# SUSE-SU-2026:23237-1: kernel-default security update SUSE-SU-2026:23237-1, released August 11, 2026, fixes 891 CVEs in kernel-default (version 6.12.0-160000.37.1). 2 of them are being exploited (CVE-2026-31431); 2 on CISA KEV. Patch Radar priority: Patch now. - Web page: https://patchblox.com/security/fix/linux/suse-su-2026-23237-1 - Platform: Linux - Released: Aug 11, 2026 - Priority: Patch now (Closes CVE-2026-31431, exploited (CISA KEV)) - CVEs: 891, exploited: 2, on CISA KEV: 2 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:23237-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 16.0 | 6.12.0-160000.37.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-31431](https://patchblox.com/security/data/cve/CVE-2026-31431.md) | Patch now | crypto: algif_aead - Revert to operating out-of-place | 8.1 | 0.9811 | CISA KEV | | [CVE-2025-39964](https://patchblox.com/security/data/cve/CVE-2025-39964.md) | Patch now | crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg | 8.8 | 0.0161 | CISA KEV | | [CVE-2026-64564](https://patchblox.com/security/data/cve/CVE-2026-64564.md) | Urgent | sctp: don't free the ASCONF's own transport in DEL-IP processing | 9.8 | 0.0143 | | | [CVE-2026-43304](https://patchblox.com/security/data/cve/CVE-2026-43304.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: libceph: define and enforce CEPH_MAX_KEY_LEN Wh... | 9.8 | 0.0061 | | | [CVE-2026-43011](https://patchblox.com/security/data/cve/CVE-2026-43011.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/x25: Fix potential double free of skb When... | 9.8 | 0.0059 | | | [CVE-2026-53224](https://patchblox.com/security/data/cve/CVE-2026-53224.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address l... | 9.1 | 0.0057 | | | [CVE-2026-52982](https://patchblox.com/security/data/cve/CVE-2026-52982.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: rtl8150: fix use-after-free in rtl8150... | 9.8 | 0.0054 | | | [CVE-2026-53045](https://patchblox.com/security/data/cve/CVE-2026-53045.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: memory: tegra124-emc: Fix dll_change check The... | 9.8 | 0.0051 | | | [CVE-2026-64061](https://patchblox.com/security/data/cve/CVE-2026-64061.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read... | 9.8 | 0.0047 | | | [CVE-2026-43117](https://patchblox.com/security/data/cve/CVE-2026-43117.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: get correct superblock from... | 9.1 | 0.0046 | | | [CVE-2026-31436](https://patchblox.com/security/data/cve/CVE-2026-31436.md) | Urgent | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 9.8 | 0.0046 | | | [CVE-2026-64091](https://patchblox.com/security/data/cve/CVE-2026-64091.md) | Urgent | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0043 | | | [CVE-2026-52922](https://patchblox.com/security/data/cve/CVE-2026-52922.md) | Urgent | batman-adv: dat: handle forward allocation error | 9.8 | 0.0039 | | | [CVE-2026-64025](https://patchblox.com/security/data/cve/CVE-2026-64025.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, skmsg: fix verdict sk_data_ready racing wit... | 9.8 | 0.0037 | | | [CVE-2026-53002](https://patchblox.com/security/data/cve/CVE-2026-53002.md) | Urgent | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 | | | [CVE-2026-52989](https://patchblox.com/security/data/cve/CVE-2026-52989.md) | Urgent | nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers | 9.8 | 0.0036 | | | [CVE-2026-63974](https://patchblox.com/security/data/cve/CVE-2026-63974.md) | Urgent | Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close | 9.8 | 0.0035 | | | [CVE-2026-53175](https://patchblox.com/security/data/cve/CVE-2026-53175.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the fq... | 9.8 | 0.0031 | | | [CVE-2026-53260](https://patchblox.com/security/data/cve/CVE-2026-53260.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Add preempt_{disable,enable}_nested() in re... | 9.8 | 0.0029 | | | [CVE-2026-52934](https://patchblox.com/security/data/cve/CVE-2026-52934.md) | Urgent | batman-adv: tvlv: reject oversized TVLV packets | 9.8 | 0.0024 | | | [CVE-2026-63882](https://patchblox.com/security/data/cve/CVE-2026-63882.md) | Urgent | drm/amdkfd: fix NULL pointer bug in svm_range_set_attr | 9.8 | 0.0022 | | | [CVE-2026-63939](https://patchblox.com/security/data/cve/CVE-2026-63939.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Compute the correct max length of the... | 9.3 | 0.0020 | | | [CVE-2026-63938](https://patchblox.com/security/data/cve/CVE-2026-63938.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Check PSC request indices against the... | 9.3 | 0.0020 | | | [CVE-2026-53009](https://patchblox.com/security/data/cve/CVE-2026-53009.md) | Urgent | ice: fix double-free of tx_buf skb | 9.8 | 0.0018 | | | [CVE-2026-63824](https://patchblox.com/security/data/cve/CVE-2026-63824.md) | Urgent | KEYS: fix overflow in keyctl_pkey_params_get_2() | 9.8 | 0.0017 | | | [CVE-2026-53376](https://patchblox.com/security/data/cve/CVE-2026-53376.md) | Urgent | drm/amdkfd: Add upper bound check for num_of_nodes | 9.8 | 0.0016 | | | [CVE-2025-71305](https://patchblox.com/security/data/cve/CVE-2025-71305.md) | Urgent | drm/display/dp_mst: Add protection against 0 vcpi | 9.8 | 0.0016 | | | [CVE-2026-63959](https://patchblox.com/security/data/cve/CVE-2026-63959.md) | Urgent | usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT | 9.8 | 0.0016 | | | [CVE-2026-64106](https://patchblox.com/security/data/cve/CVE-2026-64106.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with o... | 9.0 | 0.0015 | | | [CVE-2026-53403](https://patchblox.com/security/data/cve/CVE-2026-53403.md) | Urgent | fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var | 9.8 | 0.0013 | | | [CVE-2026-53374](https://patchblox.com/security/data/cve/CVE-2026-53374.md) | Urgent | drm/amdgpu: zero-initialize GART table on allocation | 9.8 | 0.0013 | | | [CVE-2026-63827](https://patchblox.com/security/data/cve/CVE-2026-63827.md) | Urgent | apparmor: fix use-after-free in rawdata dedup loop | 9.8 | 0.0012 | | | [CVE-2026-52913](https://patchblox.com/security/data/cve/CVE-2026-52913.md) | Urgent | batman-adv: v: stop OGMv2 on disabled interface | 9.8 | 0.0012 | | | [CVE-2026-52947](https://patchblox.com/security/data/cve/CVE-2026-52947.md) | Urgent | net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove | 9.8 | 0.0011 | | | [CVE-2026-53062](https://patchblox.com/security/data/cve/CVE-2026-53062.md) | Urgent | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 | | | [CVE-2026-53359](https://patchblox.com/security/data/cve/CVE-2026-53359.md) | High | kpatch-patch-4_18_0-553_109_1: This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a run... | 8.8 | 0.0137 | | | [CVE-2026-52958](https://patchblox.com/security/data/cve/CVE-2026-52958.md) | High | libceph: Fix potential out-of-bounds access in osdmap_decode() | 9.1 | 0.0074 | | | [CVE-2026-43501](https://patchblox.com/security/data/cve/CVE-2026-43501.md) | High | ipv6: rpl: reserve mac_len headroom when recompressed SRH grows | 9.8 | 0.0073 | | | [CVE-2026-53003](https://patchblox.com/security/data/cve/CVE-2026-53003.md) | High | pppoe: drop PFC frames | 7.5 | 0.0072 | | | [CVE-2026-63912](https://patchblox.com/security/data/cve/CVE-2026-63912.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0071 | | | [CVE-2026-45859](https://patchblox.com/security/data/cve/CVE-2026-45859.md) | High | netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation | 8.1 | 0.0071 | | | [CVE-2026-63886](https://patchblox.com/security/data/cve/CVE-2026-63886.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 9.8 | 0.0071 | | | [CVE-2026-53247](https://patchblox.com/security/data/cve/CVE-2026-53247.md) | High | net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown | 9.8 | 0.0069 | | | [CVE-2026-43493](https://patchblox.com/security/data/cve/CVE-2026-43493.md) | High | crypto: pcrypt - Fix handling of MAY_BACKLOG requests | 9.8 | 0.0068 | | | [CVE-2026-63968](https://patchblox.com/security/data/cve/CVE-2026-63968.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in fib6_select_... | 7.5 | 0.0067 | | | [CVE-2026-53399](https://patchblox.com/security/data/cve/CVE-2026-53399.md) | High | nfsd: release layout stid on setlease failure | 9.8 | 0.0066 | | | [CVE-2026-64530](https://patchblox.com/security/data/cve/CVE-2026-64530.md) | High | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle | 9.8 | 0.0066 | | | [CVE-2026-63919](https://patchblox.com/security/data/cve/CVE-2026-63919.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0065 | | | [CVE-2026-52986](https://patchblox.com/security/data/cve/CVE-2026-52986.md) | High | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 | | | [CVE-2026-53394](https://patchblox.com/security/data/cve/CVE-2026-53394.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on u... | 7.5 | 0.0063 | | | [CVE-2026-63795](https://patchblox.com/security/data/cve/CVE-2026-63795.md) | High | 9p: avoid putting oldfid in p9_client_walk() error path | 10.0 | 0.0062 | | | [CVE-2026-52956](https://patchblox.com/security/data/cve/CVE-2026-52956.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: libceph: Fix potential out-of-bounds access in _... | 7.5 | 0.0061 | | | [CVE-2026-63972](https://patchblox.com/security/data/cve/CVE-2026-63972.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: Skip redundant detach on already-deta... | 7.5 | 0.0059 | | | [CVE-2026-52999](https://patchblox.com/security/data/cve/CVE-2026-52999.md) | High | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 | | | [CVE-2026-52998](https://patchblox.com/security/data/cve/CVE-2026-52998.md) | High | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 | | | [CVE-2026-53221](https://patchblox.com/security/data/cve/CVE-2026-53221.md) | High | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | 9.8 | 0.0058 | | | [CVE-2026-53225](https://patchblox.com/security/data/cve/CVE-2026-53225.md) | High | sctp: fix uninit-value in __sctp_rcv_asconf_lookup() | 9.1 | 0.0058 | | | [CVE-2026-63976](https://patchblox.com/security/data/cve/CVE-2026-63976.md) | High | kernel-uek-debug-devel: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.8 | 0.0057 | | | [CVE-2026-46102](https://patchblox.com/security/data/cve/CVE-2026-46102.md) | High | net: strparser: fix skb_head leak in strp_abort_strp() | 7.5 | 0.0056 | | | [CVE-2026-46177](https://patchblox.com/security/data/cve/CVE-2026-46177.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.5 | 0.0056 | | | [CVE-2026-53398](https://patchblox.com/security/data/cve/CVE-2026-53398.md) | High | NFSD: Fix SECINFO_NO_NAME decode error cleanup | 9.8 | 0.0054 | | | [CVE-2026-52981](https://patchblox.com/security/data/cve/CVE-2026-52981.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: neigh: let neigh_xmit take skb ownership neigh_... | 7.5 | 0.0053 | | | [CVE-2026-53392](https://patchblox.com/security/data/cve/CVE-2026-53392.md) | High | NFSv4/flexfiles: reject zero filehandle version count | 8.8 | 0.0053 | | | [CVE-2026-53397](https://patchblox.com/security/data/cve/CVE-2026-53397.md) | High | nfsd: fix posix_acl leak on SETACL decode failure | 8.8 | 0.0053 | | | [CVE-2026-53268](https://patchblox.com/security/data/cve/CVE-2026-53268.md) | High | netfilter: conntrack_irc: fix possible out-of-bounds read | 8.2 | 0.0052 | | | [CVE-2026-43230](https://patchblox.com/security/data/cve/CVE-2026-43230.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/rds: Clear reconnect pending bit When cance... | 7.5 | 0.0052 | | | [CVE-2026-53391](https://patchblox.com/security/data/cve/CVE-2026-53391.md) | High | NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr | 8.8 | 0.0052 | | | [CVE-2026-63994](https://patchblox.com/security/data/cve/CVE-2026-63994.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0051 | | | [CVE-2026-53186](https://patchblox.com/security/data/cve/CVE-2026-53186.md) | High | RDMA/srp: bound SRP_RSP sense copy by the received length | 9.1 | 0.0051 | | | [CVE-2026-64560](https://patchblox.com/security/data/cve/CVE-2026-64560.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent UAF caused by non-lead... | 7.8 | 0.0050 | | | [CVE-2026-31552](https://patchblox.com/security/data/cve/CVE-2026-31552.md) | High | wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom | 7.5 | 0.0050 | | | [CVE-2026-46027](https://patchblox.com/security/data/cve/CVE-2026-46027.md) | High | net/smc: avoid early lgr access in smc_clc_wait_msg | 7.5 | 0.0050 | | | [CVE-2026-53199](https://patchblox.com/security/data/cve/CVE-2026-53199.md) | High | hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf | 7.5 | 0.0050 | | | [CVE-2026-52974](https://patchblox.com/security/data/cve/CVE-2026-52974.md) | High | net: tls: fix strparser anchor skb leak on offload RX setup failure | 7.5 | 0.0050 | | | [CVE-2026-53183](https://patchblox.com/security/data/cve/CVE-2026-53183.md) | High | mptcp: allow subflow rcv wnd to shrink | 7.5 | 0.0049 | | | [CVE-2026-53184](https://patchblox.com/security/data/cve/CVE-2026-53184.md) | High | udp: clear skb->dev before running a sockmap verdict | 7.5 | 0.0049 | | | [CVE-2026-46137](https://patchblox.com/security/data/cve/CVE-2026-46137.md) | High | mptcp: pm: ADD_ADDR rtx: fix potential data-race | 9.8 | 0.0048 | | | [CVE-2026-64600](https://patchblox.com/security/data/cve/CVE-2026-64600.md) | High | xfs: resample the data fork mapping after cycling ILOCK | 7.8 | 0.0047 | | | [CVE-2026-31557](https://patchblox.com/security/data/cve/CVE-2026-31557.md) | High | nvmet: move async event work off nvmet-wq | 7.5 | 0.0045 | | | [CVE-2026-46306](https://patchblox.com/security/data/cve/CVE-2026-46306.md) | High | flow_dissector: do not dissect PPPoE PFC frames | 8.1 | 0.0045 | | | [CVE-2026-53246](https://patchblox.com/security/data/cve/CVE-2026-53246.md) | High | sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | 9.8 | 0.0044 | | | [CVE-2026-53235](https://patchblox.com/security/data/cve/CVE-2026-53235.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: add pskb_may_pull() to skb_gro_receive_list... | 7.8 | 0.0044 | | | [CVE-2026-53131](https://patchblox.com/security/data/cve/CVE-2026-53131.md) | High | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 | | | [CVE-2026-31598](https://patchblox.com/security/data/cve/CVE-2026-31598.md) | High | ocfs2: fix possible deadlock between unlink and dio_end_io_write | 7.5 | 0.0044 | | | [CVE-2026-53071](https://patchblox.com/security/data/cve/CVE-2026-53071.md) | High | Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp | 8.8 | 0.0043 | | | [CVE-2026-31659](https://patchblox.com/security/data/cve/CVE-2026-31659.md) | High | batman-adv: reject oversized global TT response buffers | 9.8 | 0.0042 | | | [CVE-2026-53355](https://patchblox.com/security/data/cve/CVE-2026-53355.md) | High | net: rds: clear i_sends on setup unwind | 9.8 | 0.0042 | | | [CVE-2026-31739](https://patchblox.com/security/data/cve/CVE-2026-31739.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Add missing CRYPTO_ALG_ASYNC Th... | 8.8 | 0.0042 | | | [CVE-2026-43203](https://patchblox.com/security/data/cve/CVE-2026-43203.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: atm: fore200e: fix use-after-free in tasklets du... | 7.5 | 0.0040 | | | [CVE-2026-31657](https://patchblox.com/security/data/cve/CVE-2026-31657.md) | High | batman-adv: hold claim backbone gateways by reference | 9.8 | 0.0040 | | | [CVE-2026-53088](https://patchblox.com/security/data/cve/CVE-2026-53088.md) | High | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb | 9.8 | 0.0040 | | | [CVE-2026-53006](https://patchblox.com/security/data/cve/CVE-2026-53006.md) | High | ipv6: fix possible UAF in icmpv6_rcv() | 9.8 | 0.0039 | | | [CVE-2026-52967](https://patchblox.com/security/data/cve/CVE-2026-52967.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb/client: fix possible infinite loop and oob r... | 8.1 | 0.0039 | | | [CVE-2026-46273](https://patchblox.com/security/data/cve/CVE-2026-46273.md) | High | ibmveth: Disable GSO for packets with small MSS | 8.6 | 0.0039 | | | [CVE-2026-46265](https://patchblox.com/security/data/cve/CVE-2026-46265.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix WQ_MEM_RECLAIM warning When sunrp... | 7.5 | 0.0039 | | | [CVE-2026-43232](https://patchblox.com/security/data/cve/CVE-2026-43232.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: wan: farsync: Fix use-after-free bugs cause... | 8.8 | 0.0039 | | | [CVE-2026-63893](https://patchblox.com/security/data/cve/CVE-2026-63893.md) | High | kernel-uek-debug-modules-extra: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.1 | 0.0039 | | | [CVE-2026-43296](https://patchblox.com/security/data/cve/CVE-2026-43296.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Workaround SQM/PSE stalls by disab... | 7.5 | 0.0039 | | | [CVE-2026-64223](https://patchblox.com/security/data/cve/CVE-2026-64223.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated... | 8.1 | 0.0039 | | | [CVE-2026-53069](https://patchblox.com/security/data/cve/CVE-2026-53069.md) | High | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.5 | 0.0038 | | | [CVE-2026-31467](https://patchblox.com/security/data/cve/CVE-2026-31467.md) | High | erofs: add GFP_NOIO in the bio completion if needed | 8.8 | 0.0038 | | | [CVE-2026-43114](https://patchblox.com/security/data/cve/CVE-2026-43114.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k... | 9.4 | 0.0037 | | | [CVE-2026-43253](https://patchblox.com/security/data/cve/CVE-2026-43253.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move wait_on_sem() out of spinlock W... | 7.5 | 0.0037 | | | [CVE-2026-63916](https://patchblox.com/security/data/cve/CVE-2026-63916.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: wacom: Fix OOB write in wacom_hid_set_devic... | 8.8 | 0.0036 | | | [CVE-2026-63915](https://patchblox.com/security/data/cve/CVE-2026-63915.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nfc: hci: fix out-of-bounds read in HCP header p... | 8.8 | 0.0035 | | | [CVE-2026-63947](https://patchblox.com/security/data/cve/CVE-2026-63947.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0035 | | | [CVE-2026-63944](https://patchblox.com/security/data/cve/CVE-2026-63944.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix UAF in hci_le_create_cis... | 8.8 | 0.0033 | | | [CVE-2026-53357](https://patchblox.com/security/data/cve/CVE-2026-53357.md) | High | Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() | 8.0 | 0.0033 | | | [CVE-2026-43172](https://patchblox.com/security/data/cve/CVE-2026-43172.md) | High | wifi: iwlwifi: fix 22000 series SMEM parsing | 8.8 | 0.0033 | | | [CVE-2026-43495](https://patchblox.com/security/data/cve/CVE-2026-43495.md) | High | net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler | 8.8 | 0.0032 | | | [CVE-2026-43249](https://patchblox.com/security/data/cve/CVE-2026-43249.md) | High | 9p/xen: protect xen_9pfs_front_free against concurrent calls | 8.8 | 0.0032 | | | [CVE-2026-31607](https://patchblox.com/security/data/cve/CVE-2026-31607.md) | High | usbip: validate number_of_packets in usbip_pack_ret_submit() | 9.8 | 0.0031 | | | [CVE-2026-63831](https://patchblox.com/security/data/cve/CVE-2026-63831.md) | High | mac802154: llsec: add skb_cow_data() before in-place crypto | 8.8 | 0.0031 | | | [CVE-2026-46125](https://patchblox.com/security/data/cve/CVE-2026-46125.md) | High | wifi: mac80211: remove station if connection prep fails | 8.8 | 0.0030 | | | [CVE-2026-53360](https://patchblox.com/security/data/cve/CVE-2026-53360.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Require in-GHCB scratch area if GHCB v2... | 8.8 | 0.0030 | | | [CVE-2026-53070](https://patchblox.com/security/data/cve/CVE-2026-53070.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: disable BH before calling udp_tunnel_xmit_... | 7.5 | 0.0030 | | | [CVE-2026-31622](https://patchblox.com/security/data/cve/CVE-2026-31622.md) | High | NFC: digital: Bounds check NFC-A cascade depth in SDD response handler | 8.8 | 0.0029 | | | [CVE-2026-31626](https://patchblox.com/security/data/cve/CVE-2026-31626.md) | High | staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() | 7.1 | 0.0029 | | | [CVE-2025-54518](https://patchblox.com/security/data/cve/CVE-2025-54518.md) | High | AMD: CVE-2025-54518 CPU OP Cache Corruption | 7.8 | 0.0029 | | | [CVE-2026-46056](https://patchblox.com/security/data/cve/CVE-2026-46056.md) | High | Bluetooth: hci_event: fix potential UAF in SSP passkey handlers | 8.8 | 0.0028 | | | [CVE-2026-46198](https://patchblox.com/security/data/cve/CVE-2026-46198.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.8 | 0.0028 | | | [CVE-2026-53358](https://patchblox.com/security/data/cve/CVE-2026-53358.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.8 | 0.0028 | | | [CVE-2026-31773](https://patchblox.com/security/data/cve/CVE-2026-31773.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK auth... | 8.8 | 0.0028 | | | [CVE-2026-43334](https://patchblox.com/security/data/cve/CVE-2026-43334.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: force responder MITM requirements... | 8.8 | 0.0028 | | | [CVE-2026-46138](https://patchblox.com/security/data/cve/CVE-2026-46138.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix OOB read and infinite... | 8.1 | 0.0028 | | | [CVE-2026-53254](https://patchblox.com/security/data/cve/CVE-2026-53254.md) | High | Bluetooth: RFCOMM: validate skb length in MCC handlers | 8.1 | 0.0028 | | | [CVE-2026-46212](https://patchblox.com/security/data/cve/CVE-2026-46212.md) | High | batman-adv: bla: prevent use-after-free when deleting claims | 8.8 | 0.0027 | | | [CVE-2026-63975](https://patchblox.com/security/data/cve/CVE-2026-63975.md) | High | kernel-rt-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0027 | | | [CVE-2026-31779](https://patchblox.com/security/data/cve/CVE-2026-31779.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix potential out-of-bounds... | 8.1 | 0.0027 | | | [CVE-2026-53196](https://patchblox.com/security/data/cve/CVE-2026-53196.md) | High | USB: serial: io_ti: fix heap overflow in get_manuf_info() | 8.8 | 0.0027 | | | [CVE-2026-43110](https://patchblox.com/security/data/cve/CVE-2026-43110.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: validate bsscfg indices in IF ev... | 8.8 | 0.0027 | | | [CVE-2026-43291](https://patchblox.com/security/data/cve/CVE-2026-43291.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: nfc: nci: Fix parameter validation for pack... | 8.3 | 0.0027 | | | [CVE-2026-53147](https://patchblox.com/security/data/cve/CVE-2026-53147.md) | High | thunderbolt: Validate XDomain request packet size before type cast | 8.1 | 0.0027 | | | [CVE-2026-53253](https://patchblox.com/security/data/cve/CVE-2026-53253.md) | High | Bluetooth: bnep: reject short frames before parsing | 7.1 | 0.0027 | | | [CVE-2026-53256](https://patchblox.com/security/data/cve/CVE-2026-53256.md) | High | kernel-rt-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0026 | | | [CVE-2026-31570](https://patchblox.com/security/data/cve/CVE-2026-31570.md) | High | can: gw: fix OOB heap access in cgw_csum_crc8_rel() | 8.8 | 0.0026 | | | [CVE-2026-46238](https://patchblox.com/security/data/cve/CVE-2026-46238.md) | High | batman-adv: stop caching unowned originator pointers in BAT IV | 8.8 | 0.0026 | | | [CVE-2026-53275](https://patchblox.com/security/data/cve/CVE-2026-53275.md) | High | ipv6: mcast: Fix use-after-free when processing MLD queries | 8.8 | 0.0026 | | | [CVE-2026-63946](https://patchblox.com/security/data/cve/CVE-2026-63946.md) | High | kernel-64k-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0026 | | | [CVE-2026-53146](https://patchblox.com/security/data/cve/CVE-2026-53146.md) | High | thunderbolt: Limit XDomain response copy to actual frame size | 7.1 | 0.0026 | | | [CVE-2026-46232](https://patchblox.com/security/data/cve/CVE-2026-46232.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: playstation: Clamp num_touch_reports A dev... | 8.1 | 0.0026 | | | [CVE-2026-43018](https://patchblox.com/security/data/cve/CVE-2026-43018.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: fix potential UAF in hci_l... | 8.8 | 0.0026 | | | [CVE-2026-43051](https://patchblox.com/security/data/cve/CVE-2026-43051.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacom_intu... | 8.1 | 0.0026 | | | [CVE-2026-63869](https://patchblox.com/security/data/cve/CVE-2026-63869.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0026 | | | [CVE-2026-53157](https://patchblox.com/security/data/cve/CVE-2026-53157.md) | High | net: phonet: free phonet_device after RCU grace period | 7.8 | 0.0025 | | | [CVE-2026-31513](https://patchblox.com/security/data/cve/CVE-2026-31513.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix stack-out-of-bounds read i... | 8.1 | 0.0025 | | | [CVE-2026-31629](https://patchblox.com/security/data/cve/CVE-2026-31629.md) | High | nfc: llcp: add missing return after LLCP_CLOSED checks | 8.8 | 0.0025 | | | [CVE-2026-43113](https://patchblox.com/security/data/cve/CVE-2026-43113.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: validate packet IDs before indexin... | 8.8 | 0.0024 | | | [CVE-2025-40022](https://patchblox.com/security/data/cve/CVE-2025-40022.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix incorrect boolean values in... | n/a | 0.0024 | | | [CVE-2026-46307](https://patchblox.com/security/data/cve/CVE-2026-46307.md) | High | wifi: ath5k: do not access array OOB | 8.3 | 0.0024 | | | [CVE-2026-46275](https://patchblox.com/security/data/cve/CVE-2026-46275.md) | High | Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths | 7.8 | 0.0023 | | | [CVE-2026-52918](https://patchblox.com/security/data/cve/CVE-2026-52918.md) | High | Bluetooth: serialize accept_q access | 8.8 | 0.0022 | | | [CVE-2026-43062](https://patchblox.com/security/data/cve/CVE-2026-43062.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix type confusion in l2cap_ec... | 7.1 | 0.0022 | | | [CVE-2026-63896](https://patchblox.com/security/data/cve/CVE-2026-63896.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: composite: fix integer underflow in... | n/a | 0.0021 | | | [CVE-2026-45878](https://patchblox.com/security/data/cve/CVE-2026-45878.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.8 | 0.0021 | | | [CVE-2026-46166](https://patchblox.com/security/data/cve/CVE-2026-46166.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: use safe list iteration in radar... | 8.8 | 0.0020 | | | [CVE-2026-53072](https://patchblox.com/security/data/cve/CVE-2026-53072.md) | High | Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER | 8.8 | 0.0020 | | | [CVE-2026-46113](https://patchblox.com/security/data/cve/CVE-2026-46113.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.8 | 0.0020 | | | [CVE-2026-52969](https://patchblox.com/security/data/cve/CVE-2026-52969.md) | High | KVM: Reject wrapped offset in kvm_reset_dirty_gfn() | 7.8 | 0.0020 | | | [CVE-2026-53212](https://patchblox.com/security/data/cve/CVE-2026-53212.md) | High | netfilter: nft_tunnel: fix use-after-free on object destroy | 7.8 | 0.0019 | | | [CVE-2026-53369](https://patchblox.com/security/data/cve/CVE-2026-53369.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC lengt... | 8.4 | 0.0019 | | | [CVE-2026-63940](https://patchblox.com/security/data/cve/CVE-2026-63940.md) | High | KVM: SEV: Ignore Port I/O requests of length '0' | 9.3 | 0.0019 | | | [CVE-2026-52976](https://patchblox.com/security/data/cve/CVE-2026-52976.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: K... | 7.8 | 0.0018 | | | [CVE-2026-53000](https://patchblox.com/security/data/cve/CVE-2026-53000.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Flor... | 7.8 | 0.0018 | | | [CVE-2025-38250](https://patchblox.com/security/data/cve/CVE-2025-38250.md) | High | Bluetooth: hci_core: Fix use-after-free in vhci_flush() | 7.8 | 0.0018 | | | [CVE-2026-52951](https://patchblox.com/security/data/cve/CVE-2026-52951.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: handle empty bo and UAF races T... | 7.8 | 0.0018 | | | [CVE-2026-53375](https://patchblox.com/security/data/cve/CVE-2026-53375.md) | High | drm/amdgpu/vce: Prevent partial address patches | 8.8 | 0.0018 | | | [CVE-2026-63875](https://patchblox.com/security/data/cve/CVE-2026-63875.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0018 | | | [CVE-2026-63899](https://patchblox.com/security/data/cve/CVE-2026-63899.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0018 | | | [CVE-2026-63845](https://patchblox.com/security/data/cve/CVE-2026-63845.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0... | 7.8 | 0.0018 | | | [CVE-2026-63846](https://patchblox.com/security/data/cve/CVE-2026-63846.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0... | 7.8 | 0.0018 | | | [CVE-2026-63847](https://patchblox.com/security/data/cve/CVE-2026-63847.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5... | 7.8 | 0.0018 | | | [CVE-2026-63848](https://patchblox.com/security/data/cve/CVE-2026-63848.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0... | 7.8 | 0.0018 | | | [CVE-2026-63853](https://patchblox.com/security/data/cve/CVE-2026-63853.md) | High | drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring | 7.8 | 0.0018 | | | [CVE-2026-63854](https://patchblox.com/security/data/cve/CVE-2026-63854.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v3.0 e... | 7.8 | 0.0018 | | | [CVE-2026-63855](https://patchblox.com/security/data/cve/CVE-2026-63855.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v2.5 e... | 7.8 | 0.0018 | | | [CVE-2026-63856](https://patchblox.com/security/data/cve/CVE-2026-63856.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v2.0 e... | 7.8 | 0.0018 | | | [CVE-2026-63884](https://patchblox.com/security/data/cve/CVE-2026-63884.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... | 7.8 | 0.0018 | | | [CVE-2026-53085](https://patchblox.com/security/data/cve/CVE-2026-53085.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: fix mm lifecycle in open-coded task_vma ite... | 7.8 | 0.0018 | | | [CVE-2026-53191](https://patchblox.com/security/data/cve/CVE-2026-53191.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: inherit IORING_CQE_F_BUF_MORE acro... | 7.8 | 0.0018 | | | [CVE-2026-53233](https://patchblox.com/security/data/cve/CVE-2026-53233.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netdev: fix double-free in netdev_nl_bind_rx_doi... | 7.8 | 0.0018 | | | [CVE-2026-53386](https://patchblox.com/security/data/cve/CVE-2026-53386.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-ads1298: add bounds check to pga_se... | 7.8 | 0.0018 | | | [CVE-2026-63842](https://patchblox.com/security/data/cve/CVE-2026-63842.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v5.0... | 7.8 | 0.0018 | | | [CVE-2026-63843](https://patchblox.com/security/data/cve/CVE-2026-63843.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0... | 7.8 | 0.0018 | | | [CVE-2026-63844](https://patchblox.com/security/data/cve/CVE-2026-63844.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0... | 7.8 | 0.0018 | | | [CVE-2026-63850](https://patchblox.com/security/data/cve/CVE-2026-63850.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v5.0.0... | 7.8 | 0.0018 | | | [CVE-2026-63851](https://patchblox.com/security/data/cve/CVE-2026-63851.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.5... | 7.8 | 0.0018 | | | [CVE-2026-63852](https://patchblox.com/security/data/cve/CVE-2026-63852.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3... | 7.8 | 0.0018 | | | [CVE-2026-63836](https://patchblox.com/security/data/cve/CVE-2026-63836.md) | High | batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd | 7.5 | 0.0017 | | | [CVE-2026-63807](https://patchblox.com/security/data/cve/CVE-2026-63807.md) | High | KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level | 8.8 | 0.0017 | | | [CVE-2026-63923](https://patchblox.com/security/data/cve/CVE-2026-63923.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: validate body pcifunc in rvu_mbox_h... | 8.8 | 0.0017 | | | [CVE-2026-23227](https://patchblox.com/security/data/cve/CVE-2026-23227.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/exynos: vidi: use ctx->lock to protect struc... | 7.8 | 0.0017 | | | [CVE-2026-53366](https://patchblox.com/security/data/cve/CVE-2026-53366.md) | High | ipv4: account for fraggap on the paged allocation path | 8.5 | 0.0017 | | | [CVE-2026-53098](https://patchblox.com/security/data/cve/CVE-2026-53098.md) | High | wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() | 7.8 | 0.0017 | | | [CVE-2026-53112](https://patchblox.com/security/data/cve/CVE-2026-53112.md) | High | wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet | 7.8 | 0.0017 | | | [CVE-2026-63883](https://patchblox.com/security/data/cve/CVE-2026-63883.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: serial: qcom_geni: fix kfifo underflow when flus... | 7.3 | 0.0017 | | | [CVE-2026-53402](https://patchblox.com/security/data/cve/CVE-2026-53402.md) | High | fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | 7.1 | 0.0017 | | | [CVE-2026-63902](https://patchblox.com/security/data/cve/CVE-2026-63902.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.1 | 0.0017 | | | [CVE-2026-63903](https://patchblox.com/security/data/cve/CVE-2026-63903.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.1 | 0.0017 | | | [CVE-2026-63904](https://patchblox.com/security/data/cve/CVE-2026-63904.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.1 | 0.0017 | | | [CVE-2026-53097](https://patchblox.com/security/data/cve/CVE-2026-53097.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix use-after-free bugs in m... | 7.8 | 0.0017 | | | [CVE-2026-63894](https://patchblox.com/security/data/cve/CVE-2026-63894.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: serialize DMABUF cancel again... | 7.8 | 0.0017 | | | [CVE-2026-63826](https://patchblox.com/security/data/cve/CVE-2026-63826.md) | High | fbdev: fix use-after-free in store_modes() | 7.1 | 0.0017 | | | [CVE-2026-63957](https://patchblox.com/security/data/cve/CVE-2026-63957.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0017 | | | [CVE-2026-46152](https://patchblox.com/security/data/cve/CVE-2026-46152.md) | High | wifi: mac80211: drop stray 'static' from fast-RX rx_result | 8.8 | 0.0017 | | | [CVE-2026-64528](https://patchblox.com/security/data/cve/CVE-2026-64528.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tty: serial: samsung: Remove redundant port lock... | n/a | 0.0017 | | | [CVE-2026-53068](https://patchblox.com/security/data/cve/CVE-2026-53068.md) | High | drm/komeda: fix integer overflow in AFBC framebuffer size check | 7.8 | 0.0017 | | | [CVE-2026-63905](https://patchblox.com/security/data/cve/CVE-2026-63905.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0017 | | | [CVE-2026-64191](https://patchblox.com/security/data/cve/CVE-2026-64191.md) | High | i2c: stub: Reject I2C block transfers with invalid length | 9.8 | 0.0017 | | | [CVE-2026-31532](https://patchblox.com/security/data/cve/CVE-2026-31532.md) | High | can: raw: fix ro->uniq use-after-free in raw_rcv() | 8.8 | 0.0017 | | | [CVE-2026-43059](https://patchblox.com/security/data/cve/CVE-2026-43059.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix list corruption and UAF in... | 7.8 | 0.0017 | | | [CVE-2026-43126](https://patchblox.com/security/data/cve/CVE-2026-43126.md) | High | ALSA: mixer: oss: Add card disconnect checkpoints | 7.8 | 0.0016 | | | [CVE-2026-43250](https://patchblox.com/security/data/cve/CVE-2026-43250.md) | High | usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke() | 7.8 | 0.0016 | | | [CVE-2026-43352](https://patchblox.com/security/data/cve/CVE-2026-43352.md) | High | i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue | 7.8 | 0.0016 | | | [CVE-2026-45853](https://patchblox.com/security/data/cve/CVE-2026-45853.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Use kvfree instead of kfree in amdgp... | 7.8 | 0.0016 | | | [CVE-2026-45866](https://patchblox.com/security/data/cve/CVE-2026-45866.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: serial: caif: fix use-after-free in caif_serial... | 7.8 | 0.0016 | | | [CVE-2026-45867](https://patchblox.com/security/data/cve/CVE-2026-45867.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: act8945a: Fix use-after-free in p... | 7.8 | 0.0016 | | | [CVE-2026-45879](https://patchblox.com/security/data/cve/CVE-2026-45879.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25980: Fix use-after-free in po... | 7.8 | 0.0016 | | | [CVE-2026-45902](https://patchblox.com/security/data/cve/CVE-2026-45902.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: bq256xx: Fix use-after-free in po... | 7.8 | 0.0016 | | | [CVE-2026-45916](https://patchblox.com/security/data/cve/CVE-2026-45916.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: sbs-battery: Fix use-after-free i... | 7.8 | 0.0016 | | | [CVE-2026-63927](https://patchblox.com/security/data/cve/CVE-2026-63927.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0016 | | | [CVE-2026-63967](https://patchblox.com/security/data/cve/CVE-2026-63967.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: imu: st_lsm6dsx: fix stack leak in tagged F... | 7.8 | 0.0016 | | | [CVE-2026-45851](https://patchblox.com/security/data/cve/CVE-2026-45851.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: efi: Fix reservation of unaccepted memory table... | 7.1 | 0.0016 | | | [CVE-2026-43368](https://patchblox.com/security/data/cve/CVE-2026-43368.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix potential overflow of shmem scatter... | 8.8 | 0.0016 | | | [CVE-2026-53022](https://patchblox.com/security/data/cve/CVE-2026-53022.md) | High | platform/x86: dell-wmi-sysman: bound enumeration string aggregation | 7.0 | 0.0016 | | | [CVE-2026-63962](https://patchblox.com/security/data/cve/CVE-2026-63962.md) | High | usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() | 8.8 | 0.0016 | | | [CVE-2026-45885](https://patchblox.com/security/data/cve/CVE-2026-45885.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: cpcap-battery: Fix use-after-free... | 7.8 | 0.0016 | | | [CVE-2026-45946](https://patchblox.com/security/data/cve/CVE-2026-45946.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: ab8500: Fix use-after-free in pow... | 7.8 | 0.0016 | | | [CVE-2026-63930](https://patchblox.com/security/data/cve/CVE-2026-63930.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: buffer: hw-consumer: fix use-after-free in... | 7.8 | 0.0016 | | | [CVE-2026-63934](https://patchblox.com/security/data/cve/CVE-2026-63934.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: gyro: itg3200: fix i2c read into the wrong... | 7.1 | 0.0016 | | | [CVE-2026-63961](https://patchblox.com/security/data/cve/CVE-2026-63961.md) | High | usb: typec: altmodes/displayport: validate count before reading Status Update VDO | 7.1 | 0.0016 | | | [CVE-2026-63963](https://patchblox.com/security/data/cve/CVE-2026-63963.md) | High | usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers | 7.1 | 0.0016 | | | [CVE-2026-63958](https://patchblox.com/security/data/cve/CVE-2026-63958.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: validate connector number in u... | 7.0 | 0.0016 | | | [CVE-2026-43437](https://patchblox.com/security/data/cve/CVE-2026-43437.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: fix use-after-free on linked stream r... | 7.8 | 0.0016 | | | [CVE-2026-45882](https://patchblox.com/security/data/cve/CVE-2026-45882.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_bms_vm: Fix use-after-free... | 7.8 | 0.0016 | | | [CVE-2026-63943](https://patchblox.com/security/data/cve/CVE-2026-63943.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: xpad - fix out-of-bounds access for Share... | 7.1 | 0.0016 | | | [CVE-2026-53270](https://patchblox.com/security/data/cve/CVE-2026-53270.md) | High | ipvs: clear the svc scheduler ptr early on edit | 9.8 | 0.0016 | | | [CVE-2026-53202](https://patchblox.com/security/data/cve/CVE-2026-53202.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Fix signed integer truncation in IPC... | 7.8 | 0.0016 | | | [CVE-2026-63806](https://patchblox.com/security/data/cve/CVE-2026-63806.md) | High | KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() | 7.3 | 0.0016 | | | [CVE-2025-68179](https://patchblox.com/security/data/cve/CVE-2025-68179.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP... | 7.8 | 0.0015 | | | [CVE-2026-63809](https://patchblox.com/security/data/cve/CVE-2026-63809.md) | High | bpf: use kvfree() for replaced sysctl write buffer | 7.8 | 0.0015 | | | [CVE-2026-46174](https://patchblox.com/security/data/cve/CVE-2026-46174.md) | High | x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache | 9.8 | 0.0015 | | | [CVE-2026-53143](https://patchblox.com/security/data/cve/CVE-2026-53143.md) | High | drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 | 7.8 | 0.0015 | | | [CVE-2025-40216](https://patchblox.com/security/data/cve/CVE-2025-40216.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/rsrc: don't rely on user vaddr alignmen... | 7.8 | 0.0015 | | | [CVE-2026-43049](https://patchblox.com/security/data/cve/CVE-2026-43049.md) | High | HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure | 7.8 | 0.0015 | | | [CVE-2026-53273](https://patchblox.com/security/data/cve/CVE-2026-53273.md) | High | kernel-uek-debug-modules: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0015 | | | [CVE-2025-40199](https://patchblox.com/security/data/cve/CVE-2025-40199.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: page_pool: Fix PP_MAGIC_MASK to avoid crashing o... | 7.8 | 0.0015 | | | [CVE-2026-63829](https://patchblox.com/security/data/cve/CVE-2026-63829.md) | High | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 | | | [CVE-2026-46145](https://patchblox.com/security/data/cve/CVE-2026-46145.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Validate rx_hash_key_len Sashiko point... | 7.8 | 0.0015 | | | [CVE-2026-53329](https://patchblox.com/security/data/cve/CVE-2026-53329.md) | High | drm/amd/display: Use krealloc_array() in dal_vector_reserve() | 7.8 | 0.0015 | | | [CVE-2026-43459](https://patchblox.com/security/data/cve/CVE-2026-43459.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: soc-core: flush delayed work before removi... | 7.3 | 0.0015 | | | [CVE-2026-46294](https://patchblox.com/security/data/cve/CVE-2026-46294.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0015 | | | [CVE-2026-52972](https://patchblox.com/security/data/cve/CVE-2026-52972.md) | High | crypto: af_alg - Cap AEAD AD length to 0x80000000 | 8.8 | 0.0014 | | | [CVE-2026-31447](https://patchblox.com/security/data/cve/CVE-2026-31447.md) | High | ext4: reject mount if bigalloc with s_first_data_block != 0 | 7.8 | 0.0014 | | | [CVE-2026-31780](https://patchblox.com/security/data/cve/CVE-2026-31780.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix u8 overflow in SSID scan buf... | 7.8 | 0.0014 | | | [CVE-2026-46006](https://patchblox.com/security/data/cve/CVE-2026-46006.md) | High | drm/nouveau: fix u32 overflow in pushbuf reloc bounds check | 7.8 | 0.0014 | | | [CVE-2026-46189](https://patchblox.com/security/data/cve/CVE-2026-46189.md) | High | kernel-uek-core: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0014 | | | [CVE-2026-52910](https://patchblox.com/security/data/cve/CVE-2026-52910.md) | High | bpf: Free reuseport cBPF prog after RCU grace period. | 7.8 | 0.0014 | | | [CVE-2026-53137](https://patchblox.com/security/data/cve/CVE-2026-53137.md) | High | drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size | 7.8 | 0.0014 | | | [CVE-2026-53195](https://patchblox.com/security/data/cve/CVE-2026-53195.md) | High | USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() | 7.8 | 0.0014 | | | [CVE-2026-53203](https://patchblox.com/security/data/cve/CVE-2026-53203.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add buffer overflow check in MS get_i... | 7.8 | 0.0014 | | | [CVE-2026-43380](https://patchblox.com/security/data/cve/CVE-2026-43380.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/q54sj108a2) fix stack overflow in... | 7.1 | 0.0014 | | | [CVE-2026-64018](https://patchblox.com/security/data/cve/CVE-2026-64018.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: net: mana: validate rx_req_idx to prevent out-of-... | 9.3 | 0.0014 | | | [CVE-2026-46149](https://patchblox.com/security/data/cve/CVE-2026-46149.md) | High | scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() | 8.8 | 0.0014 | | | [CVE-2026-63794](https://patchblox.com/security/data/cve/CVE-2026-63794.md) | High | KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path | 8.8 | 0.0014 | | | [CVE-2026-46209](https://patchblox.com/security/data/cve/CVE-2026-46209.md) | High | kernel-uek-core: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.4 | 0.0014 | | | [CVE-2026-46123](https://patchblox.com/security/data/cve/CVE-2026-46123.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: virtio_bt: clamp rx length before skb... | 8.1 | 0.0014 | | | [CVE-2026-31772](https://patchblox.com/security/data/cve/CVE-2026-31772.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix stack buffer overflow i... | 7.8 | 0.0014 | | | [CVE-2026-46064](https://patchblox.com/security/data/cve/CVE-2026-46064.md) | High | ibmasm: fix heap over-read in ibmasm_send_i2o_message() | 7.1 | 0.0014 | | | [CVE-2026-53193](https://patchblox.com/security/data/cve/CVE-2026-53193.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0014 | | | [CVE-2026-46180](https://patchblox.com/security/data/cve/CVE-2026-46180.md) | High | wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task | 7.8 | 0.0014 | | | [CVE-2026-46205](https://patchblox.com/security/data/cve/CVE-2026-46205.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: media: atomisp: Disallow all private IO... | 7.8 | 0.0014 | | | [CVE-2026-53016](https://patchblox.com/security/data/cve/CVE-2026-53016.md) | High | crypto: ccp - copy IV using skcipher ivsize | 7.8 | 0.0014 | | | [CVE-2026-31488](https://patchblox.com/security/data/cve/CVE-2026-31488.md) | High | drm/amd/display: Do not skip unrelated mode changes in DSC validation | 7.8 | 0.0014 | | | [CVE-2026-53381](https://patchblox.com/security/data/cve/CVE-2026-53381.md) | High | virtiofs: fix UAF on submount umount | 8.1 | 0.0014 | | | [CVE-2026-43196](https://patchblox.com/security/data/cve/CVE-2026-43196.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: soc: ti: pruss: Fix double free in pruss_clk_mux... | 7.8 | 0.0014 | | | [CVE-2026-43206](https://patchblox.com/security/data/cve/CVE-2026-43206.md) | High | kernel-zfcpdump-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... | 7.8 | 0.0014 | | | [CVE-2026-43207](https://patchblox.com/security/data/cve/CVE-2026-43207.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix error handling in probe func... | 7.8 | 0.0014 | | | [CVE-2026-45996](https://patchblox.com/security/data/cve/CVE-2026-45996.md) | High | spi: imx: fix use-after-free on unbind | 7.8 | 0.0014 | | | [CVE-2026-46036](https://patchblox.com/security/data/cve/CVE-2026-46036.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vfio/cdx: Serialize VFIO_DEVICE_SET_IRQS with a... | 7.8 | 0.0014 | | | [CVE-2026-46197](https://patchblox.com/security/data/cve/CVE-2026-46197.md) | High | drm/amdkfd: validate SVM ioctl nattr against buffer size | 7.8 | 0.0014 | | | [CVE-2026-46206](https://patchblox.com/security/data/cve/CVE-2026-46206.md) | High | batman-adv: reject new tp_meter sessions during teardown | 7.8 | 0.0014 | | | [CVE-2026-45994](https://patchblox.com/security/data/cve/CVE-2026-45994.md) | High | ibmasm: fix OOB reads in command_file_write due to missing size checks | 7.1 | 0.0014 | | | [CVE-2026-53132](https://patchblox.com/security/data/cve/CVE-2026-53132.md) | High | vsock/virtio: fix potential unbounded skb queue | 7.1 | 0.0014 | | | [CVE-2026-43222](https://patchblox.com/security/data/cve/CVE-2026-43222.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: AV1: Fix tile info buffer si... | 7.8 | 0.0014 | | | [CVE-2026-46117](https://patchblox.com/security/data/cve/CVE-2026-46117.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Remove user triggerable WARN_ON() in... | 7.8 | 0.0014 | | | [CVE-2026-46201](https://patchblox.com/security/data/cve/CVE-2026-46201.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix dma-buf attachment leak in xe_gem_pr... | 7.8 | 0.0014 | | | [CVE-2026-46274](https://patchblox.com/security/data/cve/CVE-2026-46274.md) | High | io-wq: check that the predecessor is hashed in io_wq_remove_pending() | 7.8 | 0.0014 | | | [CVE-2026-46193](https://patchblox.com/security/data/cve/CVE-2026-46193.md) | High | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.0 | 0.0014 | | | [CVE-2026-46323](https://patchblox.com/security/data/cve/CVE-2026-46323.md) | High | net: gro: don't merge zcopy skbs | 8.4 | 0.0014 | | | [CVE-2026-46191](https://patchblox.com/security/data/cve/CVE-2026-46191.md) | High | fbcon: Avoid OOB font access if console rotation fails | 7.7 | 0.0014 | | | [CVE-2026-45839](https://patchblox.com/security/data/cve/CVE-2026-45839.md) | High | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | 7.8 | 0.0014 | | | [CVE-2026-53400](https://patchblox.com/security/data/cve/CVE-2026-53400.md) | High | i2c: core: fix adapter registration race | 7.8 | 0.0014 | | | [CVE-2026-46033](https://patchblox.com/security/data/cve/CVE-2026-46033.md) | High | crypto: authencesn - reject short ahash digests during instance creation | 7.3 | 0.0014 | | | [CVE-2026-46080](https://patchblox.com/security/data/cve/CVE-2026-46080.md) | High | ocfs2: split transactions in dio completion to avoid credit exhaustion | 7.1 | 0.0014 | | | [CVE-2026-63937](https://patchblox.com/security/data/cve/CVE-2026-63937.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Use READ_ONCE() when reading entries/i... | 8.8 | 0.0014 | | | [CVE-2026-53005](https://patchblox.com/security/data/cve/CVE-2026-53005.md) | High | af_unix: Drop all SCM attributes for SOCKMAP. | 8.3 | 0.0014 | | | [CVE-2026-46015](https://patchblox.com/security/data/cve/CVE-2026-46015.md) | High | tcp: call sk_data_ready() after listener migration | 8.1 | 0.0014 | | | [CVE-2026-43033](https://patchblox.com/security/data/cve/CVE-2026-43033.md) | High | crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption | 7.8 | 0.0014 | | | [CVE-2026-43236](https://patchblox.com/security/data/cve/CVE-2026-43236.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix use-after-free of drm_crtc_... | 7.8 | 0.0014 | | | [CVE-2026-46219](https://patchblox.com/security/data/cve/CVE-2026-46219.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on unbind The... | 7.8 | 0.0014 | | | [CVE-2026-53148](https://patchblox.com/security/data/cve/CVE-2026-53148.md) | High | thunderbolt: Clamp XDomain response data copy to allocation size | 7.8 | 0.0014 | | | [CVE-2026-46132](https://patchblox.com/security/data/cve/CVE-2026-46132.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.0 | 0.0014 | | | [CVE-2026-31617](https://patchblox.com/security/data/cve/CVE-2026-31617.md) | High | usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() | 7.8 | 0.0013 | | | [CVE-2026-43138](https://patchblox.com/security/data/cve/CVE-2026-43138.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: reset: gpio: suppress bind attributes in sysfs... | 7.8 | 0.0013 | | | [CVE-2026-53356](https://patchblox.com/security/data/cve/CVE-2026-53356.md) | High | drm/i915/gem: Fix phys BO pread/pwrite with offset | 7.8 | 0.0013 | | | [CVE-2026-52953](https://patchblox.com/security/data/cve/CVE-2026-52953.md) | High | iommu/vt-d: Fix oops due to out of scope access | 7.1 | 0.0013 | | | [CVE-2026-52970](https://patchblox.com/security/data/cve/CVE-2026-52970.md) | High | netfilter: nft_ct: fix missing expect put in obj eval | 7.0 | 0.0013 | | | [CVE-2026-43133](https://patchblox.com/security/data/cve/CVE-2026-43133.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emu... | 8.1 | 0.0013 | | | [CVE-2026-46321](https://patchblox.com/security/data/cve/CVE-2026-46321.md) | High | tun: free page on short-frame rejection in tun_xdp_one() | 7.1 | 0.0013 | | | [CVE-2026-46023](https://patchblox.com/security/data/cve/CVE-2026-46023.md) | High | dm mirror: fix integer overflow in create_dirty_log() | 7.0 | 0.0013 | | | [CVE-2026-46199](https://patchblox.com/security/data/cve/CVE-2026-46199.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: Prevent OOB reads when parsing d... | 8.8 | 0.0013 | | | [CVE-2026-46204](https://patchblox.com/security/data/cve/CVE-2026-46204.md) | High | drm/amdgpu/vcn4: Prevent OOB reads when parsing IB | 8.8 | 0.0013 | | | [CVE-2026-46326](https://patchblox.com/security/data/cve/CVE-2026-46326.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: pressure: mprls0025pa: fix spi_transfer str... | 8.4 | 0.0013 | | | [CVE-2026-31697](https://patchblox.com/security/data/cve/CVE-2026-31697.md) | High | crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed | 7.1 | 0.0013 | | | [CVE-2026-31698](https://patchblox.com/security/data/cve/CVE-2026-31698.md) | High | crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed | 7.1 | 0.0013 | | | [CVE-2026-31699](https://patchblox.com/security/data/cve/CVE-2026-31699.md) | High | crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed | 7.1 | 0.0013 | | | [CVE-2026-43427](https://patchblox.com/security/data/cve/CVE-2026-43427.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reordering issue in rea... | 7.1 | 0.0013 | | | [CVE-2026-52942](https://patchblox.com/security/data/cve/CVE-2026-52942.md) | High | netfilter: nf_log: validate MAC header was set before dumping it | 7.1 | 0.0013 | | | [CVE-2026-53387](https://patchblox.com/security/data/cve/CVE-2026-53387.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: light: veml6075: add bounds check to veml60... | 7.1 | 0.0013 | | | [CVE-2026-63971](https://patchblox.com/security/data/cve/CVE-2026-63971.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0013 | | | [CVE-2026-31485](https://patchblox.com/security/data/cve/CVE-2026-31485.md) | High | spi: spi-fsl-lpspi: fix teardown order issue (UAF) | 7.8 | 0.0013 | | | [CVE-2026-31583](https://patchblox.com/security/data/cve/CVE-2026-31583.md) | High | media: em28xx: fix use-after-free in em28xx_v4l2_open() | 7.8 | 0.0013 | | | [CVE-2026-31602](https://patchblox.com/security/data/cve/CVE-2026-31602.md) | High | ALSA: ctxfi: Limit PTP to a single page | 7.8 | 0.0013 | | | [CVE-2026-31627](https://patchblox.com/security/data/cve/CVE-2026-31627.md) | High | i2c: s3c24xx: check the size of the SMBUS message before using it | 7.8 | 0.0013 | | | [CVE-2026-31768](https://patchblox.com/security/data/cve/CVE-2026-31768.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: adc: ti-adc161s626: use DMA-safe memory for... | 7.8 | 0.0013 | | | [CVE-2026-46122](https://patchblox.com/security/data/cve/CVE-2026-46122.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: b43: enforce bounds check on firmware key... | 7.8 | 0.0013 | | | [CVE-2026-46163](https://patchblox.com/security/data/cve/CVE-2026-46163.md) | High | wifi: b43legacy: enforce bounds check on firmware key index in RX path | 7.8 | 0.0013 | | | [CVE-2026-46234](https://patchblox.com/security/data/cve/CVE-2026-46234.md) | High | vsock: fix buffer size clamping order | 7.8 | 0.0013 | | | [CVE-2026-63942](https://patchblox.com/security/data/cve/CVE-2026-63942.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0013 | | | [CVE-2026-43141](https://patchblox.com/security/data/cve/CVE-2026-43141.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix shift-out-of-bounds f... | 7.1 | 0.0013 | | | [CVE-2026-46140](https://patchblox.com/security/data/cve/CVE-2026-46140.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: validate WMT event SKB length... | 7.1 | 0.0013 | | | [CVE-2026-46190](https://patchblox.com/security/data/cve/CVE-2026-46190.md) | High | mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show() | 7.1 | 0.0013 | | | [CVE-2026-46218](https://patchblox.com/security/data/cve/CVE-2026-46218.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Add bounds checking to ib_{get,set}_... | 7.1 | 0.0013 | | | [CVE-2026-53011](https://patchblox.com/security/data/cve/CVE-2026-53011.md) | High | net/sched: taprio: fix use-after-free in advance_sched() on schedule switch | 8.8 | 0.0013 | | | [CVE-2026-53189](https://patchblox.com/security/data/cve/CVE-2026-53189.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.8 | 0.0013 | | | [CVE-2026-53182](https://patchblox.com/security/data/cve/CVE-2026-53182.md) | High | wifi: nl80211: reject oversized EMA RNR lists | 8.1 | 0.0013 | | | [CVE-2026-53209](https://patchblox.com/security/data/cve/CVE-2026-53209.md) | High | Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend | 8.1 | 0.0013 | | | [CVE-2026-43091](https://patchblox.com/security/data/cve/CVE-2026-43091.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: Wait for RCU readers during policy netns e... | 7.8 | 0.0013 | | | [CVE-2026-43324](https://patchblox.com/security/data/cve/CVE-2026-43324.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: USB: dummy-hcd: Fix interrupt synchronization er... | 7.8 | 0.0013 | | | [CVE-2026-46270](https://patchblox.com/security/data/cve/CVE-2026-46270.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: rt9455: Fix use-after-free in pow... | 8.4 | 0.0013 | | | [CVE-2026-31489](https://patchblox.com/security/data/cve/CVE-2026-31489.md) | High | spi: meson-spicc: Fix double-put in remove path | 7.8 | 0.0013 | | | [CVE-2026-31511](https://patchblox.com/security/data/cve/CVE-2026-31511.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix dangling pointer on mgmt_ad... | 7.8 | 0.0013 | | | [CVE-2026-31720](https://patchblox.com/security/data/cve/CVE-2026-31720.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_uac1_legacy: validate control req... | 7.8 | 0.0013 | | | [CVE-2026-31730](https://patchblox.com/security/data/cve/CVE-2026-31730.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: possible double-free of cctx->rem... | 7.8 | 0.0013 | | | [CVE-2026-31747](https://patchblox.com/security/data/cve/CVE-2026-31747.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: comedi: me4000: Fix potential overrun of firmwar... | 7.8 | 0.0013 | | | [CVE-2026-31748](https://patchblox.com/security/data/cve/CVE-2026-31748.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: comedi: me_daq: Fix potential overrun of firmwar... | 7.8 | 0.0013 | | | [CVE-2026-31759](https://patchblox.com/security/data/cve/CVE-2026-31759.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpi_register_inte... | 7.8 | 0.0013 | | | [CVE-2026-43007](https://patchblox.com/security/data/cve/CVE-2026-43007.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Handle DBC deactivation if the owner... | 7.8 | 0.0013 | | | [CVE-2026-43020](https://patchblox.com/security/data/cve/CVE-2026-43020.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate LTK enc_size on load... | 7.8 | 0.0013 | | | [CVE-2026-43256](https://patchblox.com/security/data/cve/CVE-2026-43256.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: vfe: Fix out-of-bounds acces... | 7.8 | 0.0013 | | | [CVE-2026-43307](https://patchblox.com/security/data/cve/CVE-2026-43307.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: adxl380: Avoid reading more entries... | 7.8 | 0.0013 | | | [CVE-2026-43330](https://patchblox.com/security/data/cve/CVE-2026-43330.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.8 | 0.0013 | | | [CVE-2026-46001](https://patchblox.com/security/data/cve/CVE-2026-46001.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (pt5161l) Fix bugs in pt5161l_read_block_... | 7.8 | 0.0013 | | | [CVE-2026-46004](https://patchblox.com/security/data/cve/CVE-2026-46004.md) | High | ALSA: caiaq: Handle probe errors properly | 7.8 | 0.0013 | | | [CVE-2026-46068](https://patchblox.com/security/data/cve/CVE-2026-46068.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix bounce buffer leaks in nx842_cr... | 7.8 | 0.0013 | | | [CVE-2026-46075](https://patchblox.com/security/data/cve/CVE-2026-46075.md) | High | crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path | 7.8 | 0.0013 | | | [CVE-2026-46084](https://patchblox.com/security/data/cve/CVE-2026-46084.md) | High | RDMA/mana_ib: Disable RX steering on RSS QP destroy | 7.8 | 0.0013 | | | [CVE-2026-46086](https://patchblox.com/security/data/cve/CVE-2026-46086.md) | High | net: bridge: use a stable FDB dst snapshot in RCU readers | 7.8 | 0.0013 | | | [CVE-2026-46136](https://patchblox.com/security/data/cve/CVE-2026-46136.md) | High | wifi: mt76: mt7921: fix a potential clc buffer length underflow | 7.8 | 0.0013 | | | [CVE-2026-53004](https://patchblox.com/security/data/cve/CVE-2026-53004.md) | High | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0013 | | | [CVE-2026-53136](https://patchblox.com/security/data/cve/CVE-2026-53136.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: m... | 7.8 | 0.0013 | | | [CVE-2026-53159](https://patchblox.com/security/data/cve/CVE-2026-53159.md) | High | misc: fastrpc: fix DMA address corruption due to find_vma misuse | 7.8 | 0.0013 | | | [CVE-2026-64330](https://patchblox.com/security/data/cve/CVE-2026-64330.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: Validate SVID index in svdm_co... | 7.8 | 0.0013 | | | [CVE-2026-31624](https://patchblox.com/security/data/cve/CVE-2026-31624.md) | High | HID: core: clamp report_size in s32ton() to avoid undefined shift | 7.1 | 0.0013 | | | [CVE-2026-53218](https://patchblox.com/security/data/cve/CVE-2026-53218.md) | High | netfilter: nft_exthdr: fix register tracking for F_PRESENT flag | 7.0 | 0.0013 | | | [CVE-2026-53393](https://patchblox.com/security/data/cve/CVE-2026-53393.md) | High | nfsd: reset write verifier on deferred writeback errors | 7.0 | 0.0013 | | | [CVE-2026-31581](https://patchblox.com/security/data/cve/CVE-2026-31581.md) | High | ALSA: 6fire: fix use-after-free on disconnect | 8.8 | 0.0013 | | | [CVE-2026-31442](https://patchblox.com/security/data/cve/CVE-2026-31442.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible invalid memory acc... | 7.8 | 0.0013 | | | [CVE-2026-31576](https://patchblox.com/security/data/cve/CVE-2026-31576.md) | High | media: hackrf: fix to not free memory after the device is registered in hackrf_probe() | 7.8 | 0.0013 | | | [CVE-2026-31578](https://patchblox.com/security/data/cve/CVE-2026-31578.md) | High | media: as102: fix to not free memory after the device is registered in as102_usb_probe() | 7.8 | 0.0013 | | | [CVE-2026-53063](https://patchblox.com/security/data/cve/CVE-2026-53063.md) | High | dm cache: fix write hang in passthrough mode | 7.1 | 0.0013 | | | [CVE-2026-53149](https://patchblox.com/security/data/cve/CVE-2026-53149.md) | High | thunderbolt: Bound root directory content to block size | 7.1 | 0.0013 | | | [CVE-2026-46158](https://patchblox.com/security/data/cve/CVE-2026-46158.md) | High | mptcp: pm: ADD_ADDR rtx: always decrease sk refcount | 7.0 | 0.0013 | | | [CVE-2026-46170](https://patchblox.com/security/data/cve/CVE-2026-46170.md) | High | mptcp: pm: ADD_ADDR rtx: free sk if last | 7.0 | 0.0013 | | | [CVE-2026-63952](https://patchblox.com/security/data/cve/CVE-2026-63952.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 8.4 | 0.0013 | | | [CVE-2026-23308](https://patchblox.com/security/data/cve/CVE-2026-23308.md) | High | pinctrl: equilibrium: fix warning trace on load | 7.8 | 0.0013 | | | [CVE-2026-31721](https://patchblox.com/security/data/cve/CVE-2026-31721.md) | High | usb: gadget: f_hid: move list and spinlock inits from bind to alloc | 7.8 | 0.0013 | | | [CVE-2026-43353](https://patchblox.com/security/data/cve/CVE-2026-43353.md) | High | i3c: mipi-i3c-hci: Fix race in DMA ring dequeue | 7.8 | 0.0013 | | | [CVE-2026-63945](https://patchblox.com/security/data/cve/CVE-2026-63945.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0013 | | | [CVE-2026-31566](https://patchblox.com/security/data/cve/CVE-2026-31566.md) | High | drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib | 8.8 | 0.0013 | | | [CVE-2026-53230](https://patchblox.com/security/data/cve/CVE-2026-53230.md) | High | net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list | 8.8 | 0.0013 | | | [CVE-2026-64189](https://patchblox.com/security/data/cve/CVE-2026-64189.md) | High | netfilter: ipset: fix race between dump and ip_set_list resize | 8.8 | 0.0013 | | | [CVE-2026-31500](https://patchblox.com/security/data/cve/CVE-2026-31500.md) | High | Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock | 7.8 | 0.0013 | | | [CVE-2026-31587](https://patchblox.com/security/data/cve/CVE-2026-31587.md) | High | ASoC: qcom: q6apm: move component registration to unmanaged version | 7.8 | 0.0013 | | | [CVE-2026-31758](https://patchblox.com/security/data/cve/CVE-2026-31758.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 7.8 | 0.0013 | | | [CVE-2026-43426](https://patchblox.com/security/data/cve/CVE-2026-43426.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: fix use-after-free in ISR du... | 7.8 | 0.0013 | | | [CVE-2026-45936](https://patchblox.com/security/data/cve/CVE-2026-45936.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: goldfish: Fix use-after-free in p... | 7.8 | 0.0013 | | | [CVE-2026-45958](https://patchblox.com/security/data/cve/CVE-2026-45958.md) | High | drm/exynos: vidi: fix to avoid directly dereferencing user pointer | 7.8 | 0.0013 | | | [CVE-2026-46241](https://patchblox.com/security/data/cve/CVE-2026-46241.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on registration... | 7.8 | 0.0013 | | | [CVE-2026-46285](https://patchblox.com/security/data/cve/CVE-2026-46285.md) | High | mtd: docg3: fix use-after-free in docg3_release() | 7.8 | 0.0013 | | | [CVE-2026-53160](https://patchblox.com/security/data/cve/CVE-2026-53160.md) | High | misc: fastrpc: fix use-after-free race in fastrpc_map_create | 7.8 | 0.0013 | | | [CVE-2026-53161](https://patchblox.com/security/data/cve/CVE-2026-53161.md) | High | misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context | 7.8 | 0.0013 | | | [CVE-2026-64221](https://patchblox.com/security/data/cve/CVE-2026-64221.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup... | 7.8 | 0.0013 | | | [CVE-2026-31778](https://patchblox.com/security/data/cve/CVE-2026-31778.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix stack out-of-bounds read in ini... | 7.1 | 0.0013 | | | [CVE-2026-43241](https://patchblox.com/security/data/cve/CVE-2026-43241.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ntb: ntb_hw_switchtec: Fix array-index-out-of-bo... | 7.1 | 0.0013 | | | [CVE-2026-46130](https://patchblox.com/security/data/cve/CVE-2026-46130.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm-verity-fec: fix reading parity bytes split ac... | 7.1 | 0.0013 | | | [CVE-2026-52915](https://patchblox.com/security/data/cve/CVE-2026-52915.md) | High | netfilter: ip6t_hbh: reject oversized option lists | 7.1 | 0.0013 | | | [CVE-2026-53138](https://patchblox.com/security/data/cve/CVE-2026-53138.md) | High | drm/amd/display: Bound VBIOS record-chain walk loops | 7.1 | 0.0013 | | | [CVE-2026-53205](https://patchblox.com/security/data/cve/CVE-2026-53205.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Add bounds checks for firmware log i... | 7.1 | 0.0013 | | | [CVE-2026-63949](https://patchblox.com/security/data/cve/CVE-2026-63949.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-l... | 7.1 | 0.0013 | | | [CVE-2026-53236](https://patchblox.com/security/data/cve/CVE-2026-53236.md) | High | tcp: restrict SO_ATTACH_FILTER to priv users | 8.8 | 0.0013 | | | [CVE-2026-31582](https://patchblox.com/security/data/cve/CVE-2026-31582.md) | High | hwmon: (powerz) Fix use-after-free on USB disconnect | 7.8 | 0.0013 | | | [CVE-2026-45938](https://patchblox.com/security/data/cve/CVE-2026-45938.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_lbc: Fix use-after-free in... | 7.8 | 0.0013 | | | [CVE-2026-46011](https://patchblox.com/security/data/cve/CVE-2026-46011.md) | High | media: mtk-jpeg: fix use-after-free in release path due to uncancelled work | 7.8 | 0.0013 | | | [CVE-2026-46121](https://patchblox.com/security/data/cve/CVE-2026-46121.md) | High | mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock | 7.8 | 0.0013 | | | [CVE-2026-46246](https://patchblox.com/security/data/cve/CVE-2026-46246.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: power: supply: pm8916_lbc: Fix use-after-free fo... | 7.8 | 0.0013 | | | [CVE-2026-46324](https://patchblox.com/security/data/cve/CVE-2026-46324.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: use list_del_rcu for netli... | 7.8 | 0.0013 | | | [CVE-2026-31619](https://patchblox.com/security/data/cve/CVE-2026-31619.md) | High | ALSA: fireworks: bound device-supplied status before string array lookup | 7.3 | 0.0013 | | | [CVE-2026-31616](https://patchblox.com/security/data/cve/CVE-2026-31616.md) | High | usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() | 7.1 | 0.0013 | | | [CVE-2026-31623](https://patchblox.com/security/data/cve/CVE-2026-31623.md) | High | net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() | 7.1 | 0.0013 | | | [CVE-2026-53150](https://patchblox.com/security/data/cve/CVE-2026-53150.md) | High | thunderbolt: Reject zero-length property entries in validator | 7.0 | 0.0013 | | | [CVE-2026-53181](https://patchblox.com/security/data/cve/CVE-2026-53181.md) | High | vsock/vmci: fix sk_ack_backlog leak on failed handshake | 7.0 | 0.0013 | | | [CVE-2026-53208](https://patchblox.com/security/data/cve/CVE-2026-53208.md) | High | Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig | 7.0 | 0.0013 | | | [CVE-2026-43440](https://patchblox.com/security/data/cve/CVE-2026-43440.md) | High | kernel-docs: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues we... | 7.8 | 0.0012 | | | [CVE-2026-45944](https://patchblox.com/security/data/cve/CVE-2026-45944.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing dow... | 7.5 | 0.0012 | | | [CVE-2026-43370](https://patchblox.com/security/data/cve/CVE-2026-43370.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free race in VM acquire... | 8.8 | 0.0012 | | | [CVE-2026-46230](https://patchblox.com/security/data/cve/CVE-2026-46230.md) | High | drm/amdgpu/vcn3: Prevent OOB reads when parsing dec msg | 8.8 | 0.0012 | | | [CVE-2026-43077](https://patchblox.com/security/data/cve/CVE-2026-43077.md) | High | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | 8.1 | 0.0012 | | | [CVE-2026-31483](https://patchblox.com/security/data/cve/CVE-2026-31483.md) | High | s390/syscalls: Add spectre boundary for syscall dispatch table | 7.8 | 0.0012 | | | [CVE-2026-43120](https://patchblox.com/security/data/cve/CVE-2026-43120.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix double free related to rereg_use... | 7.8 | 0.0012 | | | [CVE-2026-43279](https://patchblox.com/security/data/cve/CVE-2026-43279.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes... | 7.8 | 0.0012 | | | [CVE-2026-46009](https://patchblox.com/security/data/cve/CVE-2026-46009.md) | High | PCI: endpoint: pci-epf-ntb: Remove duplicate resource teardown | 7.5 | 0.0012 | | | [CVE-2026-31512](https://patchblox.com/security/data/cve/CVE-2026-31512.md) | High | Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() | 7.1 | 0.0012 | | | [CVE-2026-43052](https://patchblox.com/security/data/cve/CVE-2026-43052.md) | High | wifi: mac80211: check tdls flag in ieee80211_tdls_oper | 7.1 | 0.0012 | | | [CVE-2026-53064](https://patchblox.com/security/data/cve/CVE-2026-53064.md) | High | dm cache: fix null-deref with concurrent writes in passthrough mode | 7.1 | 0.0012 | | | [CVE-2026-31498](https://patchblox.com/security/data/cve/CVE-2026-31498.md) | High | Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop | 7.0 | 0.0012 | | | [CVE-2026-31593](https://patchblox.com/security/data/cve/CVE-2026-31593.md) | High | KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU | 8.8 | 0.0012 | | | [CVE-2026-31482](https://patchblox.com/security/data/cve/CVE-2026-31482.md) | High | s390/entry: Scrub r12 register on kernel entry | 7.1 | 0.0012 | | | [CVE-2026-31591](https://patchblox.com/security/data/cve/CVE-2026-31591.md) | High | KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish | 7.0 | 0.0012 | | | [CVE-2026-43306](https://patchblox.com/security/data/cve/CVE-2026-43306.md) | High | bpf: crypto: Use the correct destructor kfunc type | 7.0 | 0.0012 | | | [CVE-2026-43047](https://patchblox.com/security/data/cve/CVE-2026-43047.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: Check to ensure report response... | 7.8 | 0.0012 | | | [CVE-2026-43476](https://patchblox.com/security/data/cve/CVE-2026-43476.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sps30_i2c: fix buffer size in sps... | 7.8 | 0.0012 | | | [CVE-2026-46267](https://patchblox.com/security/data/cve/CVE-2026-46267.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nfc: hci: shdlc: Stop timers and work before fre... | 7.8 | 0.0012 | | | [CVE-2026-52927](https://patchblox.com/security/data/cve/CVE-2026-52927.md) | High | netfilter: ebtables: fix OOB read in compat_mtw_from_user | 7.8 | 0.0012 | | | [CVE-2026-53267](https://patchblox.com/security/data/cve/CVE-2026-53267.md) | High | netfilter: nft_ct: bail out on template ct in get eval | 7.8 | 0.0012 | | | [CVE-2026-64242](https://patchblox.com/security/data/cve/CVE-2026-64242.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe e... | 7.8 | 0.0012 | | | [CVE-2026-43058](https://patchblox.com/security/data/cve/CVE-2026-43058.md) | High | media: vidtv: fix pass-by-value structs causing MSAN warnings | 7.1 | 0.0012 | | | [CVE-2026-64174](https://patchblox.com/security/data/cve/CVE-2026-64174.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211_me... | 8.8 | 0.0012 | | | [CVE-2026-31776](https://patchblox.com/security/data/cve/CVE-2026-31776.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix missing SPDIFI1 index handling... | 7.8 | 0.0012 | | | [CVE-2026-43044](https://patchblox.com/security/data/cve/CVE-2026-43044.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: caam - fix DMA corruption on long hmac k... | 7.8 | 0.0012 | | | [CVE-2026-46263](https://patchblox.com/security/data/cve/CVE-2026-46263.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds stream encode... | 7.8 | 0.0012 | | | [CVE-2026-43481](https://patchblox.com/security/data/cve/CVE-2026-43481.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net-shapers: don't free reply skb after genlmsg_... | 7.8 | 0.0012 | | | [CVE-2026-43281](https://patchblox.com/security/data/cve/CVE-2026-43281.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox... | 7.1 | 0.0012 | | | [CVE-2026-46226](https://patchblox.com/security/data/cve/CVE-2026-46226.md) | High | spi: fsl: fix controller deregistration | 7.1 | 0.0012 | | | [CVE-2026-46231](https://patchblox.com/security/data/cve/CVE-2026-46231.md) | High | batman-adv: bla: put backbone reference on failed claim hash insert | 7.1 | 0.0012 | | | [CVE-2026-46233](https://patchblox.com/security/data/cve/CVE-2026-46233.md) | High | batman-adv: bla: only purge non-released claims | 7.1 | 0.0012 | | | [CVE-2026-53255](https://patchblox.com/security/data/cve/CVE-2026-53255.md) | High | Bluetooth: MGMT: validate advertising TLV before type checks | 7.1 | 0.0012 | | | [CVE-2026-43276](https://patchblox.com/security/data/cve/CVE-2026-43276.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix double destroy_workqueue on servi... | 8.4 | 0.0012 | | | [CVE-2026-43056](https://patchblox.com/security/data/cve/CVE-2026-43056.md) | High | kernel-default-base: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues: The following security issues we... | 8.8 | 0.0012 | | | [CVE-2026-43134](https://patchblox.com/security/data/cve/CVE-2026-43134.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix missing key size check for... | 8.1 | 0.0012 | | | [CVE-2026-43278](https://patchblox.com/security/data/cve/CVE-2026-43278.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last c... | 7.8 | 0.0012 | | | [CVE-2026-46301](https://patchblox.com/security/data/cve/CVE-2026-46301.md) | High | spi: topcliff-pch: fix use-after-free on unbind | 7.8 | 0.0012 | | | [CVE-2026-64188](https://patchblox.com/security/data/cve/CVE-2026-64188.md) | High | net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() | 7.8 | 0.0012 | | | [CVE-2026-64034](https://patchblox.com/security/data/cve/CVE-2026-64034.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: K... | 9.3 | 0.0012 | | | [CVE-2026-53073](https://patchblox.com/security/data/cve/CVE-2026-53073.md) | High | Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error | 8.8 | 0.0011 | | | [CVE-2026-52926](https://patchblox.com/security/data/cve/CVE-2026-52926.md) | High | batman-adv: clear current gateway during teardown | 7.8 | 0.0011 | | | [CVE-2026-52959](https://patchblox.com/security/data/cve/CVE-2026-52959.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Do not use host-controlled page... | 7.8 | 0.0011 | | | [CVE-2026-53185](https://patchblox.com/security/data/cve/CVE-2026-53185.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: k... | 8.8 | 0.0011 | | | [CVE-2026-53277](https://patchblox.com/security/data/cve/CVE-2026-53277.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Take the SRCU lock for page table wal... | 8.8 | 0.0011 | | | [CVE-2026-43211](https://patchblox.com/security/data/cve/CVE-2026-43211.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: PCI: Fix pci_slot_trylock() error handling Comm... | 7.8 | 0.0011 | | | [CVE-2026-43214](https://patchblox.com/security/data/cve/CVE-2026-43214.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Add SRCU protection for reading PDPTRs... | 7.8 | 0.0011 | | | [CVE-2026-53250](https://patchblox.com/security/data/cve/CVE-2026-53250.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xsk: cache csum_start/csum_offset to fix TOCTOU... | 7.8 | 0.0011 | | | [CVE-2026-31474](https://patchblox.com/security/data/cve/CVE-2026-31474.md) | High | can: isotp: fix tx.buf use-after-free in isotp_sendmsg() | 7.8 | 0.0010 | | | [CVE-2026-31761](https://patchblox.com/security/data/cve/CVE-2026-31761.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Move iio_device_register() t... | 7.8 | 0.0010 | | | [CVE-2026-53239](https://patchblox.com/security/data/cve/CVE-2026-53239.md) | High | xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx() | 8.8 | 0.0010 | | | [CVE-2026-63802](https://patchblox.com/security/data/cve/CVE-2026-63802.md) | High | blk-cgroup: fix UAF in __blkcg_rstat_flush() | 8.3 | 0.0010 | | | [CVE-2026-53242](https://patchblox.com/security/data/cve/CVE-2026-53242.md) | High | ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams | 7.8 | 0.0010 | | | [CVE-2026-52988](https://patchblox.com/security/data/cve/CVE-2026-52988.md) | High | netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase | 7.1 | 0.0010 | | | [CVE-2026-31548](https://patchblox.com/security/data/cve/CVE-2026-31548.md) | High | wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down | 7.8 | 0.0010 | | | [CVE-2026-43019](https://patchblox.com/security/data/cve/CVE-2026-43019.md) | High | Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync | 7.8 | 0.0010 | | | [CVE-2026-43180](https://patchblox.com/security/data/cve/CVE-2026-43180.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: kaweth: remove TX queue manipulation i... | 7.8 | 0.0010 | | | [CVE-2026-46157](https://patchblox.com/security/data/cve/CVE-2026-46157.md) | High | ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger | 7.8 | 0.0010 | | | [CVE-2026-43111](https://patchblox.com/security/data/cve/CVE-2026-43111.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: roccat: fix use-after-free in roccat_report... | 7.8 | 0.0010 | | | [CVE-2026-53265](https://patchblox.com/security/data/cve/CVE-2026-53265.md) | High | dm cache policy smq: check allocation under invalidate lock | 7.8 | 0.0010 | | | [CVE-2026-53192](https://patchblox.com/security/data/cve/CVE-2026-53192.md) | High | ALSA: timer: Fix UAF at snd_timer_user_params() | 8.8 | 0.0010 | | | [CVE-2026-31473](https://patchblox.com/security/data/cve/CVE-2026-31473.md) | High | media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex | 7.8 | 0.0010 | | | [CVE-2026-43023](https://patchblox.com/security/data/cve/CVE-2026-43023.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: fix race conditions in sco_sock_c... | 7.8 | 0.0010 | | | [CVE-2026-46058](https://patchblox.com/security/data/cve/CVE-2026-46058.md) | High | media: amphion: Fix race between m2m job_abort and device_run | 7.8 | 0.0010 | | | [CVE-2026-31667](https://patchblox.com/security/data/cve/CVE-2026-31667.md) | High | Input: uinput - fix circular locking dependency with ff-core | 7.8 | 0.0010 | | | [CVE-2026-46327](https://patchblox.com/security/data/cve/CVE-2026-46327.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dm_suspended_md The f... | 7.8 | 0.0010 | | | [CVE-2026-31656](https://patchblox.com/security/data/cve/CVE-2026-31656.md) | High | drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat | 8.8 | 0.0009 | | | [CVE-2026-31523](https://patchblox.com/security/data/cve/CVE-2026-31523.md) | High | nvme-pci: ensure we're polling a polled queue | 7.1 | 0.0009 | | | [CVE-2026-31430](https://patchblox.com/security/data/cve/CVE-2026-31430.md) | High | X.509: Fix out-of-bounds access when parsing extensions | 7.8 | 0.0008 | | | [CVE-2026-64158](https://patchblox.com/security/data/cve/CVE-2026-64158.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix write streaming disablement if fd ope... | 7.3 | n/a | | | [CVE-2023-2058](https://patchblox.com/security/data/cve/CVE-2023-2058.md) | Routine | kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues The following security issues wer... | n/a | 0.0061 | | | [CVE-2026-63895](https://patchblox.com/security/data/cve/CVE-2026-63895.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: copy only received bytes on s... | n/a | 0.0026 | | | [CVE-2026-63892](https://patchblox.com/security/data/cve/CVE-2026-63892.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Reject dir_len < 4 to pre... | 5.5 | 0.0023 | | | [CVE-2026-23036](https://patchblox.com/security/data/cve/CVE-2026-23036.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before iget_failed() in btrf... | n/a | 0.0022 | | | [CVE-2025-68204](https://patchblox.com/security/data/cve/CVE-2025-68204.md) | Routine | pmdomain: arm: scmi: Fix genpd leak on provider registration failure | 6.2 | 0.0021 | | | [CVE-2025-38238](https://patchblox.com/security/data/cve/CVE-2025-38238.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to receive various security bugfixes. The following security bug... | 5.5 | 0.0021 | | | [CVE-2026-23052](https://patchblox.com/security/data/cve/CVE-2026-23052.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: ftrace: Do not over-allocate ftrace memory The... | n/a | 0.0020 | | | [CVE-2025-40163](https://patchblox.com/security/data/cve/CVE-2025-40163.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were... | n/a | 0.0020 | | | [CVE-2026-45871](https://patchblox.com/security/data/cve/CVE-2026-45871.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved: tpm: st33zp24: Fix missing cleanup on get_burstc... | 5.5 | 0.0019 | | | [CVE-2026-64465](https://patchblox.com/security/data/cve/CVE-2026-64465.md) | Routine | usb: xhci: Fix sleep in atomic context in xhci_free_streams() | 5.5 | 0.0018 | | | [CVE-2026-23276](https://patchblox.com/security/data/cve/CVE-2026-23276.md) | Routine | net: add xmit recursion limit to tunnel xmit functions | 5.5 | 0.0018 | | | [CVE-2026-45877](https://patchblox.com/security/data/cve/CVE-2026-45877.md) | Routine | HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients | 5.5 | 0.0018 | | | [CVE-2026-46018](https://patchblox.com/security/data/cve/CVE-2026-46018.md) | Routine | ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES | 5.5 | 0.0018 | | | [CVE-2025-38469](https://patchblox.com/security/data/cve/CVE-2025-38469.md) | Routine | kernel-64kb: The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues we... | 5.5 | 0.0018 | | | [CVE-2026-53047](https://patchblox.com/security/data/cve/CVE-2026-53047.md) | Routine | efi/capsule-loader: fix incorrect sizeof in phys array reallocation | 5.5 | 0.0018 | | Showing 500 of 891 CVEs; the web page lists them all. --- Data as of 2026-11-10T07:50:38Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.