{
  "fix": "SUSE-SU-2026:3602-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3602-1",
  "summary": "SUSE-SU-2026:3602-1, released October 2, 2026, fixes 73 CVEs across 7 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 7 packages",
  "released": "2026-10-02T15:40:54Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2026-64564, rated Critical",
  "supported": true,
  "cveCount": 73,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.04299,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:3602-1",
  "appliesTo": [
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.130.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.130.1.150600.12.60.3",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.130.1",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP6_Update_30",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp6-update-30",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.5.1",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.130.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.130.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.130.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-64564",
      "url": "https://patchblox.com/security/cve/CVE-2026-64564",
      "title": "sctp: don\u0027t free the ASCONF\u0027s own transport in DEL-IP processing",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.01432,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53224",
      "url": "https://patchblox.com/security/cve/CVE-2026-53224",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sctp: validate embedded INIT chunk and address l...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.1,
      "epss": 0.00574,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63984",
      "url": "https://patchblox.com/security/cve/CVE-2026-63984",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63824",
      "url": "https://patchblox.com/security/cve/CVE-2026-63824",
      "title": "KEYS: fix overflow in keyctl_pkey_params_get_2()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64106",
      "url": "https://patchblox.com/security/cve/CVE-2026-64106",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  KVM: arm64: vgic-its: Reject restored DTE with o...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46333",
      "url": "https://patchblox.com/security/cve/CVE-2026-46333",
      "title": "ptrace: slightly saner \u0027get_dumpable()\u0027 logic",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.04299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63912",
      "url": "https://patchblox.com/security/cve/CVE-2026-63912",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63922",
      "url": "https://patchblox.com/security/cve/CVE-2026-63922",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63924",
      "url": "https://patchblox.com/security/cve/CVE-2026-63924",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: t...",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63968",
      "url": "https://patchblox.com/security/cve/CVE-2026-63968",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ipv6: fix possible infinite loop in fib6_select_...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00665,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64530",
      "url": "https://patchblox.com/security/cve/CVE-2026-64530",
      "title": "net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00655,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63919",
      "url": "https://patchblox.com/security/cve/CVE-2026-63919",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.0065,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52986",
      "url": "https://patchblox.com/security/cve/CVE-2026-52986",
      "title": "netfilter: nf_conntrack_sip: don\u0027t use simple_strtoul",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00634,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53391",
      "url": "https://patchblox.com/security/cve/CVE-2026-53391",
      "title": "NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00517,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63994",
      "url": "https://patchblox.com/security/cve/CVE-2026-63994",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64560",
      "url": "https://patchblox.com/security/cve/CVE-2026-64560",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  posix-cpu-timers: Prevent UAF caused by non-lead...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00503,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64600",
      "url": "https://patchblox.com/security/cve/CVE-2026-64600",
      "title": "xfs: resample the data fork mapping after cycling ILOCK",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53246",
      "url": "https://patchblox.com/security/cve/CVE-2026-53246",
      "title": "sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00442,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53131",
      "url": "https://patchblox.com/security/cve/CVE-2026-53131",
      "title": "netfilter: require Ethernet MAC header before using eth_hdr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.4,
      "epss": 0.00435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31598",
      "url": "https://patchblox.com/security/cve/CVE-2026-31598",
      "title": "ocfs2: fix possible deadlock between unlink and dio_end_io_write",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46243",
      "url": "https://patchblox.com/security/cve/CVE-2026-46243",
      "title": "smb: client: reject userspace cifs.spnego descriptions",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52967",
      "url": "https://patchblox.com/security/cve/CVE-2026-52967",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  smb/client: fix possible infinite loop and oob r...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00393,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63893",
      "url": "https://patchblox.com/security/cve/CVE-2026-63893",
      "title": "kernel-uek-debug-modules-extra: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.1,
      "epss": 0.00387,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46056",
      "url": "https://patchblox.com/security/cve/CVE-2026-46056",
      "title": "Bluetooth: hci_event: fix potential UAF in SSP passkey handlers",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00282,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63975",
      "url": "https://patchblox.com/security/cve/CVE-2026-63975",
      "title": "kernel-rt-64k-debug-core: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64561",
      "url": "https://patchblox.com/security/cve/CVE-2026-64561",
      "title": "KVM: x86: Check for invalid/obsolete root *after* making MMU pages available",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63946",
      "url": "https://patchblox.com/security/cve/CVE-2026-63946",
      "title": "kernel-64k-debug-devel-matched: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53375",
      "url": "https://patchblox.com/security/cve/CVE-2026-53375",
      "title": "drm/amdgpu/vce: Prevent partial address patches",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63884",
      "url": "https://patchblox.com/security/cve/CVE-2026-63884",
      "title": "bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: m...",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63807",
      "url": "https://patchblox.com/security/cve/CVE-2026-63807",
      "title": "KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53402",
      "url": "https://patchblox.com/security/cve/CVE-2026-53402",
      "title": "fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63826",
      "url": "https://patchblox.com/security/cve/CVE-2026-63826",
      "title": "fbdev: fix use-after-free in store_modes()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63917",
      "url": "https://patchblox.com/security/cve/CVE-2026-63917",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63921",
      "url": "https://patchblox.com/security/cve/CVE-2026-63921",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63806",
      "url": "https://patchblox.com/security/cve/CVE-2026-63806",
      "title": "KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.3,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46174",
      "url": "https://patchblox.com/security/cve/CVE-2026-46174",
      "title": "x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63829",
      "url": "https://patchblox.com/security/cve/CVE-2026-63829",
      "title": "net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46145",
      "url": "https://patchblox.com/security/cve/CVE-2026-46145",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nRDMA/mana: Validate rx_hash_key_len\nSashiko point...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63794",
      "url": "https://patchblox.com/security/cve/CVE-2026-63794",
      "title": "KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46117",
      "url": "https://patchblox.com/security/cve/CVE-2026-46117",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/mana: Remove user triggerable WARN_ON() in...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46193",
      "url": "https://patchblox.com/security/cve/CVE-2026-46193",
      "title": "kernel-uek-debug: [5.15.0-323.211.3.3]\n- Revert \u0027x86/alternatives: Add alt_instr.flags\u0027 (Harshit Mogalapalli)  [Orabug: 39853924]\n\n[5.1...",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46323",
      "url": "https://patchblox.com/security/cve/CVE-2026-46323",
      "title": "net: gro: don\u0027t merge zcopy skbs",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46080",
      "url": "https://patchblox.com/security/cve/CVE-2026-46080",
      "title": "ocfs2: split transactions in dio completion to avoid credit exhaustion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43033",
      "url": "https://patchblox.com/security/cve/CVE-2026-43033",
      "title": "crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53388",
      "url": "https://patchblox.com/security/cve/CVE-2026-53388",
      "title": "fuse: re-lock request before replacing page cache folio",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63971",
      "url": "https://patchblox.com/security/cve/CVE-2026-63971",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46084",
      "url": "https://patchblox.com/security/cve/CVE-2026-46084",
      "title": "RDMA/mana_ib: Disable RX steering on RSS QP destroy",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63952",
      "url": "https://patchblox.com/security/cve/CVE-2026-63952",
      "title": "kernel: The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: n...",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.4,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64189",
      "url": "https://patchblox.com/security/cve/CVE-2026-64189",
      "title": "netfilter: ipset: fix race between dump and ip_set_list resize",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46324",
      "url": "https://patchblox.com/security/cve/CVE-2026-46324",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_tables: use list_del_rcu for netli...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43440",
      "url": "https://patchblox.com/security/cve/CVE-2026-43440",
      "title": "kernel-docs: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:\n\nThe following security issues we...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31483",
      "url": "https://patchblox.com/security/cve/CVE-2026-31483",
      "title": "s390/syscalls: Add spectre boundary for syscall dispatch table",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31482",
      "url": "https://patchblox.com/security/cve/CVE-2026-31482",
      "title": "s390/entry: Scrub r12 register on kernel entry",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53267",
      "url": "https://patchblox.com/security/cve/CVE-2026-53267",
      "title": "netfilter: nft_ct: bail out on template ct in get eval",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53262",
      "url": "https://patchblox.com/security/cve/CVE-2026-53262",
      "title": "l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43276",
      "url": "https://patchblox.com/security/cve/CVE-2026-43276",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: mana: Fix double destroy_workqueue on servi...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.4,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43056",
      "url": "https://patchblox.com/security/cve/CVE-2026-43056",
      "title": "kernel-default-base: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:\n\nThe following security issues we...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53129",
      "url": "https://patchblox.com/security/cve/CVE-2026-53129",
      "title": "fs/mbcache: cancel shrink work before destroying the cache",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53250",
      "url": "https://patchblox.com/security/cve/CVE-2026-53250",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  xsk: cache csum_start/csum_offset to fix TOCTOU...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53354",
      "url": "https://patchblox.com/security/cve/CVE-2026-53354",
      "title": "arm64: errata: Mitigate TLBI errata on various Arm CPUs",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53050",
      "url": "https://patchblox.com/security/cve/CVE-2026-53050",
      "title": "quota: Fix race of dquot_scan_active() with quota deactivation",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63802",
      "url": "https://patchblox.com/security/cve/CVE-2026-63802",
      "title": "blk-cgroup: fix UAF in __blkcg_rstat_flush()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.3,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53297",
      "url": "https://patchblox.com/security/cve/CVE-2026-53297",
      "title": "net: mana: Guard mana_remove against double invocation",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45904",
      "url": "https://patchblox.com/security/cve/CVE-2026-45904",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  powerpc/eeh: fix recursive pci_lock_rescan_remov...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53324",
      "url": "https://patchblox.com/security/cve/CVE-2026-53324",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  net: mana: Use pci_name() for debugfs directory...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31628",
      "url": "https://patchblox.com/security/cve/CVE-2026-31628",
      "title": "x86/CPU: Fix FPDSS on Zen1",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46126",
      "url": "https://patchblox.com/security/cve/CVE-2026-46126",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/mana: Fix mana_destroy_wq_obj() cleanup in...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46144",
      "url": "https://patchblox.com/security/cve/CVE-2026-46144",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  RDMA/mana: Fix error unwind in mana_ib_create_qp...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53177",
      "url": "https://patchblox.com/security/cve/CVE-2026-53177",
      "title": "bnxt_en: Fix NULL pointer dereference",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46109",
      "url": "https://patchblox.com/security/cve/CVE-2026-46109",
      "title": "usb: ulpi: fix memory leak on ulpi_register() error paths",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31542",
      "url": "https://patchblox.com/security/cve/CVE-2026-31542",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  x86/platform/uv: Handle deconfigured sockets  Wh...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43046",
      "url": "https://patchblox.com/security/cve/CVE-2026-43046",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  btrfs: reject root items with drop_progress and...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43475",
      "url": "https://patchblox.com/security/cve/CVE-2026-43475",
      "title": "kernel-default: The SUSE Linux Enterprise 15 SP6 kernel was updated to fix various security issues:\n\nThe following security issues we...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}