{
  "fix": "SUSE-SU-2026:2800-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-2800-1",
  "summary": "SUSE-SU-2026:2800-1, released July 8, 2026, fixes 105 CVEs across 10 products. 2 of them are being exploited (CVE-2026-53266); 2 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 10 packages",
  "released": "2026-07-08T14:59:38Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2026-53266, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 105,
  "exploitedCveCount": 2,
  "kevCveCount": 2,
  "ransomwareCveCount": 0,
  "maxEpss": 0.94194,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:2800-1",
  "appliesTo": [
    {
      "product": "kernel-64kb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.66.1",
      "supported": true
    },
    {
      "product": "kernel-azure",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.66.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.66.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.66.1.150700.17.39.1",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.66.2",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP7_Update_18",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-update-18",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.66.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.66.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.66.1",
      "supported": true
    },
    {
      "product": "kernel-zfcpdump",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.66.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-53266",
      "url": "https://patchblox.com/security/cve/CVE-2026-53266",
      "title": "netfilter: bridge: make ebt_snat ARP rewrite writable",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00934,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53362",
      "url": "https://patchblox.com/security/cve/CVE-2026-53362",
      "title": "ipv6: account for fraggap on the paged allocation path",
      "priority": "Patch now",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00709,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46266",
      "url": "https://patchblox.com/security/cve/CVE-2026-46266",
      "title": "kernel-default: inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP (bsc#1267684).",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00465,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53053",
      "url": "https://patchblox.com/security/cve/CVE-2026-53053",
      "title": "iommu/amd: Fix clone_alias() to use the original device\u0027s devid",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43284",
      "url": "https://patchblox.com/security/cve/CVE-2026-43284",
      "title": "xfrm: esp: avoid in-place decrypt on shared skb frags",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.94194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53359",
      "url": "https://patchblox.com/security/cve/CVE-2026-53359",
      "title": "kpatch-patch: A flaw was found in the Linux kernel\u0027s Kernel-based Virtual Machine (KVM) x86 shadow paging mechanism",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.01368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46331",
      "url": "https://patchblox.com/security/cve/CVE-2026-46331",
      "title": "net/sched: fix pedit partial COW leading to page cache corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00639,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46133",
      "url": "https://patchblox.com/security/cve/CVE-2026-46133",
      "title": "RDMA/rxe: Reject unknown opcodes before ICRC processing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00574,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46185",
      "url": "https://patchblox.com/security/cve/CVE-2026-46185",
      "title": "smb/client: fix out-of-bounds read in symlink_data()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00525,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52954",
      "url": "https://patchblox.com/security/cve/CVE-2026-52954",
      "title": "libceph: handle rbtree insertion error in decode_choose_args()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52957",
      "url": "https://patchblox.com/security/cve/CVE-2026-52957",
      "title": "libceph: Fix potential null-ptr-deref in decode_choose_args()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43074",
      "url": "https://patchblox.com/security/cve/CVE-2026-43074",
      "title": "kernel-source: eventpoll: defer struct eventpoll free to RCU grace period (bsc#1264263).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00482,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46124",
      "url": "https://patchblox.com/security/cve/CVE-2026-46124",
      "title": "kernel-64kb: isofs: validate block number from NFS file handle in isofs_export_iget (bsc#1266847).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.00476,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43233",
      "url": "https://patchblox.com/security/cve/CVE-2026-43233",
      "title": "kernel-64kb: netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (bsc#1264337).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.2,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46289",
      "url": "https://patchblox.com/security/cve/CVE-2026-46289",
      "title": "lib/scatterlist: fix length calculations in extract_kvec_to_sg",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00457,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53071",
      "url": "https://patchblox.com/security/cve/CVE-2026-53071",
      "title": "Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00429,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43336",
      "url": "https://patchblox.com/security/cve/CVE-2026-43336",
      "title": "kernel-64kb: lib/crypto: chacha: Zeroize permuted_state before it leaves scope (bsc#1265113).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00425,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31450",
      "url": "https://patchblox.com/security/cve/CVE-2026-31450",
      "title": "ext4: publish jinode after initialization",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00412,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43139",
      "url": "https://patchblox.com/security/cve/CVE-2026-43139",
      "title": "kernel-64kb: xfrm6: fix uninitialized saddr in xfrm6_get_saddr() (bsc#1264294).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.6,
      "epss": 0.00375,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43502",
      "url": "https://patchblox.com/security/cve/CVE-2026-43502",
      "title": "net/rds: handle zerocopy send cleanup before the message is queued",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00324,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31771",
      "url": "https://patchblox.com/security/cve/CVE-2026-31771",
      "title": "Bluetooth: hci_event: move wake reason storage into validated event handlers",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.0032,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52943",
      "url": "https://patchblox.com/security/cve/CVE-2026-52943",
      "title": "net: skbuff: fix missing zerocopy reference in pskb_carve helpers",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00302,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53253",
      "url": "https://patchblox.com/security/cve/CVE-2026-53253",
      "title": "Bluetooth: bnep: reject short frames before parsing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00266,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46320",
      "url": "https://patchblox.com/security/cve/CVE-2026-46320",
      "title": "tap: free page on error paths in tap_get_user_xdp()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.4,
      "epss": 0.00254,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52918",
      "url": "https://patchblox.com/security/cve/CVE-2026-52918",
      "title": "Bluetooth: serialize accept_q access",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00218,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52923",
      "url": "https://patchblox.com/security/cve/CVE-2026-52923",
      "title": "ipc: limit next_id allocation to the valid ID range",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00215,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53072",
      "url": "https://patchblox.com/security/cve/CVE-2026-53072",
      "title": "Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52969",
      "url": "https://patchblox.com/security/cve/CVE-2026-52969",
      "title": "KVM: Reject wrapped offset in kvm_reset_dirty_gfn()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00195,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43456",
      "url": "https://patchblox.com/security/cve/CVE-2026-43456",
      "title": "kernel-64kb: bonding: fix type confusion in bond_setup_by_slave() (bsc#1264734).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00188,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43303",
      "url": "https://patchblox.com/security/cve/CVE-2026-43303",
      "title": "mm/page_alloc: clear page-\u003Eprivate in free_pages_prepare()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46253",
      "url": "https://patchblox.com/security/cve/CVE-2026-46253",
      "title": "kernel-default: pstore/ram: fix buffer overflow in persistent_ram_save_old() (bsc#1267635).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00172,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46330",
      "url": "https://patchblox.com/security/cve/CVE-2026-46330",
      "title": "Revert \u0022net/smc: Introduce TCP ULP support\u0022",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40216",
      "url": "https://patchblox.com/security/cve/CVE-2025-40216",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  io_uring/rsrc: don\u0027t rely on user vaddr alignmen...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00152,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52972",
      "url": "https://patchblox.com/security/cve/CVE-2026-52972",
      "title": "crypto: af_alg - Cap AEAD AD length to 0x80000000",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00144,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46069",
      "url": "https://patchblox.com/security/cve/CVE-2026-46069",
      "title": "kernel-uek64k-modules-extra: wifi: mwifiex: fix use-after-free in mwifiex_adapter_cleanup() (Daniel Hodges) [Orabug: 39452344]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46076",
      "url": "https://patchblox.com/security/cve/CVE-2026-46076",
      "title": "KVM: nSVM: Raise #UD if unhandled VMMCALL isn\u0027t intercepted by L1",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53016",
      "url": "https://patchblox.com/security/cve/CVE-2026-53016",
      "title": "crypto: ccp - copy IV using skcipher ivsize",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43128",
      "url": "https://patchblox.com/security/cve/CVE-2026-43128",
      "title": "kernel-64kb: RDMA/umem: Fix double dma_buf_unpin in failure path (bsc#1264612).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.1,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46197",
      "url": "https://patchblox.com/security/cve/CVE-2026-46197",
      "title": "drm/amdkfd: validate SVM ioctl nattr against buffer size",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52962",
      "url": "https://patchblox.com/security/cve/CVE-2026-52962",
      "title": "ceph: fix a buffer leak in __ceph_setxattr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46274",
      "url": "https://patchblox.com/security/cve/CVE-2026-46274",
      "title": "io-wq: check that the predecessor is hashed in io_wq_remove_pending()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53281",
      "url": "https://patchblox.com/security/cve/CVE-2026-53281",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\niommu/vt-d: Avoid NULL pointer dereference or ref...",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43093",
      "url": "https://patchblox.com/security/cve/CVE-2026-43093",
      "title": "kernel-64kb: xsk: tighten UMEM headroom validation to account for tailroom and min frame (bsc#1264254).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46173",
      "url": "https://patchblox.com/security/cve/CVE-2026-46173",
      "title": "exit: prevent preemption of oopsing TASK_DEAD task",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31697",
      "url": "https://patchblox.com/security/cve/CVE-2026-31697",
      "title": "crypto: ccp: Don\u0027t attempt to copy ID to userspace if PSP command failed",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31698",
      "url": "https://patchblox.com/security/cve/CVE-2026-31698",
      "title": "crypto: ccp: Don\u0027t attempt to copy PDH cert to userspace if PSP command failed",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31699",
      "url": "https://patchblox.com/security/cve/CVE-2026-31699",
      "title": "crypto: ccp: Don\u0027t attempt to copy CSR to userspace if PSP command failed",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46116",
      "url": "https://patchblox.com/security/cve/CVE-2026-46116",
      "title": "xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53182",
      "url": "https://patchblox.com/security/cve/CVE-2026-53182",
      "title": "wifi: nl80211: reject oversized EMA RNR lists",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31502",
      "url": "https://patchblox.com/security/cve/CVE-2026-31502",
      "title": "team: fix header_ops type confusion with non-Ethernet ports",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45891",
      "url": "https://patchblox.com/security/cve/CVE-2026-45891",
      "title": "kernel-64kb: net: hns3: fix double free issue for tx spare buffer (bsc#1266717).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46065",
      "url": "https://patchblox.com/security/cve/CVE-2026-46065",
      "title": "fbdev: defio: Disconnect deferred I/O from the lifetime of struct fb_info",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53133",
      "url": "https://patchblox.com/security/cve/CVE-2026-53133",
      "title": "RDMA/umem: Fix truncation for block sizes \u003E= 4G",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46053",
      "url": "https://patchblox.com/security/cve/CVE-2026-46053",
      "title": "net: rds: fix MR cleanup on copy error",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46120",
      "url": "https://patchblox.com/security/cve/CVE-2026-46120",
      "title": "kernel: kernel: ip6_gre: Use cached t-\u003Enet in ip6erspan_changelink()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53041",
      "url": "https://patchblox.com/security/cve/CVE-2026-53041",
      "title": "ocfs2: fix listxattr handling when the buffer is full",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53138",
      "url": "https://patchblox.com/security/cve/CVE-2026-53138",
      "title": "drm/amd/display: Bound VBIOS record-chain walk loops",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45912",
      "url": "https://patchblox.com/security/cve/CVE-2026-45912",
      "title": "ext4: don\u0027t cache extent during splitting extent",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45985",
      "url": "https://patchblox.com/security/cve/CVE-2026-45985",
      "title": "kernel-64kb: ext4: don\u0027t set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O (bsc#1266700).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46028",
      "url": "https://patchblox.com/security/cve/CVE-2026-46028",
      "title": "kernel-64kb: crypto: algif_aead - snapshot IV for async AEAD requests (bsc#1267430).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53040",
      "url": "https://patchblox.com/security/cve/CVE-2026-53040",
      "title": "bpftool: ocfs2: validate bg_bits during freefrag scan (Zhengyuan Huang) [Orabug: 39621868]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.1,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52908",
      "url": "https://patchblox.com/security/cve/CVE-2026-52908",
      "title": "RDMA: During rereg_mr ensure that REREG_ACCESS is compatible",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46328",
      "url": "https://patchblox.com/security/cve/CVE-2026-46328",
      "title": "kernel-64kb: apparmor: fix rlimit for posix cpu timers (bsc#1268037).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.3,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43109",
      "url": "https://patchblox.com/security/cve/CVE-2026-43109",
      "title": "x86: shadow stacks: proper error handling for mmap lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52909",
      "url": "https://patchblox.com/security/cve/CVE-2026-52909",
      "title": "ip6_vti: set netns_immutable on the fallback device.",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00113,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46319",
      "url": "https://patchblox.com/security/cve/CVE-2026-46319",
      "title": "net/sched: act_ct: Only release RCU read lock after ct_ft",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46227",
      "url": "https://patchblox.com/security/cve/CVE-2026-46227",
      "title": "sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46112",
      "url": "https://patchblox.com/security/cve/CVE-2026-46112",
      "title": "RDMA/hns: Fix unlocked call to hns_roce_qp_remove()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.001,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23451",
      "url": "https://patchblox.com/security/cve/CVE-2026-23451",
      "title": "kernel-default: bonding: prevent potential infinite loop in bond_header_parse() (bsc#1261604).",
      "priority": "Routine",
      "epss": 0.00458,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40341",
      "url": "https://patchblox.com/security/cve/CVE-2025-40341",
      "title": "futex: Don\u0027t leak robust_list pointer on exec race",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00246,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53052",
      "url": "https://patchblox.com/security/cve/CVE-2026-53052",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ASoC: qcom: qdsp6: topology: check widget type b...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45848",
      "url": "https://patchblox.com/security/cve/CVE-2026-45848",
      "title": "kernel-64kb: apparmor: fix NULL sock in aa_sock_file_perm (bsc#1266734).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45948",
      "url": "https://patchblox.com/security/cve/CVE-2026-45948",
      "title": "kernel-64kb: ext4: fix memory leak in ext4_ext_shift_extents() (bsc#1266929).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31462",
      "url": "https://patchblox.com/security/cve/CVE-2026-31462",
      "title": "drm/amdgpu: prevent immediate PASID reuse case",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31677",
      "url": "https://patchblox.com/security/cve/CVE-2026-31677",
      "title": "crypto: af_alg - limit RX SG extraction by receive buffer budget",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43022",
      "url": "https://patchblox.com/security/cve/CVE-2026-43022",
      "title": "Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43107",
      "url": "https://patchblox.com/security/cve/CVE-2026-43107",
      "title": "xfrm: account XFRMA_IF_ID in aevent size calculation",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43492",
      "url": "https://patchblox.com/security/cve/CVE-2026-43492",
      "title": "lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46254",
      "url": "https://patchblox.com/security/cve/CVE-2026-46254",
      "title": "AppArmor: Allow apparmor to handle unaligned dfa tables",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43034",
      "url": "https://patchblox.com/security/cve/CVE-2026-43034",
      "title": "kernel-64kb: bnxt_en: set backing store type from query type (bsc#1263998).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43089",
      "url": "https://patchblox.com/security/cve/CVE-2026-43089",
      "title": "kernel-64kb: xfrm_user: fix info leak in build_mapping() (bsc#1264261).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46214",
      "url": "https://patchblox.com/security/cve/CVE-2026-46214",
      "title": "kernel-uek-debug-modules-extra: vsock/virtio: fix accept queue count leak on transport mismatch (Dudu Lu) [Orabug: 39460646]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43085",
      "url": "https://patchblox.com/security/cve/CVE-2026-43085",
      "title": "kernel-64kb: netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator (bsc#1264230).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45838",
      "url": "https://patchblox.com/security/cve/CVE-2026-45838",
      "title": "bpf: fix end-of-list detection in cgroup_storage_get_next_key()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43238",
      "url": "https://patchblox.com/security/cve/CVE-2026-43238",
      "title": "kernel-64kb: net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash() (bsc#1264320).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-71294",
      "url": "https://patchblox.com/security/cve/CVE-2025-71294",
      "title": "drm/amdgpu: fix NULL pointer issue buffer funcs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43080",
      "url": "https://patchblox.com/security/cve/CVE-2026-43080",
      "title": "kernel-64kb: l2tp: Drop large packets with UDP encap (bsc#1264236).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53122",
      "url": "https://patchblox.com/security/cve/CVE-2026-53122",
      "title": "btrfs: fix deadlock between reflink and transaction commit when using flushoncommit",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43010",
      "url": "https://patchblox.com/security/cve/CVE-2026-43010",
      "title": "bpf: Reject sleepable kprobe_multi programs at attach time",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43079",
      "url": "https://patchblox.com/security/cve/CVE-2026-43079",
      "title": "kernel-64kb: perf/x86/intel/uncore: Skip discovery table for offline dies (bsc#1264228).",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43094",
      "url": "https://patchblox.com/security/cve/CVE-2026-43094",
      "title": "kernel-64kb: ixgbevf: add missing negotiate_features op to Hyper-V ops table (bsc#1264231).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46071",
      "url": "https://patchblox.com/security/cve/CVE-2026-46071",
      "title": "KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46291",
      "url": "https://patchblox.com/security/cve/CVE-2026-46291",
      "title": "crypto: caam - guard HMAC key hex dumps in hash_digest_key",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53287",
      "url": "https://patchblox.com/security/cve/CVE-2026-53287",
      "title": "audit: fix incorrect inheritable capability in CAPSET records",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31647",
      "url": "https://patchblox.com/security/cve/CVE-2026-31647",
      "title": "kernel-64kb: idpf: fix PREEMPT_RT raw/bh spinlock nesting for async VC handling (bsc#1263581).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43081",
      "url": "https://patchblox.com/security/cve/CVE-2026-43081",
      "title": "kernel-64kb: net: ipa: fix GENERIC_CMD register field masks for IPA v5.0\u002B (bsc#1264241).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43086",
      "url": "https://patchblox.com/security/cve/CVE-2026-43086",
      "title": "kernel-64kb: ipvs: fix NULL deref in ip_vs_add_service error path (bsc#1264286).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31670",
      "url": "https://patchblox.com/security/cve/CVE-2026-31670",
      "title": "net: rfkill: prevent unlimited numbers of rfkill events from being created",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46229",
      "url": "https://patchblox.com/security/cve/CVE-2026-46229",
      "title": "kernel-default: drm/amdkfd: Clear VRAM on allocation to prevent stale data exposure (bsc#1267567).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43053",
      "url": "https://patchblox.com/security/cve/CVE-2026-43053",
      "title": "xfs: close crash window in attr dabtree inactivation",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43472",
      "url": "https://patchblox.com/security/cve/CVE-2026-43472",
      "title": "kernel-64kb: unshare: fix unshare_fs() handling (bsc#1264748).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46315",
      "url": "https://patchblox.com/security/cve/CVE-2026-46315",
      "title": "kernel-64kb: io_uring/waitid: clear waitid info before copying it to userspace (bsc#1267953).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31466",
      "url": "https://patchblox.com/security/cve/CVE-2026-31466",
      "title": "kernel-64kb: mm/huge_memory: fix folio isn\u0027t locked in softleaf_to_folio() (bsc#1267825).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43420",
      "url": "https://patchblox.com/security/cve/CVE-2026-43420",
      "title": "cephfs: ceph: fix i_nlink underrun during async unlink (bsc#1264814).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46063",
      "url": "https://patchblox.com/security/cve/CVE-2026-46063",
      "title": "x86/shstk: Prevent deadlock during shstk sigreturn",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}