{
  "fix": "SUSE-SU-2026:2722-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-2722-1",
  "summary": "SUSE-SU-2026:2722-1, released July 1, 2026, fixes 66 CVEs across 10 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 10 packages",
  "released": "2026-07-01T13:35:33Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2025-10263, rated Critical",
  "supported": true,
  "cveCount": 66,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.006,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:2722-1",
  "appliesTo": [
    {
      "product": "kernel-64kb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.63.1",
      "supported": true
    },
    {
      "product": "kernel-azure",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.63.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.63.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.63.1.150700.17.37.1",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.63.1",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP7_Update_17",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-update-17",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.63.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.63.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.63.1",
      "supported": true
    },
    {
      "product": "kernel-zfcpdump",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.63.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2025-10263",
      "url": "https://patchblox.com/security/cve/CVE-2025-10263",
      "title": "ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.3,
      "epss": 0.00544,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68822",
      "url": "https://patchblox.com/security/cve/CVE-2025-68822",
      "title": "Input: alps - fix use-after-free bugs caused by dev3_register_work",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00178,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43083",
      "url": "https://patchblox.com/security/cve/CVE-2026-43083",
      "title": "net: ioam6: fix OOB and missing lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.006,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43405",
      "url": "https://patchblox.com/security/cve/CVE-2026-43405",
      "title": "kernel-64kb: libceph: Use u32 for non-negative values in ceph_monmap_decode() (bsc#1264741).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00598,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43101",
      "url": "https://patchblox.com/security/cve/CVE-2026-43101",
      "title": "ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00585,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31414",
      "url": "https://patchblox.com/security/cve/CVE-2026-31414",
      "title": "netfilter: nf_conntrack_expect: use expect-\u003Ehelper",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00581,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46119",
      "url": "https://patchblox.com/security/cve/CVE-2026-46119",
      "title": "libceph: Fix slab-out-of-bounds access in auth message processing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46037",
      "url": "https://patchblox.com/security/cve/CVE-2026-46037",
      "title": "ipv4: icmp: validate reply type before using icmp_pointers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.2,
      "epss": 0.00512,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43158",
      "url": "https://patchblox.com/security/cve/CVE-2026-43158",
      "title": "kernel-64kb: xfs: fix freemap adjustments when adding xattrs to leaf blocks (bsc#1264595).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00469,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43187",
      "url": "https://patchblox.com/security/cve/CVE-2026-43187",
      "title": "kernel-64kb: xfs: delete attr leaf freemap entries when empty (bsc#1264603).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00469,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46244",
      "url": "https://patchblox.com/security/cve/CVE-2026-46244",
      "title": "netfilter: nft_inner: Fix IPv6 inner_thoff desync",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.1,
      "epss": 0.00418,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43469",
      "url": "https://patchblox.com/security/cve/CVE-2026-43469",
      "title": "kernel-64kb: xprtrdma: Decrement re_receiving on the early exit paths (bsc#1265143).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00399,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46273",
      "url": "https://patchblox.com/security/cve/CVE-2026-46273",
      "title": "ibmveth: Disable GSO for packets with small MSS",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.6,
      "epss": 0.00389,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43345",
      "url": "https://patchblox.com/security/cve/CVE-2026-43345",
      "title": "kernel-64kb: net: ipa: fix event ring index not programmed for IPA v5.0\u002B (bsc#1265103).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00353,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43112",
      "url": "https://patchblox.com/security/cve/CVE-2026-43112",
      "title": "kernel-64kb: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00352,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43198",
      "url": "https://patchblox.com/security/cve/CVE-2026-43198",
      "title": "tcp: fix potential race in tcp_v6_syn_recv_sock()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00298,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43239",
      "url": "https://patchblox.com/security/cve/CVE-2026-43239",
      "title": "kernel-64kb: smb: client: prevent races in -\u003Equery_interfaces() (bsc#1264444).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00294,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45940",
      "url": "https://patchblox.com/security/cve/CVE-2026-45940",
      "title": "net: stmmac: fix oops when split header is enabled",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31693",
      "url": "https://patchblox.com/security/cve/CVE-2026-31693",
      "title": "kernel-64kb: cifs: some missing initializations on replay (bsc#1267744).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31674",
      "url": "https://patchblox.com/security/cve/CVE-2026-31674",
      "title": "netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23392",
      "url": "https://patchblox.com/security/cve/CVE-2026-23392",
      "title": "netfilter: nf_tables: release flowtable after rcu grace period on error",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31680",
      "url": "https://patchblox.com/security/cve/CVE-2026-31680",
      "title": "net: ipv6: flowlabel: defer exclusive option free until RCU teardown",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43339",
      "url": "https://patchblox.com/security/cve/CVE-2026-43339",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nipv6: prevent possible UaF in addrconf_permanent_...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.1,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43049",
      "url": "https://patchblox.com/security/cve/CVE-2026-43049",
      "title": "HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43491",
      "url": "https://patchblox.com/security/cve/CVE-2026-43491",
      "title": "net: qrtr: ns: Limit the maximum server registration per node",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46123",
      "url": "https://patchblox.com/security/cve/CVE-2026-46123",
      "title": "kernel-default: Bluetooth: virtio_bt: clamp rx length before skb_put (bsc#1267621).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46162",
      "url": "https://patchblox.com/security/cve/CVE-2026-46162",
      "title": "kernel-64kb: ice: fix double free in ice_sf_eth_activate() error path (bsc#1266840).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31452",
      "url": "https://patchblox.com/security/cve/CVE-2026-31452",
      "title": "ext4: convert inline data to extents when truncate exceeds inline size",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31469",
      "url": "https://patchblox.com/security/cve/CVE-2026-31469",
      "title": "virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46172",
      "url": "https://patchblox.com/security/cve/CVE-2026-46172",
      "title": "kernel-64kb: ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() (bsc#1266903).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43028",
      "url": "https://patchblox.com/security/cve/CVE-2026-43028",
      "title": "kernel-64kb: netfilter: x_tables: ensure names are nul-terminated (bsc#1263934).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45840",
      "url": "https://patchblox.com/security/cve/CVE-2026-45840",
      "title": "kernel-uek-debug-modules-extra: openvswitch: cap upcall PID array size and pre-size vport replies (Weiming Shi) [Orabug: 39451479]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45894",
      "url": "https://patchblox.com/security/cve/CVE-2026-45894",
      "title": "iommu/vt-d: Clear Present bit before tearing down PASID entry",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45862",
      "url": "https://patchblox.com/security/cve/CVE-2026-45862",
      "title": "kernel-64kb: iommu/vt-d: Flush cache for PASID table before using it (bsc#1266705).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31453",
      "url": "https://patchblox.com/security/cve/CVE-2026-31453",
      "title": "xfs: avoid dereferencing log items after push callbacks",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46150",
      "url": "https://patchblox.com/security/cve/CVE-2026-46150",
      "title": "fanotify: fix false positive on permission events",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31759",
      "url": "https://patchblox.com/security/cve/CVE-2026-31759",
      "title": "kernel-default: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31555",
      "url": "https://patchblox.com/security/cve/CVE-2026-31555",
      "title": "futex: Clear stale exiting pointer in futex_lock_pi() retry path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46160",
      "url": "https://patchblox.com/security/cve/CVE-2026-46160",
      "title": "btrfs: fix missing last_unlink_trans update when removing a directory",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31500",
      "url": "https://patchblox.com/security/cve/CVE-2026-31500",
      "title": "Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43077",
      "url": "https://patchblox.com/security/cve/CVE-2026-43077",
      "title": "kernel-default: crypto: algif_aead - Fix minimum RX size check for decryption (bsc#1264470).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31665",
      "url": "https://patchblox.com/security/cve/CVE-2026-31665",
      "title": "netfilter: nft_ct: fix use-after-free in timeout object destroy",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31492",
      "url": "https://patchblox.com/security/cve/CVE-2026-31492",
      "title": "RDMA/irdma: Initialize free_qp completion before using it",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31593",
      "url": "https://patchblox.com/security/cve/CVE-2026-31593",
      "title": "KVM: SEV: Reject attempts to sync VMSA of an already-launched/encrypted vCPU",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46259",
      "url": "https://patchblox.com/security/cve/CVE-2026-46259",
      "title": "kernel-64kb: procfs: fix missing RCU protection when reading real_parent in do_task_stat() (bsc#1267685).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.4,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43023",
      "url": "https://patchblox.com/security/cve/CVE-2026-43023",
      "title": "kernel-default: Bluetooth: SCO: fix race conditions in sco_sock_connect() (bsc#1264137).",
      "priority": "High",
      "severity": "moderate",
      "cvss": 7.8,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31429",
      "url": "https://patchblox.com/security/cve/CVE-2026-31429",
      "title": "net: skb: fix cross-cache free of KFENCE-allocated skb head",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.6,
      "epss": 0.00259,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45961",
      "url": "https://patchblox.com/security/cve/CVE-2026-45961",
      "title": "kernel-64kb: gfs2: fix memory leaks in gfs2_fill_super error path (bsc#1266933).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00163,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45870",
      "url": "https://patchblox.com/security/cve/CVE-2026-45870",
      "title": "kernel-64kb: SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (bsc#1266704).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45964",
      "url": "https://patchblox.com/security/cve/CVE-2026-45964",
      "title": "kernel-64kb: SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (bsc#1266698).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45965",
      "url": "https://patchblox.com/security/cve/CVE-2026-45965",
      "title": "kernel-64kb: apparmor: fix invalid deref of rawdata when export_binary is unset (bsc#1267208).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31592",
      "url": "https://patchblox.com/security/cve/CVE-2026-31592",
      "title": "KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm-\u003Elock",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.6,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31560",
      "url": "https://patchblox.com/security/cve/CVE-2026-31560",
      "title": "spi: spi-dw-dma: fix print error log when wait finish transaction",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43036",
      "url": "https://patchblox.com/security/cve/CVE-2026-43036",
      "title": "net: use skb_header_pointer() for TCPv4 GSO frag_off check",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45841",
      "url": "https://patchblox.com/security/cve/CVE-2026-45841",
      "title": "netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31495",
      "url": "https://patchblox.com/security/cve/CVE-2026-31495",
      "title": "netfilter: ctnetlink: use netlink policy range checks",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31752",
      "url": "https://patchblox.com/security/cve/CVE-2026-31752",
      "title": "kernel-64kb: bridge: br_nd_send: validate ND option lengths (bsc#1264045).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43024",
      "url": "https://patchblox.com/security/cve/CVE-2026-43024",
      "title": "kernel-64kb: netfilter: nf_tables: reject immediate NF_QUEUE verdict (bsc#1263930).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43035",
      "url": "https://patchblox.com/security/cve/CVE-2026-43035",
      "title": "kernel-64kb: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak (bsc#1263996).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46101",
      "url": "https://patchblox.com/security/cve/CVE-2026-46101",
      "title": "bpftool: netfilter: reject zero shift in nft_bitwise (Kai Ma) [Orabug: 39452465]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45974",
      "url": "https://patchblox.com/security/cve/CVE-2026-45974",
      "title": "kernel-64kb: btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found (bsc#1266922).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46005",
      "url": "https://patchblox.com/security/cve/CVE-2026-46005",
      "title": "xfs: fix a resource leak in xfs_alloc_buftarg()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43171",
      "url": "https://patchblox.com/security/cve/CVE-2026-43171",
      "title": "kernel-64kb: EFI/CPER: do not dump the entire memory region (bsc#1264549).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31664",
      "url": "https://patchblox.com/security/cve/CVE-2026-31664",
      "title": "xfrm: clear trailing padding in build_polexpire()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43119",
      "url": "https://patchblox.com/security/cve/CVE-2026-43119",
      "title": "Bluetooth: hci_sync: annotate data-races around hdev-\u003Ereq_status",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31499",
      "url": "https://patchblox.com/security/cve/CVE-2026-31499",
      "title": "kernel-64kb: Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() (bsc#1262674).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}