{
  "fix": "SUSE-SU-2026:2482-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-2482-1",
  "summary": "SUSE-SU-2026:2482-1, released June 22, 2026, fixes 103 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: High.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 10 packages",
  "released": "2026-06-22T11:10:39Z",
  "priority": "High",
  "priorityTier": 3,
  "priorityReason": "Closes CVE-2026-43284, high severity",
  "supported": true,
  "cveCount": 103,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.94194,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:2482-1",
  "appliesTo": [
    {
      "product": "kernel-64kb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.60.1",
      "supported": true
    },
    {
      "product": "kernel-azure",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.60.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.60.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.60.1.150700.17.35.4",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.60.1",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP7_Update_16",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-update-16",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.2",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.60.2",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.60.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.60.1",
      "supported": true
    },
    {
      "product": "kernel-zfcpdump",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.60.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-43284",
      "url": "https://patchblox.com/security/cve/CVE-2026-43284",
      "title": "xfrm: esp: avoid in-place decrypt on shared skb frags",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.94194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43499",
      "url": "https://patchblox.com/security/cve/CVE-2026-43499",
      "title": "rtmutex: Use waiter::task instead of current in remove_waiter()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.05372,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43501",
      "url": "https://patchblox.com/security/cve/CVE-2026-43501",
      "title": "ipv6: rpl: reserve mac_len headroom when recompressed SRH grows",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00732,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43407",
      "url": "https://patchblox.com/security/cve/CVE-2026-43407",
      "title": "kernel-64kb: libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() (bsc#1265020).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.1,
      "epss": 0.00656,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43406",
      "url": "https://patchblox.com/security/cve/CVE-2026-43406",
      "title": "kernel-64kb: libceph: prevent potential out-of-bounds reads in process_message_header() (bsc#1265073).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.1,
      "epss": 0.00613,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43414",
      "url": "https://patchblox.com/security/cve/CVE-2026-43414",
      "title": "scsi: qla2xxx: Completely fix fcport double free",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.006,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45898",
      "url": "https://patchblox.com/security/cve/CVE-2026-45898",
      "title": "kernel-64kb: RDMA/iwcm: Fix workqueue list corruption by removing work_list (bsc#1266888).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00529,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46043",
      "url": "https://patchblox.com/security/cve/CVE-2026-46043",
      "title": "RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43341",
      "url": "https://patchblox.com/security/cve/CVE-2026-43341",
      "title": "kernel-64kb: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00512,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46110",
      "url": "https://patchblox.com/security/cve/CVE-2026-46110",
      "title": "kernel-64kb: net: stmmac: rename STMMAC_GET_ENTRY() -\u003E STMMAC_NEXT_ENTRY() (bsc#1266759).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00511,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31448",
      "url": "https://patchblox.com/security/cve/CVE-2026-31448",
      "title": "ext4: avoid infinite loops caused by residual data",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.00499,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46024",
      "url": "https://patchblox.com/security/cve/CVE-2026-46024",
      "title": "libceph: Prevent potential null-ptr-deref in ceph_handle_auth_reply()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46114",
      "url": "https://patchblox.com/security/cve/CVE-2026-46114",
      "title": "RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46243",
      "url": "https://patchblox.com/security/cve/CVE-2026-46243",
      "title": "smb: client: reject userspace cifs.spnego descriptions",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45843",
      "url": "https://patchblox.com/security/cve/CVE-2026-45843",
      "title": "slip: bound decode() reads against the compressed packet length",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00398,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31613",
      "url": "https://patchblox.com/security/cve/CVE-2026-31613",
      "title": "smb: client: fix OOB reads parsing symlink error response",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00387,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43296",
      "url": "https://patchblox.com/security/cve/CVE-2026-43296",
      "title": "kernel-64kb: octeontx2-af: Workaround SQM/PSE stalls by disabling sticky (bsc#1264805).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00387,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43249",
      "url": "https://patchblox.com/security/cve/CVE-2026-43249",
      "title": "9p/xen: protect xen_9pfs_front_free against concurrent calls",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00317,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31464",
      "url": "https://patchblox.com/security/cve/CVE-2026-31464",
      "title": "scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00275,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43362",
      "url": "https://patchblox.com/security/cve/CVE-2026-43362",
      "title": "kernel-64kb: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00258,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31629",
      "url": "https://patchblox.com/security/cve/CVE-2026-31629",
      "title": "nfc: llcp: add missing return after LLCP_CLOSED checks",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00252,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68324",
      "url": "https://patchblox.com/security/cve/CVE-2025-68324",
      "title": "scsi: imm: Fix use-after-free bug caused by unfinished delayed work",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45878",
      "url": "https://patchblox.com/security/cve/CVE-2026-45878",
      "title": "kernel-debug-devel: kernel: drm/amdkfd: Fix watch_id bounds checking in debug address watch v2",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00207,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45852",
      "url": "https://patchblox.com/security/cve/CVE-2026-45852",
      "title": "kernel-default: RDMA/rxe: Fix double free in rxe_srq_from_init (bsc#1266711).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00199,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46113",
      "url": "https://patchblox.com/security/cve/CVE-2026-46113",
      "title": "kernel-zfcpdump-modules-extra: kernel: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45856",
      "url": "https://patchblox.com/security/cve/CVE-2026-45856",
      "title": "kernel-64kb: RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (bsc#1266720).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00187,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45984",
      "url": "https://patchblox.com/security/cve/CVE-2026-45984",
      "title": "kernel-default: gfs2: Move the inode glock locking to gfs2_file_buffered_write (bsc#1267214).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45932",
      "url": "https://patchblox.com/security/cve/CVE-2026-45932",
      "title": "bpf: Fix tcx/netkit detach permissions when prog fd isn\u0027t given",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.3,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23327",
      "url": "https://patchblox.com/security/cve/CVE-2026-23327",
      "title": "cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43059",
      "url": "https://patchblox.com/security/cve/CVE-2026-43059",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43009",
      "url": "https://patchblox.com/security/cve/CVE-2026-43009",
      "title": "bpf: Fix incorrect pruning due to atomic fetch precision tracking",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31493",
      "url": "https://patchblox.com/security/cve/CVE-2026-31493",
      "title": "RDMA/efa: Fix use of completion ctx after free",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45886",
      "url": "https://patchblox.com/security/cve/CVE-2026-45886",
      "title": "kernel-default: bpf: Fix bpf_xdp_store_bytes proto for read-only arg (bsc#1266810).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46111",
      "url": "https://patchblox.com/security/cve/CVE-2026-46111",
      "title": "Bluetooth: hci_conn: fix potential UAF in create_big_sync",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46181",
      "url": "https://patchblox.com/security/cve/CVE-2026-46181",
      "title": "RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46209",
      "url": "https://patchblox.com/security/cve/CVE-2026-46209",
      "title": "kernel-uek-debug: drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (Ashutosh Desai) [Orabug: 39460...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46176",
      "url": "https://patchblox.com/security/cve/CVE-2026-46176",
      "title": "RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46021",
      "url": "https://patchblox.com/security/cve/CVE-2026-46021",
      "title": "thermal: core: Fix thermal zone governor cleanup issues",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23444",
      "url": "https://patchblox.com/security/cve/CVE-2026-23444",
      "title": "wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23359",
      "url": "https://patchblox.com/security/cve/CVE-2026-23359",
      "title": "bpf: Fix stack-out-of-bounds write in devmap",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0014,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31446",
      "url": "https://patchblox.com/security/cve/CVE-2026-31446",
      "title": "ext4: fix use-after-free in update_super_work when racing with umount",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43150",
      "url": "https://patchblox.com/security/cve/CVE-2026-43150",
      "title": "kernel-64kb: perf/arm-cmn: Ensure dtm_idx is big enough (bsc#1264415).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43206",
      "url": "https://patchblox.com/security/cve/CVE-2026-43206",
      "title": "kernel-core: kernel: drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43030",
      "url": "https://patchblox.com/security/cve/CVE-2026-43030",
      "title": "kernel-64kb: bpf: Fix regsafe() for pointers to packet (bsc#1264000).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31678",
      "url": "https://patchblox.com/security/cve/CVE-2026-31678",
      "title": "openvswitch: defer tunnel netdev_put to RCU release",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31673",
      "url": "https://patchblox.com/security/cve/CVE-2026-31673",
      "title": "af_unix: read UNIX_DIAG_VFS data under unix_state_lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46004",
      "url": "https://patchblox.com/security/cve/CVE-2026-46004",
      "title": "ALSA: caiaq: Handle probe errors properly",
      "priority": "High",
      "severity": "Low",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31518",
      "url": "https://patchblox.com/security/cve/CVE-2026-31518",
      "title": "esp: fix skb leak with espintcp and async crypto",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43040",
      "url": "https://patchblox.com/security/cve/CVE-2026-43040",
      "title": "kernel-64kb: net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31396",
      "url": "https://patchblox.com/security/cve/CVE-2026-31396",
      "title": "kernel-64kb: net: macb: fix use-after-free access to PTP clock (bsc#1261791).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45970",
      "url": "https://patchblox.com/security/cve/CVE-2026-45970",
      "title": "kernel-livepatch-SLE15-SP6_Update_12: bonding: alb: fix UAF in rlb_arp_recv during bond up/down (bsc#1267206).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31454",
      "url": "https://patchblox.com/security/cve/CVE-2026-31454",
      "title": "xfs: save ailp before dropping the AIL lock in push callbacks",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31455",
      "url": "https://patchblox.com/security/cve/CVE-2026-31455",
      "title": "xfs: stop reclaim before pushing AIL during unmount",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31758",
      "url": "https://patchblox.com/security/cve/CVE-2026-31758",
      "title": "kernel-default-base: usb: usbtmc: Flush anchored URBs in usbtmc_release (bsc#1264093).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31614",
      "url": "https://patchblox.com/security/cve/CVE-2026-31614",
      "title": "kernel-64kb: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31774",
      "url": "https://patchblox.com/security/cve/CVE-2026-31774",
      "title": "kernel-64kb: io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() (bsc#1264040).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45910",
      "url": "https://patchblox.com/security/cve/CVE-2026-45910",
      "title": "kernel-default: RDMA/rxe: Fix race condition in QP timer handlers (bsc#1266889).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46094",
      "url": "https://patchblox.com/security/cve/CVE-2026-46094",
      "title": "ext4: fix bounds check in check_xattrs() to prevent out-of-bounds access",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43052",
      "url": "https://patchblox.com/security/cve/CVE-2026-43052",
      "title": "wifi: mac80211: check tdls flag in ieee80211_tdls_oper",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45983",
      "url": "https://patchblox.com/security/cve/CVE-2026-45983",
      "title": "kernel-64kb: nfsd: never defer requests during idmap lookup (bsc#1266697).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31591",
      "url": "https://patchblox.com/security/cve/CVE-2026-31591",
      "title": "KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish",
      "priority": "High",
      "severity": "Important",
      "cvss": 7,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31703",
      "url": "https://patchblox.com/security/cve/CVE-2026-31703",
      "title": "kernel-64kb: writeback: Fix use after free in inode_switch_wbs_work_fn() (bsc#1263883).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43109",
      "url": "https://patchblox.com/security/cve/CVE-2026-43109",
      "title": "x86: shadow stacks: proper error handling for mmap lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46090",
      "url": "https://patchblox.com/security/cve/CVE-2026-46090",
      "title": "ALSA: aloop: Fix peer runtime UAF during format-change stop",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31516",
      "url": "https://patchblox.com/security/cve/CVE-2026-31516",
      "title": "xfrm: prevent policy_hthresh.work from racing with netns teardown",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46157",
      "url": "https://patchblox.com/security/cve/CVE-2026-46157",
      "title": "ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31473",
      "url": "https://patchblox.com/security/cve/CVE-2026-31473",
      "title": "media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-3150",
      "url": "https://patchblox.com/security/cve/CVE-2026-3150",
      "title": "kernel-64kb: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169).",
      "priority": "Routine",
      "epss": 0.00304,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38549",
      "url": "https://patchblox.com/security/cve/CVE-2025-38549",
      "title": "kernel-64kb: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (bsc#1248235).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43360",
      "url": "https://patchblox.com/security/cve/CVE-2026-43360",
      "title": "kernel-64kb: btrfs: fix transaction abort on file creation due to name hash collision (bsc#1264720).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31767",
      "url": "https://patchblox.com/security/cve/CVE-2026-31767",
      "title": "drm/i915/dsi: Don\u0027t do DSC horizontal timing adjustments in command mode",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00161,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43234",
      "url": "https://patchblox.com/security/cve/CVE-2026-43234",
      "title": "team: avoid NETDEV_CHANGEMTU event when unregistering slave",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46079",
      "url": "https://patchblox.com/security/cve/CVE-2026-46079",
      "title": "rbd: fix null-ptr-deref when device_add_disk() fails",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23438",
      "url": "https://patchblox.com/security/cve/CVE-2026-23438",
      "title": "net: mvpp2: guard flow control update with global_tx_fc in buffer switching",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31596",
      "url": "https://patchblox.com/security/cve/CVE-2026-31596",
      "title": "ocfs2: handle invalid dinode in ocfs2_group_extend",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.6,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23303",
      "url": "https://patchblox.com/security/cve/CVE-2026-23303",
      "title": "smb: client: Don\u0027t log plaintext credentials in cifs_set_cifscreds",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43026",
      "url": "https://patchblox.com/security/cve/CVE-2026-43026",
      "title": "kernel-64kb: netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent (bsc#1263932).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 6.1,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31546",
      "url": "https://patchblox.com/security/cve/CVE-2026-31546",
      "title": "net: bonding: fix NULL deref in bond_debug_rlb_hash_show",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45842",
      "url": "https://patchblox.com/security/cve/CVE-2026-45842",
      "title": "slip: reject VJ receive packets on instances with no rstate array",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43261",
      "url": "https://patchblox.com/security/cve/CVE-2026-43261",
      "title": "kernel-64kb: arm64: Add support for TSV110 Spectre-BHB mitigation (bsc#1264430).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45846",
      "url": "https://patchblox.com/security/cve/CVE-2026-45846",
      "title": "bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31590",
      "url": "https://patchblox.com/security/cve/CVE-2026-31590",
      "title": "KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43013",
      "url": "https://patchblox.com/security/cve/CVE-2026-43013",
      "title": "kernel-64kb: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43333",
      "url": "https://patchblox.com/security/cve/CVE-2026-43333",
      "title": "kernel-64kb: bpf: reject direct access to nullable PTR_TO_BUF pointers (bsc#1264726).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43359",
      "url": "https://patchblox.com/security/cve/CVE-2026-43359",
      "title": "kernel-64kb: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43361",
      "url": "https://patchblox.com/security/cve/CVE-2026-43361",
      "title": "kernel-64kb: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43411",
      "url": "https://patchblox.com/security/cve/CVE-2026-43411",
      "title": "kernel-64kb: tipc: fix divide-by-zero in tipc_sk_filter_connect() (bsc#1264672).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43413",
      "url": "https://patchblox.com/security/cve/CVE-2026-43413",
      "title": "kernel-64kb: scsi: hisi_sas: Fix NULL pointer exception during user_scan() (bsc#1264671).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46083",
      "url": "https://patchblox.com/security/cve/CVE-2026-46083",
      "title": "spi: fix resource leaks on device setup failure",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43325",
      "url": "https://patchblox.com/security/cve/CVE-2026-43325",
      "title": "kernel-64kb: wifi: iwlwifi: mvm: don\u0027t send a 6E related command when not supported (bsc#1265110).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31671",
      "url": "https://patchblox.com/security/cve/CVE-2026-31671",
      "title": "xfrm_user: fix info leak in build_report()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43065",
      "url": "https://patchblox.com/security/cve/CVE-2026-43065",
      "title": "kernel-64kb: ext4: always drain queued discard work in ext4_mb_release() (bsc#1264243).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43066",
      "url": "https://patchblox.com/security/cve/CVE-2026-43066",
      "title": "kernel-64kb: ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths (bsc#1264245).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43068",
      "url": "https://patchblox.com/security/cve/CVE-2026-43068",
      "title": "kernel-64kb: ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() (bsc#1264255).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43470",
      "url": "https://patchblox.com/security/cve/CVE-2026-43470",
      "title": "kernel-64kb: nfs: return EISDIR on nfs3_proc_create if d_alias is a dir (bsc#1265128).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43338",
      "url": "https://patchblox.com/security/cve/CVE-2026-43338",
      "title": "btrfs: reserve enough transaction items for qgroup ioctls",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00115,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31655",
      "url": "https://patchblox.com/security/cve/CVE-2026-31655",
      "title": "pmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43054",
      "url": "https://patchblox.com/security/cve/CVE-2026-43054",
      "title": "kernel-64kb: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43455",
      "url": "https://patchblox.com/security/cve/CVE-2026-43455",
      "title": "kernel-64kb: net: mctp: Ensure keys maintain only one ref to corresponding dev (bsc#1264765).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43483",
      "url": "https://patchblox.com/security/cve/CVE-2026-43483",
      "title": "kernel-64kb: KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated (bsc#1265240).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46159",
      "url": "https://patchblox.com/security/cve/CVE-2026-46159",
      "title": "btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00098,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31480",
      "url": "https://patchblox.com/security/cve/CVE-2026-31480",
      "title": "tracing: Fix potential deadlock in cpu hotplug with osnoise",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43252",
      "url": "https://patchblox.com/security/cve/CVE-2026-43252",
      "title": "kernel-64kb: mptcp: pm: in-kernel: always set ID as avail when rm endp (bsc#1264300).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}