{
  "fix": "SUSE-SU-2026:3790-1",
  "url": "https://patchblox.com/security/fix/linux/suse-su-2026-3790-1",
  "summary": "SUSE-SU-2026:3790-1, released August 25, 2026, fixes 268 CVEs across 10 products. One of them is being exploited (CVE-2026-31431); 1 on CISA KEV. Patch Radar priority: Patch now.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 10 packages",
  "released": "2026-08-25T12:24:44Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2026-31431, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 268,
  "exploitedCveCount": 1,
  "kevCveCount": 1,
  "ransomwareCveCount": 0,
  "maxEpss": 0.98114,
  "maxCvss": 10,
  "vendorAdvisory": "https://osv.dev/vulnerability/SUSE-SU-2026:3790-1",
  "appliesTo": [
    {
      "product": "kernel-64kb",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-64kb",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.78.1",
      "supported": true
    },
    {
      "product": "kernel-azure",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-azure",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.78.1",
      "supported": true
    },
    {
      "product": "kernel-default",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.78.1",
      "supported": true
    },
    {
      "product": "kernel-default-base",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-default-base",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.78.1.150700.17.43.2",
      "supported": true
    },
    {
      "product": "kernel-docs",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-docs",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.78.1",
      "supported": true
    },
    {
      "product": "kernel-livepatch-SLE15-SP7_Update_20",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-livepatch-sle15-sp7-update-20",
      "release": "sles 15.7",
      "fixedVersion": "1-150700.15.3.2",
      "supported": true
    },
    {
      "product": "kernel-obs-build",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-obs-build",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.78.1",
      "supported": true
    },
    {
      "product": "kernel-source",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-source",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.78.1",
      "supported": true
    },
    {
      "product": "kernel-syms",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-syms",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.78.1",
      "supported": true
    },
    {
      "product": "kernel-zfcpdump",
      "productUrl": "https://patchblox.com/security/product/linux/kernel-zfcpdump",
      "release": "sles 15.7",
      "fixedVersion": "6.4.0-150700.53.78.1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2026-31431",
      "url": "https://patchblox.com/security/cve/CVE-2026-31431",
      "title": "crypto: algif_aead - Revert to operating out-of-place",
      "priority": "Patch now",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.98114,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64564",
      "url": "https://patchblox.com/security/cve/CVE-2026-64564",
      "title": "sctp: don\u0027t free the ASCONF\u0027s own transport in DEL-IP processing",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.01432,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64089",
      "url": "https://patchblox.com/security/cve/CVE-2026-64089",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Urgent",
      "severity": "N/A",
      "cvss": 9.8,
      "epss": 0.00552,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68741",
      "url": "https://patchblox.com/security/cve/CVE-2025-68741",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: Fix improper freeing of purex ite...",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.0043,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64025",
      "url": "https://patchblox.com/security/cve/CVE-2026-64025",
      "title": "kernel-64kb: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117).",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00369,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53002",
      "url": "https://patchblox.com/security/cve/CVE-2026-53002",
      "title": "netfilter: conntrack: remove sprintf usage",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00368,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63974",
      "url": "https://patchblox.com/security/cve/CVE-2026-63974",
      "title": "Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63882",
      "url": "https://patchblox.com/security/cve/CVE-2026-63882",
      "title": "drm/amdkfd: fix NULL pointer bug in svm_range_set_attr",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0022,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63824",
      "url": "https://patchblox.com/security/cve/CVE-2026-63824",
      "title": "KEYS: fix overflow in keyctl_pkey_params_get_2()",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53376",
      "url": "https://patchblox.com/security/cve/CVE-2026-53376",
      "title": "drm/amdkfd: Add upper bound check for num_of_nodes",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63959",
      "url": "https://patchblox.com/security/cve/CVE-2026-63959",
      "title": "usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64106",
      "url": "https://patchblox.com/security/cve/CVE-2026-64106",
      "title": "kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242).",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9,
      "epss": 0.00149,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52991",
      "url": "https://patchblox.com/security/cve/CVE-2026-52991",
      "title": "sched/psi: fix race between file release and pressure write",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53403",
      "url": "https://patchblox.com/security/cve/CVE-2026-53403",
      "title": "fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53374",
      "url": "https://patchblox.com/security/cve/CVE-2026-53374",
      "title": "drm/amdgpu: zero-initialize GART table on allocation",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52947",
      "url": "https://patchblox.com/security/cve/CVE-2026-52947",
      "title": "net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00106,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53062",
      "url": "https://patchblox.com/security/cve/CVE-2026-53062",
      "title": "dm cache policy smq: fix missing locks in invalidating cache blocks",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 9.8,
      "epss": 0.00097,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46333",
      "url": "https://patchblox.com/security/cve/CVE-2026-46333",
      "title": "ptrace: slightly saner \u0027get_dumpable()\u0027 logic",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.04299,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45860",
      "url": "https://patchblox.com/security/cve/CVE-2026-45860",
      "title": "kernel-64kb: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00745,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63912",
      "url": "https://patchblox.com/security/cve/CVE-2026-63912",
      "title": "kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836).",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63922",
      "url": "https://patchblox.com/security/cve/CVE-2026-63922",
      "title": "kernel: kernel: ipv6: exthdrs: refresh nh after handling HAO option",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63924",
      "url": "https://patchblox.com/security/cve/CVE-2026-63924",
      "title": "kernel: kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00714,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63968",
      "url": "https://patchblox.com/security/cve/CVE-2026-63968",
      "title": "kernel-default: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00665,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53399",
      "url": "https://patchblox.com/security/cve/CVE-2026-53399",
      "title": "nfsd: release layout stid on setlease failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64530",
      "url": "https://patchblox.com/security/cve/CVE-2026-64530",
      "title": "net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00655,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63919",
      "url": "https://patchblox.com/security/cve/CVE-2026-63919",
      "title": "kernel-default: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.0065,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52986",
      "url": "https://patchblox.com/security/cve/CVE-2026-52986",
      "title": "netfilter: nf_conntrack_sip: don\u0027t use simple_strtoul",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00634,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63795",
      "url": "https://patchblox.com/security/cve/CVE-2026-63795",
      "title": "9p: avoid putting oldfid in p9_client_walk() error path",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 10,
      "epss": 0.00615,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52999",
      "url": "https://patchblox.com/security/cve/CVE-2026-52999",
      "title": "netfilter: nfnetlink_osf: fix out-of-bounds read on option matching",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.1,
      "epss": 0.00591,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52998",
      "url": "https://patchblox.com/security/cve/CVE-2026-52998",
      "title": "netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00579,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53221",
      "url": "https://patchblox.com/security/cve/CVE-2026-53221",
      "title": "ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00576,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63976",
      "url": "https://patchblox.com/security/cve/CVE-2026-63976",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00569,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53398",
      "url": "https://patchblox.com/security/cve/CVE-2026-53398",
      "title": "NFSD: Fix SECINFO_NO_NAME decode error cleanup",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00543,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53392",
      "url": "https://patchblox.com/security/cve/CVE-2026-53392",
      "title": "NFSv4/flexfiles: reject zero filehandle version count",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00529,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53397",
      "url": "https://patchblox.com/security/cve/CVE-2026-53397",
      "title": "nfsd: fix posix_acl leak on SETACL decode failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00529,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43230",
      "url": "https://patchblox.com/security/cve/CVE-2026-43230",
      "title": "kernel-64kb: net/rds: Clear reconnect pending bit (bsc#1264539).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53391",
      "url": "https://patchblox.com/security/cve/CVE-2026-53391",
      "title": "NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00517,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63984",
      "url": "https://patchblox.com/security/cve/CVE-2026-63984",
      "title": "kernel-default: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63994",
      "url": "https://patchblox.com/security/cve/CVE-2026-63994",
      "title": "kernel-default: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035).",
      "priority": "High",
      "severity": "important",
      "cvss": 9.8,
      "epss": 0.00514,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64560",
      "url": "https://patchblox.com/security/cve/CVE-2026-64560",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  posix-cpu-timers: Prevent UAF caused by non-lead...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00503,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52974",
      "url": "https://patchblox.com/security/cve/CVE-2026-52974",
      "title": "net: tls: fix strparser anchor skb leak on offload RX setup failure",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.005,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53183",
      "url": "https://patchblox.com/security/cve/CVE-2026-53183",
      "title": "mptcp: allow subflow rcv wnd to shrink",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53184",
      "url": "https://patchblox.com/security/cve/CVE-2026-53184",
      "title": "udp: clear skb-\u003Edev before running a sockmap verdict",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46137",
      "url": "https://patchblox.com/security/cve/CVE-2026-46137",
      "title": "mptcp: pm: ADD_ADDR rtx: fix potential data-race",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00477,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64600",
      "url": "https://patchblox.com/security/cve/CVE-2026-64600",
      "title": "xfs: resample the data fork mapping after cycling ILOCK",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00467,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46306",
      "url": "https://patchblox.com/security/cve/CVE-2026-46306",
      "title": "flow_dissector: do not dissect PPPoE PFC frames",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00449,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53131",
      "url": "https://patchblox.com/security/cve/CVE-2026-53131",
      "title": "netfilter: require Ethernet MAC header before using eth_hdr()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.4,
      "epss": 0.00435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31598",
      "url": "https://patchblox.com/security/cve/CVE-2026-31598",
      "title": "ocfs2: fix possible deadlock between unlink and dio_end_io_write",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.5,
      "epss": 0.00435,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46243",
      "url": "https://patchblox.com/security/cve/CVE-2026-46243",
      "title": "smb: client: reject userspace cifs.spnego descriptions",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53088",
      "url": "https://patchblox.com/security/cve/CVE-2026-53088",
      "title": "net: bcmgenet: fix off-by-one in bcmgenet_put_txcb",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00399,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53006",
      "url": "https://patchblox.com/security/cve/CVE-2026-53006",
      "title": "ipv6: fix possible UAF in icmpv6_rcv()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00394,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52967",
      "url": "https://patchblox.com/security/cve/CVE-2026-52967",
      "title": "kernel-default: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181).",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00393,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46265",
      "url": "https://patchblox.com/security/cve/CVE-2026-46265",
      "title": "kernel-64kb: RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1267662).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00389,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63893",
      "url": "https://patchblox.com/security/cve/CVE-2026-63893",
      "title": "kernel-default: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.1,
      "epss": 0.00387,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64223",
      "url": "https://patchblox.com/security/cve/CVE-2026-64223",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: mac80211: consume only present negotiated...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.1,
      "epss": 0.00385,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53069",
      "url": "https://patchblox.com/security/cve/CVE-2026-53069",
      "title": "kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.5,
      "epss": 0.0038,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43114",
      "url": "https://patchblox.com/security/cve/CVE-2026-43114",
      "title": "kernel-rt-64k-modules-core: kernel: netfilter: nft_set_pipapo_avx2: don\u0027t return non-matching entry on expiry",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.4,
      "epss": 0.0037,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63916",
      "url": "https://patchblox.com/security/cve/CVE-2026-63916",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00355,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63915",
      "url": "https://patchblox.com/security/cve/CVE-2026-63915",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00354,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63947",
      "url": "https://patchblox.com/security/cve/CVE-2026-63947",
      "title": "kernel-64k-modules-core: kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report()",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68818",
      "url": "https://patchblox.com/security/cve/CVE-2025-68818",
      "title": "scsi: Revert \u0022scsi: qla2xxx: Perform lockless command completion in abort path\u0022",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00331,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43172",
      "url": "https://patchblox.com/security/cve/CVE-2026-43172",
      "title": "wifi: iwlwifi: fix 22000 series SMEM parsing",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00325,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53175",
      "url": "https://patchblox.com/security/cve/CVE-2026-53175",
      "title": "kernel-64kb: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00313,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-54518",
      "url": "https://patchblox.com/security/cve/CVE-2025-54518",
      "title": "AMD: CVE-2025-54518 CPU OP Cache Corruption",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00287,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63975",
      "url": "https://patchblox.com/security/cve/CVE-2026-63975",
      "title": "kernel-default: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694).",
      "priority": "High",
      "severity": "moderate",
      "cvss": 8.8,
      "epss": 0.00274,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64561",
      "url": "https://patchblox.com/security/cve/CVE-2026-64561",
      "title": "KVM: x86: Check for invalid/obsolete root *after* making MMU pages available",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00273,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53275",
      "url": "https://patchblox.com/security/cve/CVE-2026-53275",
      "title": "ipv6: mcast: Fix use-after-free when processing MLD queries",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63946",
      "url": "https://patchblox.com/security/cve/CVE-2026-63946",
      "title": "kernel-default: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63869",
      "url": "https://patchblox.com/security/cve/CVE-2026-63869",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nwifi: mac80211: limit injected antenna index in i...",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00255,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63896",
      "url": "https://patchblox.com/security/cve/CVE-2026-63896",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "important",
      "epss": 0.00214,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63939",
      "url": "https://patchblox.com/security/cve/CVE-2026-63939",
      "title": "kernel-64kb: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272691).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.3,
      "epss": 0.00201,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63938",
      "url": "https://patchblox.com/security/cve/CVE-2026-63938",
      "title": "kernel-64kb: KVM: SEV: Check PSC request indices against the actual size of the buffer (bsc#1272620).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.3,
      "epss": 0.00196,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53212",
      "url": "https://patchblox.com/security/cve/CVE-2026-53212",
      "title": "netfilter: nft_tunnel: fix use-after-free on object destroy",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-40213",
      "url": "https://patchblox.com/security/cve/CVE-2025-40213",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: MGMT: fix crash in set_mesh_sync and...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53369",
      "url": "https://patchblox.com/security/cve/CVE-2026-53369",
      "title": "kernel-64kb: udf: reject descriptors with oversized CRC length (bsc#1271818).",
      "priority": "High",
      "severity": "N/A",
      "cvss": 8.4,
      "epss": 0.0019,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63940",
      "url": "https://patchblox.com/security/cve/CVE-2026-63940",
      "title": "KVM: SEV: Ignore Port I/O requests of length \u00270\u0027",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.3,
      "epss": 0.00186,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53000",
      "url": "https://patchblox.com/security/cve/CVE-2026-53000",
      "title": "kernel: In the Linux kernel, the following vulnerability has been resolved:\nnetfilter: nat: use kfree_rcu to release ops\nFlor...",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00183,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38250",
      "url": "https://patchblox.com/security/cve/CVE-2025-38250",
      "title": "Bluetooth: hci_core: Fix use-after-free in vhci_flush()",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00182,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53375",
      "url": "https://patchblox.com/security/cve/CVE-2026-53375",
      "title": "drm/amdgpu/vce: Prevent partial address patches",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63899",
      "url": "https://patchblox.com/security/cve/CVE-2026-63899",
      "title": "kernel: kernel: USB: serial: mxuport: fix memory corruption with small endpoint",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63845",
      "url": "https://patchblox.com/security/cve/CVE-2026-63845",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63846",
      "url": "https://patchblox.com/security/cve/CVE-2026-63846",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63847",
      "url": "https://patchblox.com/security/cve/CVE-2026-63847",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63848",
      "url": "https://patchblox.com/security/cve/CVE-2026-63848",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63853",
      "url": "https://patchblox.com/security/cve/CVE-2026-63853",
      "title": "drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63854",
      "url": "https://patchblox.com/security/cve/CVE-2026-63854",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63855",
      "url": "https://patchblox.com/security/cve/CVE-2026-63855",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63856",
      "url": "https://patchblox.com/security/cve/CVE-2026-63856",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63884",
      "url": "https://patchblox.com/security/cve/CVE-2026-63884",
      "title": "kernel-zfcpdump: kernel: drm/i915: Fix potential UAF in TTM object purge",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63901",
      "url": "https://patchblox.com/security/cve/CVE-2026-63901",
      "title": "kernel-64kb: USB: serial: digi_acceleport: fix memory corruption with small endpoints (bsc#1272501).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00176,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63843",
      "url": "https://patchblox.com/security/cve/CVE-2026-63843",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63844",
      "url": "https://patchblox.com/security/cve/CVE-2026-63844",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63851",
      "url": "https://patchblox.com/security/cve/CVE-2026-63851",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63852",
      "url": "https://patchblox.com/security/cve/CVE-2026-63852",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00175,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63836",
      "url": "https://patchblox.com/security/cve/CVE-2026-63836",
      "title": "batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63807",
      "url": "https://patchblox.com/security/cve/CVE-2026-63807",
      "title": "KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00173,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53402",
      "url": "https://patchblox.com/security/cve/CVE-2026-53402",
      "title": "fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63902",
      "url": "https://patchblox.com/security/cve/CVE-2026-63902",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63903",
      "url": "https://patchblox.com/security/cve/CVE-2026-63903",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.1,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63904",
      "url": "https://patchblox.com/security/cve/CVE-2026-63904",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.1,
      "epss": 0.00171,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63826",
      "url": "https://patchblox.com/security/cve/CVE-2026-63826",
      "title": "fbdev: fix use-after-free in store_modes()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.0017,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63917",
      "url": "https://patchblox.com/security/cve/CVE-2026-63917",
      "title": "kernel-default: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63928",
      "url": "https://patchblox.com/security/cve/CVE-2026-63928",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63957",
      "url": "https://patchblox.com/security/cve/CVE-2026-63957",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00169,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63905",
      "url": "https://patchblox.com/security/cve/CVE-2026-63905",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64191",
      "url": "https://patchblox.com/security/cve/CVE-2026-64191",
      "title": "i2c: stub: Reject I2C block transfers with invalid length",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43059",
      "url": "https://patchblox.com/security/cve/CVE-2026-43059",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00165,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43352",
      "url": "https://patchblox.com/security/cve/CVE-2026-43352",
      "title": "i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63927",
      "url": "https://patchblox.com/security/cve/CVE-2026-63927",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63967",
      "url": "https://patchblox.com/security/cve/CVE-2026-63967",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00164,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63962",
      "url": "https://patchblox.com/security/cve/CVE-2026-63962",
      "title": "usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63930",
      "url": "https://patchblox.com/security/cve/CVE-2026-63930",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63934",
      "url": "https://patchblox.com/security/cve/CVE-2026-63934",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63961",
      "url": "https://patchblox.com/security/cve/CVE-2026-63961",
      "title": "usb: typec: altmodes/displayport: validate count before reading Status Update VDO",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63958",
      "url": "https://patchblox.com/security/cve/CVE-2026-63958",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63943",
      "url": "https://patchblox.com/security/cve/CVE-2026-63943",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.1,
      "epss": 0.00159,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63921",
      "url": "https://patchblox.com/security/cve/CVE-2026-63921",
      "title": "kernel-default: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00158,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53270",
      "url": "https://patchblox.com/security/cve/CVE-2026-53270",
      "title": "ipvs: clear the svc scheduler ptr early on edit",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00157,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63806",
      "url": "https://patchblox.com/security/cve/CVE-2026-63806",
      "title": "KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.3,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63809",
      "url": "https://patchblox.com/security/cve/CVE-2026-63809",
      "title": "bpf: use kvfree() for replaced sysctl write buffer",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00154,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46174",
      "url": "https://patchblox.com/security/cve/CVE-2026-46174",
      "title": "x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2\u0027s op cache",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 9.8,
      "epss": 0.00153,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63829",
      "url": "https://patchblox.com/security/cve/CVE-2026-63829",
      "title": "net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00148,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64298",
      "url": "https://patchblox.com/security/cve/CVE-2026-64298",
      "title": "NFSv4: include MAY_WRITE in open permission mask for O_TRUNC",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46145",
      "url": "https://patchblox.com/security/cve/CVE-2026-46145",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "important",
      "cvss": 7.8,
      "epss": 0.00147,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46189",
      "url": "https://patchblox.com/security/cve/CVE-2026-46189",
      "title": "kernel-uek-modules-extra: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [Orabug: 39460540]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7.8,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52910",
      "url": "https://patchblox.com/security/cve/CVE-2026-52910",
      "title": "bpf: Free reuseport cBPF prog after RCU grace period.",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63794",
      "url": "https://patchblox.com/security/cve/CVE-2026-63794",
      "title": "KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00142,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46180",
      "url": "https://patchblox.com/security/cve/CVE-2026-46180",
      "title": "wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53132",
      "url": "https://patchblox.com/security/cve/CVE-2026-53132",
      "title": "vsock/virtio: fix potential unbounded skb queue",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00139,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46117",
      "url": "https://patchblox.com/security/cve/CVE-2026-46117",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46193",
      "url": "https://patchblox.com/security/cve/CVE-2026-46193",
      "title": "kernel-uek-debug-devel: xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460554]",
      "priority": "High",
      "severity": "N/A",
      "cvss": 7,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46323",
      "url": "https://patchblox.com/security/cve/CVE-2026-46323",
      "title": "net: gro: don\u0027t merge zcopy skbs",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.4,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46080",
      "url": "https://patchblox.com/security/cve/CVE-2026-46080",
      "title": "ocfs2: split transactions in dio completion to avoid credit exhaustion",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00136,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46015",
      "url": "https://patchblox.com/security/cve/CVE-2026-46015",
      "title": "tcp: call sk_data_ready() after listener migration",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.1,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43033",
      "url": "https://patchblox.com/security/cve/CVE-2026-43033",
      "title": "crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00135,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52970",
      "url": "https://patchblox.com/security/cve/CVE-2026-52970",
      "title": "netfilter: nft_ct: fix missing expect put in obj eval",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53388",
      "url": "https://patchblox.com/security/cve/CVE-2026-53388",
      "title": "fuse: re-lock request before replacing page cache folio",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00133,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52942",
      "url": "https://patchblox.com/security/cve/CVE-2026-52942",
      "title": "netfilter: nf_log: validate MAC header was set before dumping it",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63971",
      "url": "https://patchblox.com/security/cve/CVE-2026-63971",
      "title": "kernel-default: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46234",
      "url": "https://patchblox.com/security/cve/CVE-2026-46234",
      "title": "vsock: fix buffer size clamping order",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63942",
      "url": "https://patchblox.com/security/cve/CVE-2026-63942",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00131,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53011",
      "url": "https://patchblox.com/security/cve/CVE-2026-53011",
      "title": "net/sched: taprio: fix use-after-free in advance_sched() on schedule switch",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53189",
      "url": "https://patchblox.com/security/cve/CVE-2026-53189",
      "title": "bpftool: kernel: mm/huge_memory: update file PMD counter before folio_put()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31759",
      "url": "https://patchblox.com/security/cve/CVE-2026-31759",
      "title": "kernel-default: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43328",
      "url": "https://patchblox.com/security/cve/CVE-2026-43328",
      "title": "kernel-64kb: cpufreq: governor: Free dbs_data directly when gov-\u003Einit() fails (bsc#1264832).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46084",
      "url": "https://patchblox.com/security/cve/CVE-2026-46084",
      "title": "RDMA/mana_ib: Disable RX steering on RSS QP destroy",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64330",
      "url": "https://patchblox.com/security/cve/CVE-2026-64330",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  usb: typec: tcpm: Validate SVID index in svdm_co...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53393",
      "url": "https://patchblox.com/security/cve/CVE-2026-53393",
      "title": "nfsd: reset write verifier on deferred writeback errors",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53063",
      "url": "https://patchblox.com/security/cve/CVE-2026-53063",
      "title": "dm cache: fix write hang in passthrough mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46158",
      "url": "https://patchblox.com/security/cve/CVE-2026-46158",
      "title": "mptcp: pm: ADD_ADDR rtx: always decrease sk refcount",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46170",
      "url": "https://patchblox.com/security/cve/CVE-2026-46170",
      "title": "mptcp: pm: ADD_ADDR rtx: free sk if last",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63952",
      "url": "https://patchblox.com/security/cve/CVE-2026-63952",
      "title": "kernel-default: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468).",
      "priority": "High",
      "severity": "important",
      "cvss": 8.4,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63945",
      "url": "https://patchblox.com/security/cve/CVE-2026-63945",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53230",
      "url": "https://patchblox.com/security/cve/CVE-2026-53230",
      "title": "net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64189",
      "url": "https://patchblox.com/security/cve/CVE-2026-64189",
      "title": "netfilter: ipset: fix race between dump and ip_set_list resize",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43016",
      "url": "https://patchblox.com/security/cve/CVE-2026-43016",
      "title": "kernel-64kb: bpf: sockmap: Fix use-after-free of sk-\u003Esk_socket in sk_psock_verdict_data_ready() (bsc#1264007).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64221",
      "url": "https://patchblox.com/security/cve/CVE-2026-64221",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  spi: ti-qspi: fix use-after-free after DMA setup...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63949",
      "url": "https://patchblox.com/security/cve/CVE-2026-63949",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53236",
      "url": "https://patchblox.com/security/cve/CVE-2026-53236",
      "title": "tcp: restrict SO_ATTACH_FILTER to priv users",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 8.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46324",
      "url": "https://patchblox.com/security/cve/CVE-2026-46324",
      "title": "kernel-default: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995).",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43440",
      "url": "https://patchblox.com/security/cve/CVE-2026-43440",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45944",
      "url": "https://patchblox.com/security/cve/CVE-2026-45944",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Clear Present bit before tearing dow...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00124,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31483",
      "url": "https://patchblox.com/security/cve/CVE-2026-31483",
      "title": "s390/syscalls: Add spectre boundary for syscall dispatch table",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53064",
      "url": "https://patchblox.com/security/cve/CVE-2026-53064",
      "title": "dm cache: fix null-deref with concurrent writes in passthrough mode",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31482",
      "url": "https://patchblox.com/security/cve/CVE-2026-31482",
      "title": "s390/entry: Scrub r12 register on kernel entry",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.1,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52927",
      "url": "https://patchblox.com/security/cve/CVE-2026-52927",
      "title": "netfilter: ebtables: fix OOB read in compat_mtw_from_user",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53267",
      "url": "https://patchblox.com/security/cve/CVE-2026-53267",
      "title": "netfilter: nft_ct: bail out on template ct in get eval",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64242",
      "url": "https://patchblox.com/security/cve/CVE-2026-64242",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  usb: gadget: net2280: Fix double free in probe e...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.8,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64174",
      "url": "https://patchblox.com/security/cve/CVE-2026-64174",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: cfg80211: advance loop vars in cfg80211_me...",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53262",
      "url": "https://patchblox.com/security/cve/CVE-2026-53262",
      "title": "l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.8,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43281",
      "url": "https://patchblox.com/security/cve/CVE-2026-43281",
      "title": "kernel-64kb: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.1,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43276",
      "url": "https://patchblox.com/security/cve/CVE-2026-43276",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.4,
      "epss": 0.00118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43056",
      "url": "https://patchblox.com/security/cve/CVE-2026-43056",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53129",
      "url": "https://patchblox.com/security/cve/CVE-2026-53129",
      "title": "fs/mbcache: cancel shrink work before destroying the cache",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00117,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53185",
      "url": "https://patchblox.com/security/cve/CVE-2026-53185",
      "title": "kernel: kernel: zram: fix use-after-free in zram_bvec_write_partial()",
      "priority": "High",
      "severity": "important",
      "cvss": 8.8,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-23097",
      "url": "https://patchblox.com/security/cve/CVE-2026-23097",
      "title": "kernel-64kb: migrate: correct lock ordering for hugetlb file folios (bsc#1257815).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00107,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53250",
      "url": "https://patchblox.com/security/cve/CVE-2026-53250",
      "title": "kernel-default: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808).",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.8,
      "epss": 0.00105,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53354",
      "url": "https://patchblox.com/security/cve/CVE-2026-53354",
      "title": "arm64: errata: Mitigate TLBI errata on various Arm CPUs",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00104,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63802",
      "url": "https://patchblox.com/security/cve/CVE-2026-63802",
      "title": "blk-cgroup: fix UAF in __blkcg_rstat_flush()",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.3,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52988",
      "url": "https://patchblox.com/security/cve/CVE-2026-52988",
      "title": "netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.1,
      "epss": 0.00102,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53265",
      "url": "https://patchblox.com/security/cve/CVE-2026-53265",
      "title": "dm cache policy smq: check allocation under invalidate lock",
      "priority": "High",
      "severity": "Moderate",
      "cvss": 7.8,
      "epss": 0.00098,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-2058",
      "url": "https://patchblox.com/security/cve/CVE-2023-2058",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00609,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63895",
      "url": "https://patchblox.com/security/cve/CVE-2026-63895",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "epss": 0.00261,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-21845",
      "url": "https://patchblox.com/security/cve/CVE-2025-21845",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0026,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63892",
      "url": "https://patchblox.com/security/cve/CVE-2026-63892",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00229,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64465",
      "url": "https://patchblox.com/security/cve/CVE-2026-64465",
      "title": "usb: xhci: Fix sleep in atomic context in xhci_free_streams()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00184,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-38469",
      "url": "https://patchblox.com/security/cve/CVE-2025-38469",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00179,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63822",
      "url": "https://patchblox.com/security/cve/CVE-2026-63822",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00174,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63897",
      "url": "https://patchblox.com/security/cve/CVE-2026-63897",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63900",
      "url": "https://patchblox.com/security/cve/CVE-2026-63900",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00167,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63821",
      "url": "https://patchblox.com/security/cve/CVE-2026-63821",
      "title": "wifi: rtw88: usb: fix memory leaks on USB write failures",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00166,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53083",
      "url": "https://patchblox.com/security/cve/CVE-2026-53083",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix RCU stall in bpf_fd_array_map_clear()...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53297",
      "url": "https://patchblox.com/security/cve/CVE-2026-53297",
      "title": "net: mana: Guard mana_remove against double invocation",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53321",
      "url": "https://patchblox.com/security/cve/CVE-2026-53321",
      "title": "kernel-64kb: io_uring/napi: cap busy_poll_to 10 msec (bsc#1269724).",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53379",
      "url": "https://patchblox.com/security/cve/CVE-2026-53379",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  media: i2c: ov8856: free control handler on erro...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00162,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45873",
      "url": "https://patchblox.com/security/cve/CVE-2026-45873",
      "title": "kernel-64kb: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45904",
      "url": "https://patchblox.com/security/cve/CVE-2026-45904",
      "title": "kernel-livepatch-SLE15-SP6_Update_30: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45913",
      "url": "https://patchblox.com/security/cve/CVE-2026-45913",
      "title": "kernel-64kb: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45915",
      "url": "https://patchblox.com/security/cve/CVE-2026-45915",
      "title": "kernel-64kb: fat: avoid parent link count underflow in rmdir (bsc#1266896).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45973",
      "url": "https://patchblox.com/security/cve/CVE-2026-45973",
      "title": "RDMA/mlx5: Fix UMR hang in LAG error state unload",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53107",
      "url": "https://patchblox.com/security/cve/CVE-2026-53107",
      "title": "wifi: libertas: don\u0027t kill URBs in interrupt context",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53324",
      "url": "https://patchblox.com/security/cve/CVE-2026-53324",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63948",
      "url": "https://patchblox.com/security/cve/CVE-2026-63948",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.0016,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45917",
      "url": "https://patchblox.com/security/cve/CVE-2026-45917",
      "title": "ipvs: do not keep dest_dst if dev is going down",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63908",
      "url": "https://patchblox.com/security/cve/CVE-2026-63908",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63931",
      "url": "https://patchblox.com/security/cve/CVE-2026-63931",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63960",
      "url": "https://patchblox.com/security/cve/CVE-2026-63960",
      "title": "usb: typec: wcove: don\u0027t write past struct pd_message in wcove_read_rx_buffer()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63964",
      "url": "https://patchblox.com/security/cve/CVE-2026-63964",
      "title": "usb: typec: ucsi: ccg: reject firmware images without a \u0027:\u0027 record header",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00156,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46245",
      "url": "https://patchblox.com/security/cve/CVE-2026-46245",
      "title": "drm/amd/display: Fix dc_link NULL handling in HPD init",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53106",
      "url": "https://patchblox.com/security/cve/CVE-2026-53106",
      "title": "bpf: Do not allow deleting local storage in NMI",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43216",
      "url": "https://patchblox.com/security/cve/CVE-2026-43216",
      "title": "net: Drop the lock in skb_may_tx_timestamp()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00138,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53012",
      "url": "https://patchblox.com/security/cve/CVE-2026-53012",
      "title": "nexthop: fix IPv6 route referencing IPv4 nexthop",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00137,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46026",
      "url": "https://patchblox.com/security/cve/CVE-2026-46026",
      "title": "kernel-uek64k-devel: net: qrtr: ns: Limit the maximum number of lookups (Manivannan Sadhasivam) [Orabug: 39452208]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00134,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53382",
      "url": "https://patchblox.com/security/cve/CVE-2026-53382",
      "title": "media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53385",
      "url": "https://patchblox.com/security/cve/CVE-2026-53385",
      "title": "vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00132,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53252",
      "url": "https://patchblox.com/security/cve/CVE-2026-53252",
      "title": "Bluetooth: fix memory leak in error path of hci_alloc_dev()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0013,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31628",
      "url": "https://patchblox.com/security/cve/CVE-2026-31628",
      "title": "x86/CPU: Fix FPDSS on Zen1",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46003",
      "url": "https://patchblox.com/security/cve/CVE-2026-46003",
      "title": "net: qrtr: ns: Limit the total number of nodes",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46038",
      "url": "https://patchblox.com/security/cve/CVE-2026-46038",
      "title": "net: qrtr: ns: Free the node during ctrl_cmd_bye()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53134",
      "url": "https://patchblox.com/security/cve/CVE-2026-53134",
      "title": "kernel-64kb: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53331",
      "url": "https://patchblox.com/security/cve/CVE-2026-53331",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ct...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53332",
      "url": "https://patchblox.com/security/cve/CVE-2026-53332",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  slimbus: qcom-ngd-ctrl: Register callbacks after...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00129,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46168",
      "url": "https://patchblox.com/security/cve/CVE-2026-46168",
      "title": "mptcp: fix scheduling with atomic in timestamp sockopt",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52984",
      "url": "https://patchblox.com/security/cve/CVE-2026-52984",
      "title": "kernel-uek-container: net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677]",
      "priority": "Routine",
      "severity": "N/A",
      "cvss": 5.5,
      "epss": 0.00128,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46126",
      "url": "https://patchblox.com/security/cve/CVE-2026-46126",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46144",
      "url": "https://patchblox.com/security/cve/CVE-2026-46144",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00127,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46147",
      "url": "https://patchblox.com/security/cve/CVE-2026-46147",
      "title": "KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00126,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43170",
      "url": "https://patchblox.com/security/cve/CVE-2026-43170",
      "title": "kernel-64kb: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53177",
      "url": "https://patchblox.com/security/cve/CVE-2026-53177",
      "title": "bnxt_en: Fix NULL pointer dereference",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63862",
      "url": "https://patchblox.com/security/cve/CVE-2026-63862",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00125,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43130",
      "url": "https://patchblox.com/security/cve/CVE-2026-43130",
      "title": "kernel-64kb: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43168",
      "url": "https://patchblox.com/security/cve/CVE-2026-43168",
      "title": "kernel-64kb: ocfs2: fix reflink preserve cleanup issue (bsc#1264537).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43308",
      "url": "https://patchblox.com/security/cve/CVE-2026-43308",
      "title": "btrfs: don\u0027t BUG() on unexpected delayed ref type in run_one_delayed_ref()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43451",
      "url": "https://patchblox.com/security/cve/CVE-2026-43451",
      "title": "kernel-64kb: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46109",
      "url": "https://patchblox.com/security/cve/CVE-2026-46109",
      "title": "usb: ulpi: fix memory leak on ulpi_register() error paths",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-46292",
      "url": "https://patchblox.com/security/cve/CVE-2026-46292",
      "title": "pmdomain: core: Fix detach procedure for virtual devices in genpd",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53289",
      "url": "https://patchblox.com/security/cve/CVE-2026-53289",
      "title": "ice: fix NULL pointer dereference in ice_reset_all_vfs()",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53291",
      "url": "https://patchblox.com/security/cve/CVE-2026-53291",
      "title": "ALSA: hda/conexant: Fix missing error check for jack detection",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63991",
      "url": "https://patchblox.com/security/cve/CVE-2026-63991",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64220",
      "url": "https://patchblox.com/security/cve/CVE-2026-64220",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  device property: set fwnode-\u003Esecondary to NULL i...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64231",
      "url": "https://patchblox.com/security/cve/CVE-2026-64231",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drm/msm/dsi: don\u0027t dump registers past the mappe...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64336",
      "url": "https://patchblox.com/security/cve/CVE-2026-64336",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  USB: serial: keyspan_pda: fix information leak...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64345",
      "url": "https://patchblox.com/security/cve/CVE-2026-64345",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  usb: gadget: f_printer: take kref only for succe...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00123,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-31542",
      "url": "https://patchblox.com/security/cve/CVE-2026-31542",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43161",
      "url": "https://patchblox.com/security/cve/CVE-2026-43161",
      "title": "iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43309",
      "url": "https://patchblox.com/security/cve/CVE-2026-43309",
      "title": "md raid: fix hang when stopping arrays with metadata through dm-raid",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53032",
      "url": "https://patchblox.com/security/cve/CVE-2026-53032",
      "title": "bpf: Fix NULL deref in map_kptr_match_type for scalar regs",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00122,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-63861",
      "url": "https://patchblox.com/security/cve/CVE-2026-63861",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00121,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53345",
      "url": "https://patchblox.com/security/cve/CVE-2026-53345",
      "title": "KVM: Don\u0027t WARN if memory is dirtied without a vCPU when the VM is dying",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52930",
      "url": "https://patchblox.com/security/cve/CVE-2026-52930",
      "title": "ipc/shm: serialize orphan cleanup with shm_nattch updates",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.0012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43266",
      "url": "https://patchblox.com/security/cve/CVE-2026-43266",
      "title": "kernel-64kb: EFI/CPER: don\u0027t go past the ARM processor CPER record buffer (bsc#1264418).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52941",
      "url": "https://patchblox.com/security/cve/CVE-2026-52941",
      "title": "net/smc: avoid NULL deref of conn-\u003Elnk in smc_msg_event tracepoint",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64183",
      "url": "https://patchblox.com/security/cve/CVE-2026-64183",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  efi: Allocate runtime workqueue before ACPI init...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00119,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2025-68223",
      "url": "https://patchblox.com/security/cve/CVE-2025-68223",
      "title": "drm/radeon: delete radeon_fence_process in is_signaled, no deadlock",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.2,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53123",
      "url": "https://patchblox.com/security/cve/CVE-2026-53123",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  md: wake raid456 reshape waiters before suspend...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52937",
      "url": "https://patchblox.com/security/cve/CVE-2026-52937",
      "title": "tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00115,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64179",
      "url": "https://patchblox.com/security/cve/CVE-2026-64179",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00115,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64234",
      "url": "https://patchblox.com/security/cve/CVE-2026-64234",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  tty: serial: pch_uart: add check for dma_alloc_c...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00115,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-53074",
      "url": "https://patchblox.com/security/cve/CVE-2026-53074",
      "title": "bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.4,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43046",
      "url": "https://patchblox.com/security/cve/CVE-2026-43046",
      "title": "kernel-default: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43262",
      "url": "https://patchblox.com/security/cve/CVE-2026-43262",
      "title": "kernel-64kb: gfs2: fiemap page fault fix (bsc#1264422).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43475",
      "url": "https://patchblox.com/security/cve/CVE-2026-43475",
      "title": "kernel-64kb: Security update for the Linux Kernel",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-52921",
      "url": "https://patchblox.com/security/cve/CVE-2026-52921",
      "title": "netfilter: ipset: stop hash:* range iteration at end",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64182",
      "url": "https://patchblox.com/security/cve/CVE-2026-64182",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  drivers/base/memory: fix memory block reference...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64187",
      "url": "https://patchblox.com/security/cve/CVE-2026-64187",
      "title": "xfs: fail recovery on a committed log item with no regions",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 5.5,
      "epss": 0.00114,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-45905",
      "url": "https://patchblox.com/security/cve/CVE-2026-45905",
      "title": "kernel-64kb: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 5.5,
      "epss": 0.00111,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-64347",
      "url": "https://patchblox.com/security/cve/CVE-2026-64347",
      "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  usb: gadget: composite: fix dead empty check in...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2026-43439",
      "url": "https://patchblox.com/security/cve/CVE-2026-43439",
      "title": "kernel-64kb: cgroup: fix race between task migration and iteration (bsc#1265141).",
      "priority": "Routine",
      "severity": "IMPORTANT",
      "cvss": 4.7,
      "epss": 0.00089,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}