# SUSE-SU-2026:3790-1: Security update for 10 packages

SUSE-SU-2026:3790-1, released August 25, 2026, fixes 268 CVEs across 10 products. One of them is being exploited (CVE-2026-31431); 1 on CISA KEV. Patch Radar priority: Patch now.

- Web page: https://patchblox.com/security/fix/linux/suse-su-2026-3790-1
- Platform: Linux
- Released: Aug 25, 2026
- Priority: Patch now (Closes CVE-2026-31431, exploited (CISA KEV))
- CVEs: 268, exploited: 1, on CISA KEV: 1
- Vendor advisory: https://osv.dev/vulnerability/SUSE-SU-2026:3790-1

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [kernel-64kb](https://patchblox.com/security/data/product/linux/kernel-64kb.md) | sles 15.7 | 6.4.0-150700.53.78.1 |
| [kernel-azure](https://patchblox.com/security/data/product/linux/kernel-azure.md) | sles 15.7 | 6.4.0-150700.53.78.1 |
| [kernel-default](https://patchblox.com/security/data/product/linux/kernel-default.md) | sles 15.7 | 6.4.0-150700.53.78.1 |
| [kernel-default-base](https://patchblox.com/security/data/product/linux/kernel-default-base.md) | sles 15.7 | 6.4.0-150700.53.78.1.150700.17.43.2 |
| [kernel-docs](https://patchblox.com/security/data/product/linux/kernel-docs.md) | sles 15.7 | 6.4.0-150700.53.78.1 |
| [kernel-livepatch-SLE15-SP7_Update_20](https://patchblox.com/security/data/product/linux/kernel-livepatch-sle15-sp7-update-20.md) | sles 15.7 | 1-150700.15.3.2 |
| [kernel-obs-build](https://patchblox.com/security/data/product/linux/kernel-obs-build.md) | sles 15.7 | 6.4.0-150700.53.78.1 |
| [kernel-source](https://patchblox.com/security/data/product/linux/kernel-source.md) | sles 15.7 | 6.4.0-150700.53.78.1 |
| [kernel-syms](https://patchblox.com/security/data/product/linux/kernel-syms.md) | sles 15.7 | 6.4.0-150700.53.78.1 |
| [kernel-zfcpdump](https://patchblox.com/security/data/product/linux/kernel-zfcpdump.md) | sles 15.7 | 6.4.0-150700.53.78.1 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-31431](https://patchblox.com/security/data/cve/CVE-2026-31431.md) | Patch now | crypto: algif_aead - Revert to operating out-of-place | 8.1 | 0.9811 | CISA KEV |
| [CVE-2026-64564](https://patchblox.com/security/data/cve/CVE-2026-64564.md) | Urgent | sctp: don't free the ASCONF's own transport in DEL-IP processing | 9.8 | 0.0143 |  |
| [CVE-2026-64089](https://patchblox.com/security/data/cve/CVE-2026-64089.md) | Urgent | kernel-64kb: Security update for the Linux Kernel | 9.8 | 0.0055 |  |
| [CVE-2025-68741](https://patchblox.com/security/data/cve/CVE-2025-68741.md) | Urgent | linux: In the Linux kernel, the following vulnerability has been resolved:  scsi: qla2xxx: Fix improper freeing of purex ite... | 9.8 | 0.0043 |  |
| [CVE-2026-64025](https://patchblox.com/security/data/cve/CVE-2026-64025.md) | Urgent | kernel-64kb: bpf, skmsg: fix verdict sk_data_ready racing with ktls rx (bsc#1273117). | 9.8 | 0.0037 |  |
| [CVE-2026-53002](https://patchblox.com/security/data/cve/CVE-2026-53002.md) | Urgent | netfilter: conntrack: remove sprintf usage | 9.8 | 0.0037 |  |
| [CVE-2026-63974](https://patchblox.com/security/data/cve/CVE-2026-63974.md) | Urgent | Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close | 9.8 | 0.0035 |  |
| [CVE-2026-63882](https://patchblox.com/security/data/cve/CVE-2026-63882.md) | Urgent | drm/amdkfd: fix NULL pointer bug in svm_range_set_attr | 9.8 | 0.0022 |  |
| [CVE-2026-63824](https://patchblox.com/security/data/cve/CVE-2026-63824.md) | Urgent | KEYS: fix overflow in keyctl_pkey_params_get_2() | 9.8 | 0.0017 |  |
| [CVE-2026-53376](https://patchblox.com/security/data/cve/CVE-2026-53376.md) | Urgent | drm/amdkfd: Add upper bound check for num_of_nodes | 9.8 | 0.0016 |  |
| [CVE-2026-63959](https://patchblox.com/security/data/cve/CVE-2026-63959.md) | Urgent | usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT | 9.8 | 0.0016 |  |
| [CVE-2026-64106](https://patchblox.com/security/data/cve/CVE-2026-64106.md) | Urgent | kernel-default: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits (bsc#1272242). | 9.0 | 0.0015 |  |
| [CVE-2026-52991](https://patchblox.com/security/data/cve/CVE-2026-52991.md) | Urgent | sched/psi: fix race between file release and pressure write | 9.8 | 0.0015 |  |
| [CVE-2026-53403](https://patchblox.com/security/data/cve/CVE-2026-53403.md) | Urgent | fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var | 9.8 | 0.0013 |  |
| [CVE-2026-53374](https://patchblox.com/security/data/cve/CVE-2026-53374.md) | Urgent | drm/amdgpu: zero-initialize GART table on allocation | 9.8 | 0.0013 |  |
| [CVE-2026-52947](https://patchblox.com/security/data/cve/CVE-2026-52947.md) | Urgent | net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove | 9.8 | 0.0011 |  |
| [CVE-2026-53062](https://patchblox.com/security/data/cve/CVE-2026-53062.md) | Urgent | dm cache policy smq: fix missing locks in invalidating cache blocks | 9.8 | 0.0010 |  |
| [CVE-2026-46333](https://patchblox.com/security/data/cve/CVE-2026-46333.md) | High | ptrace: slightly saner 'get_dumpable()' logic | 8.1 | 0.0430 |  |
| [CVE-2026-45860](https://patchblox.com/security/data/cve/CVE-2026-45860.md) | High | kernel-64kb: netfilter: nf_conncount: increase the connection clean up limit to 64 (bsc#1266710). | 7.5 | 0.0075 |  |
| [CVE-2026-63912](https://patchblox.com/security/data/cve/CVE-2026-63912.md) | High | kernel-default: xfrm: esp: restore combined single-frag length gate (bsc#1272836). | 9.8 | 0.0071 |  |
| [CVE-2026-63922](https://patchblox.com/security/data/cve/CVE-2026-63922.md) | High | kernel: kernel: ipv6: exthdrs: refresh nh after handling HAO option | 9.8 | 0.0071 |  |
| [CVE-2026-63924](https://patchblox.com/security/data/cve/CVE-2026-63924.md) | High | kernel: kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() | 9.8 | 0.0071 |  |
| [CVE-2026-63968](https://patchblox.com/security/data/cve/CVE-2026-63968.md) | High | kernel-default: ipv6: fix possible infinite loop in fib6_select_path() (bsc#1272466). | 7.5 | 0.0067 |  |
| [CVE-2026-53399](https://patchblox.com/security/data/cve/CVE-2026-53399.md) | High | nfsd: release layout stid on setlease failure | 9.8 | 0.0066 |  |
| [CVE-2026-64530](https://patchblox.com/security/data/cve/CVE-2026-64530.md) | High | net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle | 9.8 | 0.0066 |  |
| [CVE-2026-63919](https://patchblox.com/security/data/cve/CVE-2026-63919.md) | High | kernel-default: xfrm: input: hold netns during deferred transport reinjection (bsc#1272907). | 8.8 | 0.0065 |  |
| [CVE-2026-52986](https://patchblox.com/security/data/cve/CVE-2026-52986.md) | High | netfilter: nf_conntrack_sip: don't use simple_strtoul | 9.8 | 0.0063 |  |
| [CVE-2026-63795](https://patchblox.com/security/data/cve/CVE-2026-63795.md) | High | 9p: avoid putting oldfid in p9_client_walk() error path | 10.0 | 0.0062 |  |
| [CVE-2026-52999](https://patchblox.com/security/data/cve/CVE-2026-52999.md) | High | netfilter: nfnetlink_osf: fix out-of-bounds read on option matching | 9.1 | 0.0059 |  |
| [CVE-2026-52998](https://patchblox.com/security/data/cve/CVE-2026-52998.md) | High | netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check | 7.5 | 0.0058 |  |
| [CVE-2026-53221](https://patchblox.com/security/data/cve/CVE-2026-53221.md) | High | ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | 9.8 | 0.0058 |  |
| [CVE-2026-63976](https://patchblox.com/security/data/cve/CVE-2026-63976.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0057 |  |
| [CVE-2026-53398](https://patchblox.com/security/data/cve/CVE-2026-53398.md) | High | NFSD: Fix SECINFO_NO_NAME decode error cleanup | 9.8 | 0.0054 |  |
| [CVE-2026-53392](https://patchblox.com/security/data/cve/CVE-2026-53392.md) | High | NFSv4/flexfiles: reject zero filehandle version count | 8.8 | 0.0053 |  |
| [CVE-2026-53397](https://patchblox.com/security/data/cve/CVE-2026-53397.md) | High | nfsd: fix posix_acl leak on SETACL decode failure | 8.8 | 0.0053 |  |
| [CVE-2026-43230](https://patchblox.com/security/data/cve/CVE-2026-43230.md) | High | kernel-64kb: net/rds: Clear reconnect pending bit (bsc#1264539). | 7.5 | 0.0052 |  |
| [CVE-2026-53391](https://patchblox.com/security/data/cve/CVE-2026-53391.md) | High | NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr | 8.8 | 0.0052 |  |
| [CVE-2026-63984](https://patchblox.com/security/data/cve/CVE-2026-63984.md) | High | kernel-default: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress() (bsc#1272865). | 9.8 | 0.0051 |  |
| [CVE-2026-63994](https://patchblox.com/security/data/cve/CVE-2026-63994.md) | High | kernel-default: tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp() (bsc#1273035). | 9.8 | 0.0051 |  |
| [CVE-2026-64560](https://patchblox.com/security/data/cve/CVE-2026-64560.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  posix-cpu-timers: Prevent UAF caused by non-lead... | 7.8 | 0.0050 |  |
| [CVE-2026-52974](https://patchblox.com/security/data/cve/CVE-2026-52974.md) | High | net: tls: fix strparser anchor skb leak on offload RX setup failure | 7.5 | 0.0050 |  |
| [CVE-2026-53183](https://patchblox.com/security/data/cve/CVE-2026-53183.md) | High | mptcp: allow subflow rcv wnd to shrink | 7.5 | 0.0049 |  |
| [CVE-2026-53184](https://patchblox.com/security/data/cve/CVE-2026-53184.md) | High | udp: clear skb->dev before running a sockmap verdict | 7.5 | 0.0049 |  |
| [CVE-2026-46137](https://patchblox.com/security/data/cve/CVE-2026-46137.md) | High | mptcp: pm: ADD_ADDR rtx: fix potential data-race | 9.8 | 0.0048 |  |
| [CVE-2026-64600](https://patchblox.com/security/data/cve/CVE-2026-64600.md) | High | xfs: resample the data fork mapping after cycling ILOCK | 7.8 | 0.0047 |  |
| [CVE-2026-46306](https://patchblox.com/security/data/cve/CVE-2026-46306.md) | High | flow_dissector: do not dissect PPPoE PFC frames | 8.1 | 0.0045 |  |
| [CVE-2026-53131](https://patchblox.com/security/data/cve/CVE-2026-53131.md) | High | netfilter: require Ethernet MAC header before using eth_hdr() | 9.4 | 0.0044 |  |
| [CVE-2026-31598](https://patchblox.com/security/data/cve/CVE-2026-31598.md) | High | ocfs2: fix possible deadlock between unlink and dio_end_io_write | 7.5 | 0.0044 |  |
| [CVE-2026-46243](https://patchblox.com/security/data/cve/CVE-2026-46243.md) | High | smb: client: reject userspace cifs.spnego descriptions | 7.8 | 0.0041 |  |
| [CVE-2026-53088](https://patchblox.com/security/data/cve/CVE-2026-53088.md) | High | net: bcmgenet: fix off-by-one in bcmgenet_put_txcb | 9.8 | 0.0040 |  |
| [CVE-2026-53006](https://patchblox.com/security/data/cve/CVE-2026-53006.md) | High | ipv6: fix possible UAF in icmpv6_rcv() | 9.8 | 0.0039 |  |
| [CVE-2026-52967](https://patchblox.com/security/data/cve/CVE-2026-52967.md) | High | kernel-default: smb/client: fix possible infinite loop and oob read in symlink_data() (bsc#1269181). | 8.1 | 0.0039 |  |
| [CVE-2026-46265](https://patchblox.com/security/data/cve/CVE-2026-46265.md) | High | kernel-64kb: RDMA/hns: Fix WQ_MEM_RECLAIM warning (bsc#1267662). | 7.5 | 0.0039 |  |
| [CVE-2026-63893](https://patchblox.com/security/data/cve/CVE-2026-63893.md) | High | kernel-default: thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (bsc#1272607). | 8.1 | 0.0039 |  |
| [CVE-2026-64223](https://patchblox.com/security/data/cve/CVE-2026-64223.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: mac80211: consume only present negotiated... | 8.1 | 0.0039 |  |
| [CVE-2026-53069](https://patchblox.com/security/data/cve/CVE-2026-53069.md) | High | kernel-64kb: net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master (bsc#1269186). | 7.5 | 0.0038 |  |
| [CVE-2026-43114](https://patchblox.com/security/data/cve/CVE-2026-43114.md) | High | kernel-rt-64k-modules-core: kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry | 9.4 | 0.0037 |  |
| [CVE-2026-63916](https://patchblox.com/security/data/cve/CVE-2026-63916.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0036 |  |
| [CVE-2026-63915](https://patchblox.com/security/data/cve/CVE-2026-63915.md) | High | kernel-64kb: Security update for the Linux Kernel | 8.8 | 0.0035 |  |
| [CVE-2026-63947](https://patchblox.com/security/data/cve/CVE-2026-63947.md) | High | kernel-64k-modules-core: kernel: Bluetooth: HIDP: fix missing length checks in hidp_input_report() | 8.8 | 0.0035 |  |
| [CVE-2025-68818](https://patchblox.com/security/data/cve/CVE-2025-68818.md) | High | scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" | 8.8 | 0.0033 |  |
| [CVE-2026-43172](https://patchblox.com/security/data/cve/CVE-2026-43172.md) | High | wifi: iwlwifi: fix 22000 series SMEM parsing | 8.8 | 0.0033 |  |
| [CVE-2026-53175](https://patchblox.com/security/data/cve/CVE-2026-53175.md) | High | kernel-64kb: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush (bsc#1269714). | 9.8 | 0.0031 |  |
| [CVE-2025-54518](https://patchblox.com/security/data/cve/CVE-2025-54518.md) | High | AMD: CVE-2025-54518 CPU OP Cache Corruption | 7.8 | 0.0029 |  |
| [CVE-2026-63975](https://patchblox.com/security/data/cve/CVE-2026-63975.md) | High | kernel-default: Bluetooth: L2CAP: Fix possible crash on l2cap_ecred_conn_rsp (bsc#1272694). | 8.8 | 0.0027 |  |
| [CVE-2026-64561](https://patchblox.com/security/data/cve/CVE-2026-64561.md) | High | KVM: x86: Check for invalid/obsolete root *after* making MMU pages available | 8.8 | 0.0027 |  |
| [CVE-2026-53275](https://patchblox.com/security/data/cve/CVE-2026-53275.md) | High | ipv6: mcast: Fix use-after-free when processing MLD queries | 8.8 | 0.0026 |  |
| [CVE-2026-63946](https://patchblox.com/security/data/cve/CVE-2026-63946.md) | High | kernel-default: Bluetooth: ISO: fix UAF in iso_recv_frame (bsc#1272665). | 8.8 | 0.0026 |  |
| [CVE-2026-63869](https://patchblox.com/security/data/cve/CVE-2026-63869.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: limit injected antenna index in i... | 8.8 | 0.0026 |  |
| [CVE-2026-63896](https://patchblox.com/security/data/cve/CVE-2026-63896.md) | High | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0021 |  |
| [CVE-2026-63939](https://patchblox.com/security/data/cve/CVE-2026-63939.md) | High | kernel-64kb: KVM: SEV: Compute the correct max length of the in-GHCB scratch area (bsc#1272691). | 9.3 | 0.0020 |  |
| [CVE-2026-63938](https://patchblox.com/security/data/cve/CVE-2026-63938.md) | High | kernel-64kb: KVM: SEV: Check PSC request indices against the actual size of the buffer (bsc#1272620). | 9.3 | 0.0020 |  |
| [CVE-2026-53212](https://patchblox.com/security/data/cve/CVE-2026-53212.md) | High | netfilter: nft_tunnel: fix use-after-free on object destroy | 7.8 | 0.0019 |  |
| [CVE-2025-40213](https://patchblox.com/security/data/cve/CVE-2025-40213.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: MGMT: fix crash in set_mesh_sync and... | 7.8 | 0.0019 |  |
| [CVE-2026-53369](https://patchblox.com/security/data/cve/CVE-2026-53369.md) | High | kernel-64kb: udf: reject descriptors with oversized CRC length (bsc#1271818). | 8.4 | 0.0019 |  |
| [CVE-2026-63940](https://patchblox.com/security/data/cve/CVE-2026-63940.md) | High | KVM: SEV: Ignore Port I/O requests of length '0' | 9.3 | 0.0019 |  |
| [CVE-2026-53000](https://patchblox.com/security/data/cve/CVE-2026-53000.md) | High | kernel: In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfree_rcu to release ops Flor... | 7.8 | 0.0018 |  |
| [CVE-2025-38250](https://patchblox.com/security/data/cve/CVE-2025-38250.md) | High | Bluetooth: hci_core: Fix use-after-free in vhci_flush() | 7.8 | 0.0018 |  |
| [CVE-2026-53375](https://patchblox.com/security/data/cve/CVE-2026-53375.md) | High | drm/amdgpu/vce: Prevent partial address patches | 8.8 | 0.0018 |  |
| [CVE-2026-63899](https://patchblox.com/security/data/cve/CVE-2026-63899.md) | High | kernel: kernel: USB: serial: mxuport: fix memory corruption with small endpoint | 8.8 | 0.0018 |  |
| [CVE-2026-63845](https://patchblox.com/security/data/cve/CVE-2026-63845.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63846](https://patchblox.com/security/data/cve/CVE-2026-63846.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63847](https://patchblox.com/security/data/cve/CVE-2026-63847.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63848](https://patchblox.com/security/data/cve/CVE-2026-63848.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63853](https://patchblox.com/security/data/cve/CVE-2026-63853.md) | High | drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring | 7.8 | 0.0018 |  |
| [CVE-2026-63854](https://patchblox.com/security/data/cve/CVE-2026-63854.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63855](https://patchblox.com/security/data/cve/CVE-2026-63855.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63856](https://patchblox.com/security/data/cve/CVE-2026-63856.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63884](https://patchblox.com/security/data/cve/CVE-2026-63884.md) | High | kernel-zfcpdump: kernel: drm/i915: Fix potential UAF in TTM object purge | 7.8 | 0.0018 |  |
| [CVE-2026-63901](https://patchblox.com/security/data/cve/CVE-2026-63901.md) | High | kernel-64kb: USB: serial: digi_acceleport: fix memory corruption with small endpoints (bsc#1272501). | 7.8 | 0.0018 |  |
| [CVE-2026-63843](https://patchblox.com/security/data/cve/CVE-2026-63843.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63844](https://patchblox.com/security/data/cve/CVE-2026-63844.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63851](https://patchblox.com/security/data/cve/CVE-2026-63851.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63852](https://patchblox.com/security/data/cve/CVE-2026-63852.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0018 |  |
| [CVE-2026-63836](https://patchblox.com/security/data/cve/CVE-2026-63836.md) | High | batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd | 7.5 | 0.0017 |  |
| [CVE-2026-63807](https://patchblox.com/security/data/cve/CVE-2026-63807.md) | High | KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level | 8.8 | 0.0017 |  |
| [CVE-2026-53402](https://patchblox.com/security/data/cve/CVE-2026-53402.md) | High | fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() | 7.1 | 0.0017 |  |
| [CVE-2026-63902](https://patchblox.com/security/data/cve/CVE-2026-63902.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2026-63903](https://patchblox.com/security/data/cve/CVE-2026-63903.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2026-63904](https://patchblox.com/security/data/cve/CVE-2026-63904.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0017 |  |
| [CVE-2026-63826](https://patchblox.com/security/data/cve/CVE-2026-63826.md) | High | fbdev: fix use-after-free in store_modes() | 7.1 | 0.0017 |  |
| [CVE-2026-63917](https://patchblox.com/security/data/cve/CVE-2026-63917.md) | High | kernel-default: ip6: vti: Use ip6_tnl.net in vti6_changelink() (bsc#1272904). | 8.8 | 0.0017 |  |
| [CVE-2026-63928](https://patchblox.com/security/data/cve/CVE-2026-63928.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-63957](https://patchblox.com/security/data/cve/CVE-2026-63957.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-63905](https://patchblox.com/security/data/cve/CVE-2026-63905.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-64191](https://patchblox.com/security/data/cve/CVE-2026-64191.md) | High | i2c: stub: Reject I2C block transfers with invalid length | 9.8 | 0.0017 |  |
| [CVE-2026-43059](https://patchblox.com/security/data/cve/CVE-2026-43059.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0017 |  |
| [CVE-2026-43352](https://patchblox.com/security/data/cve/CVE-2026-43352.md) | High | i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue | 7.8 | 0.0016 |  |
| [CVE-2026-63927](https://patchblox.com/security/data/cve/CVE-2026-63927.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2026-63967](https://patchblox.com/security/data/cve/CVE-2026-63967.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2026-63962](https://patchblox.com/security/data/cve/CVE-2026-63962.md) | High | usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() | 8.8 | 0.0016 |  |
| [CVE-2026-63930](https://patchblox.com/security/data/cve/CVE-2026-63930.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0016 |  |
| [CVE-2026-63934](https://patchblox.com/security/data/cve/CVE-2026-63934.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0016 |  |
| [CVE-2026-63961](https://patchblox.com/security/data/cve/CVE-2026-63961.md) | High | usb: typec: altmodes/displayport: validate count before reading Status Update VDO | 7.1 | 0.0016 |  |
| [CVE-2026-63958](https://patchblox.com/security/data/cve/CVE-2026-63958.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.0 | 0.0016 |  |
| [CVE-2026-63943](https://patchblox.com/security/data/cve/CVE-2026-63943.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0016 |  |
| [CVE-2026-63921](https://patchblox.com/security/data/cve/CVE-2026-63921.md) | High | kernel-default: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate() (bsc#1272918). | 8.8 | 0.0016 |  |
| [CVE-2026-53270](https://patchblox.com/security/data/cve/CVE-2026-53270.md) | High | ipvs: clear the svc scheduler ptr early on edit | 9.8 | 0.0016 |  |
| [CVE-2026-63806](https://patchblox.com/security/data/cve/CVE-2026-63806.md) | High | KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() | 7.3 | 0.0016 |  |
| [CVE-2026-63809](https://patchblox.com/security/data/cve/CVE-2026-63809.md) | High | bpf: use kvfree() for replaced sysctl write buffer | 7.8 | 0.0015 |  |
| [CVE-2026-46174](https://patchblox.com/security/data/cve/CVE-2026-46174.md) | High | x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache | 9.8 | 0.0015 |  |
| [CVE-2026-63829](https://patchblox.com/security/data/cve/CVE-2026-63829.md) | High | net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink | 8.8 | 0.0015 |  |
| [CVE-2026-64298](https://patchblox.com/security/data/cve/CVE-2026-64298.md) | High | NFSv4: include MAY_WRITE in open permission mask for O_TRUNC | 8.8 | 0.0015 |  |
| [CVE-2026-46145](https://patchblox.com/security/data/cve/CVE-2026-46145.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0015 |  |
| [CVE-2026-46189](https://patchblox.com/security/data/cve/CVE-2026-46189.md) | High | kernel-uek-modules-extra: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (Jason Gunthorpe) [Orabug: 39460540] | 7.8 | 0.0014 |  |
| [CVE-2026-52910](https://patchblox.com/security/data/cve/CVE-2026-52910.md) | High | bpf: Free reuseport cBPF prog after RCU grace period. | 7.8 | 0.0014 |  |
| [CVE-2026-63794](https://patchblox.com/security/data/cve/CVE-2026-63794.md) | High | KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path | 8.8 | 0.0014 |  |
| [CVE-2026-46180](https://patchblox.com/security/data/cve/CVE-2026-46180.md) | High | wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task | 7.8 | 0.0014 |  |
| [CVE-2026-53132](https://patchblox.com/security/data/cve/CVE-2026-53132.md) | High | vsock/virtio: fix potential unbounded skb queue | 7.1 | 0.0014 |  |
| [CVE-2026-46117](https://patchblox.com/security/data/cve/CVE-2026-46117.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0014 |  |
| [CVE-2026-46193](https://patchblox.com/security/data/cve/CVE-2026-46193.md) | High | kernel-uek-debug-devel: xfrm: ah: account for ESN high bits in async callbacks (Michael Bommarito) [Orabug: 39460554] | 7.0 | 0.0014 |  |
| [CVE-2026-46323](https://patchblox.com/security/data/cve/CVE-2026-46323.md) | High | net: gro: don't merge zcopy skbs | 8.4 | 0.0014 |  |
| [CVE-2026-46080](https://patchblox.com/security/data/cve/CVE-2026-46080.md) | High | ocfs2: split transactions in dio completion to avoid credit exhaustion | 7.1 | 0.0014 |  |
| [CVE-2026-46015](https://patchblox.com/security/data/cve/CVE-2026-46015.md) | High | tcp: call sk_data_ready() after listener migration | 8.1 | 0.0014 |  |
| [CVE-2026-43033](https://patchblox.com/security/data/cve/CVE-2026-43033.md) | High | crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption | 7.8 | 0.0014 |  |
| [CVE-2026-52970](https://patchblox.com/security/data/cve/CVE-2026-52970.md) | High | netfilter: nft_ct: fix missing expect put in obj eval | 7.0 | 0.0013 |  |
| [CVE-2026-53388](https://patchblox.com/security/data/cve/CVE-2026-53388.md) | High | fuse: re-lock request before replacing page cache folio | 8.8 | 0.0013 |  |
| [CVE-2026-52942](https://patchblox.com/security/data/cve/CVE-2026-52942.md) | High | netfilter: nf_log: validate MAC header was set before dumping it | 7.1 | 0.0013 |  |
| [CVE-2026-63971](https://patchblox.com/security/data/cve/CVE-2026-63971.md) | High | kernel-default: sctp: fix race between sctp_wait_for_connect and peeloff (bsc#1272678). | 8.8 | 0.0013 |  |
| [CVE-2026-46234](https://patchblox.com/security/data/cve/CVE-2026-46234.md) | High | vsock: fix buffer size clamping order | 7.8 | 0.0013 |  |
| [CVE-2026-63942](https://patchblox.com/security/data/cve/CVE-2026-63942.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-53011](https://patchblox.com/security/data/cve/CVE-2026-53011.md) | High | net/sched: taprio: fix use-after-free in advance_sched() on schedule switch | 8.8 | 0.0013 |  |
| [CVE-2026-53189](https://patchblox.com/security/data/cve/CVE-2026-53189.md) | High | bpftool: kernel: mm/huge_memory: update file PMD counter before folio_put() | 8.8 | 0.0013 |  |
| [CVE-2026-31759](https://patchblox.com/security/data/cve/CVE-2026-31759.md) | High | kernel-default: usb: ulpi: fix double free in ulpi_register_interface() error path (bsc#1264076). | 7.8 | 0.0013 |  |
| [CVE-2026-43328](https://patchblox.com/security/data/cve/CVE-2026-43328.md) | High | kernel-64kb: cpufreq: governor: Free dbs_data directly when gov->init() fails (bsc#1264832). | 7.8 | 0.0013 |  |
| [CVE-2026-46084](https://patchblox.com/security/data/cve/CVE-2026-46084.md) | High | RDMA/mana_ib: Disable RX steering on RSS QP destroy | 7.8 | 0.0013 |  |
| [CVE-2026-64330](https://patchblox.com/security/data/cve/CVE-2026-64330.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: typec: tcpm: Validate SVID index in svdm_co... | 7.8 | 0.0013 |  |
| [CVE-2026-53393](https://patchblox.com/security/data/cve/CVE-2026-53393.md) | High | nfsd: reset write verifier on deferred writeback errors | 7.0 | 0.0013 |  |
| [CVE-2026-53063](https://patchblox.com/security/data/cve/CVE-2026-53063.md) | High | dm cache: fix write hang in passthrough mode | 7.1 | 0.0013 |  |
| [CVE-2026-46158](https://patchblox.com/security/data/cve/CVE-2026-46158.md) | High | mptcp: pm: ADD_ADDR rtx: always decrease sk refcount | 7.0 | 0.0013 |  |
| [CVE-2026-46170](https://patchblox.com/security/data/cve/CVE-2026-46170.md) | High | mptcp: pm: ADD_ADDR rtx: free sk if last | 7.0 | 0.0013 |  |
| [CVE-2026-63952](https://patchblox.com/security/data/cve/CVE-2026-63952.md) | High | kernel-default: memfd: deny writeable mappings when implying SEAL_WRITE (bsc#1272468). | 8.4 | 0.0013 |  |
| [CVE-2026-63945](https://patchblox.com/security/data/cve/CVE-2026-63945.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.8 | 0.0013 |  |
| [CVE-2026-53230](https://patchblox.com/security/data/cve/CVE-2026-53230.md) | High | net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list | 8.8 | 0.0013 |  |
| [CVE-2026-64189](https://patchblox.com/security/data/cve/CVE-2026-64189.md) | High | netfilter: ipset: fix race between dump and ip_set_list resize | 8.8 | 0.0013 |  |
| [CVE-2026-43016](https://patchblox.com/security/data/cve/CVE-2026-43016.md) | High | kernel-64kb: bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready() (bsc#1264007). | 7.8 | 0.0013 |  |
| [CVE-2026-64221](https://patchblox.com/security/data/cve/CVE-2026-64221.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  spi: ti-qspi: fix use-after-free after DMA setup... | 7.8 | 0.0013 |  |
| [CVE-2026-63949](https://patchblox.com/security/data/cve/CVE-2026-63949.md) | High | kernel-64kb: Security update for the Linux Kernel | 7.1 | 0.0013 |  |
| [CVE-2026-53236](https://patchblox.com/security/data/cve/CVE-2026-53236.md) | High | tcp: restrict SO_ATTACH_FILTER to priv users | 8.8 | 0.0013 |  |
| [CVE-2026-46324](https://patchblox.com/security/data/cve/CVE-2026-46324.md) | High | kernel-default: netfilter: nf_tables: Introduce functions freeing nft_hook objects (bsc#1267995). | 7.8 | 0.0013 |  |
| [CVE-2026-43440](https://patchblox.com/security/data/cve/CVE-2026-43440.md) | High | kernel-default: Security update for the Linux Kernel | 7.8 | 0.0012 |  |
| [CVE-2026-45944](https://patchblox.com/security/data/cve/CVE-2026-45944.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Clear Present bit before tearing dow... | 7.5 | 0.0012 |  |
| [CVE-2026-31483](https://patchblox.com/security/data/cve/CVE-2026-31483.md) | High | s390/syscalls: Add spectre boundary for syscall dispatch table | 7.8 | 0.0012 |  |
| [CVE-2026-53064](https://patchblox.com/security/data/cve/CVE-2026-53064.md) | High | dm cache: fix null-deref with concurrent writes in passthrough mode | 7.1 | 0.0012 |  |
| [CVE-2026-31482](https://patchblox.com/security/data/cve/CVE-2026-31482.md) | High | s390/entry: Scrub r12 register on kernel entry | 7.1 | 0.0012 |  |
| [CVE-2026-52927](https://patchblox.com/security/data/cve/CVE-2026-52927.md) | High | netfilter: ebtables: fix OOB read in compat_mtw_from_user | 7.8 | 0.0012 |  |
| [CVE-2026-53267](https://patchblox.com/security/data/cve/CVE-2026-53267.md) | High | netfilter: nft_ct: bail out on template ct in get eval | 7.8 | 0.0012 |  |
| [CVE-2026-64242](https://patchblox.com/security/data/cve/CVE-2026-64242.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: gadget: net2280: Fix double free in probe e... | 7.8 | 0.0012 |  |
| [CVE-2026-64174](https://patchblox.com/security/data/cve/CVE-2026-64174.md) | High | linux: In the Linux kernel, the following vulnerability has been resolved:  wifi: cfg80211: advance loop vars in cfg80211_me... | 8.8 | 0.0012 |  |
| [CVE-2026-53262](https://patchblox.com/security/data/cve/CVE-2026-53262.md) | High | l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl() | 7.8 | 0.0012 |  |
| [CVE-2026-43281](https://patchblox.com/security/data/cve/CVE-2026-43281.md) | High | kernel-64kb: mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() (bsc#1264534). | 7.1 | 0.0012 |  |
| [CVE-2026-43276](https://patchblox.com/security/data/cve/CVE-2026-43276.md) | High | kernel-default: Security update for the Linux Kernel | 8.4 | 0.0012 |  |
| [CVE-2026-43056](https://patchblox.com/security/data/cve/CVE-2026-43056.md) | High | kernel-default: Security update for the Linux Kernel | 8.8 | 0.0012 |  |
| [CVE-2026-53129](https://patchblox.com/security/data/cve/CVE-2026-53129.md) | High | fs/mbcache: cancel shrink work before destroying the cache | 7.8 | 0.0012 |  |
| [CVE-2026-53185](https://patchblox.com/security/data/cve/CVE-2026-53185.md) | High | kernel: kernel: zram: fix use-after-free in zram_bvec_write_partial() | 8.8 | 0.0011 |  |
| [CVE-2026-23097](https://patchblox.com/security/data/cve/CVE-2026-23097.md) | High | kernel-64kb: migrate: correct lock ordering for hugetlb file folios (bsc#1257815). | 7.5 | 0.0011 |  |
| [CVE-2026-53250](https://patchblox.com/security/data/cve/CVE-2026-53250.md) | High | kernel-default: xsk: cache csum_start/csum_offset to fix TOCTOU in xsk_skb_metadata() (bsc#1269808). | 7.8 | 0.0011 |  |
| [CVE-2026-53354](https://patchblox.com/security/data/cve/CVE-2026-53354.md) | High | arm64: errata: Mitigate TLBI errata on various Arm CPUs | 8.8 | 0.0010 |  |
| [CVE-2026-63802](https://patchblox.com/security/data/cve/CVE-2026-63802.md) | High | blk-cgroup: fix UAF in __blkcg_rstat_flush() | 8.3 | 0.0010 |  |
| [CVE-2026-52988](https://patchblox.com/security/data/cve/CVE-2026-52988.md) | High | netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase | 7.1 | 0.0010 |  |
| [CVE-2026-53265](https://patchblox.com/security/data/cve/CVE-2026-53265.md) | High | dm cache policy smq: check allocation under invalidate lock | 7.8 | 0.0010 |  |
| [CVE-2023-2058](https://patchblox.com/security/data/cve/CVE-2023-2058.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0061 |  |
| [CVE-2026-63895](https://patchblox.com/security/data/cve/CVE-2026-63895.md) | Routine | kernel-64kb: Security update for the Linux Kernel | n/a | 0.0026 |  |
| [CVE-2025-21845](https://patchblox.com/security/data/cve/CVE-2025-21845.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0026 |  |
| [CVE-2026-63892](https://patchblox.com/security/data/cve/CVE-2026-63892.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0023 |  |
| [CVE-2026-64465](https://patchblox.com/security/data/cve/CVE-2026-64465.md) | Routine | usb: xhci: Fix sleep in atomic context in xhci_free_streams() | 5.5 | 0.0018 |  |
| [CVE-2025-38469](https://patchblox.com/security/data/cve/CVE-2025-38469.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0018 |  |
| [CVE-2026-63822](https://patchblox.com/security/data/cve/CVE-2026-63822.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-63897](https://patchblox.com/security/data/cve/CVE-2026-63897.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-63900](https://patchblox.com/security/data/cve/CVE-2026-63900.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0017 |  |
| [CVE-2026-63821](https://patchblox.com/security/data/cve/CVE-2026-63821.md) | Routine | wifi: rtw88: usb: fix memory leaks on USB write failures | 5.5 | 0.0017 |  |
| [CVE-2026-53083](https://patchblox.com/security/data/cve/CVE-2026-53083.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix RCU stall in bpf_fd_array_map_clear()... | 5.5 | 0.0016 |  |
| [CVE-2026-53297](https://patchblox.com/security/data/cve/CVE-2026-53297.md) | Routine | net: mana: Guard mana_remove against double invocation | 5.5 | 0.0016 |  |
| [CVE-2026-53321](https://patchblox.com/security/data/cve/CVE-2026-53321.md) | Routine | kernel-64kb: io_uring/napi: cap busy_poll_to 10 msec (bsc#1269724). | 5.5 | 0.0016 |  |
| [CVE-2026-53379](https://patchblox.com/security/data/cve/CVE-2026-53379.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  media: i2c: ov8856: free control handler on erro... | 5.5 | 0.0016 |  |
| [CVE-2026-45873](https://patchblox.com/security/data/cve/CVE-2026-45873.md) | Routine | kernel-64kb: netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets (bsc#1266715). | 5.5 | 0.0016 |  |
| [CVE-2026-45904](https://patchblox.com/security/data/cve/CVE-2026-45904.md) | Routine | kernel-livepatch-SLE15-SP6_Update_30: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-45913](https://patchblox.com/security/data/cve/CVE-2026-45913.md) | Routine | kernel-64kb: net: bridge: mcast: always update mdb_n_entries for vlan contexts (bsc#1266891). | 5.5 | 0.0016 |  |
| [CVE-2026-45915](https://patchblox.com/security/data/cve/CVE-2026-45915.md) | Routine | kernel-64kb: fat: avoid parent link count underflow in rmdir (bsc#1266896). | 5.5 | 0.0016 |  |
| [CVE-2026-45973](https://patchblox.com/security/data/cve/CVE-2026-45973.md) | Routine | RDMA/mlx5: Fix UMR hang in LAG error state unload | 5.5 | 0.0016 |  |
| [CVE-2026-53107](https://patchblox.com/security/data/cve/CVE-2026-53107.md) | Routine | wifi: libertas: don't kill URBs in interrupt context | 5.5 | 0.0016 |  |
| [CVE-2026-53324](https://patchblox.com/security/data/cve/CVE-2026-53324.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-63948](https://patchblox.com/security/data/cve/CVE-2026-63948.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-45917](https://patchblox.com/security/data/cve/CVE-2026-45917.md) | Routine | ipvs: do not keep dest_dst if dev is going down | 5.5 | 0.0016 |  |
| [CVE-2026-63908](https://patchblox.com/security/data/cve/CVE-2026-63908.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-63931](https://patchblox.com/security/data/cve/CVE-2026-63931.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0016 |  |
| [CVE-2026-63960](https://patchblox.com/security/data/cve/CVE-2026-63960.md) | Routine | usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() | 5.5 | 0.0016 |  |
| [CVE-2026-63964](https://patchblox.com/security/data/cve/CVE-2026-63964.md) | Routine | usb: typec: ucsi: ccg: reject firmware images without a ':' record header | 5.5 | 0.0016 |  |
| [CVE-2026-46245](https://patchblox.com/security/data/cve/CVE-2026-46245.md) | Routine | drm/amd/display: Fix dc_link NULL handling in HPD init | 5.5 | 0.0016 |  |
| [CVE-2026-53106](https://patchblox.com/security/data/cve/CVE-2026-53106.md) | Routine | bpf: Do not allow deleting local storage in NMI | 5.5 | 0.0014 |  |
| [CVE-2026-43216](https://patchblox.com/security/data/cve/CVE-2026-43216.md) | Routine | net: Drop the lock in skb_may_tx_timestamp() | 5.5 | 0.0014 |  |
| [CVE-2026-53012](https://patchblox.com/security/data/cve/CVE-2026-53012.md) | Routine | nexthop: fix IPv6 route referencing IPv4 nexthop | 5.5 | 0.0014 |  |
| [CVE-2026-46026](https://patchblox.com/security/data/cve/CVE-2026-46026.md) | Routine | kernel-uek64k-devel: net: qrtr: ns: Limit the maximum number of lookups (Manivannan Sadhasivam) [Orabug: 39452208] | 5.5 | 0.0013 |  |
| [CVE-2026-53382](https://patchblox.com/security/data/cve/CVE-2026-53382.md) | Routine | media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si | 5.5 | 0.0013 |  |
| [CVE-2026-53385](https://patchblox.com/security/data/cve/CVE-2026-53385.md) | Routine | vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write | 5.5 | 0.0013 |  |
| [CVE-2026-53252](https://patchblox.com/security/data/cve/CVE-2026-53252.md) | Routine | Bluetooth: fix memory leak in error path of hci_alloc_dev() | 5.5 | 0.0013 |  |
| [CVE-2026-31628](https://patchblox.com/security/data/cve/CVE-2026-31628.md) | Routine | x86/CPU: Fix FPDSS on Zen1 | 5.5 | 0.0013 |  |
| [CVE-2026-46003](https://patchblox.com/security/data/cve/CVE-2026-46003.md) | Routine | net: qrtr: ns: Limit the total number of nodes | 5.5 | 0.0013 |  |
| [CVE-2026-46038](https://patchblox.com/security/data/cve/CVE-2026-46038.md) | Routine | net: qrtr: ns: Free the node during ctrl_cmd_bye() | 5.5 | 0.0013 |  |
| [CVE-2026-53134](https://patchblox.com/security/data/cve/CVE-2026-53134.md) | Routine | kernel-64kb: netfilter: nft_fib: fix stale stack leak via the OIFNAME register (bsc#1269819). | 5.5 | 0.0013 |  |
| [CVE-2026-53331](https://patchblox.com/security/data/cve/CVE-2026-53331.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ct... | 5.5 | 0.0013 |  |
| [CVE-2026-53332](https://patchblox.com/security/data/cve/CVE-2026-53332.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  slimbus: qcom-ngd-ctrl: Register callbacks after... | 5.5 | 0.0013 |  |
| [CVE-2026-46168](https://patchblox.com/security/data/cve/CVE-2026-46168.md) | Routine | mptcp: fix scheduling with atomic in timestamp sockopt | 5.5 | 0.0013 |  |
| [CVE-2026-52984](https://patchblox.com/security/data/cve/CVE-2026-52984.md) | Routine | kernel-uek-container: net/sched: netem: fix queue limit check to include reordered packets (Stephen Hemminger) [Orabug: 39621677] | 5.5 | 0.0013 |  |
| [CVE-2026-46126](https://patchblox.com/security/data/cve/CVE-2026-46126.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-46144](https://patchblox.com/security/data/cve/CVE-2026-46144.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-46147](https://patchblox.com/security/data/cve/CVE-2026-46147.md) | Routine | KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu() | 5.5 | 0.0013 |  |
| [CVE-2026-43170](https://patchblox.com/security/data/cve/CVE-2026-43170.md) | Routine | kernel-64kb: usb: dwc3: gadget: Move vbus draw to workqueue context (bsc#1264452). | 5.5 | 0.0013 |  |
| [CVE-2026-53177](https://patchblox.com/security/data/cve/CVE-2026-53177.md) | Routine | bnxt_en: Fix NULL pointer dereference | 5.5 | 0.0013 |  |
| [CVE-2026-63862](https://patchblox.com/security/data/cve/CVE-2026-63862.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0013 |  |
| [CVE-2026-43130](https://patchblox.com/security/data/cve/CVE-2026-43130.md) | Routine | kernel-64kb: iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (bsc#1264532). | 5.5 | 0.0012 |  |
| [CVE-2026-43168](https://patchblox.com/security/data/cve/CVE-2026-43168.md) | Routine | kernel-64kb: ocfs2: fix reflink preserve cleanup issue (bsc#1264537). | 5.5 | 0.0012 |  |
| [CVE-2026-43308](https://patchblox.com/security/data/cve/CVE-2026-43308.md) | Routine | btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() | 5.5 | 0.0012 |  |
| [CVE-2026-43451](https://patchblox.com/security/data/cve/CVE-2026-43451.md) | Routine | kernel-64kb: netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (bsc#1265009). | 5.5 | 0.0012 |  |
| [CVE-2026-46109](https://patchblox.com/security/data/cve/CVE-2026-46109.md) | Routine | usb: ulpi: fix memory leak on ulpi_register() error paths | 5.5 | 0.0012 |  |
| [CVE-2026-46292](https://patchblox.com/security/data/cve/CVE-2026-46292.md) | Routine | pmdomain: core: Fix detach procedure for virtual devices in genpd | 5.5 | 0.0012 |  |
| [CVE-2026-53289](https://patchblox.com/security/data/cve/CVE-2026-53289.md) | Routine | ice: fix NULL pointer dereference in ice_reset_all_vfs() | 5.5 | 0.0012 |  |
| [CVE-2026-53291](https://patchblox.com/security/data/cve/CVE-2026-53291.md) | Routine | ALSA: hda/conexant: Fix missing error check for jack detection | 5.5 | 0.0012 |  |
| [CVE-2026-63991](https://patchblox.com/security/data/cve/CVE-2026-63991.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-64220](https://patchblox.com/security/data/cve/CVE-2026-64220.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  device property: set fwnode->secondary to NULL i... | 5.5 | 0.0012 |  |
| [CVE-2026-64231](https://patchblox.com/security/data/cve/CVE-2026-64231.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drm/msm/dsi: don't dump registers past the mappe... | 5.5 | 0.0012 |  |
| [CVE-2026-64336](https://patchblox.com/security/data/cve/CVE-2026-64336.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  USB: serial: keyspan_pda: fix information leak... | 5.5 | 0.0012 |  |
| [CVE-2026-64345](https://patchblox.com/security/data/cve/CVE-2026-64345.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: gadget: f_printer: take kref only for succe... | 5.5 | 0.0012 |  |
| [CVE-2026-31542](https://patchblox.com/security/data/cve/CVE-2026-31542.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-43161](https://patchblox.com/security/data/cve/CVE-2026-43161.md) | Routine | iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode | 5.5 | 0.0012 |  |
| [CVE-2026-43309](https://patchblox.com/security/data/cve/CVE-2026-43309.md) | Routine | md raid: fix hang when stopping arrays with metadata through dm-raid | 5.5 | 0.0012 |  |
| [CVE-2026-53032](https://patchblox.com/security/data/cve/CVE-2026-53032.md) | Routine | bpf: Fix NULL deref in map_kptr_match_type for scalar regs | 5.5 | 0.0012 |  |
| [CVE-2026-63861](https://patchblox.com/security/data/cve/CVE-2026-63861.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-53345](https://patchblox.com/security/data/cve/CVE-2026-53345.md) | Routine | KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying | 6.5 | 0.0012 |  |
| [CVE-2026-52930](https://patchblox.com/security/data/cve/CVE-2026-52930.md) | Routine | ipc/shm: serialize orphan cleanup with shm_nattch updates | 5.5 | 0.0012 |  |
| [CVE-2026-43266](https://patchblox.com/security/data/cve/CVE-2026-43266.md) | Routine | kernel-64kb: EFI/CPER: don't go past the ARM processor CPER record buffer (bsc#1264418). | 5.5 | 0.0012 |  |
| [CVE-2026-52941](https://patchblox.com/security/data/cve/CVE-2026-52941.md) | Routine | net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint | 5.5 | 0.0012 |  |
| [CVE-2026-64183](https://patchblox.com/security/data/cve/CVE-2026-64183.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  efi: Allocate runtime workqueue before ACPI init... | 5.5 | 0.0012 |  |
| [CVE-2025-68223](https://patchblox.com/security/data/cve/CVE-2025-68223.md) | Routine | drm/radeon: delete radeon_fence_process in is_signaled, no deadlock | 6.2 | 0.0012 |  |
| [CVE-2026-53123](https://patchblox.com/security/data/cve/CVE-2026-53123.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  md: wake raid456 reshape waiters before suspend... | 5.5 | 0.0012 |  |
| [CVE-2026-52937](https://patchblox.com/security/data/cve/CVE-2026-52937.md) | Routine | tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR | 5.5 | 0.0012 |  |
| [CVE-2026-64179](https://patchblox.com/security/data/cve/CVE-2026-64179.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0012 |  |
| [CVE-2026-64234](https://patchblox.com/security/data/cve/CVE-2026-64234.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  tty: serial: pch_uart: add check for dma_alloc_c... | 5.5 | 0.0012 |  |
| [CVE-2026-53074](https://patchblox.com/security/data/cve/CVE-2026-53074.md) | Routine | bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb | 6.4 | 0.0011 |  |
| [CVE-2026-43046](https://patchblox.com/security/data/cve/CVE-2026-43046.md) | Routine | kernel-default: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-43262](https://patchblox.com/security/data/cve/CVE-2026-43262.md) | Routine | kernel-64kb: gfs2: fiemap page fault fix (bsc#1264422). | 5.5 | 0.0011 |  |
| [CVE-2026-43475](https://patchblox.com/security/data/cve/CVE-2026-43475.md) | Routine | kernel-64kb: Security update for the Linux Kernel | 5.5 | 0.0011 |  |
| [CVE-2026-52921](https://patchblox.com/security/data/cve/CVE-2026-52921.md) | Routine | netfilter: ipset: stop hash:* range iteration at end | 5.5 | 0.0011 |  |
| [CVE-2026-64182](https://patchblox.com/security/data/cve/CVE-2026-64182.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  drivers/base/memory: fix memory block reference... | 5.5 | 0.0011 |  |
| [CVE-2026-64187](https://patchblox.com/security/data/cve/CVE-2026-64187.md) | Routine | xfs: fail recovery on a committed log item with no regions | 5.5 | 0.0011 |  |
| [CVE-2026-45905](https://patchblox.com/security/data/cve/CVE-2026-45905.md) | Routine | kernel-64kb: xfrm: fix ip_rt_bug race in icmp_route_lookup reverse path (bsc#1266685). | 5.5 | 0.0011 |  |
| [CVE-2026-64347](https://patchblox.com/security/data/cve/CVE-2026-64347.md) | Routine | linux: In the Linux kernel, the following vulnerability has been resolved:  usb: gadget: composite: fix dead empty check in... | 5.5 | 0.0010 |  |
| [CVE-2026-43439](https://patchblox.com/security/data/cve/CVE-2026-43439.md) | Routine | kernel-64kb: cgroup: fix race between task migration and iteration (bsc#1265141). | 4.7 | 0.0009 |  |

---

Data as of 2026-11-11T01:43:54Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.