-guest: Fix handling of host controlled \u0027quote\u0027 buffer length (bsc#1262665).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31416",
      "url": "https://patchblox.com/security/cve/CVE-2026-31416",
      "title": "netfilter: nfnetlink_log: account for netlink header size",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31427",
      "url": "https://patchblox.com/security/cve/CVE-2026-31427",
      "title": "netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23374",
      "url": "https://patchblox.com/security/cve/CVE-2026-23374",
      "title": "blktrace: fix __this_cpu_read/write in preemptible context",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31389",
      "url": "https://patchblox.com/security/cve/CVE-2026-31389",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43120",
      "url": "https://patchblox.com/security/cve/CVE-2026-43120",
      "title": "kernel-default: RDMA/irdma: Fix double free related to rereg_user_mr.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31512",
      "url": "https://patchblox.com/security/cve/CVE-2026-31512",
      "title": "Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31519",
      "url": "https://patchblox.com/security/cve/CVE-2026-31519",
      "title": "btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43088",
      "url": "https://patchblox.com/security/cve/CVE-2026-43088",
      "title": "net: af_key: zero aligned sockaddr tail in PF_KEY exports",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31392",
      "url": "https://patchblox.com/security/cve/CVE-2026-31392",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43060",
      "url": "https://patchblox.com/security/cve/CVE-2026-43060",
      "title": "kernel-64kb: netfilter: nft_ct: drop pending enqueued packets on removal (bsc#1264183).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43044",
      "url": "https://patchblox.com/security/cve/CVE-2026-43044",
      "title": "kernel-default: crypto: caam - fix DMA corruption on long hmac keys (bsc#1264087).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31395",
      "url": "https://patchblox.com/security/cve/CVE-2026-31395",
      "title": "kernel-64kb: bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler (bsc#1261786).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43050",
      "url": "https://patchblox.com/security/cve/CVE-2026-43050",
      "title": "kernel-default: atm: lec: fix use-after-free in sock_def_readable() (bsc#1264082).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23340",
      "url": "https://patchblox.com/security/cve/CVE-2026-23340",
      "title": "net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31684",
      "url": "https://patchblox.com/security/cve/CVE-2026-31684",
      "title": "net: sched: act_csum: validate nested VLAN headers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23271",
      "url": "https://patchblox.com/security/cve/CVE-2026-23271",
      "title": "perf: Fix __perf_event_overflow() vs perf_remove_from_context() race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31700",
      "url": "https://patchblox.com/security/cve/CVE-2026-31700",
      "title": "net/packet: fix TOCTOU race on mmap\u0027d vnet_hdr in tpacket_snd()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43214",
      "url": "https://patchblox.com/security/cve/CVE-2026-43214",
      "title": "kernel-default: KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2() (bsc#1264651).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31504",
      "url": "https://patchblox.com/security/cve/CVE-2026-31504",
      "title": "net: fix fanout UAF in packet_release() via NETDEV_UP race",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23466",
      "url": "https://patchblox.com/security/cve/CVE-2026-23466",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23393",
      "url": "https://patchblox.com/security/cve/CVE-2026-23393",
      "title": "bridge: cfm: Fix race condition in peer_mep deletion",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00101,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31656",
      "url": "https://patchblox.com/security/cve/CVE-2026-31656",
      "title": "drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31404",
      "url": "https://patchblox.com/security/cve/CVE-2026-31404",
      "title": "kernel-64kb: xfs: avoid dereferencing log items after push callbacks (bsc#1261628).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71183",
      "url": "https://patchblox.com/security/cve/CVE-2025-71183",
      "title": "btrfs: always detect conflicting inodes when logging inode refs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00316,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23440",
      "url": "https://patchblox.com/security/cve/CVE-2026-23440",
      "title": "kernel-64kb: net/mlx5e: Fix race condition during IPSec ESN update (bsc#1261641).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.7,
      "epss": 0.00278,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40219",
      "url": "https://patchblox.com/security/cve/CVE-2025-40219",
      "title": "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.7,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23236",
      "url": "https://patchblox.com/security/cve/CVE-2026-23236",
      "title": "fbdev: smscufx: properly copy ioctl memory to kernelspace",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23237",
      "url": "https://patchblox.com/security/cve/CVE-2026-23237",
      "title": "platform/x86: classmate-laptop: Add missing NULL pointer checks",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23419",
      "url": "https://patchblox.com/security/cve/CVE-2026-23419",
      "title": "kernel-64kb: net/rds: Fix circular locking dependency in rds_tcp_tune (bsc#1261507).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68310",
      "url": "https://patchblox.com/security/cve/CVE-2025-68310",
      "title": "kernel-64kb: s390/pci: Use pci_uevent_ers() in PCI recovery (bsc#1255160).",
      "priority": "Routine",
      "epss": 0.00191,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23405",
      "url": "https://patchblox.com/security/cve/CVE-2026-23405",
      "title": "apparmor: fix: limit the number of levels of policy namespaces",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23403",
      "url": "https://patchblox.com/security/cve/CVE-2026-23403",
      "title": "apparmor: fix memory leak in verify_header",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23404",
      "url": "https://patchblox.com/security/cve/CVE-2026-23404",
      "title": "apparmor: replace recursive profile removal with iterative approach",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23276",
      "url": "https://patchblox.com/security/cve/CVE-2026-23276",
      "title": "net: add xmit recursion limit to tunnel xmit functions",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31412",
      "url": "https://patchblox.com/security/cve/CVE-2026-31412",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23472",
      "url": "https://patchblox.com/security/cve/CVE-2026-23472",
      "title": "serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23474",
      "url": "https://patchblox.com/security/cve/CVE-2026-23474",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23279",
      "url": "https://patchblox.com/security/cve/CVE-2026-23279",
      "title": "wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00145,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31428",
      "url": "https://patchblox.com/security/cve/CVE-2026-31428",
      "title": "netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23290",
      "url": "https://patchblox.com/security/cve/CVE-2026-23290",
      "title": "net: usb: pegasus: validate USB endpoints",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23304",
      "url": "https://patchblox.com/security/cve/CVE-2026-23304",
      "title": "ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23321",
      "url": "https://patchblox.com/security/cve/CVE-2026-23321",
      "title": "kernel-64kb: mptcp: pm: in-kernel: always mark signal\u002Bsubflow endp as used (bsc#1260505).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23365",
      "url": "https://patchblox.com/security/cve/CVE-2026-23365",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23370",
      "url": "https://patchblox.com/security/cve/CVE-2026-23370",
      "title": "platform/x86: dell-wmi-sysman: Don\u0027t hex dump plaintext password data",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23445",
      "url": "https://patchblox.com/security/cve/CVE-2026-23445",
      "title": "kernel-64kb: igc: fix page fault in XDP TX timestamps handling (bsc#1261702).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23446",
      "url": "https://patchblox.com/security/cve/CVE-2026-23446",
      "title": "net: usb: aqc111: Do not perform PM inside suspend callback",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23399",
      "url": "https://patchblox.com/security/cve/CVE-2026-23399",
      "title": "nf_tables: nft_dynset: fix possible stateful expression memleak in error path",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23346",
      "url": "https://patchblox.com/security/cve/CVE-2026-23346",
      "title": "arm64: io: Extract user memory type in ioremap_prot()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23291",
      "url": "https://patchblox.com/security/cve/CVE-2026-23291",
      "title": "nfc: pn533: properly drop the usb interface reference on disconnect",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23312",
      "url": "https://patchblox.com/security/cve/CVE-2026-23312",
      "title": "net: usb: kaweth: validate USB endpoints",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23475",
      "url": "https://patchblox.com/security/cve/CVE-2026-23475",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23460",
      "url": "https://patchblox.com/security/cve/CVE-2026-23460",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23465",
      "url": "https://patchblox.com/security/cve/CVE-2026-23465",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23468",
      "url": "https://patchblox.com/security/cve/CVE-2026-23468",
      "title": "drm/amdgpu: Limit BO list entry count to prevent resource exhaustion",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23298",
      "url": "https://patchblox.com/security/cve/CVE-2026-23298",
      "title": "can: ucan: Fix infinite loop from zero-length messages",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23307",
      "url": "https://patchblox.com/security/cve/CVE-2026-23307",
      "title": "can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23313",
      "url": "https://patchblox.com/security/cve/CVE-2026-23313",
      "title": "kernel-64kb: i40e: Fix preempt count leak in napi poll tracepoint (bsc#1260555).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23324",
      "url": "https://patchblox.com/security/cve/CVE-2026-23324",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31422",
      "url": "https://patchblox.com/security/cve/CVE-2026-31422",
      "title": "net/sched: cls_flow: fix NULL pointer dereference on shared blocks",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31424",
      "url": "https://patchblox.com/security/cve/CVE-2026-31424",
      "title": "netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31421",
      "url": "https://patchblox.com/security/cve/CVE-2026-31421",
      "title": "net/sched: cls_fw: fix NULL pointer dereference on shared blocks",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31423",
      "url": "https://patchblox.com/security/cve/CVE-2026-31423",
      "title": "net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31496",
      "url": "https://patchblox.com/security/cve/CVE-2026-31496",
      "title": "netfilter: nf_conntrack_expect: skip expectations in other netns via proc",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23443",
      "url": "https://patchblox.com/security/cve/CVE-2026-23443",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31681",
      "url": "https://patchblox.com/security/cve/CVE-2026-31681",
      "title": "netfilter: xt_multiport: validate range encoding in checkentry",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31550",
      "url": "https://patchblox.com/security/cve/CVE-2026-31550",
      "title": "pmdomain: bcm: bcm2835-power: Increase ASB control timeout",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31738",
      "url": "https://patchblox.com/security/cve/CVE-2026-31738",
      "title": "kernel-source: vxlan: validate ND option lengths in vxlan_na_create (bsc#1264059).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43419",
      "url": "https://patchblox.com/security/cve/CVE-2026-43419",
      "title": "kernel-rt-debug: kernel: ceph: fix memory leaks in ceph_mdsc_build_path()",
      "priority": "Routine",
      "severity": "important",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23396",
      "url": "https://patchblox.com/security/cve/CVE-2026-23396",
      "title": "wifi: mac80211: fix NULL deref in mesh_matches_local()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23260",
      "url": "https://patchblox.com/security/cve/CVE-2026-23260",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23261",
      "url": "https://patchblox.com/security/cve/CVE-2026-23261",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23264",
      "url": "https://patchblox.com/security/cve/CVE-2026-23264",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23266",
      "url": "https://patchblox.com/security/cve/CVE-2026-23266",
      "title": "fbdev: rivafb: fix divide error in nv3_arb()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23382",
      "url": "https://patchblox.com/security/cve/CVE-2026-23382",
      "title": "HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23426",
      "url": "https://patchblox.com/security/cve/CVE-2026-23426",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31400",
      "url": "https://patchblox.com/security/cve/CVE-2026-31400",
      "title": "kernel-64kb: sunrpc: fix cache_request leak in cache_release (bsc#1261645).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31425",
      "url": "https://patchblox.com/security/cve/CVE-2026-31425",
      "title": "kernel-64kb: rds: ib: reject FRMR registration before IB connection is established (bsc#1262074).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43265",
      "url": "https://patchblox.com/security/cve/CVE-2026-43265",
      "title": "kernel-64kb: KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() (bsc#1264427).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23373",
      "url": "https://patchblox.com/security/cve/CVE-2026-23373",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31394",
      "url": "https://patchblox.com/security/cve/CVE-2026-31394",
      "title": "mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31415",
      "url": "https://patchblox.com/security/cve/CVE-2026-31415",
      "title": "kernel-64kb: ipv6: avoid overflows in ip6_datagram_send_ctl() (bsc#1262099).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23418",
      "url": "https://patchblox.com/security/cve/CVE-2026-23418",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23434",
      "url": "https://patchblox.com/security/cve/CVE-2026-23434",
      "title": "mtd: rawnand: serialize lock/unlock against other NAND operations",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0011,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31547",
      "url": "https://patchblox.com/security/cve/CVE-2026-31547",
      "title": "kernel-64kb: drm/xe: Fix missing runtime PM reference in ccs_mode_store (bsc#1263018).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23357",
      "url": "https://patchblox.com/security/cve/CVE-2026-23357",
      "title": "can: mcp251x: fix deadlock in error path of mcp251x_open",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23368",
      "url": "https://patchblox.com/security/cve/CVE-2026-23368",
      "title": "kernel-source: net: phy: register phy led_triggers during probe to avoid AB-BA deadlock (bsc#1260530).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00103,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31565",
      "url": "https://patchblox.com/security/cve/CVE-2026-31565",
      "title": "RDMA/irdma: Fix deadlock during netdev reset with active connections",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00099,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23362",
      "url": "https://patchblox.com/security/cve/CVE-2026-23362",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00098,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23470",
      "url": "https://patchblox.com/security/cve/CVE-2026-23470",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00098,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-20585",
      "url": "https://patchblox.com/security/cve/CVE-2023-20585",
      "title": "AMD: CVE-2023-20585 IOMMU Write Buffer Vulnerability",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 5.3,
      "epss": 0.00098,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23463",
      "url": "https://patchblox.com/security/cve/CVE-2026-23463",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 4.7,
      "epss": 0.00098,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23420",
      "url": "https://patchblox.com/security/cve/CVE-2026-23420",
      "title": "wifi: wlcore: Fix a locking bug",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23452",
      "url": "https://patchblox.com/security/cve/CVE-2026-23452",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31420",
      "url": "https://patchblox.com/security/cve/CVE-2026-31420",
      "title": "bridge: mrp: reject zero test interval to avoid OOM panic",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23441",
      "url": "https://patchblox.com/security/cve/CVE-2026-23441",
      "title": "kernel-64kb: net/mlx5e: Prevent concurrent access to IPSec ASO context (bsc#1261768).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00092,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23473",
      "url": "https://patchblox.com/security/cve/CVE-2026-23473",
      "title": "io_uring/poll: fix multishot recv missing EOF on wakeup race",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 4.7,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}