# SUSE-SU-2026:23902-1: Security update for 10 packages SUSE-SU-2026:23902-1, released September 22, 2026, fixes 885 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent. - Web page: https://patchblox.com/security/fix/linux/suse-su-2026-23902-1 - Platform: Linux - Released: Sep 22, 2026 - Priority: Urgent (Closes CVE-2026-72339, rated Critical) - CVEs: 885, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:23902-1 ## Applies to | Product | Release | Fixed in | |---|---|---| | [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 16.0 | 6.12.0-160000.38.1 | | [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 16.0 | 6.12.0-160000.38.1 | | [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 16.0 | 6.12.0-160000.38.1 | | [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 16.0 | 6.12.0-160000.38.1.160000.2.23 | | [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 16.0 | 6.12.0-160000.38.1 | | [kernel-kvmsmall](https://patchblox.com/security/data/product/linux/kernel-kvmsmall.md) | sles 16.0 | 6.12.0-160000.38.1 | | [kernel-obs-qa](https://patchblox.com/security/data/product/linux/kernel-obs-qa.md) | sles 16.0 | 6.12.0-160000.38.1 | | [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 16.0 | 6.12.0-160000.38.1 | | [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 16.0 | 6.12.0-160000.38.1 | | [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 16.0 | 6.12.0-160000.38.1 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2026-72084](https://patchblox.com/security/data/cve/CVE-2026-72084.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: target: Bound PR-OUT TransportID parsing t... | 9.8 | 0.0075 | | | [CVE-2026-72339](https://patchblox.com/security/data/cve/CVE-2026-72339.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix off-by-one in BD ring consumption on b... | 9.8 | 0.0075 | | | [CVE-2026-72466](https://patchblox.com/security/data/cve/CVE-2026-72466.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Fix bcall rep leak and unbounded peek... | 9.8 | 0.0074 | | | [CVE-2026-80609](https://patchblox.com/security/data/cve/CVE-2026-80609.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: qede: fix out-of-bounds check for cqe->len_list[... | 9.8 | 0.0074 | | | [CVE-2026-72296](https://patchblox.com/security/data/cve/CVE-2026-72296.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: ife: require ETH_HLEN to be pullable in ife... | 9.1 | 0.0074 | | | [CVE-2026-72234](https://patchblox.com/security/data/cve/CVE-2026-72234.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: access unicast_ttvn skb->data only a... | 9.8 | 0.0073 | | | [CVE-2026-72069](https://patchblox.com/security/data/cve/CVE-2026-72069.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: locking/rt: Fix the incorrect RCU protection in... | 9.8 | 0.0073 | | | [CVE-2026-72323](https://patchblox.com/security/data/cve/CVE-2026-72323.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: igmp: Fix potential UAF in igmp_gq_start_t... | 9.8 | 0.0072 | | | [CVE-2026-72473](https://patchblox.com/security/data/cve/CVE-2026-72473.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decouple req recycling from RPC comple... | 9.8 | 0.0072 | | | [CVE-2026-72020](https://patchblox.com/security/data/cve/CVE-2026-72020.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipvs: reset full ip_vs_seq structs in ip_vs_conn... | 9.8 | 0.0071 | | | [CVE-2026-72251](https://patchblox.com/security/data/cve/CVE-2026-72251.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat_sip: reload possible stale dat... | 9.8 | 0.0071 | | | [CVE-2026-72137](https://patchblox.com/security/data/cve/CVE-2026-72137.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: nat_keepalive: avoid double free on send e... | 9.8 | 0.0071 | | | [CVE-2026-72399](https://patchblox.com/security/data/cve/CVE-2026-72399.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: enetc: check the number of BDs needed for x... | 9.8 | 0.0068 | | | [CVE-2026-72366](https://patchblox.com/security/data/cve/CVE-2026-72366.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle as... | 9.8 | 0.0066 | | | [CVE-2026-72317](https://patchblox.com/security/data/cve/CVE-2026-72317.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: pin upper rpc_clnt across the TLS connec... | 9.8 | 0.0064 | | | [CVE-2026-72046](https://patchblox.com/security/data/cve/CVE-2026-72046.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: gve: fix header buffer corruption with header-sp... | 9.8 | 0.0064 | | | [CVE-2026-72217](https://patchblox.com/security/data/cve/CVE-2026-72217.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdr_buf_to_bvec() stores bef... | 9.8 | 0.0064 | | | [CVE-2026-72221](https://patchblox.com/security/data/cve/CVE-2026-72221.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: wait for in-flight TLS handshake callbac... | 9.8 | 0.0064 | | | [CVE-2026-72222](https://patchblox.com/security/data/cve/CVE-2026-72222.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sunrpc: pin svc_xprt across the asynchronous TLS... | 9.8 | 0.0064 | | | [CVE-2026-80603](https://patchblox.com/security/data/cve/CVE-2026-80603.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_irc: fix parse_dcc() off... | 9.1 | 0.0060 | | | [CVE-2026-72421](https://patchblox.com/security/data/cve/CVE-2026-72421.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/mai... | 10.0 | 0.0057 | | | [CVE-2026-64541](https://patchblox.com/security/data/cve/CVE-2026-64541.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF in smc_cdc_rx_handler() by pinn... | 9.8 | 0.0057 | | | [CVE-2026-64319](https://patchblox.com/security/data/cve/CVE-2026-64319.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: validate reply message payload bound... | 9.1 | 0.0056 | | | [CVE-2026-64056](https://patchblox.com/security/data/cve/CVE-2026-64056.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Make RX SKB per-port Th... | 9.8 | 0.0055 | | | [CVE-2026-64089](https://patchblox.com/security/data/cve/CVE-2026-64089.md) | Urgent | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0055 | | | [CVE-2026-64125](https://patchblox.com/security/data/cve/CVE-2026-64125.md) | Urgent | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0055 | | | [CVE-2026-64535](https://patchblox.com/security/data/cve/CVE-2026-64535.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: Fix potential UAF when ddgst mismatch... | 9.8 | 0.0055 | | | [CVE-2026-74394](https://patchblox.com/security/data/cve/CVE-2026-74394.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: fix integer overflow in immediate dat... | 9.8 | 0.0054 | | | [CVE-2026-68127](https://patchblox.com/security/data/cve/CVE-2026-68127.md) | Urgent | ila: reload IPv6 header after pskb_may_pull in checksum adjust | 9.8 | 0.0054 | | | [CVE-2026-68144](https://patchblox.com/security/data/cve/CVE-2026-68144.md) | Urgent | phonet: pep: fix use-after-free in pep_get_sb() | 9.8 | 0.0054 | | | [CVE-2026-72494](https://patchblox.com/security/data/cve/CVE-2026-72494.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace waitqueue and flag with comp... | 9.8 | 0.0053 | | | [CVE-2026-80557](https://patchblox.com/security/data/cve/CVE-2026-80557.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decode_watchers() via m... | 9.8 | 0.0053 | | | [CVE-2026-63984](https://patchblox.com/security/data/cve/CVE-2026-63984.md) | Urgent | kernel-uek-debug: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | | | [CVE-2026-64047](https://patchblox.com/security/data/cve/CVE-2026-64047.md) | Urgent | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 9.8 | 0.0051 | | | [CVE-2026-64055](https://patchblox.com/security/data/cve/CVE-2026-64055.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Carry over frag counter... | 9.8 | 0.0051 | | | [CVE-2026-74406](https://patchblox.com/security/data/cve/CVE-2026-74406.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix potential null-ptr-deref in vxlan_gro... | 9.8 | 0.0051 | | | [CVE-2026-64551](https://patchblox.com/security/data/cve/CVE-2026-64551.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: sctp: validate STALE_COOKIE cause length before... | 9.1 | 0.0051 | | | [CVE-2026-74255](https://patchblox.com/security/data/cve/CVE-2026-74255.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: fix UAF in tipc_l2_send_msg() Syzbot repo... | 9.8 | 0.0050 | | | [CVE-2026-80681](https://patchblox.com/security/data/cve/CVE-2026-80681.md) | Urgent | vxlan: re-fetch eth header after route_shortcircuit() | 9.8 | 0.0050 | | | [CVE-2026-64000](https://patchblox.com/security/data/cve/CVE-2026-64000.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix potential OOB access in supervisio... | 9.8 | 0.0049 | | | [CVE-2026-64033](https://patchblox.com/security/data/cve/CVE-2026-64033.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Fix use-after-free in path file creat... | 9.8 | 0.0049 | | | [CVE-2026-74345](https://patchblox.com/security/data/cve/CVE-2026-74345.md) | Urgent | RDMA/siw: Fix endpoint/socket association handling | 9.8 | 0.0048 | | | [CVE-2026-74545](https://patchblox.com/security/data/cve/CVE-2026-74545.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: rtase: fix double free of multi-frag skb on DMA... | 9.8 | 0.0046 | | | [CVE-2026-64232](https://patchblox.com/security/data/cve/CVE-2026-64232.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_in... | 9.8 | 0.0043 | | | [CVE-2026-53309](https://patchblox.com/security/data/cve/CVE-2026-53309.md) | Urgent | ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison | 9.8 | 0.0040 | | | [CVE-2026-80721](https://patchblox.com/security/data/cve/CVE-2026-80721.md) | Urgent | Bluetooth: ISO: ensure no dangling hcon references in iso_conn | 9.8 | 0.0038 | | | [CVE-2026-74665](https://patchblox.com/security/data/cve/CVE-2026-74665.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: net: fix skb length accounting after generic XDP... | 9.1 | 0.0037 | | | [CVE-2026-68121](https://patchblox.com/security/data/cve/CVE-2026-68121.md) | Urgent | pppoe: reload header pointer after dev_hard_header() | 9.8 | 0.0037 | | | [CVE-2026-64534](https://patchblox.com/security/data/cve/CVE-2026-64534.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: check INIT_FAILED before nvmet_req_un... | 9.8 | 0.0032 | | | [CVE-2026-68354](https://patchblox.com/security/data/cve/CVE-2026-68354.md) | Urgent | firewire: net: Fix fragmented datagram reassembly | 9.8 | 0.0028 | | | [CVE-2026-68198](https://patchblox.com/security/data/cve/CVE-2026-68198.md) | Urgent | wifi: ath6kl: fix use-after-free in aggr_reset_state() | 9.8 | 0.0028 | | | [CVE-2026-68402](https://patchblox.com/security/data/cve/CVE-2026-68402.md) | Urgent | wifi: cfg80211: bound element ID read when checking non-inheritance | 9.8 | 0.0027 | | | [CVE-2026-68360](https://patchblox.com/security/data/cve/CVE-2026-68360.md) | Urgent | hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop | 9.8 | 0.0024 | | | [CVE-2026-68359](https://patchblox.com/security/data/cve/CVE-2026-68359.md) | Urgent | hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop | 9.8 | 0.0023 | | | [CVE-2026-68212](https://patchblox.com/security/data/cve/CVE-2026-68212.md) | Urgent | media: saa7134: Fix a possible memory leak in saa7134_video_init1 | 9.8 | 0.0022 | | | [CVE-2026-68214](https://patchblox.com/security/data/cve/CVE-2026-68214.md) | Urgent | media: rtl2832: fix use-after-free in rtl2832_remove() | 9.8 | 0.0022 | | | [CVE-2026-68218](https://patchblox.com/security/data/cve/CVE-2026-68218.md) | Urgent | media: pci: dm1105: Free allocated workqueue | 9.8 | 0.0022 | | | [CVE-2026-68180](https://patchblox.com/security/data/cve/CVE-2026-68180.md) | Urgent | intel_th: fix MSC output device reference leak | 9.8 | 0.0022 | | | [CVE-2026-68395](https://patchblox.com/security/data/cve/CVE-2026-68395.md) | Urgent | ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered | 9.8 | 0.0022 | | | [CVE-2026-68207](https://patchblox.com/security/data/cve/CVE-2026-68207.md) | Urgent | media: ti: vpe: unwind v4l2 device registration on probe error | 9.8 | 0.0022 | | | [CVE-2026-68166](https://patchblox.com/security/data/cve/CVE-2026-68166.md) | Urgent | userfaultfd: prevent registration of special VMAs | 9.8 | 0.0021 | | | [CVE-2026-68349](https://patchblox.com/security/data/cve/CVE-2026-68349.md) | Urgent | wifi: carl9170: fix buffer overflow in rx_stream failover path | 9.8 | 0.0020 | | | [CVE-2026-72288](https://patchblox.com/security/data/cve/CVE-2026-72288.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Handle race between interrupt... | 9.3 | 0.0019 | | | [CVE-2026-64565](https://patchblox.com/security/data/cve/CVE-2026-64565.md) | Urgent | Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() | 9.8 | 0.0018 | | | [CVE-2026-68132](https://patchblox.com/security/data/cve/CVE-2026-68132.md) | Urgent | super: fix emergency thaw deadlock on frozen block devices | 9.8 | 0.0018 | | | [CVE-2026-68325](https://patchblox.com/security/data/cve/CVE-2026-68325.md) | Urgent | iommu/amd: Bound the early ACPI HID map | 9.8 | 0.0018 | | | [CVE-2026-68406](https://patchblox.com/security/data/cve/CVE-2026-68406.md) | Urgent | wifi: cfg80211: validate PMSR FTM preamble range | 9.8 | 0.0018 | | | [CVE-2026-68357](https://patchblox.com/security/data/cve/CVE-2026-68357.md) | Urgent | watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() | 9.8 | 0.0018 | | | [CVE-2026-68210](https://patchblox.com/security/data/cve/CVE-2026-68210.md) | Urgent | media: stm32: dcmi: unregister notifier on probe failure | 9.8 | 0.0018 | | | [CVE-2026-68310](https://patchblox.com/security/data/cve/CVE-2026-68310.md) | Urgent | wifi: mt76: mt7915: guard HE capability lookups | 9.8 | 0.0017 | | | [CVE-2026-68407](https://patchblox.com/security/data/cve/CVE-2026-68407.md) | Urgent | wifi: nl80211: free RNR data on MBSSID mismatch | 9.8 | 0.0017 | | | [CVE-2026-68399](https://patchblox.com/security/data/cve/CVE-2026-68399.md) | Urgent | bpf: Fix UAF in sock clone early bailouts | 9.8 | 0.0017 | | | [CVE-2026-63828](https://patchblox.com/security/data/cve/CVE-2026-63828.md) | Urgent | apparmor: mediate the implicit connect of TCP fast open sendmsg | 9.8 | 0.0017 | | | [CVE-2026-64562](https://patchblox.com/security/data/cve/CVE-2026-64562.md) | Urgent | KVM: nVMX: Hide shadow VMCS right after VMCLEAR | 9.8 | 0.0016 | | | [CVE-2026-68340](https://patchblox.com/security/data/cve/CVE-2026-68340.md) | Urgent | hwmon: occ: validate poll response sensor blocks | 9.8 | 0.0015 | | | [CVE-2026-52991](https://patchblox.com/security/data/cve/CVE-2026-52991.md) | Urgent | sched/psi: fix race between file release and pressure write | 9.8 | 0.0015 | | | [CVE-2026-74712](https://patchblox.com/security/data/cve/CVE-2026-74712.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create_direct_ke... | 9.3 | 0.0014 | | | [CVE-2026-80693](https://patchblox.com/security/data/cve/CVE-2026-80693.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: idpf: bound interrupt-vector register fill to th... | 9.3 | 0.0014 | | | [CVE-2026-74517](https://patchblox.com/security/data/cve/CVE-2026-74517.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Cancel delayed I/O APIC EOI handling b... | 9.3 | 0.0014 | | | [CVE-2026-68391](https://patchblox.com/security/data/cve/CVE-2026-68391.md) | Urgent | Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds | 9.8 | 0.0013 | | | [CVE-2026-68377](https://patchblox.com/security/data/cve/CVE-2026-68377.md) | Urgent | net/sched: act_tunnel_key: Defer dst_release to RCU callback | 9.8 | 0.0013 | | | [CVE-2026-64017](https://patchblox.com/security/data/cve/CVE-2026-64017.md) | Urgent | blk-mq: pop cached request if it is usable | 9.8 | 0.0013 | | | [CVE-2026-68153](https://patchblox.com/security/data/cve/CVE-2026-68153.md) | Urgent | libceph: remove debugfs files before client teardown | 9.8 | 0.0013 | | | [CVE-2026-68236](https://patchblox.com/security/data/cve/CVE-2026-68236.md) | Urgent | drm/amd/display: set new_stream to NULL after release | 9.8 | 0.0013 | | | [CVE-2026-68142](https://patchblox.com/security/data/cve/CVE-2026-68142.md) | Urgent | geneve: require CAP_NET_ADMIN in the device netns for changelink | 9.8 | 0.0012 | | | [CVE-2026-63999](https://patchblox.com/security/data/cve/CVE-2026-63999.md) | Urgent | ethtool: rss: fix indir_table and hkey leak on get_rxfh failure | 9.8 | 0.0012 | | | [CVE-2026-53077](https://patchblox.com/security/data/cve/CVE-2026-53077.md) | Urgent | net/rds: Restrict use of RDS/IB to the initial network namespace | 9.8 | 0.0012 | | | [CVE-2026-68143](https://patchblox.com/security/data/cve/CVE-2026-68143.md) | Urgent | net: slip: serialize receive against buffer reallocation | 9.8 | 0.0011 | | | [CVE-2026-52929](https://patchblox.com/security/data/cve/CVE-2026-52929.md) | High | sctp: stream: fully roll back denied add-stream state | 9.8 | 0.0087 | | | [CVE-2026-72398](https://patchblox.com/security/data/cve/CVE-2026-72398.md) | High | sctp: add INIT verification after cookie unpacking | 9.8 | 0.0080 | | | [CVE-2026-64320](https://patchblox.com/security/data/cve/CVE-2026-64320.md) | High | nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page | 9.1 | 0.0080 | | | [CVE-2026-63887](https://patchblox.com/security/data/cve/CVE-2026-63887.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Bound iscsi_encode_text_outp... | 9.8 | 0.0078 | | | [CVE-2026-63888](https://patchblox.com/security/data/cve/CVE-2026-63888.md) | High | bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 9.8 | 0.0078 | | | [CVE-2026-68159](https://patchblox.com/security/data/cve/CVE-2026-68159.md) | High | libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE | 9.8 | 0.0075 | | | [CVE-2026-45860](https://patchblox.com/security/data/cve/CVE-2026-45860.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conncount: increase the connection... | 7.5 | 0.0075 | | | [CVE-2026-72083](https://patchblox.com/security/data/cve/CVE-2026-72083.md) | High | kernel-debug-modules-extra: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: s... | 9.8 | 0.0072 | | | [CVE-2026-72502](https://patchblox.com/security/data/cve/CVE-2026-72502.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: ipv6: clamp default adverting MSS to avoid... | 7.5 | 0.0072 | | | [CVE-2026-74321](https://patchblox.com/security/data/cve/CVE-2026-74321.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix invalid pointer dereference in __btrf... | 7.5 | 0.0072 | | | [CVE-2026-80646](https://patchblox.com/security/data/cve/CVE-2026-80646.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6... | 7.5 | 0.0072 | | | [CVE-2026-63922](https://patchblox.com/security/data/cve/CVE-2026-63922.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0071 | | | [CVE-2026-63924](https://patchblox.com/security/data/cve/CVE-2026-63924.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.8 | 0.0071 | | | [CVE-2026-64268](https://patchblox.com/security/data/cve/CVE-2026-64268.md) | High | RDMA/siw: bound Read Response placement to the RREAD length | 9.8 | 0.0071 | | | [CVE-2026-68154](https://patchblox.com/security/data/cve/CVE-2026-68154.md) | High | libceph: reject zero bucket types in crush_decode | 9.8 | 0.0071 | | | [CVE-2026-68158](https://patchblox.com/security/data/cve/CVE-2026-68158.md) | High | libceph: Fix multiplication overflow in decode_new_up_state_weight() | 9.8 | 0.0071 | | | [CVE-2026-64269](https://patchblox.com/security/data/cve/CVE-2026-64269.md) | High | RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg | 9.1 | 0.0071 | | | [CVE-2026-68155](https://patchblox.com/security/data/cve/CVE-2026-68155.md) | High | libceph: Reject monmaps advertising zero monitors | 8.8 | 0.0070 | | | [CVE-2026-72242](https://patchblox.com/security/data/cve/CVE-2026-72242.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: selinux: avoid sk_socket dereference in selinux_... | 8.8 | 0.0070 | | | [CVE-2026-68157](https://patchblox.com/security/data/cve/CVE-2026-68157.md) | High | libceph: guard missing CRUSH type name lookup | 7.8 | 0.0070 | | | [CVE-2026-74282](https://patchblox.com/security/data/cve/CVE-2026-74282.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tipc: prevent snt_unacked underflow on CONN_ACK... | 7.5 | 0.0070 | | | [CVE-2026-64303](https://patchblox.com/security/data/cve/CVE-2026-64303.md) | High | spi: fsl-lpspi: terminate the RX channel on TX prepare failure path | 9.8 | 0.0069 | | | [CVE-2026-68156](https://patchblox.com/security/data/cve/CVE-2026-68156.md) | High | libceph: refresh auth->authorizer_buf{,_len} after authorizer update | 9.8 | 0.0069 | | | [CVE-2026-68161](https://patchblox.com/security/data/cve/CVE-2026-68161.md) | High | sctp: close UDP tunnel sockets during netns teardown | 9.8 | 0.0068 | | | [CVE-2026-46195](https://patchblox.com/security/data/cve/CVE-2026-46195.md) | High | smb: client: validate dacloffset before building DACL pointers | 9.8 | 0.0068 | | | [CVE-2026-72464](https://patchblox.com/security/data/cve/CVE-2026-72464.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Repost Receive buffers for malformed r... | 7.5 | 0.0068 | | | [CVE-2026-72254](https://patchblox.com/security/data/cve/CVE-2026-72254.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_fib: reject fib expression on the... | 7.5 | 0.0067 | | | [CVE-2026-72107](https://patchblox.com/security/data/cve/CVE-2026-72107.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm era: fix out-of-bounds memory access for non-... | 8.8 | 0.0065 | | | [CVE-2026-74316](https://patchblox.com/security/data/cve/CVE-2026-74316.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Handle layout stid in nfsd4_drop_revoked_s... | 7.5 | 0.0063 | | | [CVE-2026-72330](https://patchblox.com/security/data/cve/CVE-2026-72330.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/tls: Consume empty data records in tls_sw_re... | 7.5 | 0.0062 | | | [CVE-2026-72035](https://patchblox.com/security/data/cve/CVE-2026-72035.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_taprio: Replace direct dequeue ca... | 8.2 | 0.0059 | | | [CVE-2026-68300](https://patchblox.com/security/data/cve/CVE-2026-68300.md) | High | sctp: auth: verify auth requirement when auth_chunk is NULL | 9.8 | 0.0058 | | | [CVE-2026-80590](https://patchblox.com/security/data/cve/CVE-2026-80590.md) | High | inet: frags: strip GSO state from fragments before reassembly | 8.8 | 0.0058 | | | [CVE-2026-64545](https://patchblox.com/security/data/cve/CVE-2026-64545.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp_master_re... | 7.5 | 0.0058 | | | [CVE-2026-53228](https://patchblox.com/security/data/cve/CVE-2026-53228.md) | High | ipv6: sit: reload inner IPv6 header after GSO offloads | 9.8 | 0.0058 | | | [CVE-2026-64577](https://patchblox.com/security/data/cve/CVE-2026-64577.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: gtp: check skb_pull_data() return in gtp1u_send_... | 7.5 | 0.0058 | | | [CVE-2026-46133](https://patchblox.com/security/data/cve/CVE-2026-46133.md) | High | RDMA/rxe: Reject unknown opcodes before ICRC processing | 8.8 | 0.0057 | | | [CVE-2026-68123](https://patchblox.com/security/data/cve/CVE-2026-68123.md) | High | openvswitch: fix GSO userspace truncation underflow | 9.8 | 0.0055 | | | [CVE-2026-74737](https://patchblox.com/security/data/cve/CVE-2026-74737.md) | High | net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG | 9.8 | 0.0055 | | | [CVE-2026-68136](https://patchblox.com/security/data/cve/CVE-2026-68136.md) | High | net: gro: fix double aggregation of flush-marked skbs | 9.8 | 0.0054 | | | [CVE-2026-43125](https://patchblox.com/security/data/cve/CVE-2026-43125.md) | High | dlm: validate length in dlm_search_rsb_tree | 9.8 | 0.0054 | | | [CVE-2026-64450](https://patchblox.com/security/data/cve/CVE-2026-64450.md) | High | tipc: fix out-of-bounds read in broadcast Gap ACK blocks | 9.1 | 0.0054 | | | [CVE-2026-68137](https://patchblox.com/security/data/cve/CVE-2026-68137.md) | High | net/x25: fix use-after-free in x25_kill_by_neigh() | 9.8 | 0.0054 | | | [CVE-2026-74743](https://patchblox.com/security/data/cve/CVE-2026-74743.md) | High | macvlan: inherit needed_headroom and needed_tailroom from lowerdev | 9.8 | 0.0054 | | | [CVE-2026-68096](https://patchblox.com/security/data/cve/CVE-2026-68096.md) | High | audit: fix recursive locking deadlock in audit_dupe_exe() | 7.5 | 0.0053 | | | [CVE-2026-63808](https://patchblox.com/security/data/cve/CVE-2026-63808.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0053 | | | [CVE-2026-64113](https://patchblox.com/security/data/cve/CVE-2026-64113.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0053 | | | [CVE-2026-68117](https://patchblox.com/security/data/cve/CVE-2026-68117.md) | High | tipc: clear sock->sk on the failed-insert path in tipc_sk_create() | 9.8 | 0.0053 | | | [CVE-2026-68141](https://patchblox.com/security/data/cve/CVE-2026-68141.md) | High | net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() | 7.5 | 0.0052 | | | [CVE-2026-63993](https://patchblox.com/security/data/cve/CVE-2026-63993.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: vxlan: do not reuse cached ip_hdr() value after s... | 9.8 | 0.0051 | | | [CVE-2026-64007](https://patchblox.com/security/data/cve/CVE-2026-64007.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 9.8 | 0.0051 | | | [CVE-2026-74495](https://patchblox.com/security/data/cve/CVE-2026-74495.md) | High | igbvf: Fix leak in TX DMA error cleanup | 9.8 | 0.0051 | | | [CVE-2026-74669](https://patchblox.com/security/data/cve/CVE-2026-74669.md) | High | ipvs: clear IPv4 options after rebasing tunnel ICMP errors | 9.8 | 0.0051 | | | [CVE-2026-80558](https://patchblox.com/security/data/cve/CVE-2026-80558.md) | High | libceph: Avoid using invalid osd indices from primary_temp | 9.8 | 0.0051 | | | [CVE-2026-80561](https://patchblox.com/security/data/cve/CVE-2026-80561.md) | High | libceph: fix multiple unsafe decodes in decode_locker() | 9.8 | 0.0051 | | | [CVE-2026-63992](https://patchblox.com/security/data/cve/CVE-2026-63992.md) | High | kernel-rt-64k-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.1 | 0.0051 | | | [CVE-2026-64355](https://patchblox.com/security/data/cve/CVE-2026-64355.md) | High | bpf: Reject fragmented frames in devmap | 9.8 | 0.0051 | | | [CVE-2026-74616](https://patchblox.com/security/data/cve/CVE-2026-74616.md) | High | xdp: reject clones that overrun skb_shared_info tailroom | 9.8 | 0.0051 | | | [CVE-2026-63801](https://patchblox.com/security/data/cve/CVE-2026-63801.md) | High | tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done | 8.8 | 0.0051 | | | [CVE-2026-74744](https://patchblox.com/security/data/cve/CVE-2026-74744.md) | High | ipvlan: inherit needed_headroom and needed_tailroom from phy_dev | 9.8 | 0.0051 | | | [CVE-2026-68315](https://patchblox.com/security/data/cve/CVE-2026-68315.md) | High | sctp: validate stream count in sctp_process_strreset_inreq() | 8.8 | 0.0051 | | | [CVE-2026-68129](https://patchblox.com/security/data/cve/CVE-2026-68129.md) | High | gve: fix Rx queue stall on alloc failure | 7.5 | 0.0051 | | | [CVE-2026-74730](https://patchblox.com/security/data/cve/CVE-2026-74730.md) | High | NFS: Pin the 'struct nfs_server' during a FREE_STATEID call | 9.8 | 0.0051 | | | [CVE-2026-68299](https://patchblox.com/security/data/cve/CVE-2026-68299.md) | High | vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets | 8.8 | 0.0050 | | | [CVE-2026-64048](https://patchblox.com/security/data/cve/CVE-2026-64048.md) | High | python3-perf: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: n... | 7.8 | 0.0050 | | | [CVE-2026-64312](https://patchblox.com/security/data/cve/CVE-2026-64312.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - restore callback for non-parall... | 7.5 | 0.0050 | | | [CVE-2026-74523](https://patchblox.com/security/data/cve/CVE-2026-74523.md) | High | qede: sync udp_tunnel ports outside qede_lock in the recovery path | 7.5 | 0.0050 | | | [CVE-2026-74717](https://patchblox.com/security/data/cve/CVE-2026-74717.md) | High | net/mlx5: fw_tracer, return NULL on create error | 7.5 | 0.0050 | | | [CVE-2026-74705](https://patchblox.com/security/data/cve/CVE-2026-74705.md) | High | udp: fix potential use-after-free in tunnel segmentation | 10.0 | 0.0050 | | | [CVE-2026-64102](https://patchblox.com/security/data/cve/CVE-2026-64102.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0050 | | | [CVE-2026-72438](https://patchblox.com/security/data/cve/CVE-2026-72438.md) | High | md/raid10: fix writes_pending and barrier reference leaks on discard failures | 7.5 | 0.0050 | | | [CVE-2026-68082](https://patchblox.com/security/data/cve/CVE-2026-68082.md) | High | libceph: fix two unsafe bare decodes in decode_lockers() | 9.8 | 0.0050 | | | [CVE-2026-68426](https://patchblox.com/security/data/cve/CVE-2026-68426.md) | High | xfrm: fix stale skb->prev after async crypto steals a GSO segment | 9.8 | 0.0050 | | | [CVE-2026-72440](https://patchblox.com/security/data/cve/CVE-2026-72440.md) | High | md/raid1: fix writes_pending and barrier reference leaks on write failures | 7.1 | 0.0050 | | | [CVE-2026-74612](https://patchblox.com/security/data/cve/CVE-2026-74612.md) | High | veth: fix skb length accounting after XDP frag adjustment | 10.0 | 0.0049 | | | [CVE-2026-46115](https://patchblox.com/security/data/cve/CVE-2026-46115.md) | High | block: add pgmap check to biovec_phys_mergeable | 9.8 | 0.0049 | | | [CVE-2026-74269](https://patchblox.com/security/data/cve/CVE-2026-74269.md) | High | bnxt: fix head underflow on XDP head-grow | 9.8 | 0.0049 | | | [CVE-2026-74474](https://patchblox.com/security/data/cve/CVE-2026-74474.md) | High | vxlan: use pskb_network_may_pull() for transmit path header pulls | 9.8 | 0.0049 | | | [CVE-2026-74723](https://patchblox.com/security/data/cve/CVE-2026-74723.md) | High | btrfs: lzo: reject inline extents without valid headers | 9.8 | 0.0049 | | | [CVE-2026-74476](https://patchblox.com/security/data/cve/CVE-2026-74476.md) | High | veth: convert frag_list skbs before running XDP | 9.1 | 0.0049 | | | [CVE-2026-53264](https://patchblox.com/security/data/cve/CVE-2026-53264.md) | High | net/sched: act_api: use RCU with deferred freeing for action lifecycle | 7.8 | 0.0049 | | | [CVE-2026-80714](https://patchblox.com/security/data/cve/CVE-2026-80714.md) | High | ipvs: do not propagate one-packet flag to synced conns | 9.8 | 0.0048 | | | [CVE-2026-53284](https://patchblox.com/security/data/cve/CVE-2026-53284.md) | High | btrfs: only release the dirty pages io tree after successful writes | 7.5 | 0.0048 | | | [CVE-2026-74550](https://patchblox.com/security/data/cve/CVE-2026-74550.md) | High | net: do not send ICMP/NDISC Redirects when peer allocation fails | 7.5 | 0.0048 | | | [CVE-2026-74695](https://patchblox.com/security/data/cve/CVE-2026-74695.md) | High | netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() | 7.5 | 0.0048 | | | [CVE-2026-68302](https://patchblox.com/security/data/cve/CVE-2026-68302.md) | High | amt: re-read skb header pointers after every pull | 9.8 | 0.0048 | | | [CVE-2026-64148](https://patchblox.com/security/data/cve/CVE-2026-64148.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: pds_core: fix error handling in pdsc_devcmd_wait... | 7.5 | 0.0047 | | | [CVE-2026-52946](https://patchblox.com/security/data/cve/CVE-2026-52946.md) | High | fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling | 7.5 | 0.0047 | | | [CVE-2026-72100](https://patchblox.com/security/data/cve/CVE-2026-72100.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix a bug if the bio is out of lim... | 8.8 | 0.0046 | | | [CVE-2026-64383](https://patchblox.com/security/data/cve/CVE-2026-64383.md) | High | smb: client: fix double-free in SMB2_flush() replay | 9.8 | 0.0046 | | | [CVE-2026-64384](https://patchblox.com/security/data/cve/CVE-2026-64384.md) | High | smb: client: fix change notify replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64385](https://patchblox.com/security/data/cve/CVE-2026-64385.md) | High | smb: client: fix double-free in SMB2_ioctl() replay | 9.8 | 0.0046 | | | [CVE-2026-64386](https://patchblox.com/security/data/cve/CVE-2026-64386.md) | High | smb: client: fix query_info() replay double-free | 9.8 | 0.0046 | | | [CVE-2026-64387](https://patchblox.com/security/data/cve/CVE-2026-64387.md) | High | smb: client: fix query directory replay double-free | 9.8 | 0.0046 | | | [CVE-2026-74475](https://patchblox.com/security/data/cve/CVE-2026-74475.md) | High | vxlan: use neigh_ha_snapshot() in route_shortcircuit() | 10.0 | 0.0045 | | | [CVE-2026-64380](https://patchblox.com/security/data/cve/CVE-2026-64380.md) | High | smb: client: harden POSIX SID length parsing | 8.2 | 0.0044 | | | [CVE-2026-64003](https://patchblox.com/security/data/cve/CVE-2026-64003.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: scsi: core: Run queues for all non-SDEV_DEL devi... | 7.5 | 0.0044 | | | [CVE-2026-68120](https://patchblox.com/security/data/cve/CVE-2026-68120.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware... | 7.5 | 0.0044 | | | [CVE-2026-64162](https://patchblox.com/security/data/cve/CVE-2026-64162.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.8 | 0.0044 | | | [CVE-2026-74598](https://patchblox.com/security/data/cve/CVE-2026-74598.md) | High | ipv6: fix Route Information option length validation | 7.5 | 0.0043 | | | [CVE-2026-74581](https://patchblox.com/security/data/cve/CVE-2026-74581.md) | High | net: ipv6: clear suppressed fib6 rule result | 9.8 | 0.0042 | | | [CVE-2026-64368](https://patchblox.com/security/data/cve/CVE-2026-64368.md) | High | mm/slab: do not limit zeroing to orig_size when only red zoning is enabled | 8.1 | 0.0042 | | | [CVE-2026-68352](https://patchblox.com/security/data/cve/CVE-2026-68352.md) | High | wifi: ath6kl: fix OOB read from firmware IE lengths in connect event | 8.3 | 0.0042 | | | [CVE-2026-68196](https://patchblox.com/security/data/cve/CVE-2026-68196.md) | High | wifi: wilc1000: validate assoc response length before subtracting header | 8.3 | 0.0041 | | | [CVE-2026-68192](https://patchblox.com/security/data/cve/CVE-2026-68192.md) | High | wifi: brcmfmac: make release_scratchbuffers idempotent | 8.8 | 0.0041 | | | [CVE-2026-74556](https://patchblox.com/security/data/cve/CVE-2026-74556.md) | High | scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer | 9.8 | 0.0040 | | | [CVE-2026-80586](https://patchblox.com/security/data/cve/CVE-2026-80586.md) | High | mptcp: options: reset DSS fields in case of unexpected size | 9.8 | 0.0040 | | | [CVE-2026-72469](https://patchblox.com/security/data/cve/CVE-2026-72469.md) | High | xprtrdma: Fix ep kref imbalance on ADDR_CHANGE | 8.8 | 0.0040 | | | [CVE-2026-46135](https://patchblox.com/security/data/cve/CVE-2026-46135.md) | High | nvmet-tcp: fix race between ICReq handling and queue teardown | 9.8 | 0.0040 | | | [CVE-2026-68199](https://patchblox.com/security/data/cve/CVE-2026-68199.md) | High | wifi: ath6kl: fix OOB access from firmware ADDBA window size | 8.8 | 0.0038 | | | [CVE-2026-80589](https://patchblox.com/security/data/cve/CVE-2026-80589.md) | High | block: stop the timeout timer when releasing a never added disk | 9.8 | 0.0037 | | | [CVE-2026-64210](https://patchblox.com/security/data/cve/CVE-2026-64210.md) | High | net/mlx5e: xsk: Fix unlocked writing to ICOSQ | 7.5 | 0.0037 | | | [CVE-2026-68433](https://patchblox.com/security/data/cve/CVE-2026-68433.md) | High | libceph: bound get_version reply decode to front len | 8.6 | 0.0036 | | | [CVE-2026-63889](https://patchblox.com/security/data/cve/CVE-2026-63889.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0036 | | | [CVE-2026-64313](https://patchblox.com/security/data/cve/CVE-2026-64313.md) | High | crypto: ecc - Fix carry overflow in vli multiplication | 8.8 | 0.0036 | | | [CVE-2026-64364](https://patchblox.com/security/data/cve/CVE-2026-64364.md) | High | HID: multitouch: fix out-of-bounds bit access on mt_io_flags | 8.8 | 0.0036 | | | [CVE-2026-64382](https://patchblox.com/security/data/cve/CVE-2026-64382.md) | High | smb: client: fix double-free in SMB2_open() replay | 8.8 | 0.0035 | | | [CVE-2026-46304](https://patchblox.com/security/data/cve/CVE-2026-46304.md) | High | nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free | 7.5 | 0.0035 | | | [CVE-2026-63925](https://patchblox.com/security/data/cve/CVE-2026-63925.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0035 | | | [CVE-2026-64093](https://patchblox.com/security/data/cve/CVE-2026-64093.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: directly shut down timer o... | 8.8 | 0.0035 | | | [CVE-2026-68124](https://patchblox.com/security/data/cve/CVE-2026-68124.md) | High | mctp: serial: handle zero-length frames to prevent rx buffer overflow | 9.6 | 0.0034 | | | [CVE-2026-53180](https://patchblox.com/security/data/cve/CVE-2026-53180.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix livelock in tmigr_handle_r... | 7.5 | 0.0034 | | | [CVE-2026-74557](https://patchblox.com/security/data/cve/CVE-2026-74557.md) | High | scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer | 7.5 | 0.0033 | | | [CVE-2026-64445](https://patchblox.com/security/data/cve/CVE-2026-64445.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix WEP length underflow and... | 8.8 | 0.0032 | | | [CVE-2026-68125](https://patchblox.com/security/data/cve/CVE-2026-68125.md) | High | mac802154: llsec: reject frames shorter than the authentication tag | 8.8 | 0.0032 | | | [CVE-2026-64024](https://patchblox.com/security/data/cve/CVE-2026-64024.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 9.4 | 0.0031 | | | [CVE-2026-68470](https://patchblox.com/security/data/cve/CVE-2026-68470.md) | High | wifi: mac80211: validate extension-frame layout before RX | 8.8 | 0.0031 | | | [CVE-2026-64178](https://patchblox.com/security/data/cve/CVE-2026-64178.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.8 | 0.0030 | | | [CVE-2026-52920](https://patchblox.com/security/data/cve/CVE-2026-52920.md) | High | netfilter: xt_policy: fix strict mode inbound policy matching | 8.3 | 0.0030 | | | [CVE-2026-43239](https://patchblox.com/security/data/cve/CVE-2026-43239.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: prevent races in ->query_interfaces... | 8.8 | 0.0029 | | | [CVE-2026-64442](https://patchblox.com/security/data/cve/CVE-2026-64442.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in IE loops in... | 8.1 | 0.0029 | | | [CVE-2026-64444](https://patchblox.com/security/data/cve/CVE-2026-64444.md) | High | staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop | 8.1 | 0.0029 | | | [CVE-2026-68353](https://patchblox.com/security/data/cve/CVE-2026-68353.md) | High | wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler | 8.1 | 0.0029 | | | [CVE-2026-64547](https://patchblox.com/security/data/cve/CVE-2026-64547.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packet_len before pa... | 8.1 | 0.0028 | | | [CVE-2026-64088](https://patchblox.com/security/data/cve/CVE-2026-64088.md) | High | kernel-uek-devel: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.8 | 0.0028 | | | [CVE-2026-64443](https://patchblox.com/security/data/cve/CVE-2026-64443.md) | High | staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop | 8.1 | 0.0028 | | | [CVE-2026-64540](https://patchblox.com/security/data/cve/CVE-2026-64540.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usbnet: gl620a: fix out-of-bounds read in geneli... | 8.1 | 0.0028 | | | [CVE-2026-68373](https://patchblox.com/security/data/cve/CVE-2026-68373.md) | High | wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() | 8.1 | 0.0028 | | | [CVE-2026-64406](https://patchblox.com/security/data/cve/CVE-2026-64406.md) | High | Bluetooth: fix UAF in bt_accept_dequeue() | 8.0 | 0.0028 | | | [CVE-2026-63891](https://patchblox.com/security/data/cve/CVE-2026-63891.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: property: Cap recursion depth in __... | 7.0 | 0.0028 | | | [CVE-2026-64561](https://patchblox.com/security/data/cve/CVE-2026-64561.md) | High | KVM: x86: Check for invalid/obsolete root *after* making MMU pages available | 8.8 | 0.0027 | | | [CVE-2026-64440](https://patchblox.com/security/data/cve/CVE-2026-64440.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB write in HT_caps_han... | 8.1 | 0.0027 | | | [CVE-2026-64403](https://patchblox.com/security/data/cve/CVE-2026-64403.md) | High | Bluetooth: L2CAP: validate option length before reading conf opt value | 7.1 | 0.0027 | | | [CVE-2026-64408](https://patchblox.com/security/data/cve/CVE-2026-64408.md) | High | Bluetooth: bnep: pin L2CAP connection during netdev registration | 8.8 | 0.0026 | | | [CVE-2026-68091](https://patchblox.com/security/data/cve/CVE-2026-68091.md) | High | HID: wacom: stop hardware after post-start probe failures | 8.8 | 0.0026 | | | [CVE-2026-68326](https://patchblox.com/security/data/cve/CVE-2026-68326.md) | High | wifi: mwifiex: bound uAP association event IEs to the event buffer | 8.8 | 0.0026 | | | [CVE-2026-68397](https://patchblox.com/security/data/cve/CVE-2026-68397.md) | High | net/iucv: take a reference on the socket found in afiucv_hs_rcv() | 8.8 | 0.0026 | | | [CVE-2026-68425](https://patchblox.com/security/data/cve/CVE-2026-68425.md) | High | IB/mad: Drop unmatched RMPP responses before reassembly | 7.1 | 0.0026 | | | [CVE-2026-64536](https://patchblox.com/security/data/cve/CVE-2026-64536.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in is_ap_in_tk... | 8.1 | 0.0026 | | | [CVE-2026-74537](https://patchblox.com/security/data/cve/CVE-2026-74537.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: hold sk properly in iso_conn_rea... | 8.8 | 0.0026 | | | [CVE-2026-72108](https://patchblox.com/security/data/cve/CVE-2026-72108.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm thin metadata: fix metadata snapshot consiste... | 7.8 | 0.0026 | | | [CVE-2026-64434](https://patchblox.com/security/data/cve/CVE-2026-64434.md) | High | Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref | 8.8 | 0.0026 | | | [CVE-2026-64554](https://patchblox.com/security/data/cve/CVE-2026-64554.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in... | 8.8 | 0.0026 | | | [CVE-2026-68389](https://patchblox.com/security/data/cve/CVE-2026-68389.md) | High | Bluetooth: hci_qca: Clear memdump state on invalid dump size | 8.8 | 0.0025 | | | [CVE-2026-64586](https://patchblox.com/security/data/cve/CVE-2026-64586.md) | High | wifi: brcmfmac: drain bus_reset work on device removal | 8.8 | 0.0025 | | | [CVE-2026-68393](https://patchblox.com/security/data/cve/CVE-2026-68393.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: extend conn_hash lookup cri... | 8.8 | 0.0025 | | | [CVE-2026-74534](https://patchblox.com/security/data/cve/CVE-2026-74534.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix refcounting of iso_conn iso... | 8.8 | 0.0024 | | | [CVE-2026-74535](https://patchblox.com/security/data/cve/CVE-2026-74535.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: avoid deadlocks in iso_sock_time... | 8.8 | 0.0024 | | | [CVE-2026-74533](https://patchblox.com/security/data/cve/CVE-2026-74533.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix race of kfree vs kref_get_un... | 8.8 | 0.0024 | | | [CVE-2026-68278](https://patchblox.com/security/data/cve/CVE-2026-68278.md) | High | drm/dp/mst: fix buffer overflows in sideband chunk accumulation | 8.1 | 0.0024 | | | [CVE-2026-64515](https://patchblox.com/security/data/cve/CVE-2026-64515.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If eith... | 8.3 | 0.0024 | | | [CVE-2026-68480](https://patchblox.com/security/data/cve/CVE-2026-68480.md) | High | x86/bugs: Make Safe-RET robust against interrupt injection | 8.8 | 0.0023 | | | [CVE-2026-68398](https://patchblox.com/security/data/cve/CVE-2026-68398.md) | High | ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF | 9.8 | 0.0023 | | | [CVE-2026-64507](https://patchblox.com/security/data/cve/CVE-2026-64507.md) | High | x86/bugs: Enable IBPB flush on BPF JIT allocation | 7.8 | 0.0023 | | | [CVE-2026-68414](https://patchblox.com/security/data/cve/CVE-2026-68414.md) | High | wifi: cfg80211: cancel sched scan results work on unregister | 7.5 | 0.0023 | | | [CVE-2026-68138](https://patchblox.com/security/data/cve/CVE-2026-68138.md) | High | net/sched: serialize qdisc_rtab_list against concurrent get/put | 8.8 | 0.0022 | | | [CVE-2026-64452](https://patchblox.com/security/data/cve/CVE-2026-64452.md) | High | 6lowpan: fix NHC entry use-after-free on error path | 7.1 | 0.0022 | | | [CVE-2026-68351](https://patchblox.com/security/data/cve/CVE-2026-68351.md) | High | wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read | 7.1 | 0.0022 | | | [CVE-2026-68188](https://patchblox.com/security/data/cve/CVE-2026-68188.md) | High | Bluetooth: RFCOMM: Fix session UAF in set_termios | 8.8 | 0.0022 | | | [CVE-2026-68368](https://patchblox.com/security/data/cve/CVE-2026-68368.md) | High | usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() | 7.1 | 0.0022 | | | [CVE-2026-72306](https://patchblox.com/security/data/cve/CVE-2026-72306.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vduse: Fix race in vduse_dev_msg_sync and vduse_... | n/a | 0.0022 | | | [CVE-2026-68169](https://patchblox.com/security/data/cve/CVE-2026-68169.md) | High | mptcp: pm: userspace: fix use-after-free in get_local_id | 9.8 | 0.0021 | | | [CVE-2026-68181](https://patchblox.com/security/data/cve/CVE-2026-68181.md) | High | mei: bus: access mei_device under device_lock on cleanup | 7.8 | 0.0021 | | | [CVE-2026-68165](https://patchblox.com/security/data/cve/CVE-2026-68165.md) | High | mm/damon/core: validate ranges in damon_set_regions() | 7.1 | 0.0021 | | | [CVE-2026-68182](https://patchblox.com/security/data/cve/CVE-2026-68182.md) | High | comedi: comedi_parport: deal with premature interrupt | 7.1 | 0.0021 | | | [CVE-2026-68286](https://patchblox.com/security/data/cve/CVE-2026-68286.md) | High | drop_monitor: perform u64_stats updates under IRQ-disabled section | 7.1 | 0.0021 | | | [CVE-2026-80667](https://patchblox.com/security/data/cve/CVE-2026-80667.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, MPESW, Fix missing complete() on... | n/a | 0.0021 | | | [CVE-2026-63810](https://patchblox.com/security/data/cve/CVE-2026-63810.md) | High | block: Avoid mounting the bdev pseudo-filesystem in userspace | 7.1 | 0.0021 | | | [CVE-2026-68193](https://patchblox.com/security/data/cve/CVE-2026-68193.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio... | 8.1 | 0.0021 | | | [CVE-2026-64572](https://patchblox.com/security/data/cve/CVE-2026-64572.md) | High | ipv4: fib: free fib_alias with kfree_rcu() on insert error path | 8.8 | 0.0020 | | | [CVE-2026-53365](https://patchblox.com/security/data/cve/CVE-2026-53365.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-... | 8.8 | 0.0020 | | | [CVE-2026-64010](https://patchblox.com/security/data/cve/CVE-2026-64010.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free race in nfc_llcp_r... | 8.8 | 0.0020 | | | [CVE-2026-72342](https://patchblox.com/security/data/cve/CVE-2026-72342.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats agent registration... | 8.4 | 0.0020 | | | [CVE-2026-72343](https://patchblox.com/security/data/cve/CVE-2026-72343.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix HV VHCA stats zero-sized buffer a... | 8.4 | 0.0020 | | | [CVE-2026-68085](https://patchblox.com/security/data/cve/CVE-2026-68085.md) | High | Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled | 8.0 | 0.0020 | | | [CVE-2026-64490](https://patchblox.com/security/data/cve/CVE-2026-64490.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: Validate control metadata from the... | 8.8 | 0.0019 | | | [CVE-2026-64367](https://patchblox.com/security/data/cve/CVE-2026-64367.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to pre... | 7.8 | 0.0019 | | | [CVE-2026-68255](https://patchblox.com/security/data/cve/CVE-2026-68255.md) | High | drm/virtio: bound EDID block reads to the response buffer | 7.7 | 0.0019 | | | [CVE-2026-63926](https://patchblox.com/security/data/cve/CVE-2026-63926.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.4 | 0.0019 | | | [CVE-2026-72280](https://patchblox.com/security/data/cve/CVE-2026-72280.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Drop bogus WARN for write to ZCR... | 7.1 | 0.0019 | | | [CVE-2026-68093](https://patchblox.com/security/data/cve/CVE-2026-68093.md) | High | KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug | 7.0 | 0.0019 | | | [CVE-2026-72289](https://patchblox.com/security/data/cve/CVE-2026-72289.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: t... | 9.3 | 0.0019 | | | [CVE-2026-72495](https://patchblox.com/security/data/cve/CVE-2026-72495.md) | High | RDMA/bnxt_re: Avoid repeated requests to allocate WC pages | 9.3 | 0.0019 | | | [CVE-2026-64039](https://patchblox.com/security/data/cve/CVE-2026-64039.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/msm/snapshot: fix dumping of the unaligned r... | 7.7 | 0.0019 | | | [CVE-2026-72487](https://patchblox.com/security/data/cve/CVE-2026-72487.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: PCI: Check ROM header and data structure addr be... | 7.7 | 0.0019 | | | [CVE-2026-64484](https://patchblox.com/security/data/cve/CVE-2026-64484.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: es1938: check snd_ctl_new1() return value... | n/a | 0.0019 | | | [CVE-2026-68363](https://patchblox.com/security/data/cve/CVE-2026-68363.md) | High | wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request | 8.8 | 0.0018 | | | [CVE-2026-68366](https://patchblox.com/security/data/cve/CVE-2026-68366.md) | High | usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer | 8.1 | 0.0018 | | | [CVE-2026-64470](https://patchblox.com/security/data/cve/CVE-2026-64470.md) | High | Bluetooth: btusb: fix use-after-free on marvell probe failure | 7.1 | 0.0018 | | | [CVE-2026-64471](https://patchblox.com/security/data/cve/CVE-2026-64471.md) | High | Bluetooth: btusb: fix use-after-free on registration failure | 7.1 | 0.0018 | | | [CVE-2026-68135](https://patchblox.com/security/data/cve/CVE-2026-68135.md) | High | net: hip04: fix RX buffer leak on build_skb failure | 7.1 | 0.0018 | | | [CVE-2026-68350](https://patchblox.com/security/data/cve/CVE-2026-68350.md) | High | wifi: carl9170: fix OOB read from off-by-two in TX status handler | 7.1 | 0.0018 | | | [CVE-2026-68365](https://patchblox.com/security/data/cve/CVE-2026-68365.md) | High | USB: serial: io_edgeport: cap received transmit credits | 7.1 | 0.0018 | | | [CVE-2026-64483](https://patchblox.com/security/data/cve/CVE-2026-64483.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire: isight: bound the sample count t... | 7.0 | 0.0018 | | | [CVE-2026-64570](https://patchblox.com/security/data/cve/CVE-2026-64570.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix fils_discovery double free o... | 7.8 | 0.0018 | | | [CVE-2026-72425](https://patchblox.com/security/data/cve/CVE-2026-72425.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_rese... | 7.1 | 0.0018 | | | [CVE-2026-68371](https://patchblox.com/security/data/cve/CVE-2026-68371.md) | High | usb: musb: omap2430: Do not put borrowed of_node in probe | 8.4 | 0.0018 | | | [CVE-2026-64300](https://patchblox.com/security/data/cve/CVE-2026-64300.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fix page UAF in map_range() map_range... | 7.8 | 0.0018 | | | [CVE-2026-74584](https://patchblox.com/security/data/cve/CVE-2026-74584.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: zero shared page before exposing t... | 7.1 | 0.0018 | | | [CVE-2026-63860](https://patchblox.com/security/data/cve/CVE-2026-63860.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.4 | 0.0018 | | | [CVE-2026-68179](https://patchblox.com/security/data/cve/CVE-2026-68179.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock erro... | 8.4 | 0.0018 | | | [CVE-2026-68289](https://patchblox.com/security/data/cve/CVE-2026-68289.md) | High | tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() | 7.0 | 0.0018 | | | [CVE-2026-64513](https://patchblox.com/security/data/cve/CVE-2026-64513.md) | High | KVM: x86: Unconditionally recompute CR8 intercept on PPR update | 8.4 | 0.0018 | | | [CVE-2026-68202](https://patchblox.com/security/data/cve/CVE-2026-68202.md) | High | ALSA: seq: close a re-opened queue timer in the destructor | 7.8 | 0.0018 | | | [CVE-2026-68206](https://patchblox.com/security/data/cve/CVE-2026-68206.md) | High | media: v4l2-ctrls: validate HEVC active reference counts | 7.8 | 0.0018 | | | [CVE-2026-68213](https://patchblox.com/security/data/cve/CVE-2026-68213.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on sta... | 7.8 | 0.0018 | | | [CVE-2026-68216](https://patchblox.com/security/data/cve/CVE-2026-68216.md) | High | media: pwc: Return queued buffers on start_streaming() failure | 7.8 | 0.0018 | | | [CVE-2026-68088](https://patchblox.com/security/data/cve/CVE-2026-68088.md) | High | usb: gadget: function: rndis: add length check to response query | 7.1 | 0.0018 | | | [CVE-2026-64503](https://patchblox.com/security/data/cve/CVE-2026-64503.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxsd9: fix runtime PM imbalance on w... | n/a | 0.0018 | | | [CVE-2026-63970](https://patchblox.com/security/data/cve/CVE-2026-63970.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: bind uarg before filling zerocopy... | 8.8 | 0.0018 | | | [CVE-2026-64286](https://patchblox.com/security/data/cve/CVE-2026-64286.md) | High | KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU | 8.2 | 0.0018 | | | [CVE-2026-64287](https://patchblox.com/security/data/cve/CVE-2026-64287.md) | High | KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU | 8.2 | 0.0018 | | | [CVE-2026-63898](https://patchblox.com/security/data/cve/CVE-2026-63898.md) | High | kernel-uek-container: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0018 | | | [CVE-2026-63901](https://patchblox.com/security/data/cve/CVE-2026-63901.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0018 | | | [CVE-2026-64481](https://patchblox.com/security/data/cve/CVE-2026-64481.md) | High | ALSA: hda/cs35l41: Fix firmware load work teardown | 7.8 | 0.0018 | | | [CVE-2026-68204](https://patchblox.com/security/data/cve/CVE-2026-68204.md) | High | media: vivid: check for vb2_is_busy() when toggling caps | 7.8 | 0.0018 | | | [CVE-2026-68209](https://patchblox.com/security/data/cve/CVE-2026-68209.md) | High | media: sun4i-csi: Return queued buffers on start_streaming() failure | 7.8 | 0.0018 | | | [CVE-2026-72282](https://patchblox.com/security/data/cve/CVE-2026-72282.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: Move kvm_io_bus_get_dev() locking responsib... | 7.8 | 0.0018 | | | [CVE-2026-72350](https://patchblox.com/security/data/cve/CVE-2026-72350.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_u32: reject invalid shift counts... | 7.8 | 0.0018 | | | [CVE-2026-74296](https://patchblox.com/security/data/cve/CVE-2026-74296.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Release the HW‑provided UAR index rat... | 7.8 | 0.0018 | | | [CVE-2026-74297](https://patchblox.com/security/data/cve/CVE-2026-74297.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix undefined shift of user RQ WQE si... | 7.8 | 0.0018 | | | [CVE-2026-63906](https://patchblox.com/security/data/cve/CVE-2026-63906.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Fix use-after-free in omap2... | 8.4 | 0.0018 | | | [CVE-2026-68219](https://patchblox.com/security/data/cve/CVE-2026-68219.md) | High | media: nxp: imx8-isi: Fix potential out-of-bounds issues | 7.8 | 0.0018 | | | [CVE-2026-72034](https://patchblox.com/security/data/cve/CVE-2026-72034.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fhandle: reject detached mounts in capable_wrt_m... | 7.8 | 0.0018 | | | [CVE-2026-72347](https://patchblox.com/security/data/cve/CVE-2026-72347.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_connmark: reject invalid shift par... | 7.3 | 0.0017 | | | [CVE-2026-72345](https://patchblox.com/security/data/cve/CVE-2026-72345.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5: LAG, Fix off-by-one in single-FDB erro... | 7.8 | 0.0017 | | | [CVE-2026-72019](https://patchblox.com/security/data/cve/CVE-2026-72019.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macsec... | 7.3 | 0.0017 | | | [CVE-2026-74346](https://patchblox.com/security/data/cve/CVE-2026-74346.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registrati... | n/a | 0.0017 | | | [CVE-2026-63920](https://patchblox.com/security/data/cve/CVE-2026-63920.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0017 | | | [CVE-2026-64265](https://patchblox.com/security/data/cve/CVE-2026-64265.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: fuse: clear intr_entry in fuse_resend and fuse_r... | 7.8 | 0.0017 | | | [CVE-2026-72072](https://patchblox.com/security/data/cve/CVE-2026-72072.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: macsec: fix use-after-free of metadat... | 7.8 | 0.0017 | | | [CVE-2026-64317](https://patchblox.com/security/data/cve/CVE-2026-64317.md) | High | isofs: bound Rock Ridge symlink components to the SL record | 7.1 | 0.0017 | | | [CVE-2026-64604](https://patchblox.com/security/data/cve/CVE-2026-64604.md) | High | KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode | 8.4 | 0.0017 | | | [CVE-2026-68201](https://patchblox.com/security/data/cve/CVE-2026-68201.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its... | 8.3 | 0.0017 | | | [CVE-2026-63917](https://patchblox.com/security/data/cve/CVE-2026-63917.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0017 | | | [CVE-2026-64276](https://patchblox.com/security/data/cve/CVE-2026-64276.md) | High | Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count | 8.8 | 0.0017 | | | [CVE-2026-64277](https://patchblox.com/security/data/cve/CVE-2026-64277.md) | High | Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count | 8.8 | 0.0017 | | | [CVE-2026-64304](https://patchblox.com/security/data/cve/CVE-2026-64304.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths... | 8.8 | 0.0017 | | | [CVE-2026-72136](https://patchblox.com/security/data/cve/CVE-2026-72136.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: xfrm_interface: require CAP_NET_ADMIN in t... | 8.8 | 0.0017 | | | [CVE-2026-64104](https://patchblox.com/security/data/cve/CVE-2026-64104.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Explicitly leak pages in unknow... | 8.7 | 0.0017 | | | [CVE-2026-63928](https://patchblox.com/security/data/cve/CVE-2026-63928.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0017 | | | [CVE-2026-64270](https://patchblox.com/security/data/cve/CVE-2026-64270.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - reject an oversized device packe... | 7.8 | 0.0017 | | | [CVE-2026-64271](https://patchblox.com/security/data/cve/CVE-2026-64271.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: touchwin - reset the packet index on ever... | 7.8 | 0.0017 | | | [CVE-2026-64272](https://patchblox.com/security/data/cve/CVE-2026-64272.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: mms114 - fix touch indexing for MMS134S a... | 7.8 | 0.0017 | | | [CVE-2026-64273](https://patchblox.com/security/data/cve/CVE-2026-64273.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: iforce - bound the device-reported force-... | 7.8 | 0.0017 | | | [CVE-2026-64274](https://patchblox.com/security/data/cve/CVE-2026-64274.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contac... | 7.8 | 0.0017 | | | [CVE-2026-64296](https://patchblox.com/security/data/cve/CVE-2026-64296.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: exfat: bound uniname advance in exfat_find_dir_e... | 7.8 | 0.0017 | | | [CVE-2026-64322](https://patchblox.com/security/data/cve/CVE-2026-64322.md) | High | udf: validate sparing table length as an entry count, not a byte count | 7.8 | 0.0017 | | | [CVE-2026-64333](https://patchblox.com/security/data/cve/CVE-2026-64333.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: USB: serial: digi_acceleport: fix write buffer c... | 7.8 | 0.0017 | | | [CVE-2026-72036](https://patchblox.com/security/data/cve/CVE-2026-72036.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_multiq: Replace direct dequeue ca... | 7.8 | 0.0017 | | | [CVE-2026-72164](https://patchblox.com/security/data/cve/CVE-2026-72164.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters... | 7.8 | 0.0017 | | | [CVE-2026-72450](https://patchblox.com/security/data/cve/CVE-2026-72450.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfrm: validate selector family and prefixlen dur... | 7.8 | 0.0017 | | | [CVE-2026-72488](https://patchblox.com/security/data/cve/CVE-2026-72488.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: soundwire: fix bug in sdw_add_element_group_coun... | 7.8 | 0.0017 | | | [CVE-2026-64582](https://patchblox.com/security/data/cve/CVE-2026-64582.md) | High | RDMA/rxe: Fix a use-after-free problem in rxe_mmap | 8.8 | 0.0017 | | | [CVE-2026-68307](https://patchblox.com/security/data/cve/CVE-2026-68307.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link repl... | 8.1 | 0.0017 | | | [CVE-2026-68267](https://patchblox.com/security/data/cve/CVE-2026-68267.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA... | 7.8 | 0.0017 | | | [CVE-2026-72485](https://patchblox.com/security/data/cve/CVE-2026-72485.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: coresight: platform: defer connection counter in... | 7.8 | 0.0017 | | | [CVE-2026-80838](https://patchblox.com/security/data/cve/CVE-2026-80838.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: vxlan: keep the last remote linked during FDB fl... | 7.8 | 0.0017 | | | [CVE-2026-68306](https://patchblox.com/security/data/cve/CVE-2026-68306.md) | High | wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() | 7.1 | 0.0017 | | | [CVE-2026-64518](https://patchblox.com/security/data/cve/CVE-2026-64518.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix out-of-bounds access for twsk in tcp_ao... | n/a | 0.0017 | | | [CVE-2026-64519](https://patchblox.com/security/data/cve/CVE-2026-64519.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix infinite loop in layout state revocati... | n/a | 0.0017 | | | [CVE-2026-74286](https://patchblox.com/security/data/cve/CVE-2026-74286.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: pfcp: allocate per-cpu tstats for PFCP netd... | n/a | 0.0017 | | | [CVE-2026-64563](https://patchblox.com/security/data/cve/CVE-2026-64563.md) | High | rhashtable: clear stale iter->p on table restart | 8.1 | 0.0017 | | | [CVE-2026-72243](https://patchblox.com/security/data/cve/CVE-2026-72243.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: selinux: check connect-related permissions on TC... | 8.8 | 0.0017 | | | [CVE-2026-64219](https://patchblox.com/security/data/cve/CVE-2026-64219.md) | High | drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async | 7.8 | 0.0017 | | | [CVE-2026-64593](https://patchblox.com/security/data/cve/CVE-2026-64593.md) | High | btrfs: do not trim a device which is not writeable | 9.8 | 0.0017 | | | [CVE-2026-64323](https://patchblox.com/security/data/cve/CVE-2026-64323.md) | High | udf: validate VAT header length against the VAT inode size | 7.1 | 0.0017 | | | [CVE-2026-64504](https://patchblox.com/security/data/cve/CVE-2026-64504.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: iio: accel: bmc150: clamp the device-reported FI... | n/a | 0.0017 | | | [CVE-2026-64346](https://patchblox.com/security/data/cve/CVE-2026-64346.md) | High | usb: gadget: udc: Fix use-after-free in gadget_match_driver | 7.8 | 0.0016 | | | [CVE-2026-68178](https://patchblox.com/security/data/cve/CVE-2026-68178.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is op... | 7.8 | 0.0016 | | | [CVE-2026-72389](https://patchblox.com/security/data/cve/CVE-2026-72389.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bridge: stp: Fix a potential use-after-free when... | 7.8 | 0.0016 | | | [CVE-2026-72103](https://patchblox.com/security/data/cve/CVE-2026-72103.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring vi... | 7.3 | 0.0016 | | | [CVE-2026-72297](https://patchblox.com/security/data/cve/CVE-2026-72297.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in... | 7.1 | 0.0016 | | | [CVE-2026-72500](https://patchblox.com/security/data/cve/CVE-2026-72500.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free SRQ toggle page after firmwar... | 8.8 | 0.0016 | | | [CVE-2026-63918](https://patchblox.com/security/data/cve/CVE-2026-63918.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0016 | | | [CVE-2026-68228](https://patchblox.com/security/data/cve/CVE-2026-68228.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move src_buf Removal... | 7.8 | 0.0016 | | | [CVE-2026-68260](https://patchblox.com/security/data/cve/CVE-2026-68260.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vm_ctx->lock before map... | 7.8 | 0.0016 | | | [CVE-2026-64556](https://patchblox.com/security/data/cve/CVE-2026-64556.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_... | 8.8 | 0.0016 | | | [CVE-2026-63823](https://patchblox.com/security/data/cve/CVE-2026-63823.md) | High | keys: Pin request_key_auth payload in instantiate paths | 8.8 | 0.0016 | | | [CVE-2026-68416](https://patchblox.com/security/data/cve/CVE-2026-68416.md) | High | mtd: fix double free and WARN_ON in add_mtd_device() error paths | 7.8 | 0.0016 | | | [CVE-2026-68448](https://patchblox.com/security/data/cve/CVE-2026-68448.md) | High | ovl: check access to copy_file_range source with src mounter creds | 7.8 | 0.0016 | | | [CVE-2026-64527](https://patchblox.com/security/data/cve/CVE-2026-64527.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate VMBus packet size in receiv... | 7.0 | 0.0016 | | | [CVE-2026-64243](https://patchblox.com/security/data/cve/CVE-2026-64243.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: simple-mux: Fix enum control bound... | 7.1 | 0.0016 | | | [CVE-2026-64294](https://patchblox.com/security/data/cve/CVE-2026-64294.md) | High | mm: do file ownership checks with the proper mount idmap | 7.1 | 0.0016 | | | [CVE-2026-68229](https://patchblox.com/security/data/cve/CVE-2026-68229.md) | High | media: cedrus: skip invalid H.264 reference list entries | 7.1 | 0.0016 | | | [CVE-2026-64306](https://patchblox.com/security/data/cve/CVE-2026-64306.md) | High | crypto: drbg - Fix returning success on failure in CTR_DRBG | 7.0 | 0.0016 | | | [CVE-2026-31530](https://patchblox.com/security/data/cve/CVE-2026-31530.md) | High | cxl/port: Fix use after free of parent_port in cxl_detach_ep() | 7.8 | 0.0016 | | | [CVE-2026-63921](https://patchblox.com/security/data/cve/CVE-2026-63921.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0016 | | | [CVE-2026-72061](https://patchblox.com/security/data/cve/CVE-2026-72061.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: sit: require CAP_NET_ADMIN in the device ne... | 8.8 | 0.0016 | | | [CVE-2026-52912](https://patchblox.com/security/data/cve/CVE-2026-52912.md) | High | netfilter: nf_queue: hold bridge skb->dev while queued | 7.8 | 0.0016 | | | [CVE-2026-64574](https://patchblox.com/security/data/cve/CVE-2026-64574.md) | High | wifi: mac80211: tear down new links on vif update error path | 7.8 | 0.0016 | | | [CVE-2026-64589](https://patchblox.com/security/data/cve/CVE-2026-64589.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix NULL-deref on adapter registratio... | n/a | 0.0016 | | | [CVE-2026-64603](https://patchblox.com/security/data/cve/CVE-2026-64603.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel-hid: Protect ACPI notify han... | n/a | 0.0016 | | | [CVE-2026-64247](https://patchblox.com/security/data/cve/CVE-2026-64247.md) | High | KVM: x86: hyper-v: Bound the bank index when querying sparse banks | 8.4 | 0.0016 | | | [CVE-2026-64015](https://patchblox.com/security/data/cve/CVE-2026-64015.md) | High | kernel-debug-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0016 | | | [CVE-2026-64526](https://patchblox.com/security/data/cve/CVE-2026-64526.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: tsconfig: fix missing ethnl_ops_complet... | n/a | 0.0016 | | | [CVE-2025-71075](https://patchblox.com/security/data/cve/CVE-2025-71075.md) | High | scsi: aic94xx: fix use-after-free in device removal path | 7.8 | 0.0015 | | | [CVE-2026-64118](https://patchblox.com/security/data/cve/CVE-2026-64118.md) | High | kernel-uek64k: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 8.4 | 0.0015 | | | [CVE-2026-68442](https://patchblox.com/security/data/cve/CVE-2026-68442.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to sp... | 7.8 | 0.0015 | | | [CVE-2026-68294](https://patchblox.com/security/data/cve/CVE-2026-68294.md) | High | net: qrtr: restrict socket creation to the initial network namespace | 8.8 | 0.0015 | | | [CVE-2026-72045](https://patchblox.com/security/data/cve/CVE-2026-72045.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: cn10k: restrict VF LMTLINE sharing... | 8.8 | 0.0015 | | | [CVE-2026-72051](https://patchblox.com/security/data/cve/CVE-2026-72051.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_tunnel: require CAP_NET_ADMIN in the de... | 8.8 | 0.0015 | | | [CVE-2026-72052](https://patchblox.com/security/data/cve/CVE-2026-72052.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_gre: require CAP_NET_ADMIN in the devic... | 8.8 | 0.0015 | | | [CVE-2026-72053](https://patchblox.com/security/data/cve/CVE-2026-72053.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ipip: require CAP_NET_ADMIN in the device n... | 8.8 | 0.0015 | | | [CVE-2026-72054](https://patchblox.com/security/data/cve/CVE-2026-72054.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ip_vti: require CAP_NET_ADMIN in the device... | 8.8 | 0.0015 | | | [CVE-2026-72055](https://patchblox.com/security/data/cve/CVE-2026-72055.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: net: ip6_vti: require CAP_NET_ADMIN in the devic... | 8.8 | 0.0015 | | | [CVE-2026-68086](https://patchblox.com/security/data/cve/CVE-2026-68086.md) | High | mm/khugepaged: write all dirty file folios when collapsing | 8.8 | 0.0015 | | | [CVE-2026-63941](https://patchblox.com/security/data/cve/CVE-2026-63941.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Correctly cap ZCR_EL2 provided by a... | 8.8 | 0.0015 | | | [CVE-2026-64456](https://patchblox.com/security/data/cve/CVE-2026-64456.md) | High | hwrng: virtio: clamp device-reported used.len at copy_data() | 8.4 | 0.0015 | | | [CVE-2026-64283](https://patchblox.com/security/data/cve/CVE-2026-64283.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: guest_memfd: Treat memslot binding offset+s... | 7.0 | 0.0015 | | | [CVE-2026-64315](https://patchblox.com/security/data/cve/CVE-2026-64315.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: crypto: caam - use print_hex_dump_devel to guard... | 7.0 | 0.0015 | | | [CVE-2026-64298](https://patchblox.com/security/data/cve/CVE-2026-64298.md) | High | NFSv4: include MAY_WRITE in open permission mask for O_TRUNC | 8.8 | 0.0015 | | | [CVE-2026-68432](https://patchblox.com/security/data/cve/CVE-2026-68432.md) | High | vxlan: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 | | | [CVE-2026-64446](https://patchblox.com/security/data/cve/CVE-2026-64446.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix heap buffer overflow in... | 7.8 | 0.0015 | | | [CVE-2026-68253](https://patchblox.com/security/data/cve/CVE-2026-68253.md) | High | drm/i915/hdcp: check streams[] bounds before overflow | 7.8 | 0.0014 | | | [CVE-2026-74378](https://patchblox.com/security/data/cve/CVE-2026-74378.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wq... | 7.8 | 0.0014 | | | [CVE-2026-64548](https://patchblox.com/security/data/cve/CVE-2026-64548.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: reject overflowing copy + len in b... | 8.4 | 0.0014 | | | [CVE-2026-64552](https://patchblox.com/security/data/cve/CVE-2026-64552.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix len check in receive_big() rece... | 8.4 | 0.0014 | | | [CVE-2026-63879](https://patchblox.com/security/data/cve/CVE-2026-63879.md) | High | drm/amdgpu: fix amdgpu_hmm_range_get_pages | 7.8 | 0.0014 | | | [CVE-2026-80731](https://patchblox.com/security/data/cve/CVE-2026-80731.md) | High | net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header | 7.8 | 0.0014 | | | [CVE-2026-64524](https://patchblox.com/security/data/cve/CVE-2026-64524.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/hyperv: validate resolution_count and fix WI... | 7.7 | 0.0014 | | | [CVE-2026-53059](https://patchblox.com/security/data/cve/CVE-2026-53059.md) | High | dm log: fix out-of-bounds write due to region_count overflow | 7.8 | 0.0014 | | | [CVE-2026-74510](https://patchblox.com/security/data/cve/CVE-2026-74510.md) | High | Bluetooth: mgmt: fix UAF in pair command cancellation | 9.8 | 0.0014 | | | [CVE-2026-68293](https://patchblox.com/security/data/cve/CVE-2026-68293.md) | High | net/mlx5: Fix MCIA register buffer overflow on 32 dword reads | 8.8 | 0.0014 | | | [CVE-2026-53091](https://patchblox.com/security/data/cve/CVE-2026-53091.md) | High | net: pull headers in qdisc_pkt_len_segs_init() | 8.4 | 0.0014 | | | [CVE-2026-64084](https://patchblox.com/security/data/cve/CVE-2026-64084.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) cap PDIO scan in get_mult... | 7.8 | 0.0014 | | | [CVE-2026-64085](https://patchblox.com/security/data/cve/CVE-2026-64085.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) bounce blackbox records t... | 7.8 | 0.0014 | | | [CVE-2026-64086](https://patchblox.com/security/data/cve/CVE-2026-64086.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) include PEC byte in pmbus... | 7.8 | 0.0014 | | | [CVE-2026-64463](https://patchblox.com/security/data/cve/CVE-2026-64463.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci_rt1711h: unregister TCPCI port... | 7.8 | 0.0014 | | | [CVE-2026-68222](https://patchblox.com/security/data/cve/CVE-2026-68222.md) | High | media: msi2500: Return queued buffers on start_streaming() failure | 7.8 | 0.0014 | | | [CVE-2026-72459](https://patchblox.com/security/data/cve/CVE-2026-72459.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: apparmor: aa_label_alloc use aa_label_free on al... | 7.8 | 0.0014 | | | [CVE-2026-68128](https://patchblox.com/security/data/cve/CVE-2026-68128.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_pro... | 8.8 | 0.0014 | | | [CVE-2026-68145](https://patchblox.com/security/data/cve/CVE-2026-68145.md) | High | iomap: fix out-of-bounds bitmap_set() with zero-length range | 8.8 | 0.0014 | | | [CVE-2026-68257](https://patchblox.com/security/data/cve/CVE-2026-68257.md) | High | drm/amdkfd: fix 32-bit overflow in CWSR total size calculation | 7.8 | 0.0014 | | | [CVE-2026-68370](https://patchblox.com/security/data/cve/CVE-2026-68370.md) | High | usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback | 7.8 | 0.0014 | | | [CVE-2026-64114](https://patchblox.com/security/data/cve/CVE-2026-64114.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0014 | | | [CVE-2026-68108](https://patchblox.com/security/data/cve/CVE-2026-68108.md) | High | drm/amdgpu/vce: fix integer overflow in image size | 8.8 | 0.0014 | | | [CVE-2026-68338](https://patchblox.com/security/data/cve/CVE-2026-68338.md) | High | net/packet: avoid fanout hook re-registration after unregister | 8.8 | 0.0014 | | | [CVE-2026-68149](https://patchblox.com/security/data/cve/CVE-2026-68149.md) | High | fs: preserve ACL_DONT_CACHE state in forget_cached_acl() | 8.4 | 0.0014 | | | [CVE-2026-53223](https://patchblox.com/security/data/cve/CVE-2026-53223.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: net: guard timestamp cmsgs to real error queue sk... | 8.1 | 0.0014 | | | [CVE-2026-64111](https://patchblox.com/security/data/cve/CVE-2026-64111.md) | High | kernel-zfcpdump-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0014 | | | [CVE-2026-64115](https://patchblox.com/security/data/cve/CVE-2026-64115.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.8 | 0.0014 | | | [CVE-2026-53033](https://patchblox.com/security/data/cve/CVE-2026-53033.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Take state lock for af_unix iter... | 7.8 | 0.0014 | | | [CVE-2026-68284](https://patchblox.com/security/data/cve/CVE-2026-68284.md) | High | bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() | 7.8 | 0.0014 | | | [CVE-2026-68335](https://patchblox.com/security/data/cve/CVE-2026-68335.md) | High | rds: drop incoming messages that cross network namespace boundaries | 7.8 | 0.0014 | | | [CVE-2026-64126](https://patchblox.com/security/data/cve/CVE-2026-64126.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.3 | 0.0014 | | | [CVE-2026-64099](https://patchblox.com/security/data/cve/CVE-2026-64099.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arr... | 7.8 | 0.0013 | | | [CVE-2026-68152](https://patchblox.com/security/data/cve/CVE-2026-68152.md) | High | amt: fix use-after-free in AMT delayed works | 7.8 | 0.0013 | | | [CVE-2026-53388](https://patchblox.com/security/data/cve/CVE-2026-53388.md) | High | fuse: re-lock request before replacing page cache folio | 8.8 | 0.0013 | | | [CVE-2026-63803](https://patchblox.com/security/data/cve/CVE-2026-63803.md) | High | hdlc_ppp: sync per-proto timers before freeing hdlc state | 8.4 | 0.0013 | | | [CVE-2026-64071](https://patchblox.com/security/data/cve/CVE-2026-64071.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: nvme-pci: fix use-after-free in nvme_free_host_m... | 7.8 | 0.0013 | | | [CVE-2026-64073](https://patchblox.com/security/data/cve/CVE-2026-64073.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: irq_work: Fix use-after-free in irq_work_single(... | 7.8 | 0.0013 | | | [CVE-2026-64279](https://patchblox.com/security/data/cve/CVE-2026-64279.md) | High | i2c: core: fix adapter deregistration race | 7.8 | 0.0013 | | | [CVE-2026-80530](https://patchblox.com/security/data/cve/CVE-2026-80530.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range reflink flag clearing is... | 7.8 | 0.0013 | | | [CVE-2026-53330](https://patchblox.com/security/data/cve/CVE-2026-53330.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp_ge... | 7.1 | 0.0013 | | | [CVE-2026-68200](https://patchblox.com/security/data/cve/CVE-2026-68200.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback... | 8.8 | 0.0013 | | | [CVE-2026-68273](https://patchblox.com/security/data/cve/CVE-2026-68273.md) | High | drm/amdgpu: Fix context pstate override handling | 8.8 | 0.0013 | | | [CVE-2026-53092](https://patchblox.com/security/data/cve/CVE-2026-53092.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Fix linked reg delta tracking when src_reg... | 7.8 | 0.0013 | | | [CVE-2026-63804](https://patchblox.com/security/data/cve/CVE-2026-63804.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2_qd_dealloc gfs... | 7.8 | 0.0013 | | | [CVE-2026-64423](https://patchblox.com/security/data/cve/CVE-2026-64423.md) | High | ipv4: igmp: remove multicast group from hash table on device destruction | 7.8 | 0.0013 | | | [CVE-2026-74481](https://patchblox.com/security/data/cve/CVE-2026-74481.md) | High | mm/page_reporting: use system_freezable_wq to fix UAF during suspend | 7.8 | 0.0013 | | | [CVE-2026-64411](https://patchblox.com/security/data/cve/CVE-2026-64411.md) | High | netfilter: ebtables: terminate table name before find_table_lock() | 7.1 | 0.0013 | | | [CVE-2026-64412](https://patchblox.com/security/data/cve/CVE-2026-64412.md) | High | netfilter: ebtables: module names must be null-terminated | 7.1 | 0.0013 | | | [CVE-2026-68258](https://patchblox.com/security/data/cve/CVE-2026-68258.md) | High | drm/amdkfd: Check bounds on CRIU restore queue type and mqd size | 7.1 | 0.0013 | | | [CVE-2026-68262](https://patchblox.com/security/data/cve/CVE-2026-68262.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvr_se... | 7.1 | 0.0013 | | | [CVE-2026-68348](https://patchblox.com/security/data/cve/CVE-2026-68348.md) | High | ASoC: tas2781: bound firmware description string parsing | 7.1 | 0.0013 | | | [CVE-2026-64002](https://patchblox.com/security/data/cve/CVE-2026-64002.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: ipv4: free net->ipv4.sysctl_local_reserved_ports... | 8.8 | 0.0013 | | | [CVE-2026-74527](https://patchblox.com/security/data/cve/CVE-2026-74527.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Block VFs from clobbering special... | 8.8 | 0.0013 | | | [CVE-2026-23306](https://patchblox.com/security/data/cve/CVE-2026-23306.md) | High | scsi: pm8001: Fix use-after-free in pm8001_queue_command() | 7.8 | 0.0013 | | | [CVE-2026-63985](https://patchblox.com/security/data/cve/CVE-2026-63985.md) | High | bpftool: [5.15.0-323.211.3.3] - Revert 'x86/alternatives: Add alt_instr.flags' (Harshit Mogalapalli) [Orabug: 39853924] [5.1... | 7.8 | 0.0013 | | | [CVE-2026-64097](https://patchblox.com/security/data/cve/CVE-2026-64097.md) | High | drm/amd/display: Validate GPIO pin LUT table size before iterating | 7.8 | 0.0013 | | | [CVE-2026-64133](https://patchblox.com/security/data/cve/CVE-2026-64133.md) | High | ALSA: asihpi: Fix potential OOB array access at reading cache | 7.8 | 0.0013 | | | [CVE-2026-68104](https://patchblox.com/security/data/cve/CVE-2026-68104.md) | High | drm/amdgpu: invoke pm_genpd_remove() before freeing genpd | 7.8 | 0.0013 | | | [CVE-2026-68106](https://patchblox.com/security/data/cve/CVE-2026-68106.md) | High | drm/amdgpu: fix division by zero with invalid uvd dimensions | 7.8 | 0.0013 | | | [CVE-2026-68245](https://patchblox.com/security/data/cve/CVE-2026-68245.md) | High | drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() | 7.8 | 0.0013 | | | [CVE-2026-68297](https://patchblox.com/security/data/cve/CVE-2026-68297.md) | High | tipc: fix u16 MTU truncation in media and bearer MTU validation | 7.8 | 0.0013 | | | [CVE-2026-74390](https://patchblox.com/security/data/cve/CVE-2026-74390.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix out-of-bounds write in irdma_cop... | 7.8 | 0.0013 | | | [CVE-2026-74397](https://patchblox.com/security/data/cve/CVE-2026-74397.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Fix transport-domain rollback and initi... | 7.8 | 0.0013 | | | [CVE-2026-64546](https://patchblox.com/security/data/cve/CVE-2026-64546.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: drm/edid: fix OOB read in drm_parse_tiled_block(... | 7.1 | 0.0013 | | | [CVE-2026-64109](https://patchblox.com/security/data/cve/CVE-2026-64109.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail->len in unix_strea... | 8.8 | 0.0013 | | | [CVE-2026-64555](https://patchblox.com/security/data/cve/CVE-2026-64555.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_... | 8.8 | 0.0013 | | | [CVE-2026-72497](https://patchblox.com/security/data/cve/CVE-2026-72497.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Add a max slot check for SQ The v... | 8.8 | 0.0013 | | | [CVE-2026-72499](https://patchblox.com/security/data/cve/CVE-2026-72499.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: Free CQ toggle page after firmware... | 8.8 | 0.0013 | | | [CVE-2026-64053](https://patchblox.com/security/data/cve/CVE-2026-64053.md) | High | kernel-64k-debug-devel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.3 | 0.0013 | | | [CVE-2026-64051](https://patchblox.com/security/data/cve/CVE-2026-64051.md) | High | kernel-rt-64k-modules-core: The kernel packages contain the Linux kernel, the core of any Linux operating system | 8.1 | 0.0013 | | | [CVE-2026-53031](https://patchblox.com/security/data/cve/CVE-2026-53031.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Validate node_id in arena_alloc_pages() ar... | 7.8 | 0.0013 | | | [CVE-2026-53094](https://patchblox.com/security/data/cve/CVE-2026-53094.md) | High | bpf: Fix stale offload->prog pointer after constant blinding | 7.8 | 0.0013 | | | [CVE-2026-53109](https://patchblox.com/security/data/cve/CVE-2026-53109.md) | High | powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy | 7.8 | 0.0013 | | | [CVE-2026-63987](https://patchblox.com/security/data/cve/CVE-2026-63987.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0013 | | | [CVE-2026-63995](https://patchblox.com/security/data/cve/CVE-2026-63995.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: validate start_cmd_payload_size f... | 7.8 | 0.0013 | | | [CVE-2026-63996](https://patchblox.com/security/data/cve/CVE-2026-63996.md) | High | kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system | 7.8 | 0.0013 | | | [CVE-2026-64001](https://patchblox.com/security/data/cve/CVE-2026-64001.md) | High | ALSA: pcm: oss: Fix setup list UAF on proc write error | 7.8 | 0.0013 | | | [CVE-2026-64134](https://patchblox.com/security/data/cve/CVE-2026-64134.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus iov_iter for silenc... | 7.8 | 0.0013 | | | [CVE-2026-64137](https://patchblox.com/security/data/cve/CVE-2026-64137.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netl... | 7.8 | 0.0013 | | | [CVE-2026-64217](https://patchblox.com/security/data/cve/CVE-2026-64217.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_i... | 7.8 | 0.0013 | | | [CVE-2026-64225](https://patchblox.com/security/data/cve/CVE-2026-64225.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed... | 7.8 | 0.0013 | | | [CVE-2026-64348](https://patchblox.com/security/data/cve/CVE-2026-64348.md) | High | usb: free iso schedules on failed submit | 7.8 | 0.0013 | | | [CVE-2026-64354](https://patchblox.com/security/data/cve/CVE-2026-64354.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Validate BTF repeated field counts before e... | 7.8 | 0.0013 | | | [CVE-2026-64365](https://patchblox.com/security/data/cve/CVE-2026-64365.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved: HID: letsketch: fix UAF on inrange_timer at driv... | 7.8 | 0.0013 | | | [CVE-2026-64381](https://patchblox.com/security/data/cve/CVE-2026-64381.md) | High | smb: client: Fix next buffer leak in receive_encrypted_standard() | 7.8 | 0.0013 | | | [CVE-2026-68374](https://patchblox.com/security/data/cve/CVE-2026-68374.md) | High | usb: core: sysfs: add lock to bos_descriptors_read() | 7.8 | 0.0013 | | | [CVE-2026-68392](https://patchblox.com/security/data/cve/CVE-2026-68392.md) | High | Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync | 7.8 | 0.0013 | | Showing 500 of 885 CVEs; the web page lists them all. --- Data as of 2026-11-10T13:56:55Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.